How to log failuer attemps?

[FedericoCoppola]

Hi all,
I have a very small OpenVPN server on my Raspberry PI 4.
Can I logs failure attemps or other attack kind to my machine?
Is it possibile? Can I do these settings directly in OpenVPN server?

I have not any hardware firewall in my simple deployment at the moment.

In this moment I just changed default UDP port, but I know that it is not the best solution about security.
My laptop use OpenVPN certificate, I don't type any username or password to connect remotelly using OpenVPN.

Thanks so much!
Federico

[TinCanTech]

Your server log will have the details.

[FedericoCoppola]

Hi @TinCanTech,
Thanks!
Do I need to set some settings to improve logging (more details) about login attempts?

Thanks!

[TinCanTech]

Just read your log.

[openvpn_inc]

Hi Federico,

I don't think logging is the best approach. I think it's better to mitigate the attacks before they could happen. Use --proto udp and see --tls-auth or --tls-crypt in the manual.

For logging --verb 3 is good for general use, or --verb 4 (occasionally higher) when trying to debug a specific issue.

hth, regards, rob0