Re (3): error message from openvpn & postmortem.
>From my original message.
> Nothing obvious, but shouldn't traceroute get a route?
From: Bob Proulx <bob@proulx.com>
Date: Sun, 28 Nov 2010 15:39:20 -0700
> That does look suspicious. But to me it looks suspiciously like
> packets are getting dropped by a firewall and you already checked
> that they weren't.
The problem with OpenVPN was self-inflicted. I might blame it on the ISP
but really I should have remembered the setting in /etc/default/openvpn.
This is a summary.
* November 14 and 15, updated the system. Also made some configuration
adjustments aiming to make local name resolution work again.
* November 15, about 13:30 hrs my ISP inadvertently disconnected the cable.
* That afternoon and the next day I spent several hours in discussion with
the ISP and hunting for a problem in my system.
* November 18, returned to work. To prevent Dalton from hammering at
the tunnel I shut it off in /etc/default/openvpn ... and quickly forgot it.
* November 20, returned home and found the Internet connection still
not working.
* November 23, local staff reconnected the cable.
* November 28, at home again, read your troubleshooting suggestions and
and did the tests.
* November 30, returned to work, found OpenVPN disabled, turned it on
and had the tunnel working again. Whew!
Still wondering how traceroute fails but the tunnel works.
root@dalton:~# traceroute -p 1194 -P udp joule.yi.org
traceroute to joule.yi.org (24.108.33.159), 30 hops max, 60 byte packets
1 * * *
2 * * *
...
root@dalton:~# ping 10.4.0.1
PING 10.4.0.1 (10.4.0.1) 56(84) bytes of data.
64 bytes from 10.4.0.1: icmp_req=1 ttl=64 time=18.1 ms
64 bytes from 10.4.0.1: icmp_req=2 ttl=64 time=12.4 ms
64 bytes from 10.4.0.1: icmp_req=3 ttl=64 time=17.3 ms
^C
--- 10.4.0.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 12.453/15.973/18.108/2.512 ms
Thanks for the help. Your advice wasn't wasted.
... Peter E.
--
Telephone 1 360 450 2132. 7785886232 is gone.
Shop pages http://carnot.yi.org/ accessible as long as the old drives survive.
Personal pages http://members.shaw.ca/peasthope/ .
Reply to: