How can I record in a log when users connect and disconnect, and rotate the log every 24 hours.

[xivexell]

I want to monitor when a user connects or disconnects to my VPN, I tried to use --up and --client-connect, but it doesn´t work, Could someone help me, please? I'm already stuck for 2 weeks

my server.conf

View Originalserver

1

2

3

management localhost 5555

4

5

proto udp

6

7

dev tun

8

9

ca ca.crt

10

11

cert server.crt

12

13

key server.key # This file should be kept secret

14

15

dh none

16

17

server 10.8.0.0 255.255.255.0

18

19

ifconfig-pool-persist /var/log/openvpn/ipp.txt

20

21

push "route 213.169.0.0 255.255.248.0"

22

23

push "route 192.168.112.0 255.255.255.0"

24

25

push "dhcp-option DNS 213.169.1.105"

26

27

keepalive 10 120

28

29

tls-crypt ta.key

30

31

cipher AES-256-GCM

32

33

auth SHA256

34

35

user nobody

36

37

group nogroup

38

39

persist-key

40

41

persist-tun

42

43

status /var/log/openvpn/openvpn-status.log

44

45

script-security 3

46

47

up /etc/openvpn/scripts/clientconnect.sh

48

49

log-append /var/log/openvpn/openvpn.log

50

51

verb 4

52

53

explicit-exit-notify 1

54

1

management localhost 5555

2

proto udp

3

dev tun

4

ca ca.crt

5

cert server.crt

6

key server.key

7

dh none

8

server 10.8.0.0 255.255.255.0

9

ifconfig-pool-persist /var/log/openvpn/ipp.txt

10

push "route 213.169.0.0 255.255.248.0"

11

push "route 192.168.112.0 255.255.255.0"

12

push "dhcp-option DNS 213.169.1.105"

13

keepalive 10 120

14

tls-crypt ta.key

15

cipher AES-256-GCM

16

auth SHA256

17

user nobody

18

group nogroup

19

persist-key

20

persist-tun

21

status /var/log/openvpn/openvpn-status.log

22

script-security 3

23

up /etc/openvpn/scripts/clientconnect.sh

24

log-append /var/log/openvpn/openvpn.log

25

verb 4

26

explicit-exit-notify 1

my oepnvpn-server@.service

View Originalserver

1

2

3

[Unit]

4

5

Description=OpenVPN service for %I

6

7

After=network-online.target

8

9

Wants=network-online.target

10

11

Documentation=man:openvpn(8)

12

13

Documentation=https://community.openvpn.net/openvpn/w ... n24ManPage

14

15

Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO

16

17

18

19

[Service]

20

21

Type=notify

22

23

PrivateTmp=false

24

25

WorkingDirectory=/etc/openvpn/server

26

27

ExecStart=/usr/sbin/openvpn --script-security 3 --up /etc/openvpn/scripts/clientconnect.sh --status %t/openvpn-server/status-%i.log --status-version 2 --config %i.conf

28

29

CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE

30

31

LimitNPROC=10

32

33

DeviceAllow=/dev/null rw

34

35

DeviceAllow=/dev/net/tun rw

36

37

#ProtectSystem=true

38

39

#ProtectHome=true

40

41

KillMode=process

42

43

RestartSec=5s

44

45

Restart=on-failure

46

47

48

49

[Install]

50

51

WantedBy=multi-user.target

52

1

[Unit]

2

Description=OpenVPN service for %I

3

After=network-online.target

4

Wants=network-online.target

5

Documentation=man:openvpn(8)

6

Documentation=https://community.openvpn.net/openvpn/w ... n24ManPage

7

Documentation=https://community.openvpn.net/openvpn/wiki/HOWTO

8

[Service]

9

Type=notify

10

PrivateTmp=false

11

WorkingDirectory=/etc/openvpn/server

12

ExecStart=/usr/sbin/openvpn --script-security 3 --up /etc/openvpn/scripts/clientconnect.sh --status %t/openvpn-server/status-%i.log --status-version 2 --config %i.conf

13

CapabilityBoundingSet=CAP_IPC_LOCK CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_RAW CAP_SETGID CAP_SETUID CAP_SYS_CHROOT CAP_DAC_OVERRIDE CAP_AUDIT_WRITE

14

LimitNPROC=10

15

DeviceAllow=/dev/null rw

16

DeviceAllow=/dev/net/tun rw

17

KillMode=process

18

RestartSec=5s

19

Restart=on-failure

20

[Install]

21

WantedBy=multi-user.target

my script clientconnect.sh

View Originalserver

1

#!/bin/bash

2

3

NOW=`(date '+%H:%M:%S - %d-%m-%Y')`

4

5

echo $NOW, $common_name $trusted_ip, $trusted_port >> /var/log/openvpn/usuarios.txt

6

7

exit 0

8

1

NOW=`(date '+%H:%M:%S - %d-%m-%Y')`

2

echo $NOW, $common_name $trusted_ip, $trusted_port >> /var/log/openvpn/usuarios.txt

3

exit 0

my usuarios.txt only has this:

View Originalserver

1

12:29:41 - 17-01-2022, ,

2

3

12:33:25 - 17-01-2022, ,

4

5

13:52:20 - 17-01-2022, ,

6

7

13:53:05 - 17-01-2022, ,

8

9

13:54:57 - 17-01-2022, ,

10

11

13:55:23 - 17-01-2022, ,

12

13

13:55:23 - 17-01-2022, ,

14

15

13:58:18 - 17-01-2022, ,

16

17

14:03:08 - 17-01-2022, ,

18

19

14:04:58 - 17-01-2022, ,

20

21

14:32:43 - 17-01-2022, ,

22

1

12:29:41 - 17-01-2022, ,

2

12:33:25 - 17-01-2022, ,

3

13:52:20 - 17-01-2022, ,

4

13:53:05 - 17-01-2022, ,

5

13:54:57 - 17-01-2022, ,

6

13:55:23 - 17-01-2022, ,

7

13:55:23 - 17-01-2022, ,

8

13:58:18 - 17-01-2022, ,

9

14:03:08 - 17-01-2022, ,

10

14:04:58 - 17-01-2022, ,

11

14:32:43 - 17-01-2022, ,

[TinCanTech]

I want to monitor when a user connects or disconnects to my VPN

Try this: https://github.com/TinCanTech/easy-tls

and rotate the log every 24 hours.

Remove this:

Code: Select all

log-append /var/log/openvpn/openvpn.log

Let systemd take care of it.