Need to set up logging to appease my country

[Thebluesky]

Hi guys,

I'm creating a free VPN that may be used by many people in an education setting. As per my country laws, I need to setup logging for VPN so to protect myself, I need it done . I'm still in the learning stage in networking, linux, general computer that goes beyond day to day usage.

A few requests/questions

Firstly, what is the path to the OpenVpn config file on linux servers?

Would changing the value in the config file then restart server make the setting take effect without changing any client sided info/.opvn files?

The verb level is currently set at 3 (i used a script to setup my OpenVpn and it's set by default)

What do i need to change or add if I want OpenVPN to keep logs on traffic usage on people who connects (or at least w/e is enough to satisfy the authorities just in case of something).

Does the log overwrite itself over time?

I want the logs to be kept for 8 months at least so anyway to do that?

Thanks so much for any help in this regards

[Thebluesky]

Cant seem to find the edit button so i'll post again.

I found the server.config and this is what's in it. If anyone knows what i need to modify/add/delete to achieve the result I want, please let me know!

Code: Select all

port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify crl.pem

[TinCanTech]

Start here:
HOWTO: For OpenVPN Community Edition

Expect a steep learning curve.

[Thebluesky]

Start here:
HOWTO: For OpenVPN Community Edition

Expect a steep learning curve.

Thank you for the reply, however i can not pin point to the topic that pertains to my specific need to retain logs and the level of details of log.

[TinCanTech]

See --log, --log-append & --verb in The Manual v24x

Note:

• Openvpn does not record client activity other than data usage totals.
  If you want to record other client activity you must use other tools.
  eg: Server firewall.

[Thebluesky]

See --log, --log-append & --verb in The Manual v24x

Note:

• Openvpn does not record client activity other than data usage totals.
  If you want to record other client activity you must use other tools.
  eg: Server firewall.

Is there a way to keep all or specify a time for how long to keep the verb logs?

[TinCanTech]

tincanteksup <at> gmail