Hello,
I've been operating openvpn services for quite a few years with more than 30 servers and this is the first time that I'm seeing this.
OS: Centos 6.4
server.conf
# Specify device
dev tun1
local x.x.x.x
port 443
server 172.16.1.0 255.255.255.0
# Certificates for VPN Authentication
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
dh /etc/openvpn/keys/dh2048.pem
#Certificate validation
crl-verify /etc/openvpn/crl.pem
# Routes to push to the client
push "redirect-gateway def1"
push "dhcp-option DNS x.x.x.x"
keepalive 20 60
persist-tun
persist-key
max-clients 60
float
mute-replay-warnings
# Run OpenVPN as a daemon and drop privileges to user/group nobody user nobody
user nobody
daemon
status status.log 10
status-version 2
log route.log
verb 0
tls-auth /etc/openvpn/keys/ta.key 0
comp-lzo no
topology subnet
txqueuelen 1000
sndbuf 262144
rcvbuf 262144
#Security
cipher AES-128-CBC
tls-cipher TLS-DHE-RSA-WITH-AES-128-CBC-SHA
This is the size of the route.log,
-rw-r--r-- 1 root root 1.4G Nov 3 02:16 route.log
AND this the view of the log file.
more route.log
Sat Nov 2 11:24:13 2013 WARNING: file '/etc/openvpn/keys/server.key' is group or others accessible
Sat Nov 2 11:24:13 2013 WARNING: file '/etc/openvpn/keys/ta.key' is group or others accessible
--More--(0%)
This is version 2.3.2 binary.
The file size of 1.4G with verb 0 and empty spaces in less than 24 hours is not normal.
status.log is correct in displaying only connected.
Connection is working correctly as well and users are getting more than 200mbit traffic thru the tunnel and no one reported of any issues on client side.
If anyone has any clue why this is happening, appreciate your feedback.
Thanks.
