{"action":"created","issue":{"url":"https://api.github.com/repos/schwabe/ics-openvpn/issues/346","repository_url":"https://api.github.com/repos/schwabe/ics-openvpn","labels_url":"https://api.github.com/repos/schwabe/ics-openvpn/issues/346/labels{/name}","comments_url":"https://api.github.com/repos/schwabe/ics-openvpn/issues/346/comments","events_url":"https://api.github.com/repos/schwabe/ics-openvpn/issues/346/events","html_url":"https://github.com/schwabe/ics-openvpn/issues/346","id":74652736,"number":346,"title":"packets leaking","user":{"login":"powerman","id":1354301,"avatar_url":"https://avatars.githubusercontent.com/u/1354301?v=3","gravatar_id":"","url":"https://api.github.com/users/powerman","html_url":"https://github.com/powerman","followers_url":"https://api.github.com/users/powerman/followers","following_url":"https://api.github.com/users/powerman/following{/other_user}","gists_url":"https://api.github.com/users/powerman/gists{/gist_id}","starred_url":"https://api.github.com/users/powerman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/powerman/subscriptions","organizations_url":"https://api.github.com/users/powerman/orgs","repos_url":"https://api.github.com/users/powerman/repos","events_url":"https://api.github.com/users/powerman/events{/privacy}","received_events_url":"https://api.github.com/users/powerman/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-05-09T11:26:31Z","updated_at":"2016-02-08T09:25:33Z","closed_at":"2015-05-28T07:59:53Z","body":"This may be related to #195, but I didn't see OpenVPN reconnection in log.\r\n\r\nI've phone connected by both Wi-Fi and OpenVPN to same router. Wi-Fi uses 192.168.6.x, OpenVPN uses 10.80.77.x. OpenVPN for Android configured to \"Route/IPv4/Default route (route all traffic to VPN)\" (not sure how exactly this option is named in English). Also I've AFWall+, which is configured to allow access to Wi-Fi only for \"OpenVPN for Android\", all other allowed apps has access only to VPN.\r\nI'm using CyanogenMod 11 (4.4.4).\r\n\r\nWith these settings I sometimes see this in router logs:\r\n\r\n> kern.debug: antispoof: IN=eth.wifi OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx SRC=10.80.77.6 DST=10.80.77.1 LEN=40 TOS=0x02 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=2222 DPT=39238 WINDOW=0 RES=0x00 RST URGP=0\r\n\r\nThe \"antispoof\" rule triggered by non-192.168.6.x traffic on Wi-Fi interface. The port 2222 on phone is used by SSHelper (ssh daemon). Also it's strange I got this in router logs in about a minute _after SSHelper stops and exits_."},"comment":{"url":"https://api.github.com/repos/schwabe/ics-openvpn/issues/comments/181270147","html_url":"https://github.com/schwabe/ics-openvpn/issues/346#issuecomment-181270147","issue_url":"https://api.github.com/repos/schwabe/ics-openvpn/issues/346","id":181270147,"user":{"login":"powerman","id":1354301,"avatar_url":"https://avatars.githubusercontent.com/u/1354301?v=3","gravatar_id":"","url":"https://api.github.com/users/powerman","html_url":"https://github.com/powerman","followers_url":"https://api.github.com/users/powerman/followers","following_url":"https://api.github.com/users/powerman/following{/other_user}","gists_url":"https://api.github.com/users/powerman/gists{/gist_id}","starred_url":"https://api.github.com/users/powerman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/powerman/subscriptions","organizations_url":"https://api.github.com/users/powerman/orgs","repos_url":"https://api.github.com/users/powerman/repos","events_url":"https://api.github.com/users/powerman/events{/privacy}","received_events_url":"https://api.github.com/users/powerman/received_events","type":"User","site_admin":false},"created_at":"2016-02-08T09:25:33Z","updated_at":"2016-02-08T09:25:33Z","body":"I've considered possibility of bug in AFWall+, but I see same behaviour with disabled firewall, so this is very unlikely.\r\n\r\nThe TCP RST packets isn't \"generated\" by OpenVPN, they're generated by some other application (actually by linux kernel on behalf of that app) which access internet, then these packets are intercepted by OpenVPN application just like all other packets, but after that some of these packets wasn't wrapped by OpenVPN packet before sending them into tun interface.\r\n\r\nIt looks like bug somewhere between code which intercept original TCP packets which should be sent from phone and code which send packets to tun interface - probably some race condition bug which sometimes result in passing packets from input to output as is, without wrapping them by OpenVPN packet."}}