openvpn and dhcdcd 5.2 [found work around]

RayDude · Last edited by RayDude on Sat Sep 24, 2011 3:37 pm; edited 1 time in total

I recently had to upgrade to DHCPCD 5.2 from 4.x. I have resolved some issues (like adding dhcpcd to rc startup scripts). But openvpn is not working. This configuration worked fine with the old DHCPCD but with the new one I get "No Route to host" messages after I connect. I can ping the tap eth addr but not any thing in the destination domain.

Its a long shot, but has anyone seen this? I need to connect to work and my Gentoo's being a biotch.

Brian
_________________
Some day there will only be free software.

RayDude · Posted: Wed Aug 24, 2011 12:53 am Post subject:

Bump with new info.

After I start openvpn, the route command hangs. But it works fine when openvpn is not running. So clearly the kernel is having issues.
_________________
Some day there will only be free software.

RayDude · Posted: Fri Sep 16, 2011 7:37 am Post subject:

BUMP

Help?
_________________
Some day there will only be free software.

UberLord · Posted: Sun Sep 18, 2011 10:57 am Post subject:

If OpenVPN replaces the default route then your network will loose the route to the VPN host.
Is this what is happening?
_________________
Use dhcpcd for all your automated network configuration needs
Use dhcpcd-ui (GTK+/Qt) as your System Tray Network tool

RayDude · Posted: Mon Sep 19, 2011 1:01 am Post subject:

UberLord · Posted: Mon Sep 19, 2011 6:21 am Post subject:

Post the routing table and interface addresses for both before and after OpenVPN connects. That should show where the issue is.
_________________
Use dhcpcd for all your automated network configuration needs
Use dhcpcd-ui (GTK+/Qt) as your System Tray Network tool

RayDude · Posted: Tue Sep 20, 2011 5:17 am Post subject:

Before /etc/init.d/openvpn.blah start

UberLord · Posted: Tue Sep 20, 2011 6:07 am Post subject:

You need to set a higher metric for OpenVPN or a lower one for eth1.
Basically the lowest metric wins, so everything is going over your vpn, and eventually your vpn will try to go over itself and fail.
_________________
Use dhcpcd for all your automated network configuration needs
Use dhcpcd-ui (GTK+/Qt) as your System Tray Network tool

RayDude · Posted: Tue Sep 20, 2011 7:14 am Post subject:

Thanks for the quick response, but it didn't work:

First I set the openvpn metric to 1000:

UberLord · Posted: Tue Sep 20, 2011 8:19 am Post subject:

So you probably have DNS information coming from OpenVPN as well, which could be stamping on your own.
Try installing openresolv to manage this - dhcpcd and OpenVPN both support it.

If you already have openresolv installed, try listing the output like so

RayDude · Posted: Tue Sep 20, 2011 3:01 pm Post subject:

Thanks! That's a great tool. I had no idea it existed.

However, even though resolv.conf is correct, I still can't get to any network when connected through openvpn (even with openvpn having a higher metric).

I can ping tap0, but I can't ping anything that should be routed through tap0.

I don't know if it matters but eth1 is a wireless interface running on the Broadcom WL kernel module.

If you have any more ideas, please let me know. I really appreciate your help with this.

RayDude · Posted: Wed Sep 21, 2011 3:30 pm Post subject:

*bump*

Now it seems that I can't even run at work... pings and route commands run very very slowly.

No one else is having this problem.
_________________
Some day there will only be free software.

RayDude · Posted: Wed Sep 21, 2011 3:40 pm Post subject:

So I'm getting this message in /var/log/messages:

UberLord · Posted: Wed Sep 21, 2011 4:14 pm Post subject:

I don't use Gentoo anymore, so I cannot say.
But seriously - you need to ensure that your tap0 routes have a higher metric than your eth1 routes
_________________
Use dhcpcd for all your automated network configuration needs
Use dhcpcd-ui (GTK+/Qt) as your System Tray Network tool

RayDude · Posted: Wed Sep 21, 2011 7:46 pm Post subject:

Thanks much for your help Uber. I'll keep plugging at it. Right now I'm hard wired to my work network and things are clunky. Makes me wonder if there's a router problem or something.
_________________
Some day there will only be free software.

RayDude · Posted: Thu Sep 22, 2011 5:09 pm Post subject:

Hey Uber,

Out of curiosity, what distro are you using?
_________________
Some day there will only be free software.

RayDude · Posted: Sat Sep 24, 2011 6:42 am Post subject:

You're right Uber, its a Metric issue. It works for a few seconds after I connect and then somehow the route changes:

cach0rr0 · Posted: Sat Sep 24, 2011 7:50 am Post subject:

RayDude · Posted: Sat Sep 24, 2011 3:29 pm Post subject:

Here's a work around. I'm not sure why its necessary, but it works: