<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta content="text/html;charset=UTF-8" http-equiv="Content-Type"></head><body ><div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;">ok, i putted an OpenVPN server on port 1194 on an OpenWrt 10.03 router.</span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;"><a href='https://pastebin.com/raw.php?i=xEZTvnhT' target='_blank'>https://pastebin.com/raw.php?i=xEZTvnhT</a></span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;"><a href='http://pastebin.mozilla.org/1138443' target='_blank'>http://pastebin.mozilla.org/1138443</a></span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;"><br></span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;">Questions: what could i do to increase security regarding this OpenVPN server? - i mean on server side!</span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;"><br></span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;">1 - i sed 's/1194/50000/' the port number to a higher one - it's against the automated robots, ok!</span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;">2 - iptables? i should only allow ip ranges [on the input chain] that i will use in reality? - ok!</span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;">3 - if i don't use my router - e.g.: when i'm sleeping i just turn it off.</span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;">4 - ? what else?? Plese write down you're idea/solution!!!</span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;"><br></span></font></div><div><font class="Apple-style-span" face="Verdana, arial, Helvetica, sans-serif"><span class="Apple-style-span" style="font-size: 12px;">OpenWrt isn't OpenBSD, so from the "ps" command i can see that the OpenVPN is runned by root. it's not so secure. How can i make it more secure?</span></font></div></div><div id="" style="font-family: Verdana, arial, Helvetica, sans-serif; font-size: 12px; "></div></body></html>