Setting up a server for a road warrior

red-lichtie

Hi,

I've set up a server and I keep getting a flood of messages like this: "MULTI: bad source address from client , packet dropped"

I've read the FAQ response and read about setting the client-config-dir directive and adding an iroute entry, etc..

Problem is, I don't know what IP address my client is going to get. I want to use it at the airport, railway station even via my mobile, so I can't define a configuration for a network topology that I don't know or control.

I have the feeling that I am missing something fairly simple, or obvious for someone more used to configuring OpenVPN, it is working but the performance is awful (I'm not 100% sure why) and I had to add "mute 3" to stop the server log flooding.

I have it running on an Ubuntu server, 16.04.3 LTS and the OpenVPN version is "2.3.10-1ubuntu2.1".

port 443
proto tcp
dev tun0
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/server-cert.pem
key /etc/openvpn/keys/server-key.pem
dh /etc/openvpn/keys/dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist /var/lib/openvpn/ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "route 10.8.0.0 255.255.255.0"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
tls-auth /etc/openvpn/keys/ta.key 0
cipher AES-128-CBC
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
mute 3

Thanks for any pointers,

Bill

TinCanTech

red-lichtie wrote I've set up a server and I keep getting a flood of messages like this: "MULTI: bad source address from client , packet dropped"

Generally, you can ignore this, openvpn has dropped the packet.

However, you may be getting so many due to something like a software firewall , AV or virus on the client.