Hello,
I've successfully configured OpenVPN server on my DD-WRT router, Its been running fine since I've configured it a few days ago. I was going through the logs today and noticed I've gotten about 2 to 3 random IP's a day that connect to TCP port 443, which is the port OpenVPN is listening on. My clients have no problem connecting to the server but I'm concered about the unknown IP's connecting to my server. Heres a couple of examples from today.
DD-WRT's Incomming Log Table
Source IP Protocal Destination Port Rule
---------- -------- ---------------- ----
204.110.9.189 TCP https Accepted
209.190.31.58 TCP https Accepted
I then looked at OpenVPN's log and noticed this:
Wed Sep 12 17:42:53 2012 us=90613 TCP connection established with 204.110.9.189:44137
Wed Sep 12 17:42:53 2012 us=90861 TCPv4_SERVER link local: [undef]
Wed Sep 12 17:42:53 2012 us=91088 TCPv4_SERVER link remote: 204.110.9.189:44137
Wed Sep 12 17:42:53 2012 us=92051 204.110.9.189:44137 WARNING: Bad encapsulated packet length from peer (32871), which must be > 0 and <= 1560 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Wed Sep 12 17:42:53 2012 us=92341 204.110.9.189:44137 Connection reset, restarting [0]
Wed Sep 12 17:42:53 2012 us=92553 204.110.9.189:44137 SIGUSR1[soft,connection-reset] received, client-instance restarting
Wed Sep 12 17:42:53 2012 us=93144 TCP/UDP: Closing socket
Is it safe to ignore this since it looks like OpenVPN drops their connection when it tries to authenticate? Or should I be concerned....I did generate a ta.key for tls-auth on the server if that helps.
Thanks in advance for your help
