OpenVPN Support Forum

Hi,

I am running an OpenVPN 2.5.1 server. It´s running fine, and works as intended. No problems connecting or anything like that.

I have more of a general question on how to handle these messages:
The x-s represent an IP address and port. I get about 5 - 10 of these daily in the message log on my OpenVPN server. They are coming from a lots of different IP addresses from all over the world. I assume this is someone trying to connect without a valid certificate?
Should I simply diregard these, or should I take some measures to stop these attempts? Or could it be something else entirely?

Ignore it, they are from internet scanners..

is it safe to ignore though? can something be done as a defense?

It is safe to ignore, technically, the packet is dropped (although no message to point that out).

Openvpn is doing the best defense already.

Ok, thank you for explaining.

If you feel like trying something new you could try --tls-crypt or --tls-crypt-v2 keys.

This may help: https://github.com/TinCanTech/easy-tls