Openvpn.conf problem

Technical Support for Routers
1

I have an openvpn server on a Pi4B set up using the angrystan script (so I don’t know much about open vpn) and it generates conf files which work perfectly on the android client or windows 10 client. When I try it on a 300n v2 I get this error message.

Server

Mangoovpn.ovpn

SIGHUP[connection (soft),init_instance] received, process restarting

Unrecognized option or missing or extra

parameter(s) in /etc/openvpn/ovpn1/Mangoovpn.ovpn:18: block outside-dns (2.5.2)

OpenVPN 2.5.2 mipsel-openwrt-linux-gnu [SSL (OpenSSL)] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]

library versions: OpenSSL 1.1.1k 25 Mar 2021

Restart pause, 5 second(s)

``
The start of the config file looks like:

client

proto tcp-client

remote xxxx.duckdns.org 1194

dev tun

resolv-retry infinite

nobind

persist-key

persist-tun

remote-cert-tls server

verify-x509-name server_BwSwWSkrI3ELxCtj name

auth SHA256

auth-nocache

cipher AES-128-GCM

tls-client

tls-version-min 1.2

tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256

ignore-unknown-option block-outside-dns

setenv opt block-outside-dns # Prevent Windows 10 DNS leak

verb 3

``` How do I modify this to get it to work?
2

Try deleting the following lines in the config file:

ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak

It seems to be mainly for Windows 10 and may not be supported by all versions of the OpenVPN client.

I do not work for and I do not have formal association with GL.iNet

1 Like
3

I used the Angrystan script to setup my OpenVPN servers on some ARM based cloud servers. Here is my client config file, which is running on a GL iNet AR750s right now. I am using firmware 3.212 beta 1 but it also works with firmware 3.203.

client
proto tcp-client
remote xxx.xxx.com xxxx
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name XXXXX name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3

I don’t see any real differences with your file, but mine is running fine. By chance, you did not convert the file to a DOS end-of-line formatted file? I remember in the past seeing issues when this occurs.

4

As suggested I commented out the third and second from last lines which solved the issue.