Git Product home page Git Product logo

Comments (15)

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024 1

@DimitriPapadopoulos After around 4 hours of using openfortivpn the connection remained fine. I realy think the problem was the dnsmasq and the unused resolvconf. Ill let the vpn today for around 5+ hours and see the final result

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024 1

@DimitriPapadopoulos I can confirm that this is working as intended!

from openfortivpn.

DimitriPapadopoulos avatar DimitriPapadopoulos commented on September 3, 2024

See https://github.com/adrienverge/openfortivpn/wiki#debugging-openfortivpn.

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024

See https://github.com/adrienverge/openfortivpn/wiki#debugging-openfortivpn.

Doing this right now, going to post the log info shortly

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024

@DimitriPapadopoulos
Here is the -v -v output

openfortivpn -v -v 
DEBUG:  openfortivpn 1.19.0
DEBUG:  revision unavailable
DEBUG:  Loaded configuration file "/etc/openfortivpn/config".
VPN account password: 
DEBUG:  Configuration host = "myhost"
DEBUG:  Configuration realm = "tunnel"
DEBUG:  Configuration port = "443"
DEBUG:  Configuration username = "myuser"
DEBUG:  Resolving gateway host ip
DEBUG:  Establishing ssl connection
DEBUG:  SO_KEEPALIVE: OFF
DEBUG:  TCP_KEEPIDLE: 7200
DEBUG:  TCP_KEEPINTVL: 75
DEBUG:  TCP_KEEPCNT: 9
DEBUG:  SO_SNDBUF: 16384
DEBUG:  SO_RCVBUF: 131072
DEBUG:  server_addr: _____
DEBUG:  server_port: 443
DEBUG:  gateway_addr: _____
DEBUG:  gateway_port: 443
DEBUG:  Setting cipher list to: HIGH:!aNULL:!kRSA:!PSK:!SRP:!MD5:!RC4
DEBUG:  Setting minimum protocol version to: 0x303.
DEBUG:  Gateway certificate validation succeeded.
INFO:   Connected to gateway.
DEBUG:  http_send:
POST /remote/logincheck HTTP/1.1
Host: myhost:443
User-Agent: Mozilla/5.0 SV1
Accept: */*
Accept-Encoding: gzip, deflate, br
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT
Content-Type: application/x-www-form-urlencoded
Cookie: 
Content-Length: 87

username=myuser&credential=************************&realm=tunnel&ajax=1
DEBUG:  http_receive:
HTTP/1.1 200 OK
Date: Mon, 16 Oct 2023 11:41:34 GMT
Set-Cookie:  SVPNCOOKIE=; path=/; expires=Sun, 11 Mar 1984 12:00:00 GMT; secure; httponly; SameSite=Strict;
Set-Cookie: SVPNNETWORKCOOKIE=; path=/remote/network; expires=Sun, 11 Mar 1984 12:00:00 GMT; secure; httponly; SameSite=Strict
Transfer-Encoding: chunked
Content-Type: text/plain
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

8a    
ret=2,reqid=171263873,polid=1-7-250033ca,grp=something_something,portal=full-access-split-something,magic=7-250033ca,tokeninfo=ftm_push,chal_msg=
0


DEBUG:  Empty cookie.
DEBUG:  http_send:
POST /remote/logincheck HTTP/1.1
Host: remote.something.pt:443
User-Agent: Mozilla/5.0 SV1
Accept: */*
Accept-Encoding: gzip, deflate, br
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT
Content-Type: application/x-www-form-urlencoded
Cookie: SVPNCOOKIE=
Content-Length: 139

username=myuser&realm=tunnel&reqid=171263873&polid=1-7-250033ca&grp=something_something&portal=full-access-split-something&peer=&ftmpush=1
DEBUG:  http_receive:
HTTP/1.1 200 OK
Date: Mon, 16 Oct 2023 11:41:34 GMT
Set-Cookie: SVPNCOOKIE=lOojJTs0PjeKwNfOD+8WJLwjRPNoDi553cEj4+25lImOnsDNy/meSzqKICPvE2BYxXULeYCmtoidlyMXtTWATkULgsNuuc9oNt8t3c6BDK0M2ywyl7AN84dtZrDwQmvCAkhHzUWc7vgJZw6EdhzzEX3yBimAgd/DD3FEAnM7icbzIAleNiyjg8W6eT25Mx5nkSSKIcdFO4w8Iat3lX9CziaKi124LIl1Qjj0XVnxyL7HMAOwGKtTM1XBU421RuXQ++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=; path=/; secure; httponly; SameSite=Strict
Transfer-Encoding: chunked
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

7e    
<!DOCTYPE html>
<html><head>
<script language='javascript'>
document.location='/sslvpn/portal.html';
</script>
</head></html>

0


DEBUG:  Cookie: SVPNCOOKIE=lOojJTs0PjeKwNfOD+8WJLwjRPNoDi553cEj4+25lImOnsDNy/meSzqKICPvE2BYxXULeYCmtoidlyMXtTWATkULgsNuuc9oNt8t3c6BDK0M2ywyl7AN84dtZrDwQmvCAkhHzUWc7vgJZw6EdhzzEX3yBimAgd/DD3FEAnM7icbzIAleNiyjg8W6eT25Mx5nkSSKIcdFO4w8Iat3lX9CziaKi124LIl1Qjj0XVnxyL7HMAOwGKtTM1XBU421RuXQ++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=
INFO:   Authenticated.
DEBUG:  Cookie: SVPNCOOKIE=lOojJTs0PjeKwNfOD+8WJLwjRPNoDi553cEj4+25lImOnsDNy/meSzqKICPvE2BYxXULeYCmtoidlyMXtTWATkULgsNuuc9oNt8t3c6BDK0M2ywyl7AN84dtZrDwQmvCAkhHzUWc7vgJZw6EdhzzEX3yBimAgd/DD3FEAnM7icbzIAleNiyjg8W6eT25Mx5nkSSKIcdFO4w8Iat3lX9CziaKi124LIl1Qjj0XVnxyL7HMAOwGKtTM1XBU421RuXQ++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=
DEBUG:  http_send:
GET /remote/index HTTP/1.1
Host: remote.something.pt:443
User-Agent: Mozilla/5.0 SV1
Accept: */*
Accept-Encoding: gzip, deflate, br
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT
Content-Type: application/x-www-form-urlencoded
Cookie: SVPNCOOKIE=lOojJTs0PjeKwNfOD+8WJLwjRPNoDi553cEj4+25lImOnsDNy/meSzqKICPvE2BYxXULeYCmtoidlyMXtTWATkULgsNuuc9oNt8t3c6BDK0M2ywyl7AN84dtZrDwQmvCAkhHzUWc7vgJZw6EdhzzEX3yBimAgd/DD3FEAnM7icbzIAleNiyjg8W6eT25Mx5nkSSKIcdFO4w8Iat3lX9CziaKi124LIl1Qjj0XVnxyL7HMAOwGKtTM1XBU421RuXQ++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=
Content-Length: 0


DEBUG:  http_receive:
HTTP/1.1 403 Forbidden
Date: Mon, 16 Oct 2023 11:41:45 GMT
Transfer-Encoding: chunked
Content-Type: text/html
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

698   
<HTML>
<HEAD>
<META http-equiv="Content-Type" content="text/html; charset=utf-8">
<META HTTP-EQUIV="Pragma" CONTENT="no-cache">
<link href="/sslvpn/css/ssl_style.css" rel="stylesheet" type="text/css">
<script type='text/javascript' src='/remote/fgt_lang?lang=en'></script>
</head>
<body class="main">
<table class="container" cellpadding="0" cellspacing="0">
<tr>
<td><table class="dialog" width=300 align="center" cellpadding="0" cellspacing="0">
<tr>
<td><table class="header" cellpadding="0" cellspacing="0">
<tr>
<td id="err_title"></td>
</tr>
</table></td>
</tr>
<script>document.getElementById('err_title').innerHTML=fgt_lang['error'];</script>
<tr>
<td class="body" height=100><table class="body"><tr><td id='err_val' title='403' align="center">
<script>
var errval_elem=document.getElementById('err_val');
var errval=errval_elem.getAttribute('title').split(',');
var err_str = fgt_lang[errval[0]];
if (err_str == undefined) {
   errval_elem.innerHTML = "some unknown error!<br>";
} else {   if (errval.length == 2) {
       err_str = encodeURIComponent(err_str.replace("%d", errval[1]));
       err_str = err_str.replace(/%20/g, " ");   }
   errval_elem.innerHTML = err_str;
}
</script></td></tr></table></td>
</tr>
<tr><td>
<table class="footer" cellpadding="0" cellspacing="0">
<tr><td>
<input id="ok_button" type="button" value="" onclick="chkbrowser()" style="width:80px">
</td></tr>
</table>
</td></tr>
</table>
</body>
<script language = "javascript">
document.getElementById('ok_button').value=fgt_lang['ok'];
function chkbrowser() {
if (window.location.pathname == "/remote/login")
window.location.reload();
else
window.location.href = "/remote/login";}
</script>
</html>

0

0


DEBUG:  http_send:
GET /remote/fortisslvpn HTTP/1.1
Host: remote.something.pt:443
User-Agent: Mozilla/5.0 SV1
Accept: */*
Accept-Encoding: gzip, deflate, br
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT
Content-Type: application/x-www-form-urlencoded
Cookie: SVPNCOOKIE=lOojJTs0PjeKwNfOD+8WJLwjRPNoDi553cEj4+25lImOnsDNy/++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=
Content-Length: 0


DEBUG:  http_receive:
HTTP/1.1 200 OK
Date: Mon, 16 Oct 2023 11:41:45 GMT
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

5ba   
<HTML>
<HEAD>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
<META http-equiv="Pragma" content="no-cache">
<META http-equiv="cache-control" content="no-cache">
<META http-equiv="cache-control" content="must-revalidate">
<!-- SSL-VPN protocol version:
embed.FGTversion = 1;
fortisslvpn.FGTversion = 1
-->
<body>
<form NAME="Form1" on>
<input TYPE="hidden" NAME="Text6" VALUE="">
<input TYPE="hidden" NAME="Text3" value="">
<input TYPE="hidden" name="text6" VALUE="">
<input type="hidden" name="text7" value="0"></form>
<script>
var cookie_str='lOojJTs0PjeKwNfOD+8WJLwjRPNoDi553cEj4+//DD3FEAnM7icbzIAleNiyjg8W6eT25Mx5nkSSKIcdFO4w8Iat3lX9CziaKi124LIl1Qjj0XVnxyL7HMAOwGKtTM1XBU421RuXQ++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=';
</script><!-- fortisslvpn.serverip = Document.form1.text3.value+'?'+'lOojJTs0PjeKwNfOD+8WJLwjRPNoDi553cEj4+25lImOnsDNy/meSzqKICPvE2BYxXULeYCmtoidlyMXtTWATkULgsNuuc9oNt8t3c6BDK0M2ywyl7AN84dtZrDwQmvCAkhHzUWc7vgJZw6EdhzzEX3yBimAgd/DD3FEAnM7icbzIAleNiyjg8W6eT25Mx5nkSSKIcdFO4w8Iat3lX9CziaKi124LIl1Qjj0XVnxyL7HMAOwGKtTM1XBU421RuXQ++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=' -->
</body>
</HTML>

0

mentById('ok_button').value=fgt_lang['ok'];
function chkbrowser() {
if (window.location.pathname == "/remote/login")
window.location.reload();
else
window.location.href = "/remote/login";}
</script>
</html>

0

0


INFO:   Remote gateway has allocated a VPN.
DEBUG:  SO_KEEPALIVE: OFF
DEBUG:  TCP_KEEPIDLE: 7200
DEBUG:  TCP_KEEPINTVL: 75
DEBUG:  TCP_KEEPCNT: 9
DEBUG:  SO_SNDBUF: 16384
DEBUG:  SO_RCVBUF: 131072
DEBUG:  server_addr: 93.108.234.105
DEBUG:  server_port: 443
DEBUG:  gateway_addr: 93.108.234.105
DEBUG:  gateway_port: 443
DEBUG:  Setting cipher list to: HIGH:!aNULL:!kRSA:!PSK:!SRP:!MD5:!RC4
DEBUG:  Setting minimum protocol version to: 0x303.
DEBUG:  Gateway certificate validation succeeded.
DEBUG:  Retrieving configuration
DEBUG:  http_send:
GET /remote/fortisslvpn_xml HTTP/1.1
Host: remote.something.pt:443
User-Agent: Mozilla/5.0 SV1
Accept: */*
Accept-Encoding: gzip, deflate, br
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate
If-Modified-Since: Sat, 1 Jan 2000 00:00:00 GMT
Content-Type: application/x-www-form-urlencoded
Cookie: SVPNCOOKIE=lOojJTs0PjeKwNfOD+/DD3FEAnM7icbzIAleNiyjg8W6eT25Mx5nkSSKIcdFO4w8Iat3lX9CziaKi124LIl1Qjj0XVnxyL7HMAOwGKtTM1XBU421RuXQ++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=
Content-Length: 0


DEBUG:  http_receive:
HTTP/1.1 200 OK
Date: Mon, 16 Oct 2023 11:41:45 GMT
Transfer-Encoding: chunked
Content-Type: text/xml
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'; object-src 'self'; script-src 'self' https:  'unsafe-eval' 'unsafe-inline' blob:;
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000

395   
<?xml version='1.0' encoding='utf-8'?><sslvpn-tunnel ver='2' dtls='1' patch='1'><dtls-config heartbeat-interval='10' heartbeat-fail-count='10' heartbeat-idle-timeout='10' client-hello-timeout='10' /><tunnel-method value='ppp' /><tunnel-method value='tun' /><tunnel-method value='websocket' /><auth-ses check-src-ip='1' tun-connect-without-reauth='0' tun-user-ses-timeout='30' /><client-config save-password='on' keep-alive='on' auto-connect='off' /><ipv4><dns domain='something.int' /><dns ip='10.69.70.3' /><dns ip='10.69.70.4' /><assigned-addr ipv4='10.69.100.1' /><split-tunnel-info><addr ip='10.69.69.10' mask='255.255.255.255' /><addr ip='10.69.69.10' mask='255.255.255.255' /><addr ip='10.69.69.253' mask='255.255.255.255' /><addr ip='10.69.70.0' mask='255.255.255.0' /><addr ip='10.69.81.0' mask='255.255.255.0' /></split-tunnel-info></ipv4><idle-timeout val='14400' /><auth-timeout val='36000' /></sslvpn-tunnel>
0


DEBUG:  found dns suffix something.int in xml config
DEBUG:  found dns server 10.69.70.3 in xml config
DEBUG:  found dns server 10.69.70.4 in xml config
DEBUG:  Establishing the tunnel
DEBUG:  ppp_path: /usr/sbin/pppd
DEBUG:  Switch to tunneling mode
DEBUG:  http_send:
GET /remote/sslvpn-tunnel HTTP/1.1
Host: sslvpn
Cookie: SVPNCOOKIE=lOojJTs0PjeKwNfOD+25lImOnsDNy/meSzqKICPvE2BYxXULeYCmtoidlyMXtTWATkULgsNuuc9oNt8t3c6BDK0M2ywyl7AN84dtZrDwQmvCAkhHzUWc7vgJZw6EdhzzEX3yBimAgd/DD3FEAnM7icbzIAleNiyjg8W6eT25Mx5nkSSKIcdFO4w8Iat3lX9CziaKi124LIl1Qjj0XVnxyL7HMAOwGKtTM1XBU421RuXQ++L9ukl9T4pP4y3pN5Kfgv4vbjh6rZN+XiVySoBvq5JJSdLlrAWtfhaC5eXEewKblbqG9t6s+Up3L5aOzNibUIBXU/nwk7LNFaEIJuVtRigqIgiYtk1b7Q9Ph5NsQPwFzrQCzr/i368ujLX1fws=


DEBUG:  Starting IO through the tunnel
DEBUG:  pppd_read thread
DEBUG:  ssl_read thread
DEBUG:  if_config thread
DEBUG:  ssl_write thread
DEBUG:  pppd_write thread
DEBUG:  pppd ---> gateway (16 bytes)
pppd:   c0 21 01 01 00 0e 01 04 05 4a 05 06 32 1a fe 6e

DEBUG:  gateway ---> pppd (12 bytes)
gtw:    c0 21 01 01 00 0a 05 06 9a b9 05 cc

DEBUG:  pppd ---> gateway (12 bytes)
pppd:   c0 21 02 01 00 0a 05 06 9a b9 05 cc

DEBUG:  gateway ---> pppd (16 bytes)
gtw:    c0 21 02 01 00 0e 01 04 05 4a 05 06 32 1a fe 6e

DEBUG:  pppd ---> gateway (10 bytes)
pppd:   c0 21 09 00 00 08 32 1a fe 6e

DEBUG:  pppd ---> gateway (17 bytes)
pppd:   80 fd 01 01 00 0f 1a 04 78 00 18 04 78 00 15 03 2f

And here is the pppd-log output

using channel 6
Using interface ppp0
Connect: ppp0 <--> /dev/pts/9
sent [LCP ConfReq id=0x1 <mru 1354> <magic 0x321afe6e>]
rcvd [LCP ConfReq id=0x1 <magic 0x9ab905cc>]
sent [LCP ConfAck id=0x1 <magic 0x9ab905cc>]
rcvd [LCP ConfAck id=0x1 <mru 1354> <magic 0x321afe6e>]
sent [LCP EchoReq id=0x0 magic=0x321afe6e]
sent [CCP ConfReq id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>]
sent [IPCP ConfReq id=0x1 <compress VJ 0f 01> <addr 0.0.0.0>]
sent [IPV6CP ConfReq id=0x1 <addr fe80::fd94:60cc:1182:7ac6>]
rcvd [IPCP ConfReq id=0x1 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x1 <addr 169.254.2.1>]
rcvd [LCP EchoRep id=0x0 magic=0x9ab905cc]
rcvd [CCP ConfReq id=0x1]
sent [CCP ConfAck id=0x1]
rcvd [CCP ConfRej id=0x1 <deflate 15> <deflate(old#) 15> <bsd v1 15>]
sent [CCP ConfReq id=0x2]
rcvd [IPCP ConfRej id=0x1 <compress VJ 0f 01>]
sent [IPCP ConfReq id=0x2 <addr 0.0.0.0>]
rcvd [LCP ProtRej id=0x2 80 57 01 01 00 0e 01 0a fd 94 60 cc 11 82 7a c6 64 01]
Protocol-Reject for 'IPv6 Control Protocol' (0x8057) received
rcvd [IPCP ConfReq id=0x2 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x2 <addr 169.254.2.1>]
rcvd [CCP ConfAck id=0x2]
rcvd [IPCP ConfNak id=0x2 <addr 10.69.100.1>]
sent [IPCP ConfReq id=0x3 <addr 10.69.100.1>]
rcvd [IPCP ConfReq id=0x3 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x3 <addr 169.254.2.1>]
rcvd [IPCP ConfAck id=0x3 <addr 10.69.100.1>]
rcvd [IPCP ConfReq id=0x4 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x4 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x5 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x5 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x6 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x6 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x7 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x7 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x8 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x8 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x9 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x9 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0xa <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0xa <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0xb <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0xb <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0xc <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0xc <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0xd <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0xd <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0xe <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0xe <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0xf <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0xf <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x10 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x10 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x11 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x11 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x12 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x12 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x13 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x13 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x14 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x14 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x15 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x15 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x16 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x16 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x17 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x17 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x18 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x18 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x19 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x19 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x1a <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x1a <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x1b <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x1b <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x1c <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x1c <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x1d <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x1d <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x1e <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x1e <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x1f <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x1f <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x20 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x20 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x21 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x21 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x22 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x22 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x23 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x23 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x24 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x24 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x25 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x25 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x26 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x26 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x27 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x27 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x28 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x28 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x29 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x29 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x2a <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x2a <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x2b <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x2b <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x2c <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x2c <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x2d <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x2d <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x2e <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x2e <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x2f <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x2f <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x30 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x30 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x31 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x31 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x32 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x32 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x33 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x33 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x34 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x34 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x35 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x35 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x36 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x36 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x37 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x37 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x38 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x38 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x39 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x39 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x3a <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x3a <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x3b <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x3b <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x3c <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x3c <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x3d <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x3d <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x3e <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x3e <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x3f <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x3f <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x40 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x40 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x41 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x41 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x42 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x42 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x43 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x43 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x44 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x44 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x45 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x45 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x46 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x46 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x47 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x47 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x48 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x48 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x49 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x49 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x4a <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x4a <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x4b <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x4b <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x4c <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x4c <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x4d <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x4d <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x4e <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x4e <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x4f <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x4f <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x50 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x50 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x51 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x51 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x52 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x52 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x53 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x53 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x54 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x54 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x55 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x55 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x56 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x56 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x57 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x57 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x58 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x58 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x59 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x59 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x5a <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x5a <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x5b <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x5b <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x5c <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x5c <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x5d <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x5d <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x5e <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x5e <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x5f <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x5f <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x60 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x60 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x61 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x61 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x62 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x62 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x63 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x63 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x64 <addr PUBLIC_IP.105>]
sent [IPCP ConfNak id=0x64 <addr 169.254.2.1>]
rcvd [IPCP ConfReq id=0x65 <addr PUBLIC_IP.105>]
sent [IPCP ConfRej id=0x65 <addr PUBLIC_IP.105>]
rcvd [IPCP ConfReq id=0x66 <addrs PUBLIC_IP.105 10.69.100.1>]
sent [IPCP ConfRej id=0x66 <addrs PUBLIC_IP.105 10.69.100.1>]
rcvd [IPCP ConfReq id=0x67]
sent [IPCP ConfAck id=0x67]
Script /etc/ppp/ip-pre-up started (pid 18305)
Script /etc/ppp/ip-pre-up finished (pid 18305), status = 0x0
local  IP address 10.69.100.1
remote IP address 169.254.2.1
Script /etc/ppp/ip-up started (pid 18308)
Script /etc/ppp/ip-up finished (pid 18308), status = 0x0

Like I said, after a couple of minutes I got no message about connection lost but I lose connectivity with the VPN.

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024

Adding to the above log output. Here is the result of ip route.
image
I think this has duplicates interfaces for some reason

from openfortivpn.

DimitriPapadopoulos avatar DimitriPapadopoulos commented on September 3, 2024

Something must be happening when you lose connectivity. Something else might overwrite network parameters.

What do you see in system logs when you lose connectivity?

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024

I realy think its network managers fault for some reason.
In the systems logs everything is normal and looks like everything is working. But that is not the case

from openfortivpn.

DimitriPapadopoulos avatar DimitriPapadopoulos commented on September 3, 2024

Yes, it probably has to do with the network manager. To tell the truth, openfortivpn does not do the right thing when directly modifying /etc/resolv.conf. Having resolvconf installed might help.

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024

I can confirm I don't have resolvconf installed

$ resolvconf
bash: resolvconf: command not found

Do you think that might help? I can install and test and come back with further information if that worked or no

from openfortivpn.

DimitriPapadopoulos avatar DimitriPapadopoulos commented on September 3, 2024

It may help if resolvconf does the right thing.

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024

It may help if resolvconf does the right thing.

By installing resolvconf I have the following error, wut

brun0@hhh:~
$ sudo apt install resolvconf
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following NEW packages will be installed:
  resolvconf
0 upgraded, 1 newly installed, 0 to remove and 1 not upgraded.
Need to get 55.6 kB of archives.
After this operation, 184 kB of additional disk space will be used.
Get:1 http://deb.debian.org/debian bookworm/main amd64 resolvconf all 1.91+nmu1 [55.6 kB]
Fetched 55.6 kB in 0s (516 kB/s)    
Preconfiguring packages ...
Selecting previously unselected package resolvconf.
(Reading database ... 189751 files and directories currently installed.)
Preparing to unpack .../resolvconf_1.91+nmu1_all.deb ...
Unpacking resolvconf (1.91+nmu1) ...
Setting up resolvconf (1.91+nmu1) ...
Created symlink /etc/systemd/system/sysinit.target.wants/resolvconf.service → /lib/systemd/system/resolvconf.service.
Created symlink /etc/systemd/system/systemd-resolved.service.wants/resolvconf-pull-resolved.path → /lib/systemd/system/resolvconf-pull-resolved.path.
Unit /lib/systemd/system/resolvconf-pull-resolved.path is added as a dependency to a non-existent unit systemd-resolved.service.
Created symlink /etc/systemd/system/systemd-resolved.service.wants/resolvconf-pull-resolved.service → /lib/systemd/system/resolvconf-pull-resolved.service.
Unit /lib/systemd/system/resolvconf-pull-resolved.service is added as a dependency to a non-existent unit systemd-resolved.service.
Job for dnsmasq.service failed because the control process exited with error code.
See "systemctl status dnsmasq.service" and "journalctl -xeu dnsmasq.service" for details.
invoke-rc.d: initscript dnsmasq, action "restart" failed.
× dnsmasq.service - dnsmasq - A lightweight DHCP and caching DNS server
     Loaded: loaded (/lib/systemd/system/dnsmasq.service; enabled; preset: enabled)
     Active: failed (Result: exit-code) since Tue 2023-10-24 16:52:52 WEST; 4ms ago
   Duration: 2h 29min 19.723s
    Process: 11364 ExecStartPre=/etc/init.d/dnsmasq checkconfig (code=exited, status=0/SUCCESS)
    Process: 11374 ExecStart=/etc/init.d/dnsmasq systemd-exec (code=exited, status=2)
        CPU: 20ms

Oct 24 16:52:52 L8-BTeixeira systemd[1]: Starting dnsmasq.service - dnsmasq - A lightweight DH
CP and caching DNS server...
Oct 24 16:52:52 L8-BTeixeira dnsmasq[11374]: dnsmasq: failed to create listening socket for po
rt 53: Address already in use
Oct 24 16:52:52 L8-BTeixeira dnsmasq[11374]: failed to create listening socket for port 53: Ad
dress already in use
Oct 24 16:52:52 L8-BTeixeira dnsmasq[11374]: FAILED to start up
Oct 24 16:52:52 L8-BTeixeira systemd[1]: dnsmasq.service: Control process exited, code=exited,
 status=2/INVALIDARGUMENT
Oct 24 16:52:52 L8-BTeixeira systemd[1]: dnsmasq.service: Failed with result 'exit-code'.
Oct 24 16:52:52 L8-BTeixeira systemd[1]: Failed to start dnsmasq.service - dnsmasq - A lightwe
ight DHCP and caching DNS server.
Processing triggers for man-db (2.11.2-2) ...
Processing triggers for resolvconf (1.91+nmu1) ...
brun0@hhh:~
$ resolvconf
bash: resolvconf: command not found

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024

maemo-leste/bugtracker#583

from openfortivpn.

DimitriPapadopoulos avatar DimitriPapadopoulos commented on September 3, 2024

There are multiple variants of resolvconf:

You have installed the first one, which might be a good idea as you seem to run Debian. Not sure about the error messages you see. Have they been fixed maemo-leste/libicd-network-ipv4#3? Hasn't the fix been propagated to your distribution?

from openfortivpn.

BrunoTeixeira1996 avatar BrunoTeixeira1996 commented on September 3, 2024

There are multiple variants of resolvconf:

You have installed the first one, which might be a good idea as you seem to run Debian. Not sure about the error messages you see. Have they been fixed maemo-leste/libicd-network-ipv4#3? Hasn't the fix been propagated to your distribution?

I dont remember why i was using dnsmasq to be fair. I think I wanted to access some internal services by name but I dont use that anymore so I just removed it and installed resolvconf.
Tomorrow Ill test if the openfortivpn works fine and If yes we can close this

from openfortivpn.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.