API tools faq
paste
Advertisement
Guest User

openvpn config

a guest
Sep 7th, 2019
3,076
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 21.06 KB | None | 0 0
raw download clone embed print report
  1. Client output:
  2. root@Kali:~/Downloads# openvpn --config client.conf
  3. Sun Nov 30 11:59:40 2014 OpenVPN 2.2.1 i486-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] [MH] [PF_INET6] [IPv6 payload 20110424-2 (2.2RC2)] built on Jun 19 2013
  4. Sun Nov 30 11:59:40 2014 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
  5. Sun Nov 30 11:59:40 2014 WARNING: file 'vpnclient1.key' is group or others accessible
  6. Sun Nov 30 11:59:40 2014 LZO compression initialized
  7. Sun Nov 30 11:59:40 2014 Control Channel MTU parms [ L:1558 D:138 EF:38 EB:0 ET:0 EL:0 ]
  8. Sun Nov 30 11:59:40 2014 Socket Buffers: R=[163840->131072] S=[163840->131072]
  9. Sun Nov 30 11:59:40 2014 Data Channel MTU parms [ L:1558 D:1450 EF:58 EB:135 ET:0 EL:0 AF:3/1 ]
  10. Sun Nov 30 11:59:40 2014 Local Options hash (VER=V4): '22188c5b'
  11. Sun Nov 30 11:59:40 2014 Expected Remote Options hash (VER=V4): 'a8f55717'
  12. Sun Nov 30 11:59:40 2014 UDPv4 link local: [undef]
  13. Sun Nov 30 11:59:40 2014 UDPv4 link remote: [AF_INET]x.x.x.x:61098
  14. Sun Nov 30 11:59:40 2014 TLS: Initial packet from [AF_INET]x.x.x.x:61098, sid=ec2af233 4431930c
  15. ...
  16. Sun Nov 30 11:59:43 2014 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
  17. Sun Nov 30 11:59:43 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
  18. Sun Nov 30 11:59:43 2014 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
  19. Sun Nov 30 11:59:43 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
  20. Sun Nov 30 11:59:43 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 4096 bit RSA
  21. Sun Nov 30 11:59:43 2014 [...] Peer Connection Initiated with [AF_INET]x.x.x.x:61098
  22. Sun Nov 30 11:59:46 2014 SENT CONTROL [..._VPN_Access]: 'PUSH_REQUEST' (status=1)
  23. Sun Nov 30 11:59:46 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
  24. Sun Nov 30 11:59:46 2014 OPTIONS IMPORT: timers and/or timeouts modified
  25. Sun Nov 30 11:59:46 2014 OPTIONS IMPORT: --ifconfig/up options modified
  26. Sun Nov 30 11:59:46 2014 OPTIONS IMPORT: route options modified
  27. Sun Nov 30 11:59:46 2014 ROUTE default_gateway=192.168.2.1
  28. Sun Nov 30 11:59:46 2014 TUN/TAP device tun0 opened
  29. Sun Nov 30 11:59:46 2014 TUN/TAP TX queue length set to 100
  30. Sun Nov 30 11:59:46 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
  31. Sun Nov 30 11:59:46 2014 /sbin/ifconfig tun0 10.8.0.6 pointopoint 10.8.0.5 mtu 1500
  32. Sun Nov 30 11:59:46 2014 /sbin/route add -net x.x.x.x netmask 255.255.255.255 gw 192.168.2.1
  33. Sun Nov 30 11:59:46 2014 /sbin/route add -net 0.0.0.0 netmask 128.0.0.0 gw 10.8.0.5
  34. Sun Nov 30 11:59:46 2014 /sbin/route add -net 128.0.0.0 netmask 128.0.0.0 gw 10.8.0.5
  35. Sun Nov 30 11:59:46 2014 /sbin/route add -net 10.8.0.1 netmask 255.255.255.255 gw 10.8.0.5
  36. Sun Nov 30 11:59:46 2014 Initialization Sequence Completed
  37.  
  38. Client config:
  39. root@Kali:~/Downloads# cat client.conf
  40. ##############################################
  41. # Sample client-side OpenVPN 2.0 config file #
  42. # for connecting to multi-client server. #
  43. # #
  44. # This configuration can be used by multiple #
  45. # clients, however each client should have #
  46. # its own cert and key files. #
  47. # #
  48. # On Windows, you might want to rename this #
  49. # file so it has a .ovpn extension #
  50. ##############################################
  51.  
  52. # Specify that we are a client and that we
  53. # will be pulling certain config file directives
  54. # from the server.
  55. client
  56.  
  57. # Use the same setting as you are using on
  58. # the server.
  59. # On most systems, the VPN will not function
  60. # unless you partially or fully disable
  61. # the firewall for the TUN/TAP interface.
  62. ;dev tap
  63. dev tun
  64.  
  65. # Windows needs the TAP-Win32 adapter name
  66. # from the Network Connections panel
  67. # if you have more than one. On XP SP2,
  68. # you may need to disable the firewall
  69. # for the TAP adapter.
  70. ;dev-node MyTap
  71.  
  72. # Are we connecting to a TCP or
  73. # UDP server? Use the same setting as
  74. # on the server.
  75. ;proto tcp
  76. proto udp
  77.  
  78. # The hostname/IP and port of the server.
  79. # You can have multiple remote entries
  80. # to load balance between the servers.
  81. remote x.x.x.x 61098
  82. ;remote my-server-2 1194
  83.  
  84. # Choose a random host from the remote
  85. # list for load-balancing. Otherwise
  86. # try hosts in the order specified.
  87. ;remote-random
  88.  
  89. # Keep trying indefinitely to resolve the
  90. # host name of the OpenVPN server. Very useful
  91. # on machines which are not permanently connected
  92. # to the internet such as laptops.
  93. resolv-retry infinite
  94.  
  95. # Most clients don't need to bind to
  96. # a specific local port number.
  97. nobind
  98.  
  99. # Downgrade privileges after initialization (non-Windows only)
  100. ;user nobody
  101. ;group nogroup
  102.  
  103. # Try to preserve some state across restarts.
  104. persist-key
  105. persist-tun
  106.  
  107. # If you are connecting through an
  108. # HTTP proxy to reach the actual OpenVPN
  109. # server, put the proxy server/IP and
  110. # port number here. See the man page
  111. # if your proxy server requires
  112. # authentication.
  113. ;http-proxy-retry # retry on connection failures
  114. ;http-proxy [proxy server] [proxy port #]
  115.  
  116. # Wireless networks often produce a lot
  117. # of duplicate packets. Set this flag
  118. # to silence duplicate packet warnings.
  119. ;mute-replay-warnings
  120.  
  121. # SSL/TLS parms.
  122. # See the server config file for more
  123. # description. It's best to use
  124. # a separate .crt/.key file pair
  125. # for each client. A single ca
  126. # file can be used for all clients.
  127. ca ca.crt
  128. cert vpnclient1.crt
  129. key vpnclient1.key
  130.  
  131. # Verify server certificate by checking
  132. # that the certicate has the nsCertType
  133. # field set to "server". This is an
  134. # important precaution to protect against
  135. # a potential attack discussed here:
  136. # http://openvpn.net/howto.html#mitm
  137. #
  138. # To use this feature, you will need to generate
  139. # your server certificates with the nsCertType
  140. # field set to "server". The build-key-server
  141. # script in the easy-rsa folder will do this.
  142. ns-cert-type server
  143.  
  144. # If a tls-auth key is used on the server
  145. # then every client must also have the key.
  146. ;tls-auth ta.key 1
  147.  
  148. # Select a cryptographic cipher.
  149. # If the cipher option is used on the server
  150. # then you must also specify it here.
  151. ;cipher x
  152. cipher AES-256-CBC
  153. # Enable compression on the VPN link.
  154. # Don't enable this unless it is also
  155. # enabled in the server config file.
  156. comp-lzo
  157.  
  158. # Set log file verbosity.
  159. verb 3
  160.  
  161. # Silence repeating messages
  162. ;mute 20
  163.  
  164. Client interfaces and routes:
  165. root@Kali:~/Downloads# ifconfig
  166. eth0 Link encap:Ethernet HWaddr 08:00:27:d6:e5:53
  167. inet addr:192.168.2.100 Bcast:192.168.2.255 Mask:255.255.255.0
  168. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  169. RX packets:730579 errors:0 dropped:0 overruns:0 frame:0
  170. TX packets:840542 errors:0 dropped:0 overruns:0 carrier:0
  171. collisions:0 txqueuelen:1000
  172. RX bytes:948096029 (904.1 MiB) TX bytes:244217840 (232.9 MiB)
  173.  
  174. lo Link encap:Local Loopback
  175. inet addr:127.0.0.1 Mask:255.0.0.0
  176. UP LOOPBACK RUNNING MTU:65536 Metric:1
  177. RX packets:733355 errors:0 dropped:0 overruns:0 frame:0
  178. TX packets:733355 errors:0 dropped:0 overruns:0 carrier:0
  179. collisions:0 txqueuelen:0
  180. RX bytes:54276427 (51.7 MiB) TX bytes:54276427 (51.7 MiB)
  181.  
  182. tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
  183. inet addr:10.8.0.6 P-t-P:10.8.0.5 Mask:255.255.255.255
  184. UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
  185. RX packets:14 errors:0 dropped:0 overruns:0 frame:0
  186. TX packets:159 errors:0 dropped:0 overruns:0 carrier:0
  187. collisions:0 txqueuelen:100
  188. RX bytes:1200 (1.1 KiB) TX bytes:10710 (10.4 KiB)
  189.  
  190. root@Kali:~/Downloads# route -n
  191. Kernel IP routing table
  192. Destination Gateway Genmask Flags Metric Ref Use Iface
  193. 0.0.0.0 10.8.0.5 128.0.0.0 UG 0 0 0 tun0
  194. 0.0.0.0 192.168.2.1 0.0.0.0 UG 0 0 0 eth0
  195. 10.8.0.1 10.8.0.5 255.255.255.255 UGH 0 0 0 tun0
  196. 10.8.0.5 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
  197. 128.0.0.0 10.8.0.5 128.0.0.0 UG 0 0 0 tun0
  198. x.x.x.x 192.168.2.1 255.255.255.255 UGH 0 0 0 eth0
  199. 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
  200.  
  201. Server routes and interfaces:
  202.  
  203. root@MainServer:/etc/openvpn# cat /proc/sys/net/ipv4/ip_forward
  204. 1
  205. root@MainServer:/etc/openvpn# iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQ UERADE
  206. root@MainServer:/etc/openvpn# ifconfig
  207. eth0 Link encap:Ethernet HWaddr 04:01:28:ce:fd:01
  208. inet addr:x.x.x.x Bcast:162.243.150.255 Mask:255.255.255.0
  209. inet6 addr: fe80::601:28ff:fece:fd01/64 Scope:Link
  210. UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  211. RX packets:15420801 errors:0 dropped:0 overruns:0 frame:0
  212. TX packets:13965057 errors:0 dropped:0 overruns:0 carrier:0
  213. collisions:0 txqueuelen:1000
  214. RX bytes:16312837213 (16.3 GB) TX bytes:17273432904 (17.2 GB)
  215.  
  216. lo Link encap:Local Loopback
  217. inet addr:127.0.0.1 Mask:255.0.0.0
  218. inet6 addr: ::1/128 Scope:Host
  219. UP LOOPBACK RUNNING MTU:65536 Metric:1
  220. RX packets:6808 errors:0 dropped:0 overruns:0 frame:0
  221. TX packets:6808 errors:0 dropped:0 overruns:0 carrier:0
  222. collisions:0 txqueuelen:0
  223. RX bytes:2158598 (2.1 MB) TX bytes:2158598 (2.1 MB)
  224.  
  225. tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
  226. inet addr:10.8.0.1 P-t-P:10.8.0.2 Mask:255.255.255.255
  227. UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
  228. RX packets:213 errors:0 dropped:0 overruns:0 frame:0
  229. TX packets:23 errors:0 dropped:0 overruns:0 carrier:0
  230. collisions:0 txqueuelen:100
  231. RX bytes:13116 (13.1 KB) TX bytes:1968 (1.9 KB)
  232.  
  233. root@MainServer:/etc/openvpn# route -n
  234. Kernel IP routing table
  235. Destination Gateway Genmask Flags Metric Ref Use Iface
  236. 0.0.0.0 162.243.150.1 0.0.0.0 UG 0 0 0 eth0
  237. 10.8.0.0 10.8.0.2 255.255.255.0 UG 0 0 0 tun0
  238. 10.8.0.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
  239. 162.243.150.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
  240.  
  241. Server config:
  242. root@MainServer:/etc/openvpn# cat server.conf
  243. #################################################
  244. # Sample OpenVPN 2.0 config file for #
  245. # multi-client server. #
  246. # #
  247. # This file is for the server side #
  248. # of a many-clients <-> one-server #
  249. # OpenVPN configuration. #
  250. # #
  251. # OpenVPN also supports #
  252. # single-machine <-> single-machine #
  253. # configurations (See the Examples page #
  254. # on the web site for more info). #
  255. # #
  256. # This config should work on Windows #
  257. # or Linux/BSD systems. Remember on #
  258. # Windows to quote pathnames and use #
  259. # double backslashes, e.g.: #
  260. # "C:\\Program Files\\OpenVPN\\config\\foo.key" #
  261. # #
  262. # Comments are preceded with '#' or ';' #
  263. #################################################
  264.  
  265. # Which local IP address should OpenVPN
  266. # listen on? (optional)
  267. ;local a.b.c.d
  268.  
  269. # Which TCP/UDP port should OpenVPN listen on?
  270. # If you want to run multiple OpenVPN instances
  271. # on the same machine, use a different port
  272. # number for each one. You will need to
  273. # open up this port on your firewall.
  274. port 61098
  275.  
  276. # TCP or UDP server?
  277. ;proto tcp
  278. proto udp
  279.  
  280. # "dev tun" will create a routed IP tunnel,
  281. # "dev tap" will create an ethernet tunnel.
  282. # Use "dev tap0" if you are ethernet bridging
  283. # and have precreated a tap0 virtual interface
  284. # and bridged it with your ethernet interface.
  285. # If you want to control access policies
  286. # over the VPN, you must create firewall
  287. # rules for the the TUN/TAP interface.
  288. # On non-Windows systems, you can give
  289. # an explicit unit number, such as tun0.
  290. # On Windows, use "dev-node" for this.
  291. # On most systems, the VPN will not function
  292. # unless you partially or fully disable
  293. # the firewall for the TUN/TAP interface.
  294. ;dev tap
  295. dev tun
  296.  
  297. # Windows needs the TAP-Win32 adapter name
  298. # from the Network Connections panel if you
  299. # have more than one. On XP SP2 or higher,
  300. # you may need to selectively disable the
  301. # Windows firewall for the TAP adapter.
  302. # Non-Windows systems usually don't need this.
  303. ;dev-node MyTap
  304.  
  305. # SSL/TLS root certificate (ca), certificate
  306. # (cert), and private key (key). Each client
  307. # and the server must have their own cert and
  308. # key file. The server and all clients will
  309. # use the same ca file.
  310. #
  311. # See the "easy-rsa" directory for a series
  312. # of scripts for generating RSA certificates
  313. # and private keys. Remember to use
  314. # a unique Common Name for the server
  315. # and each of the client certificates.
  316. #
  317. # Any X509 key management system can be used.
  318. # OpenVPN can also use a PKCS #12 formatted key file
  319. # (see "pkcs12" directive in man page).
  320. ca ca.crt
  321. cert vpnserver.crt
  322. key vpnserver.key # This file should be kept secret
  323. # Diffie hellman parameters.
  324. # Generate your own with:
  325. # openssl dhparam -out dh1024.pem 1024
  326. # Substitute 2048 for 1024 if you are using
  327. # 2048 bit keys.
  328. dh dh4096.pem
  329.  
  330. # Configure server mode and supply a VPN subnet
  331. # for OpenVPN to draw client addresses from.
  332. # The server will take 10.8.0.1 for itself,
  333. # the rest will be made available to clients.
  334. # Each client will be able to reach the server
  335. # on 10.8.0.1. Comment this line out if you are
  336. # ethernet bridging. See the man page for more info.
  337. server 10.8.0.0 255.255.255.0
  338.  
  339. # Maintain a record of client <-> virtual IP address
  340. # associations in this file. If OpenVPN goes down or
  341. # is restarted, reconnecting clients can be assigned
  342. # the same virtual IP address from the pool that was
  343. # previously assigned.
  344. ifconfig-pool-persist ipp.txt
  345.  
  346. # Configure server mode for ethernet bridging.
  347. # You must first use your OS's bridging capability
  348. # to bridge the TAP interface with the ethernet
  349. # NIC interface. Then you must manually set the
  350. # IP/netmask on the bridge interface, here we
  351. # assume 10.8.0.4/255.255.255.0. Finally we
  352. # must set aside an IP range in this subnet
  353. # (start=10.8.0.50 end=10.8.0.100) to allocate
  354. # to connecting clients. Leave this line commented
  355. # out unless you are ethernet bridging.
  356. ;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
  357.  
  358. # Configure server mode for ethernet bridging
  359. # using a DHCP-proxy, where clients talk
  360. # to the OpenVPN server-side DHCP server
  361. # to receive their IP address allocation
  362. # and DNS server addresses. You must first use
  363. # your OS's bridging capability to bridge the TAP
  364. # interface with the ethernet NIC interface.
  365. # Note: this mode only works on clients (such as
  366. # Windows), where the client-side TAP adapter is
  367. # bound to a DHCP client.
  368. ;server-bridge
  369.  
  370. # Push routes to the client to allow it
  371. # to reach other private subnets behind
  372. # the server. Remember that these
  373. # private subnets will also need
  374. # to know to route the OpenVPN client
  375. # address pool (10.8.0.0/255.255.255.0)
  376. # back to the OpenVPN server.
  377. ;push "route 192.168.10.0 255.255.255.0"
  378. ;push "route 192.168.20.0 255.255.255.0"
  379.  
  380. # To assign specific IP addresses to specific
  381. # clients or if a connecting client has a private
  382. # subnet behind it that should also have VPN access,
  383. # use the subdirectory "ccd" for client-specific
  384. # configuration files (see man page for more info).
  385.  
  386. # EXAMPLE: Suppose the client
  387. # having the certificate common name "Thelonious"
  388. # also has a small subnet behind his connecting
  389. # machine, such as 192.168.40.128/255.255.255.248.
  390. # First, uncomment out these lines:
  391. ;client-config-dir ccd
  392. ;route 192.168.40.128 255.255.255.248
  393. # Then create a file ccd/Thelonious with this line:
  394. # iroute 192.168.40.128 255.255.255.248
  395. # This will allow Thelonious' private subnet to
  396. # access the VPN. This example will only work
  397. # if you are routing, not bridging, i.e. you are
  398. # using "dev tun" and "server" directives.
  399.  
  400. # EXAMPLE: Suppose you want to give
  401. # Thelonious a fixed VPN IP address of 10.9.0.1.
  402. # First uncomment out these lines:
  403. ;client-config-dir ccd
  404. ;route 10.9.0.0 255.255.255.252
  405. # Then add this line to ccd/Thelonious:
  406. # ifconfig-push 10.9.0.1 10.9.0.2
  407.  
  408. # Suppose that you want to enable different
  409. # firewall access policies for different groups
  410. # of clients. There are two methods:
  411. # (1) Run multiple OpenVPN daemons, one for each
  412. # group, and firewall the TUN/TAP interface
  413. # for each group/daemon appropriately.
  414. # (2) (Advanced) Create a script to dynamically
  415. # modify the firewall in response to access
  416. # from different clients. See man
  417. # page for more info on learn-address script.
  418. ;learn-address ./script
  419.  
  420. # If enabled, this directive will configure
  421. # all clients to redirect their default
  422. # network gateway through the VPN, causing
  423. # all IP traffic such as web browsing and
  424. # and DNS lookups to go through the VPN
  425. # (The OpenVPN server machine may need to NAT
  426. # or bridge the TUN/TAP interface to the internet
  427. # in order for this to work properly).
  428. push "redirect-gateway def1 bypass-dhcp"
  429. ;push "route 10.8.0.0 255.255.255.0"
  430. # Certain Windows-specific network settings
  431. # can be pushed to clients, such as DNS
  432. # or WINS server addresses. CAVEAT:
  433. # http://openvpn.net/faq.html#dhcpcaveats
  434. # The addresses below refer to the public
  435. # DNS servers provided by opendns.com.
  436. ;push "dhcp-option DNS 8.8.8.8"
  437. ;push "dhcp-option DNS 8.8.4.4"
  438.  
  439. # Uncomment this directive to allow different
  440. # clients to be able to "see" each other.
  441. # By default, clients will only see the server.
  442. # To force clients to only see the server, you
  443. # will also need to appropriately firewall the
  444. # server's TUN/TAP interface.
  445. ;client-to-client
  446.  
  447. # Uncomment this directive if multiple clients
  448. # might connect with the same certificate/key
  449. # files or common names. This is recommended
  450. # only for testing purposes. For production use,
  451. # each client should have its own certificate/key
  452. # pair.
  453. #
  454. # IF YOU HAVE NOT GENERATED INDIVIDUAL
  455. # CERTIFICATE/KEY PAIRS FOR EACH CLIENT,
  456. # EACH HAVING ITS OWN UNIQUE "COMMON NAME",
  457. # UNCOMMENT THIS LINE OUT.
  458. ;duplicate-cn
  459.  
  460. # The keepalive directive causes ping-like
  461. # messages to be sent back and forth over
  462. # the link so that each side knows when
  463. # the other side has gone down.
  464. # Ping every 10 seconds, assume that remote
  465. # peer is down if no ping received during
  466. # a 120 second time period.
  467. keepalive 10 120
  468.  
  469. # For extra security beyond that provided
  470. # by SSL/TLS, create an "HMAC firewall"
  471. # to help block DoS attacks and UDP port flooding.
  472. #
  473. # Generate with:
  474. # openvpn --genkey --secret ta.key
  475. #
  476. # The server and each client must have
  477. # a copy of this key.
  478. # The second parameter should be '0'
  479. # on the server and '1' on the clients.
  480. ;tls-auth ta.key 0 # This file is secret
  481.  
  482. # Select a cryptographic cipher.
  483. # This config item must be copied to
  484. # the client config file as well.
  485. ;cipher BF-CBC # Blowfish (default)
  486. ;cipher AES-128-CBC # AES
  487. ;cipher DES-EDE3-CBC # Triple-DES
  488. cipher AES-256-CBC
  489. # Enable compression on the VPN link.
  490. # If you enable it here, you must also
  491. # enable it in the client config file.
  492. comp-lzo
  493.  
  494. # The maximum number of concurrently connected
  495. # clients we want to allow.
  496. ;max-clients 100
  497.  
  498. # It's a good idea to reduce the OpenVPN
  499. # daemon's privileges after initialization.
  500. #
  501. # You can uncomment this out on
  502. # non-Windows systems.
  503. user nobody
  504. group nogroup
  505.  
  506. # The persist options will try to avoid
  507. # accessing certain resources on restart
  508. # that may no longer be accessible because
  509. # of the privilege downgrade.
  510. persist-key
  511. persist-tun
  512.  
  513. # Output a short status file showing
  514. # current connections, truncated
  515. # and rewritten every minute.
  516. status openvpn-status.log
  517.  
  518. # By default, log messages will go to the syslog (or
  519. # on Windows, if running as a service, they will go to
  520. # the "\Program Files\OpenVPN\log" directory).
  521. # Use log or log-append to override this default.
  522. # "log" will truncate the log file on OpenVPN startup,
  523. # while "log-append" will append to it. Use one
  524. # or the other (but not both).
  525. ;log openvpn.log
  526. ;log-append openvpn.log
  527.  
  528. # Set the appropriate level of log
  529. # file verbosity.
  530. #
  531. # 0 is silent, except for fatal errors
  532. # 4 is reasonable for general usage
  533. # 5 and 6 can help to debug connection problems
  534. # 9 is extremely verbose
  535. verb 3
  536.  
  537. # Silence repeating messages. At most 20
  538. # sequential messages of the same message
  539. # category will be output to the log.
  540. ;mute 20
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!