Creating a bpf filter

muza

Hey, I'm trying to make a bpf filter for open vpn to keep my server less vulnerable to ddos attacks. I'm trying to get a pcap of my connection to open vpn so I can find out session id etc. I'm following this guide on github https://github.com/Courvix-Network/OpenVPN-DDoS-Protection but when I create a bcap it does not show the session id, etc.

I'm still very new to this so any help would be very appreciated, thanks! 🙂

TinCanTech

A quote from your source:

Courvix Network wroteI am also no expert when it comes to DDoS protection or the application of DDoS prevention measures. I know what I know, that's it.

:roll:

OpenVPN developers take great care to ensure that Openvpn is robust enough to look after itself.
Provided you read the official Openvpn documentation, your server will be safe.

muza

TinCanTech wrote A quote from your source:
Courvix Network wroteI am also no expert when it comes to DDoS protection or the application of DDoS prevention measures. I know what I know, that's it.
:roll:

OpenVPN developers take great care to ensure that Openvpn is robust enough to look after itself.
Provided you read the official Openvpn documentation, your server will be safe.

Ah ok, It's just that someone has already managed to ddos my server. So I'm just trying to take that extra step to ensure I can minimise the risk of it happening again.

TinCanTech

muza wrote someone has already managed to ddos my server

Describe that, we would be most interested.

muza

TinCanTech wrote
muza wrote someone has already managed to ddos my server
Describe that, we would be most interested.

He said something about using a api which uses a amp attack method specifically made for ovhs/nfos to bypass there basic firewall

muza

When he started the attack my server instantly shut down and I could not connect to it until he stopped the attack

muza

When he started the attack my server instantly shut down and I could not connect to it until he stopped the attack

TinCanTech

Is there an Openvpn vulnerability ? There's probably a bug-bounty for discovery ..

muza

TinCanTech wrote Is there an Openvpn vulnerability ? There's probably a bug-bounty for discovery ..

Without a doubt that's why I'm trying to set up ip tables for the mean time. It's just hard trying to understand how.

TinCanTech

If you discover a genuine OpenVPN DDOS vulnerability then it is probably best to send an email to:
> security at openvpn.net