Country Frenchies.
PFSENSE:
-------------
2.4.4-RELEASE-p2 (amd64)
Basé sur Wed Dec 12 07:40:18 EST 2018
FreeBSD 11.2-RELEASE-p6
OpenVPN 1.4.19_1
LOGCAPTURE:
-----------------
Dec 17 04:34:39 openvpn 31230 198.108.67.48:3182 Connection reset, restarting [0]
Dec 17 04:34:39 openvpn 31230 198.108.67.48:3182 WARNING: Bad encapsulated packet length from peer (5635), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Dec 17 04:34:39 openvpn 31230 TCP connection established with [AF_INET]198.108.67.48:3182
Dec 17 04:34:39 openvpn 31230 198.108.67.48:37218 Connection reset, restarting [0]
Dec 17 04:34:39 openvpn 31230 198.108.67.48:37218 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Dec 17 04:34:38 openvpn 31230 TCP connection established with [AF_INET]198.108.67.48:37218
Dec 17 04:34:36 openvpn 31230 198.108.67.48:26450 Connection reset, restarting [0]
Dec 17 04:34:36 openvpn 31230 198.108.67.48:26450 WARNING: Bad encapsulated packet length from peer (3338), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Dec 17 04:34:35 openvpn 31230 TCP connection established with [AF_INET]198.108.67.48:26450
Dec 16 22:39:19 openvpn 31230 159.203.197.31:35950 Connection reset, restarting [0]
Dec 16 22:39:09 openvpn 31230 TCP connection established with [AF_INET]159.203.197.31:35950
Dec 13 08:41:59 openvpn 31230 Initialization Sequence Completed
Dec 13 08:41:59 openvpn 31230 TCPv4_SERVER link remote: [AF_UNSPEC]
Dec 13 08:41:59 openvpn 31230 TCPv4_SERVER link local (bound): [AF_INET]MYIP:MYPORT
Dec 13 08:41:59 openvpn 31230 Listening for incoming TCP connection on [AF_INET] MYIP:MYPORT
Dec 13 08:41:59 openvpn 31230 /usr/local/sbin/ovpn-linkup ovpns1 1500 1623 172.0.0.1 255.255.255.0 init
Dec 13 08:41:59 openvpn 31230 /sbin/ifconfig ovpns1 172.0.0.1 172.0.0.2 mtu 1500 netmask 255.255.255.0 up
Dec 13 08:41:59 openvpn 31230 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Dec 13 08:41:59 openvpn 31230 ioctl(TUNSIFMODE): Device busy (errno=16)
Dec 13 08:41:59 openvpn 31230 TUN/TAP device /dev/tun1 opened
Dec 13 08:41:59 openvpn 31230 TUN/TAP device ovpns1 exists previously, keep at program end
Dec 13 08:41:59 openvpn 31230 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dec 13 08:41:59 openvpn 31011 library versions: OpenSSL 1.0.2o-freebsd 27 Mar 2018, LZO 2.10
Dec 13 08:41:59 openvpn 31011 OpenVPN 2.4.6 amd64-portbld-freebsd11.2 [SSL (OpenSSL)] [LZO] [LZ4] [MH/RECVDA] [AEAD] built on Oct 3 2018
Dec 13 00:02:13 openvpn 32704 62.210.77.54:38488 Connection reset, restarting [-1]
Dec 13 00:01:13 openvpn 32704 TCP connection established with [AF_INET]62.210.77.54:38488
Dec 13 00:01:13 openvpn 32704 62.210.77.54:46490 Fatal TLS error (check_tls_errors_co), restarting
Dec 13 00:01:13 openvpn 32704 62.210.77.54:46490 TLS Error: TLS handshake failed
Dec 13 00:01:13 openvpn 32704 62.210.77.54:46490 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Dec 13 00:00:13 openvpn 32704 TCP connection established with [AF_INET]62.210.77.54:46490
Dec 11 15:16:35 openvpn 32704 198.108.67.48:14174 Connection reset, restarting [0]
Dec 11 15:16:35 openvpn 32704 198.108.67.48:14174 WARNING: Bad encapsulated packet length from peer (5635), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Dec 11 15:16:35 openvpn 32704 TCP connection established with [AF_INET]198.108.67.48:14174
Dec 11 15:16:35 openvpn 32704 198.108.67.48:18288 Connection reset, restarting [0]
Dec 11 15:16:35 openvpn 32704 198.108.67.48:18288 WARNING: Bad encapsulated packet length from peer (18245), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Dec 11 15:16:35 openvpn 32704 TCP connection established with [AF_INET]198.108.67.48:18288
Dec 11 15:16:34 openvpn 32704 198.108.67.48:46818 Connection reset, restarting [0]
Dec 11 15:16:34 openvpn 32704 198.108.67.48:46818 WARNING: Bad encapsulated packet length from peer (3338), which must be > 0 and <= 1626 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]
Dec 11 15:16:34 openvpn 32704 TCP connection established with [AF_INET]198.108.67.48:46818
Dec 8 17:43:18 openvpn 32704 159.203.201.15:55190 Connection reset, restarting [0]
Dec 8 17:43:08 openvpn 32704 TCP connection established with [AF_INET]159.203.201.15:55190
is their a real attack or false positive one ? :roll:
anything to protect from /trap it ?
