Server just stopped working Cannot open TUN/TAP dev /dev/tun3: Device busy



  • I haven't touched my pfsense box in some time so I didn't change anything but I went to connect the other day and couldn't so when I got home I looked and the service wasn't even running which I thought was odd.  I tried starting the service and it would never start.  I tried rebooting and that seemed to fix it however when I tried to connect to OVPN today it wouldn't work again so just getting home again I find out the service is stopped once more.  Looking at the logs yields below.  Whats going on?

    Jun 10 19:43:46 openvpn[93854]: Control Channel Authentication: using '/var/etc/openvpn/server3.tls-auth' as a OpenVPN static key file
    Jun 10 19:43:46 openvpn[93854]: TCP/UDP: Socket bind failed on local address [AF_INET]192.168.100.10:1194: Address already in use
    Jun 10 19:43:46 openvpn[93854]: Exiting due to fatal error
    Jun 10 19:56:01 openvpn[95996]: OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Apr 8 2015
    Jun 10 19:56:01 openvpn[95996]: library versions: OpenSSL 1.0.1l-freebsd 15 Jan 2015, LZO 2.09
    Jun 10 19:56:01 openvpn[97690]: WARNING: using –duplicate-cn and --client-config-dir together is probably not what you want
    Jun 10 19:56:01 openvpn[97690]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
    Jun 10 19:56:02 openvpn[97690]: Control Channel Authentication: using '/var/etc/openvpn/server3.tls-auth' as a OpenVPN static key file
    Jun 10 19:56:02 openvpn[97690]: TCP/UDP: Socket bind failed on local address [AF_INET]192.168.100.10:1194: Address already in use
    Jun 10 19:56:02 openvpn[97690]: Exiting due to fatal error
    Jun 10 19:57:34 openvpn[71425]: OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Apr 8 2015
    Jun 10 19:57:34 openvpn[71425]: library versions: OpenSSL 1.0.1l-freebsd 15 Jan 2015, LZO 2.09
    Jun 10 19:57:34 openvpn[72493]: WARNING: using –duplicate-cn and --client-config-dir together is probably not what you want
    Jun 10 19:57:34 openvpn[72493]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
    Jun 10 19:57:34 openvpn[72493]: Control Channel Authentication: using '/var/etc/openvpn/server3.tls-auth' as a OpenVPN static key file
    Jun 10 19:57:34 openvpn[72493]: TUN/TAP device ovpns3 exists previously, keep at program end
    Jun 10 19:57:34 openvpn[72493]: Cannot open TUN/TAP dev /dev/tun3: Device busy (errno=16)
    Jun 10 19:57:34 openvpn[72493]: Exiting due to fatal error
    Jun 11 16:55:37 openvpn[18413]: OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Apr 8 2015
    Jun 11 16:55:37 openvpn[18413]: library versions: OpenSSL 1.0.1l-freebsd 15 Jan 2015, LZO 2.09
    Jun 11 16:55:37 openvpn[18568]: WARNING: using –duplicate-cn and --client-config-dir together is probably not what you want
    Jun 11 16:55:37 openvpn[18568]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
    Jun 11 16:55:37 openvpn[18568]: Control Channel Authentication: using '/var/etc/openvpn/server3.tls-auth' as a OpenVPN static key file
    Jun 11 16:55:37 openvpn[18568]: TUN/TAP device ovpns3 exists previously, keep at program end
    Jun 11 16:55:37 openvpn[18568]: Cannot open TUN/TAP dev /dev/tun3: Device busy (errno=16)
    Jun 11 16:55:37 openvpn[18568]: Exiting due to fatal error
    Jun 11 16:55:56 openvpn[43935]: OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Apr 8 2015
    Jun 11 16:55:56 openvpn[43935]: library versions: OpenSSL 1.0.1l-freebsd 15 Jan 2015, LZO 2.09
    Jun 11 16:55:56 openvpn[43994]: WARNING: using –duplicate-cn and --client-config-dir together is probably not what you want
    Jun 11 16:55:56 openvpn[43994]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
    Jun 11 16:55:56 openvpn[43994]: Control Channel Authentication: using '/var/etc/openvpn/server3.tls-auth' as a OpenVPN static key file
    Jun 11 16:55:56 openvpn[43994]: TUN/TAP device ovpns3 exists previously, keep at program end
    Jun 11 16:55:56 openvpn[43994]: Cannot open TUN/TAP dev /dev/tun3: Device busy (errno=16)
    Jun 11 16:55:56 openvpn[43994]: Exiting due to fatal error
    Jun 11 16:56:36 openvpn[51772]: OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Apr 8 2015
    Jun 11 16:56:36 openvpn[51772]: library versions: OpenSSL 1.0.1l-freebsd 15 Jan 2015, LZO 2.09
    Jun 11 16:56:36 openvpn[51886]: WARNING: using –duplicate-cn and --client-config-dir together is probably not what you want
    Jun 11 16:56:36 openvpn[51886]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
    Jun 11 16:56:37 openvpn[51886]: Control Channel Authentication: using '/var/etc/openvpn/server3.tls-auth' as a OpenVPN static key file
    Jun 11 16:56:37 openvpn[51886]: TUN/TAP device ovpns3 exists previously, keep at program end
    Jun 11 16:56:37 openvpn[51886]: Cannot open TUN/TAP dev /dev/tun3: Device busy (errno=16)
    Jun 11 16:56:37 openvpn[51886]: Exiting due to fatal error
    Jun 11 16:58:58 openvpn[17428]: OpenVPN 2.3.6 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Apr 8 2015
    Jun 11 16:58:58 openvpn[17428]: library versions: OpenSSL 1.0.1l-freebsd 15 Jan 2015, LZO 2.09
    Jun 11 16:58:58 openvpn[17691]: WARNING: using –duplicate-cn and --client-config-dir together is probably not what you want
    Jun 11 16:58:58 openvpn[17691]: NOTE: the current –script-security setting may allow this configuration to call user-defined scripts
    Jun 11 16:58:59 openvpn[17691]: Control Channel Authentication: using '/var/etc/openvpn/server3.tls-auth' as a OpenVPN static key file
    Jun 11 16:58:59 openvpn[17691]: TUN/TAP device ovpns3 exists previously, keep at program end
    Jun 11 16:58:59 openvpn[17691]: Cannot open TUN/TAP dev /dev/tun3: Device busy (errno=16)
    Jun 11 16:58:59 openvpn[17691]: Exiting due to fatal error



  • This just happened to me as "Socket bind failed on local address [AF_INET]192.168.100.10" following a TWTC Internet outage. The logs indicate that pfsense briefly picked up 192.168.100.10 from the motorola cable modem. The question I have is, why did OpenVPN hang on to it?


Log in to reply