[Openvpn-users] Windows XP client --> Proxy --> Windows 2003 Server

["Claudio Rodrigues" <crodrigues@xxxxxxxxxxxxxxxxxxxxx>]

Title: Message

Hey guys,

 

Bear with me as I have never used OpenVPN and it is giving me a hard time, refusing to work. :-)

What I want to achieve is simple: connect one machine behind a proxy (that DOES support the CONNECT method) to a server I have in the office.

The XP client has this .ovpn file:

 

remote MY_EXTERNAL_IP

port 443
proto tcp-client
tun-mtu 1500
tun-mtu-extra 32
dev tap
ifconfig 192.168.10.3 255.255.255.0
ping 10
secret key.txt

 

And I am calling OpenVPN using:

openvpn --config home.ovpn --http-proxy myproxy 8080

 

The server has this config file:

port 443
proto tcp-server
tun-mtu 1500
tun-mtu-extra 32
dev tap
ifconfig 192.168.10.1 255.255.255.0
secret key.txt
ping 10
comp-lzo
verb 4
mute 10

The connection is established but on the client I get this message:

 

C:\Program Files\OpenVPN\config>openvpn --config home.ovpn --http-proxy myproxy
 8080 --comp-lzo
Tue Dec 02 10:51:26 2003 0: OpenVPN 1.5.0 Win32-MinGW [SSL] [LZO] built on Nov 2
0 2003
Tue Dec 02 10:51:26 2003 1: LZO compression initialized
Tue Dec 02 10:51:27 2003 2: TAP-WIN32 device [Local Area Connection 2] opened: \
\.\{07F9F829-D7BD-4D05-9A58-660392CEE0D1}.tap
Tue Dec 02 10:51:27 2003 3: Successful ARP Flush on interface [196610] {07F9F829
-D7BD-4D05-9A58-660392CEE0D1}
Tue Dec 02 10:51:27 2003 4: NOTE: could not delete previously set dynamic IP/net
mask: 169.254.174.180/255.255.0.0 (status=31)
Tue Dec 02 10:51:27 2003 5: Succeeded in adding a temporary IP/netmask of 192.16
8.10.3/255.255.255.0 to interface {07F9F829-D7BD-4D05-9A58-660392CEE0D1} using t
he Win32 IP Helper API
Tue Dec 02 10:51:27 2003 6: Attempting to establish TCP connection with 140.10.10.55:8080
Tue Dec 02 10:51:27 2003 7: TCP connection established with 140.10.10.55:8080
Tue Dec 02 10:51:28 2003 8: TCPv4_CLIENT link local: [undef]
Tue Dec 02 10:51:28 2003 9: TCPv4_CLIENT link remote: 140.10.10.55:8080
Tue Dec 02 10:51:28 2003 10: WARNING: Bad encapsulated packet length from peer (
3338), which must be > 0 and <= 1579 -- please ensure that --tun-mtu or --link-m
tu is equal on both peers -- this condition could also indicate a possible activ
e attack on the TCP link -- [Attemping restart...]
Tue Dec 02 10:51:28 2003 11: Connection reset, restarting [0]

 

On the server side at the office I get something else complaining about LZO packets or something like that but I can see the connection reaches the server in the office. I tried removing the comp-lzo line with the same results...

Any ideas on how to get this working?

 

Thanks guys!

 

Cláudio Rodrigues