The strange thing is that both files contain the dns i want to use. I do notice however that it only shows numbers, and no text before it. I think normally it says nameserver before the dns.
Maybe it’s something to do with my firewall, or the missing nameserver text, idk. I’ll try to play around some more and see what i can find out.
Edit: can anyone using this script confirm if both files are the same for them? And if the entries contain any text before them? Is there a way to modify the script so the it out puts nameserver before the actual dns? Thanks to everyone for all of the help!!
Edit 2:
It seems the the initswitch is causing the vpn to get started too early. I see it start when initswitch finishes. And then start again with a different pid. Right after the first pid finishes getting in, the second one makes it restart. Here’s the pertinent part of the log:
Sat May 19 00:03:34 2018 daemon.notice openvpn[2957]: UDP link remote: [AF_INET]170.178.173.157:1194
Sat May 19 00:03:34 2018 daemon.notice openvpn[2957]: TLS: Initial packet from [AF_INET]170.178.173.157:1194, sid=7b0b39e0 0b5ad0d5
Sat May 19 00:03:34 2018 daemon.notice openvpn[2957]: VERIFY OK: depth=2, C=CH, O=ProtonVPN AG, CN=ProtonVPN Root CA
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: VERIFY OK: depth=1, C=CH, O=ProtonVPN AG, CN=ProtonVPN Intermediate CA 1
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: VERIFY KU OK
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: Validating certificate extended key usage
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: VERIFY EKU OK
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: VERIFY OK: depth=0, CN=us-ca-07.protonvpn.com
Sat May 19 00:03:35 2018 daemon.err openvpn[2957]: event_wait : Interrupted system call (code=4)
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: TCP/UDP: Closing socket
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: SIGHUP[hard,] received, process restarting
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: OpenVPN 2.4.3 mips-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Sat May 19 00:03:35 2018 daemon.notice openvpn[2957]: Restart pause, 5 second(s)
Sat May 19 00:03:35 2018 user.notice firewall: Reloading firewall due to ifup of wwan (wlan-sta)
Sat May 19 00:03:38 2018 daemon.warn openvpn[1669]: WARNING: --ping should normally be used with --ping-restart or --ping-exit
Sat May 19 00:03:38 2018 daemon.notice openvpn[1669]: Re-using SSL/TLS context
Sat May 19 00:03:38 2018 daemon.notice openvpn[1669]: LZO compression initializing
Sat May 19 00:03:38 2018 daemon.notice openvpn[1669]: Control Channel MTU parms [ L:1654 D:1140 EF:110 EB:0 ET:0 EL:3 ]
Sat May 19 00:03:38 2018 daemon.notice openvpn[1669]: Data Channel MTU parms [ L:1654 D:1450 EF:122 EB:411 ET:32 EL:3 ]
Sat May 19 00:03:38 2018 daemon.notice openvpn[1669]: Local Options String (VER=V4): ‘V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 1,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-client’
Sat May 19 00:03:38 2018 daemon.notice openvpn[1669]: Expected Remote Options String (VER=V4): ‘V4,dev-type tun,link-mtu 1634,tun-mtu 1532,proto UDPv4,comp-lzo,keydir 0,cipher AES-256-CBC,auth SHA512,keysize 256,tls-auth,key-method 2,tls-server’
Sat May 19 00:03:38 2018 daemon.notice openvpn[1669]: TCP/UDP: Preserving recently used remote address: [AF_INET]170.178.173.157:1194
Hopefully @alzhao will have some insight.
Figured it out. I hadnt removed the dns servers in the wan section. It is a little misleading to have the dns leak warning if you dont have it filled in when you try to start the vpn. But removed them, restarted the router, and now all is (mostly) working great. And i Do have to set the switch to none or both the auto, and auto.hold files end up with the vpn server dns which results in no internet on disconnect from the vpn. Maybe a tiuch command at the start to tell if its the first run? Ineed help with doing it tho.