Linux ip -6 addr add failed from 380.65_4 Merlin firmware

[William Hudson]

I've used .opvn config files for a few VPN suppliers without too much trouble. But when trying to use the latest files from HMA, I am getting the above error message. The log is below and the config file in question is attached, although it is the same for the several different UDP .ovpn files I've tried from them. Note that IPV6 is disabled on my ASUS RT-AC88U router.

May 5 14:56:10 openvpn[1211]: OpenVPN 2.4.0 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD] built on Mar 29 2017
May 5 14:56:10 openvpn[1211]: library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.08
May 5 14:56:10 openvpn[1212]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 5 14:56:10 openvpn[1212]: TCP/UDP: Preserving recently used remote address: [AF_INET]77.234.43.74:553
May 5 14:56:10 openvpn[1212]: Socket Buffers: R=[122880->122880] S=[122880->122880]
May 5 14:56:10 openvpn[1212]: UDP link local: (not bound)
May 5 14:56:10 openvpn[1212]: UDP link remote: [AF_INET]77.234.43.74:553
May 5 14:56:10 openvpn[1212]: TLS: Initial packet from [AF_INET]77.234.43.74:553, sid=18d272e0 8ef7e0eb
May 5 14:56:10 openvpn[1212]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
May 5 14:56:10 openvpn[1212]: VERIFY OK: depth=1, C=UK, ST=London, L=London, O=Privax Ltd, OU=HMA Pro VPN, CN=hidemyass.com, [email protected]
May 5 14:56:10 openvpn[1212]: VERIFY OK: nsCertType=SERVER
May 5 14:56:10 openvpn[1212]: VERIFY OK: depth=0, C=UK, ST=London, L=London, O=Privax Ltd, OU=HMA Pro VPN, CN=server, [email protected]
May 5 14:56:11 openvpn[1212]: Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
May 5 14:56:11 openvpn[1212]: [server] Peer Connection Initiated with [AF_INET]77.234.43.74:553
May 5 14:56:12 openvpn[1212]: SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
May 5 14:56:12 openvpn[1212]: PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 100.120.0.1,redirect-gateway def1,ping 9,ping-restart 30,explicit-exit-notify 1,route-gateway 100.120.173.1,topology subnet,redirect-gateway def1,ifconfig-ipv6 2001:db8:123::2/64 2001:db8:123::1,route-ipv6 2000::/3 2001:db8:123::1,explicit-exit-notify 2,ifconfig 100.120.173.7 255.255.255.128'
May 5 14:56:12 openvpn[1212]: Option 'explicit-exit-notify' in [PUSH-OPTIONS]:5 is ignored by previous <connection> blocks
May 5 14:56:12 openvpn[1212]: Option 'explicit-exit-notify' in [PUSH-OPTIONS]:11 is ignored by previous <connection> blocks
May 5 14:56:12 openvpn[1212]: OPTIONS IMPORT: timers and/or timeouts modified
May 5 14:56:12 openvpn[1212]: OPTIONS IMPORT: explicit notify parm(s) modified
May 5 14:56:12 openvpn[1212]: OPTIONS IMPORT: --ifconfig/up options modified
May 5 14:56:12 openvpn[1212]: OPTIONS IMPORT: route options modified
May 5 14:56:12 openvpn[1212]: OPTIONS IMPORT: route-related options modified
May 5 14:56:12 openvpn[1212]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
May 5 14:56:12 openvpn[1212]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
May 5 14:56:12 openvpn[1212]: Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
May 5 14:56:12 openvpn[1212]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
May 5 14:56:12 openvpn[1212]: Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
May 5 14:56:12 openvpn[1212]: GDG6: remote_host_ipv6=n/a
May 5 14:56:12 openvpn[1212]: TUN/TAP device tun12 opened
May 5 14:56:12 openvpn[1212]: TUN/TAP TX queue length set to 100
May 5 14:56:12 openvpn[1212]: do_ifconfig, tt->did_ifconfig_ipv6_setup=1
May 5 14:56:12 openvpn[1212]: /usr/sbin/ip link set dev tun12 up mtu 1500
May 5 14:56:12 openvpn[1212]: /usr/sbin/ip addr add dev tun12 100.120.173.7/25 broadcast 100.120.173.127
May 5 14:56:12 openvpn[1212]: /usr/sbin/ip -6 addr add 2001:db8:123::2/64 dev tun12
May 5 14:56:12 openvpn[1212]: Linux ip -6 addr add failed: external program exited with error status: 2
May 5 14:56:12 openvpn[1212]: Exiting due to fatal error

William

 

[William Hudson]

Did some digging and found the solution myself. It might be useful for other HMA users, though. Add this line to the Custom Configuration of the OpenVPN client page:

• pull-filter ignore "ifconfig-ipv6"

 

[Martineau]

May 5 14:56:12 openvpn[1212]: Linux ip -6 addr add failed: external program exited with error status: 2
May 5 14:56:12 openvpn[1212]: Exiting due to fatal error

William

https://www.snbforums.com/threads/release-asuswrt-merlin-380-65-is-now-available.37295/

Apply the two directives shown on the page

 

[William Hudson]

Thanks. In my case, just the first fixed it.

 

[dawgfaneff]

Chiming in way late...I followed Mullvads instructions, but had same issue until adding "pull-filter ignore "ifconfig-ipv6". thanks!