Route add failed but fine on retry?



  • I have 2 Open VPN client connections which are started when the machine boots. On 2.3.1/2 this worked fine but on 2.3.3 (and p1), I'm getting this one of the clients when it attempts to initialise:

    ERROR: FreeBSD route add command failed: external program exited with error status: 1
    

    However when I hit restart on that interface - it connects correctly. I'm at a bit of a loss as to where to look with this?



  • The full log if it's of any help:

    Mar 29 09:39:22	openvpn	18498	Initialization Sequence Completed
    Mar 29 09:39:22	openvpn	18498	ERROR: FreeBSD route add command failed: external program exited with error status: 1
    Mar 29 09:39:22	openvpn	18498	ERROR: FreeBSD route add command failed: external program exited with error status: 1
    Mar 29 09:39:22	openvpn	17204	Initialization Sequence Completed
    Mar 29 09:39:22	openvpn	18498	/usr/local/sbin/ovpn-linkup ovpnc2 1500 1558 10.43.10.6 10.43.10.5 init
    Mar 29 09:39:22	openvpn	18498	/sbin/ifconfig ovpnc2 10.43.10.6 10.43.10.5 mtu 1500 netmask 255.255.255.255 up
    Mar 29 09:39:22	openvpn	18498	do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
    Mar 29 09:39:22	openvpn	18498	ioctl(TUNSIFMODE): Device busy: Device busy (errno=16)
    Mar 29 09:39:22	openvpn	18498	TUN/TAP device /dev/tun2 opened
    Mar 29 09:39:22	openvpn	18498	TUN/TAP device ovpnc2 exists previously, keep at program end
    Mar 29 09:39:22	openvpn	17204	/usr/local/sbin/ovpn-linkup ovpnc1 1500 1558 10.51.10.6 10.51.10.5 init
    Mar 29 09:39:21	openvpn	17204	/sbin/ifconfig ovpnc1 10.51.10.6 10.51.10.5 mtu 1500 netmask 255.255.255.255 up
    Mar 29 09:39:21	openvpn	17204	do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
    Mar 29 09:39:21	openvpn	17204	ioctl(TUNSIFMODE): Device busy: Device busy (errno=16)
    Mar 29 09:39:21	openvpn	17204	TUN/TAP device /dev/tun1 opened
    Mar 29 09:39:21	openvpn	17204	TUN/TAP device ovpnc1 exists previously, keep at program end
    Mar 29 09:39:19	openvpn	18498	[5ad846e5cc1f0de1b191851de6585c8b] Peer Connection Initiated with [AF_INET]209.222.23.62:1198
    Mar 29 09:39:19	openvpn	18498	WARNING: 'cipher' is used inconsistently, local='cipher AES-128-CBC', remote='cipher BF-CBC'
    Mar 29 09:39:19	openvpn	18498	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1542'
    Mar 29 09:39:19	openvpn	18498	WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    Mar 29 09:39:19	openvpn	18498	UDPv4 link remote: [AF_INET]209.222.23.62:1198
    Mar 29 09:39:19	openvpn	18498	UDPv4 link local (bound): [AF_INET]82.16.99.44
    Mar 29 09:39:19	openvpn	17204	[6c8636367fc1b43d257d7e0b8008e2ad] Peer Connection Initiated with [AF_INET]108.61.122.221:1198
    Mar 29 09:39:19	openvpn	17204	WARNING: 'cipher' is used inconsistently, local='cipher AES-128-CBC', remote='cipher BF-CBC'
    Mar 29 09:39:19	openvpn	17204	WARNING: 'link-mtu' is used inconsistently, local='link-mtu 1558', remote='link-mtu 1542'
    Mar 29 09:39:19	openvpn	17204	WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
    Mar 29 09:39:18	openvpn	17204	UDPv4 link remote: [AF_INET]108.61.122.221:1198
    Mar 29 09:39:18	openvpn	17204	UDPv4 link local (bound): [AF_INET]82.16.99.44
    Mar 29 09:39:14	openvpn	18498	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
    Mar 29 09:39:14	openvpn	18498	WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
    Mar 29 09:39:14	openvpn	18213	WARNING: file '/var/etc/openvpn/client2.up' is group or others accessible
    Mar 29 09:39:14	openvpn	18213	library versions: OpenSSL 1.0.1s-freebsd 1 Mar 2016, LZO 2.09
    Mar 29 09:39:14	openvpn	18213	OpenVPN 2.3.14 amd64-portbld-freebsd10.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Feb 15 2017
    Mar 29 09:39:13	openvpn	17204	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
    Mar 29 09:39:13	openvpn	17204	WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
    Mar 29 09:39:13	openvpn	17106	WARNING: file '/var/etc/openvpn/client1.up' is group or others accessible
    Mar 29 09:39:13	openvpn	17106	library versions: OpenSSL 1.0.1s-freebsd 1 Mar 2016, LZO 2.09
    Mar 29 09:39:13	openvpn	17106	OpenVPN 2.3.14 amd64-portbld-freebsd10.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Feb 15 2017
    Mar 29 09:39:13	openvpn	14626	Initialization Sequence Completed
    Mar 29 09:39:13	openvpn	14626	UDPv4 link remote: [undef]
    Mar 29 09:39:13	openvpn	14626	UDPv4 link local (bound): [AF_INET]82.16.99.44:1194
    Mar 29 09:39:13	openvpn	14626	/usr/local/sbin/ovpn-linkup ovpns3 1500 1558 10.8.0.1 255.255.255.0 init
    Mar 29 09:39:12	openvpn	14626	/sbin/ifconfig ovpns3 10.8.0.1 10.8.0.2 mtu 1500 netmask 255.255.255.0 up
    Mar 29 09:39:12	openvpn	14626	do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=0
    Mar 29 09:39:12	openvpn	14626	ioctl(TUNSIFMODE): Device busy: Device busy (errno=16)
    Mar 29 09:39:12	openvpn	14626	TUN/TAP device /dev/tun3 opened
    Mar 29 09:39:12	openvpn	14626	TUN/TAP device ovpns3 exists previously, keep at program end
    Mar 29 09:39:12	openvpn	14626	NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
    Mar 29 09:39:12	openvpn	14313	library versions: OpenSSL 1.0.1s-freebsd 1 Mar 2016, LZO 2.09
    Mar 29 09:39:12	openvpn	14313	OpenVPN 2.3.14 amd64-portbld-freebsd10.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Feb 15 2017