ipkg install openvpn openssl bash

mkdir /opt/lib/modules
wget http://update.groov.pl/tun.o -O /opt/lib/modules/tun.o

insmod /opt/lib/modules/tun.o

cd /opt/etc/openvpn
mkdir easy-rsa
touch ipp.txt
touch openvpn.conf
cd easy-rsa
mkdir keys
touch generujCA.sh
touch generujCertClient.sh
touch generujDH.sh
touch generujServerCert.sh
touch openssl.cnf
chmod +x generuj*
cd keys
touch index.txt
touch index.txt.attr
touch serial
mkdir csr
echo "00" > serial
echo "unique_subject = no" > index.txt.attr

dev tun0

server 10.0.0.0 255.255.255.0
push "route 192.168.0.0 255.255.255.0"

ifconfig-pool-persist ipp.txt

tls-server

dh /opt/etc/openvpn/easy-rsa/keys/dh1024.pem
ca /opt/etc/openvpn/easy-rsa/keys/ca.crt
cert /opt/etc/openvpn/easy-rsa/keys/gateway.crt
key /opt/etc/openvpn/easy-rsa/keys/gateway.key

proto tcp
port 10000
mode server

user nobody
group nobody

keepalive 10 60
max-clients 20
cipher none
comp-lzo
persist-tun
persist-key

verb 3

status /opt/var/log/openvpn/openvpn-status.log
log /opt/var/log/openvpn/openvpn.log

user root
group root

#!/opt/bin/bash

cd /opt/etc/openvpn/easy-rsa/keys && \
openssl req -days 1825 -new -x509 -keyout ca.key -out ca.crt -config ../openssl.cnf && chmod 0600 ca.key

#!/opt/bin/bash

HOSTNAME=$1

cd /opt/etc/openvpn/easy-rsa/keys && \
openssl req -days 365 -nodes -new -keyout $1.key -out $1.csr -config ../openssl.cnf && \
openssl ca -days 365 -out $1.crt -in $1.csr -config ../openssl.cnf

mv $1.csr csr/$1.csr

#!/opt/bin/bash

openssl dhparam -out /opt/etc/openvpn/easy-rsa/keys/dh1024.pem 1024

#!/opt/bin/bash

cd /opt/etc/openvpn/easy-rsa/keys && \
openssl req -days 1825 -nodes -new -keyout gateway.key -out gateway.csr -extensions server -config ../openssl.cnf && \
openssl ca -days 1825 -out gateway.crt -in gateway.csr -extensions server -config ../openssl.cnf && \
chmod 0600 gateway.key
mv gateway.csr csr/gateway.csr

# OpenSSL example configuration file.
HOME = .
RANDFILE = $ENV::HOME/.rnd

oid_section = new_oids

[ new_oids ]

[ ca ]
default_ca = CA_default # The default ca section

[ CA_default ]

dir = /opt/etc/openvpn/easy-rsa/keys # Where everything is kept
certs = $dir # Where the issued certs are kept
crl_dir = $dir # Where the issued crl are kept
database = $dir/index.txt # database index file.
new_certs_dir = $dir # default place for new certs.

certificate = $dir/ca.crt # The CA certificate
serial = $dir/serial # The current serial number
crl = $dir/crl.pem # The current CRL
private_key = $dir/ca.key # The private key
RANDFILE = $dir/.rand # private random number file

x509_extensions = usr_cert # The extentions to add to the cert

default_days = 3650 # how long to certify for
default_crl_days= 30 # how long before next CRL
default_md = md5 # which md to use.
preserve = no # keep passed DN ordering

policy = policy_match

[ policy_match ]
countryName = match
stateOrProvinceName = match
organizationName = match
organizationalUnitName = optional
commonName = supplied
emailAddress = optional

[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional

####################################################################
[ req ]
default_bits = 1024
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extentions to add to the self signed cert

string_mask = nombstr

[ req_distinguished_name ]
countryName = Country Name (2 letter code)
countryName_default = PL
countryName_min = 2
countryName_max = 2

stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = woj. dolnoslaskie

localityName = Locality Name (eg, city)
localityName_default = Olesnica

0.organizationName = Organization Name (eg, company)
0.organizationName_default = GROOV.PL

# we can do this but it is not needed normally :-)
#1.organizationName = Second Organization Name (eg, company)
#1.organizationName_default = World Wide Web Pty Ltd

organizationalUnitName = Organizational Unit Name (eg, section)
organizationalUnitName_default = IT Division

commonName = Common Name (eg, your name or your server\'s hostname)
commonName_max = 64

emailAddress = Email Address
emailAddress_default = admin@groov.pl
emailAddress_max = 40

[ req_attributes ]
challengePassword = A challenge password
challengePassword_min = 4
challengePassword_max = 20

unstructuredName = An optional company name

[ usr_cert ]

basicConstraints=CA:FALSE

nsComment = "OpenSSL Generated Certificate"

subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer:always

[ server ]

basicConstraints=CA:FALSE
nsCertType = server
nsComment = "OpenSSL Generated Server Certificate"
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer:always

[ v3_req ]

basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment

[ v3_ca ]

subjectKeyIdentifier=hash

authorityKeyIdentifier=keyid:always,issuer:always

basicConstraints = CA:true

[ crl_ext ]

authorityKeyIdentifier=keyid:always,issuer:always

cd /opt/etc/openvpn/easy-rsa/
./generujDH.sh

#tu sobie poczekamy

./generujCA.sh

#tu wpisujemy haslo dla CA.key. Tym kluczem będziemy podpisywać inne certyfikaty, każdorazowo podając hasło do CA.key.

./generujServerCert.sh

#gdy nas poprosi o haslo CommonName wpisujemy jakas nazwe np gateway. Jak poprosi o haslo to podajemy haslo do CA.key

# I you want a standalone server (not xinetd), comment out the return statement below
#return 0

/opt/etc/init.d/S20openvpn

23055 nobody 3840 S /opt/sbin/openvpn --daemon --cd /opt/etc/openvpn --config openvpn.conf

[root@groov easy-rsa]$ ifconfig tun0
tun0 Link encap:Point-to-Point Protocol
inet addr:10.0.0.1 P-t-P:10.0.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:401 errors:0 dropped:0 overruns:0 frame:0
TX packets:422 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:32961 (32.1 KiB) TX bytes:145266 (141.8 KiB)

#openvpn
/opt/etc/init.d/S20openvpn
iptables -A INPUT -p tcp --dport 10000 -j ACCEPT
iptables -A FORWARD -i tun0 -s 10.0.0.0/24 -d 192.168.0.0/24 -j ACCEPT
iptables -A FORWARD -o tun0 -s 192.168.0.0/24 -d 10.0.0.0/24 -j ACCEPT

cd /opt/etc/openvpn/easy-rsa
./generujCertClient.sh nazwa_certyfikatu

#czyli np ./generujCertClient.sh klient1
#w polu CommonName powtarzamy nazwe_certyfikatu. pomoze nam to identyfikowac certyfikaty
#haslo jak poprosi oczywiscie podajemy do CA.key

client
dev tun
comp-lzo
cipher none
resolv-retry infinite
mute-replay-warnings
keepalive 10 60
comp-lzo
verb 3

#vista i win7
route-method exe
route-delay 2

#host zdalny i certyfikaty
remote ip_publiczne 10000
ca ca.crt
cert klient1.crt
key klient1.key

gdzie 10.0.0.0/24 to adresacja vpna. jezeli zmienialismy to musimy tu poprawic, a 192.168.0.0/24 to siec lan. zmienic na swoja.

shibby napisał/a:
eh slash okresla maske sieci (maska 24bitowa, jakbys rozbil maske na system dwojkowy to suma jedynek daje maske) a wiec zapis 10.0.0.0/24 jest rownoznaczy z 10.0.0.0 maska 255.255.255.0 a wiec zakres ip 10.0.0.1-10.0.0.254

a wiec ty powinienes miec 192.168.1.0/24

shibby napisał/a:
obojetnie, tak naprawde. najpierw startuje firewall a pozniej wanup. ja lubie miec porzadek... skoro w firewallu otwieram porty to odrazu tam dalem start uslugi :)

- trzeba dopisać "touch" przed "generujServerCert.sh" w drugim punkcie

- nie chciał mi w ogóle generować kluczy za pomocą polecenia "./generujXXX.sh", dopiero po zmienieniu na ". generujXXX.sh" działał.
- nie wiem czy to jest moja wina, ale nie zawsze generuje mi klucze. Czasami putty/telnet się po prostu wyłącza po wydaniu komendy i trzeba ręcznie klepać w klawiaturę zawartość pliku "generujXXX.sh"

Sat Sep 26 10:51:19 2009 Attempting to establish TCP connection with moje_IP_zewnętrzne:10000
Sat Sep 26 10:51:40 2009 TCP: connect to moje_IP_zewnętrzne:10000 failed, will try again in 5 seconds

- do pliku openvpn.conf i client.ovpn dopisałem jeszcze "proto tpc" i "port 10000" bo chciał łączyć się przez standardowy port (1194 chyba)

- do pliku client.ovpn dopisałem jeszcze "dev-node nazwa_karty_sieciowej_VPNu"

root@unknown:/opt/etc/openvpn/easy-rsa# ./generujDH.sh
openssl:Error: 'dhparam' is an invalid command.

Standard commands
req rsa x509

root@unknown:/opt/etc/openvpn/easy-rsa# ./generujCA.sh
req [options] outfile
where options are
-inform arg input format - DER or PEM
-outform arg output format - DER or PEM
-in arg input file
-out arg output file
-text text form of request
-pubkey output public key
-noout do not output REQ
-verify verify signature on REQ
-modulus RSA modulus
-nodes don't encrypt the output key
-engine e use engine e, possibly a hardware device
-subject output the request's subject
-passin private key password source
-key file use the private key contained in file
-keyform arg key file format
-keyout arg file to send the key to
-rand file:file:...
load the file (or the files in the directory) into
the random number generator
-newkey rsa:bits generate a new RSA key of 'bits' in size
-newkey dsa:file generate a new DSA key, parameters taken from CA in 'file'
-[digest] Digest to sign with (md5, sha1, md2, mdc2, md4)
-config file request template file.
-subj arg set or modify request subject
-new new request.
-batch do not ask anything during request generation
-x509 output a x509 structure instead of a cert. req.
-days number of days a certificate generated by -x509 is valid for.
-set_serial serial number to use for a certificate generated by -x509.
-newhdr output "NEW" in the header lines
-asn1-kludge Output the 'request' in a format that is wrong but some CA's
have been reported as requiring
-extensions .. specify certificate extension section (override value in config file)
-reqexts .. specify request extension section (override value in config file)
-utf8 input characters are UTF8 (default ASCII)
-nameopt arg - various certificate name options
-reqopt arg - various request text options

../openssl.cnf: line 2: HOME: command not found
../openssl.cnf: line 3: RANDFILE: command not found
../openssl.cnf: line 5: oid_section: command not found
../openssl.cnf: line 10: default_ca: command not found
../openssl.cnf: line 14: dir: command not found
../openssl.cnf: line 15: certs: command not found
../openssl.cnf: line 16: crl_dir: command not found
../openssl.cnf: line 17: database: command not found
../openssl.cnf: line 18: new_certs_dir: command not found
../openssl.cnf: line 20: certificate: command not found
../openssl.cnf: line 21: serial: command not found
../openssl.cnf: line 22: crl: command not found
../openssl.cnf: line 23: private_key: command not found
../openssl.cnf: line 24: RANDFILE: command not found
../openssl.cnf: line 26: x509_extensions: command not found
../openssl.cnf: line 28: default_days: command not found
../openssl.cnf: line 29: 30: command not found
../openssl.cnf: line 30: default_md: command not found
../openssl.cnf: line 31: preserve: command not found
../openssl.cnf: line 33: policy: command not found
../openssl.cnf: line 36: countryName: command not found
../openssl.cnf: line 37: stateOrProvinceName: command not found
../openssl.cnf: line 38: organizationName: command not found
../openssl.cnf: line 39: organizationalUnitName: command not found
../openssl.cnf: line 40: commonName: command not found
../openssl.cnf: line 41: emailAddress: command not found
../openssl.cnf: line 44: countryName: command not found
../openssl.cnf: line 45: stateOrProvinceName: command not found
../openssl.cnf: line 46: localityName: command not found
../openssl.cnf: line 47: organizationName: command not found
../openssl.cnf: line 48: organizationalUnitName: command not found
../openssl.cnf: line 49: commonName: command not found
../openssl.cnf: line 50: emailAddress: command not found
../openssl.cnf: line 54: default_bits: command not found
../openssl.cnf: line 55: default_keyfile: command not found
../openssl.cnf: line 56: distinguished_name: command not found
../openssl.cnf: line 57: attributes: command not found
../openssl.cnf: line 58: x509_extensions: command not found
../openssl.cnf: line 60: string_mask: command not found
../openssl.cnf: line 63: syntax error near unexpected token `('
../openssl.cnf: line 63: `countryName = Country Name (2 letter code)'

[root@unknown easy-rsa]$ cat /opt/var/log/openvpn/openvpn.log
Fri Nov 20 22:39:43 2009 OpenVPN 2.1_rc15 mipsel-linux [SSL] [LZO1] [EPOLL] built on Feb 23 2009
Fri Nov 20 22:39:43 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Nov 20 22:39:43 2009 Diffie-Hellman initialized with 1024 bit key
Fri Nov 20 22:39:43 2009 ******* WARNING *******: null cipher specified, no encryption will be used
Fri Nov 20 22:39:43 2009 TLS-Auth MTU parms [ L:1528 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Nov 20 22:39:43 2009 TCP/UDP: Socket bind failed on local address [undef]:10000: Address already in use
Fri Nov 20 22:39:43 2009 Exiting

[root@unknown easy-rsa]$ ifconfig tun0
tun0 Link encapoint-to-Point Protocol
inet addr:10.0.0.1 P-t-P:10.0.0.2 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:100
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)

[root@unknown easy-rsa]$ cat /opt/var/log/openvpn/openvpn.log
Sat Nov 21 18:46:12 2009 OpenVPN 2.1_rc15 mipsel-linux [SSL] [LZO1] [EPOLL] built on Feb 23 2009
Sat Nov 21 18:46:12 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Nov 21 18:46:13 2009 Diffie-Hellman initialized with 1024 bit key
Sat Nov 21 18:46:13 2009 ******* WARNING *******: null cipher specified, no encryption will be used
Sat Nov 21 18:46:13 2009 TLS-Auth MTU parms [ L:1528 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sat Nov 21 18:46:13 2009 ROUTE default_gateway=87.206.240.1
Sat Nov 21 18:46:13 2009 TUN/TAP device tun0 opened
Sat Nov 21 18:46:13 2009 TUN/TAP TX queue length set to 100
Sat Nov 21 18:46:13 2009 /sbin/ifconfig tun0 10.0.0.1 pointopoint 10.0.0.2 mtu 1500
Sat Nov 21 18:46:13 2009 /sbin/route add -net 10.0.0.0 netmask 255.255.255.0 gw 10.0.0.2
Sat Nov 21 18:46:13 2009 Data Channel MTU parms [ L:1528 D:1450 EF:28 EB:135 ET:0 EL:0 AF:14/28 ]
Sat Nov 21 18:46:13 2009 GID set to nobody
Sat Nov 21 18:46:13 2009 UID set to nobody
Sat Nov 21 18:46:13 2009 Listening for incoming TCP connection on [undef]:10000
Sat Nov 21 18:46:13 2009 Socket Buffers: R=[43689->131072] S=[16384->131072]
Sat Nov 21 18:46:13 2009 TCPv4_SERVER link local (bound): [undef]:10000
Sat Nov 21 18:46:13 2009 TCPv4_SERVER link remote: [undef]
Sat Nov 21 18:46:13 2009 MULTI: multi_init called, r=256 v=256
Sat Nov 21 18:46:13 2009 IFCONFIG POOL: base=10.0.0.4 size=62
Sat Nov 21 18:46:13 2009 IFCONFIG POOL LIST
Sat Nov 21 18:46:13 2009 Note: sys_epoll API is unavailable, falling back to poll/select API
Sat Nov 21 18:46:13 2009 MULTI: TCP INIT maxclients=20 maxevents=24
Sat Nov 21 18:46:13 2009 Initialization Sequence Completed

Sat Nov 21 19:40:50 2009 MULTI: multi_create_instance called
Sat Nov 21 19:40:50 2009 Re-using SSL/TLS context
Sat Nov 21 19:40:50 2009 LZO compression initialized
Sat Nov 21 19:40:50 2009 Control Channel MTU parms [ L:1528 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sat Nov 21 19:40:50 2009 Data Channel MTU parms [ L:1528 D:1450 EF:28 EB:135 ET:0 EL:0 AF:14/28 ]
Sat Nov 21 19:40:50 2009 Local Options hash (VER=V4): '2072ce18'
Sat Nov 21 19:40:50 2009 Expected Remote Options hash (VER=V4): '8c7b630b'
Sat Nov 21 19:40:50 2009 TCP connection established with 192.168.1.130:2776
Sat Nov 21 19:40:50 2009 Socket Buffers: R=[131072->131072] S=[131072->131072]
Sat Nov 21 19:40:50 2009 TCPv4_SERVER link local: [undef]
Sat Nov 21 19:40:50 2009 TCPv4_SERVER link remote: 192.168.1.130:2776
Sat Nov 21 19:40:50 2009 192.168.1.130:2776 TLS: Initial packet from 192.168.1.130:2776, sid=2c85c798 54df67aa
Sat Nov 21 19:40:51 2009 192.168.1.130:2776 VERIFY OK: depth=1, ***
Sat Nov 21 19:40:51 2009 192.168.1.130:2776 VERIFY OK: depth=0, ***
Sat Nov 21 19:40:51 2009 192.168.1.130:2776 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 21 19:40:51 2009 192.168.1.130:2776 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 21 19:40:51 2009 192.168.1.130:2776 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Nov 21 19:40:51 2009 192.168.1.130:2776 [klient1] Peer Connection Initiated with 192.168.1.130:2776
Sat Nov 21 19:40:51 2009 klient1/192.168.1.130:2776 MULTI: Learn: 10.0.0.6 -> klient1/192.168.1.130:2776
Sat Nov 21 19:40:51 2009 klient1/192.168.1.130:2776 MULTI: primary virtual IP for klient1/192.168.1.130:2776: 10.0.0.6
Sat Nov 21 19:40:54 2009 klient1/192.168.1.130:2776 PUSH: Received control message: 'PUSH_REQUEST'
Sat Nov 21 19:40:54 2009 klient1/192.168.1.130:2776 SENT CONTROL [klient1]: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,route 10.0.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.0.0.6 10.0.0.5' (status=1)
Sat Nov 21 19:41:19 2009 klient1/192.168.1.130:2776 read TCPv4_SERVER [NO-INFO]: Connection timed out (code=145)
Sat Nov 21 19:41:19 2009 klient1/192.168.1.130:2776 Connection reset, restarting [0]
Sat Nov 21 19:41:19 2009 klient1/192.168.1.130:2776 SIGUSR1[soft,connection-reset] received, client-instance restarting
Sat Nov 21 19:41:19 2009 TCP/UDP: Closing socket

Sat Nov 21 19:41:01 2009 OpenVPN 2.1_rc22 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Nov 20 2009
Sat Nov 21 19:41:01 2009 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Sat Nov 21 19:41:01 2009 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Sat Nov 21 19:41:02 2009 ******* WARNING *******: null cipher specified, no encryption will be used
Sat Nov 21 19:41:02 2009 LZO compression initialized
Sat Nov 21 19:41:02 2009 Control Channel MTU parms [ L:1528 D:140 EF:40 EB:0 ET:0 EL:0 ]
Sat Nov 21 19:41:02 2009 Data Channel MTU parms [ L:1528 D:1450 EF:28 EB:135 ET:0 EL:0 AF:14/28 ]
Sat Nov 21 19:41:02 2009 Local Options hash (VER=V4): '8c7b630b'
Sat Nov 21 19:41:02 2009 Expected Remote Options hash (VER=V4): '2072ce18'
Sat Nov 21 19:41:02 2009 Attempting to establish TCP connection with 10.0.0.1:10000
Sat Nov 21 19:41:02 2009 TCP connection established with 10.0.0.1:10000
Sat Nov 21 19:41:02 2009 Socket Buffers: R=[8192->8192] S=[8192->8192]
Sat Nov 21 19:41:02 2009 TCPv4_CLIENT link local: [undef]
Sat Nov 21 19:41:02 2009 TCPv4_CLIENT link remote: 10.0.0.1:10000
Sat Nov 21 19:41:02 2009 TLS: Initial packet from 10.0.0.1:10000, sid=0fba3436 a5f4b258
Sat Nov 21 19:41:02 2009 VERIFY OK: depth=1, ***
Sat Nov 21 19:41:02 2009 VERIFY OK: depth=0, ***
Sat Nov 21 19:41:03 2009 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 21 19:41:03 2009 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Nov 21 19:41:03 2009 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Sat Nov 21 19:41:03 2009 [gateway] Peer Connection Initiated with 10.0.0.1:10000
Sat Nov 21 19:41:06 2009 SENT CONTROL [gateway]: 'PUSH_REQUEST' (status=1)
Sat Nov 21 19:41:06 2009 PUSH: Received control message: 'PUSH_REPLY,route 192.168.0.0 255.255.255.0,route 10.0.0.1,topology net30,ping 10,ping-restart 60,ifconfig 10.0.0.6 10.0.0.5'
Sat Nov 21 19:41:06 2009 OPTIONS IMPORT: timers and/or timeouts modified
Sat Nov 21 19:41:06 2009 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov 21 19:41:06 2009 OPTIONS IMPORT: route options modified
Sat Nov 21 19:41:06 2009 WARNING: potential conflict between --remote address [10.0.0.1] and --ifconfig address pair [10.0.0.6, 10.0.0.5] -- this is a warning only that is triggered when local/remote addresses exist within the same /24 subnet as --ifconfig endpoints. (silence this warning with --ifconfig-nowarn)
Sat Nov 21 19:41:06 2009 ROUTE default_gateway=192.168.1.1
Sat Nov 21 19:41:06 2009 TAP-WIN32 device [tuptup] opened: \\.\Global\{1977BA6E-D16E-4F50-B2CB-472DF71D39FB}.tap
Sat Nov 21 19:41:06 2009 TAP-Win32 Driver Version 9.6
Sat Nov 21 19:41:06 2009 TAP-Win32 MTU=1500
Sat Nov 21 19:41:06 2009 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.0.0.6/255.255.255.252 on interface {1977BA6E-D16E-4F50-B2CB-472DF71D39FB} [DHCP-serv: 10.0.0.5, lease-time: 31536000]
Sat Nov 21 19:41:06 2009 Successful ARP Flush on interface [65540] {1977BA6E-D16E-4F50-B2CB-472DF71D39FB}
Sat Nov 21 19:41:11 2009 TEST ROUTES: 2/2 succeeded len=2 ret=1 a=0 u/d=up
Sat Nov 21 19:41:11 2009 C:\WINDOWS\system32\route.exe ADD 192.168.0.0 MASK 255.255.255.0 10.0.0.5
Sat Nov 21 19:41:11 2009 Route addition via IPAPI succeeded [adaptive]
Sat Nov 21 19:41:11 2009 C:\WINDOWS\system32\route.exe ADD 10.0.0.1 MASK 255.255.255.255 10.0.0.5
Sat Nov 21 19:41:11 2009 Route addition via IPAPI succeeded [adaptive]
Sat Nov 21 19:41:11 2009 Initialization Sequence Completed
Sat Nov 21 19:41:37 2009 Connection reset, restarting [-1]
Sat Nov 21 19:41:37 2009 TCP/UDP: Closing socket
Sat Nov 21 19:41:37 2009 C:\WINDOWS\system32\route.exe DELETE 10.0.0.1 MASK 255.255.255.255 10.0.0.5
Sat Nov 21 19:41:37 2009 Route deletion via IPAPI succeeded [adaptive]
Sat Nov 21 19:41:37 2009 C:\WINDOWS\system32\route.exe DELETE 192.168.0.0 MASK 255.255.255.0 10.0.0.5
Sat Nov 21 19:41:37 2009 Route deletion via IPAPI succeeded [adaptive]
Sat Nov 21 19:41:37 2009 Closing TUN/TAP interface
Sat Nov 21 19:41:37 2009 SIGUSR1[soft,connection-reset] received, process restarting
Sat Nov 21 19:41:37 2009 Restart pause, 5 second(s)