Re: [Openvpn-users] Hardening an OpenVPN server

2023-08-11 Thread David Sommerseth
On 10/08/2023 21:44, Jason Long via Openvpn-users wrote: [...snip...] Hello, I see. Can you show me a good article about hardening an OpenVPN server on Linux? The best hardening trick you can do to OpenVPN: Use tls-crypt together with UDP With this setup, port scanners will not

Re: [Openvpn-users] What are these three *.deb packages and how do I use them? They are for version 2.6.5 and Debian 12/Bookworm

2023-08-11 Thread Gert Doering
Hi, seems nobody has replied to this question yet... On Fri, Jun 23, 2023 at 03:01:58AM +0200, Stella Ashburne wrote: > Firstly, I wish to thank you for giving us OpenVPN 2.6.5. > > Secondly I have a few questions about the *.deb packages for Debian 12 > (bookworm). They are: > > (A) After nav

Re: [Openvpn-users] Hardening an OpenVPN server

2023-08-11 Thread Jason Long via Openvpn-users
On 10/08/2023 21:44, Jason Long via Openvpn-users wrote: [...snip...] >    Hello, >    I see. Can you show me a good article about hardening an OpenVPN >    server on Linux? The best hardening trick you can do to OpenVPN:  Use tls-crypt together with UDP With this setup, port scanners will n

[Openvpn-users] OpenVPN vs WireGuard

2023-08-11 Thread Jason Long via Openvpn-users
Hello,Is it true that WireGuard is safer and faster than OpenVPN? Thank you.___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users

[Openvpn-users] Cannot pre-load keyfile (ta.key)

2023-08-11 Thread Jason Long via Openvpn-users
Hello, I added "tls-crypt ta.key 0" and "data-cipher AES-256-GCM" to my Server.conf and "tls-crypt ta.key 1" and "data-cipher AES-256-GCM" to my Client.conf. Client.ovpn is: client dev tun20 proto udp remote 192.168.1.20 2000                 resolv-retry infinite nobind persist-key persist-tun c

[Openvpn-users] I set the local statement and I got Connection reset by peer (WSAECONNRESET) (fd=ec, code=10054)

2023-08-11 Thread Jason Long via Openvpn-users
Hello, I added a virtual IP to my OpenVPN NIC as below: ... enp0s3:1: flags=4163  mtu 1500         inet 20.1.1.20  netmask 255.0.0.0  broadcast 20.255.255.255         ether 08:00:27:ed:b4:7c  txqueuelen 1000  (Ethernet) ... Then, I added the following line to my Server.conf file: local 20.1.1.20