Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Some sites not loading properly using OpenVPN...
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Some sites not loading properly using OpenVPN...

FreekFreek Member
edited May 2012 in Help

Some sites, like Kotaku and Lifehacker, don't load properly when using OpenVPN. They either keep loading or show up incomplete (no css, half of the page, no images).
I wonder what this could be causing, as it seems to be specific for those kind of blogs. All other sites load perfect.

Tips are appreciated! Thanks!

«1

Comments

  • rds100rds100 Member

    What about hotmail and microsoft.com, do these load?

  • MrAndroidMrAndroid Member
    edited May 2012

    Clear your DNS cache.

    I had a similar issue, so I cleared the DNS cache whenever I connect and no issues.

  • KuJoeKuJoe Member, Host Rep
    edited May 2012

    The sites are most likely using a proxy checking script. I know that I can connect to WHT from my home network but if I VPN into my home network and then try to view WHT it always times out. Same with a few other sites.

  • @KuJoe I have no problem accessing WHT over openvpn

  • rds100rds100 Member

    If some stupid network administrators are blocking icmp, this might be the reason. Path MTU discovery is broken and sites behind braindead firewalls appear broken.

  • FranciscoFrancisco Top Host, Host Rep, Veteran

    MTU is usually the problem :)

    Try something like 1400.

    Francisco

  • KuJoeKuJoe Member, Host Rep

    @dmmcintyre3 said: I have no problem accessing WHT over openvpn

    I can access it from my BuyVM VPN and my SD VPN, just not my home VPN and when we were in GoRACK that VPN didn't work either.

  • FreekFreek Member

    @rds100 Microsoft and Hotmail load properly
    @Daniel clearing my DNS cache sadly did not solve the problem
    @KuJoe WHT loads properly too
    @Francisco I tried changing the MTU in the server config and the client config, but it keeps saying MTU 1500. Where should one normally change the MTU size in?

    BTW this is what I see:
    http://i.imgur.com/haXXa.png

    Thanks!

  • rds100rds100 Member

    @Kujoe try if this helps:


    iptables -t mangle -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu

    To be executed on the VPN server.
  • FranciscoFrancisco Top Host, Host Rep, Veteran

    @Freek said: @Francisco I tried changing the MTU in the server config and the client config, but it keeps saying MTU 1500. Where should one normally change the MTU size in?

    you want to set tun-mtu

    Francisco

  • FreekFreek Member

    @Francisco I've set 'tun-mtu 1400' in both the server.conf and client.conf, yet while connecting it says 'TAP-Win32 MTU=1500' in the OpenVPN GUI Log output....

  • vedranvedran Veteran

    Restart openvpn server?

  • FRCoreyFRCorey Member

    Yeah MTU can be a pita, but I doubt those sites are ignoring path mtu discovery.

    Wireshark the connection :)

  • KuJoeKuJoe Member, Host Rep

    @rds100 said: try if this helps

    Thanks, unfortunately I don't want to execute anything on my router for fear it will impact my home network. But thanks. :)

  • You should be able to back up your router config in case you break things.

  • KuJoeKuJoe Member, Host Rep

    @SonicVPS I can, but don't really want to risk it. It works for what I need it to. :)

  • netomxnetomx Moderator, Veteran

    I have the same issue but with PPTP

  • kendidkendid Veteran

    +1 same problem -- exactly!

  • 1q11q1 Member
    edited May 2012

    append these lines to your openvpn server configuration
    link-mtu 1402 mssfix 1356

    for PPTP, add this line to /etc/ppp/options
    mtu 1402

    and do this iptables rule
    iptables -I FORWARD -p tcp -syn -i ppp+ -j TCPMSS -set-mss 1356

  • FreekFreek Member
    edited May 2012

    @vedran: I've restarted the OpenVPN server, no joy :(
    @1q1 Can't do it now as I'm uploading a bunch of files. Will do so tomorrow and report back. Thanks!

  • netomxnetomx Moderator, Veteran

    @1q1 said: for PPTP, add this line to /etc/ppp/options

    mtu 1402

    and do this iptables rule

    iptables -I FORWARD -p tcp -syn -i ppp+ -j TCPMSS -set-mss 1356

    will try tonight :)

  • netomxnetomx Moderator, Veteran

    @netomx said: iptables -I FORWARD -p tcp -syn -i ppp+ -j TCPMSS -set-mss 1356

    iptables -I FORWARD -p tcp -syn -i ppp+ -j TCPMSS -set-mss 1356
    iptables v1.4.8: multiple -s flags not allowed
    Try `iptables -h' or 'iptables --help' for more information.
    
  • rds100rds100 Member

    @netomx put it in the mangle table - iptables -t mangle -I FORWARD ...

  • KuroKuro Member
    iptables -I FORWARD -p tcp -syn -i ppp+ -j TCPMSS -set-mss 1356
    iptables v1.4.8: multiple -s flags not allowed
    Try `iptables -h' or 'iptables --help' for more information.

    I think -syn and -set-mss should be --syn and --set-mss ;)

    Thanked by 11q1
  • kendidkendid Veteran

    Tried all these suggestions with no success... Anyone else get it going?

  • FreekFreek Member

    @1q1 Sadly it made no difference on my OpenVPN server.. Ofcourse I rebooted it and reconnected, but still no joy :(

  • 1q11q1 Member

    @netomx said: iptables -I FORWARD -p tcp -syn -i ppp+ -j TCPMSS -set-mss 1356 iptables v1.4.8: multiple -s flags not allowed Try `iptables -h' or 'iptables --help' for more information.

    Do as kuro said.

    @Freek said: @1q1 Sadly it made no difference on my OpenVPN server.. Ofcourse I rebooted it and reconnected, but still no joy :(

    Try install firebug firefox addons to analyze the undelivered contents.
    What happened if you use other browser?

  • kendidkendid Veteran

    I'm using Chrome at the moment -- just had it load once, a couple of pictures never loaded... Hit reload and got that text page thing again. Third time nothing loaded (blank page) except for the title at the top...

    Internet explorer - "Internet explorer can not display this webpage" -- although for a moment on the tab it displays "Lifehacker, tips etc...." then the 'can not display error'...

  • 1q11q1 Member
    edited May 2012

    @kendid said:

    Internet explorer - "Internet explorer can not display this webpage" -- although for a moment on the tab it displays "Lifehacker, tips etc...." then the 'can not display error'...

  • @Freek said: Ofcourse I rebooted it

    if you rebooted the server the iptables rules would be reset on boot.

Sign In or Register to comment.