Lock account / ban ip after mult. login attempts?

freakasis

I am looking into creating a secure tunnel to my home file shares, some of which contain secure data, and I am wondering if OpenVPN server has or can have the ability to limit login attempts and lock accounts/ip addresses down after a certain threshold? If this functionality is not built in, what would you suggest is the best way to go about implementing it? This will likely be installed on FreeBSD or a Linux server distro. I Googled a few related phrases but could not find any information on this.

Thanks

TinCanTech

freakasis wroteI am wondering if OpenVPN server has or can have the ability to limit login attempts and lock accounts/ip addresses down after a certain threshold?

This is not built into OpenVPN.

freakasis wroteIf this functionality is not built in, what would you suggest is the best way to go about implementing it?

On Linux (which you intend) this can be achieved via scripting. (The same could be done with windows batch file)

If you are concerned about hacking --tls-auth offers a low level/immediate defence.

You would do well to consult the docs/howto/manual and user mailing list.

freakasis

Thanks for the reply I will look into it. Do you know of a website with information on this type of script, that I can use as a base? I have not scripted much in Linux or with OpenVPN settings. I could probably pull off a batch file, but my server will be headless and I'd rather not run windows on it. I would imagine this type of thing is done somewhat often, yet I could not find information on it. Do you think it is necessary?

TinCanTech

I have never seen any questions about this before ..