privacy matters
sec13b opened this issue · comments
No-logging of user activity policy.
can you add :
no logging of traffic
no logging of DNS requests
no logging of connections, including when one is made, when it disconnects, for how long, or any kind of timestamp
no logging of IP addresses
no logging of user bandwidth
verb 0
log-append /dev/null
@sec13b Hello! The script is open source (MIT license) and you are welcome to customize it to your needs (e.g. verb 0).
By default, only basic logging is enabled (verb 3), which is helpful for troubleshooting. Most of the stuff you mentioned are not logged in the default configuration. This should work for common use cases.
For more background information, see these issues in the upstream repo:
Nyr/openvpn-install#506
Nyr/openvpn-install#225
Thank you.
i try to modify server.conf , i want to know if i did all correctly
**
verb 0
log /dev/null
status /dev/null
log-append /dev/null
**
thank you
/etc/openvpn/server/server.conf
local 9...........17
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA256
tls-crypt tc.key
topology subnet
server 10.8.0.0 255.255.255.0
push "block-ipv6"
push "ifconfig-ipv6 fddd:11......::2/64 fddd:11.......194::1"
push "redirect-gateway def1 ipv6 bypass-dhcp"
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 109.......6"
push "dhcp-option DNS 109.......6"
push "block-outside-dns"
keepalive 10 120
cipher AES-128-GCM
user nobody
group nogroup
persist-key
persist-tun
**verb 0
log /dev/null
status /dev/null
log-append /dev/null**
crl-verify crl.pem
explicit-exit-notify