Openvpn Server on port 443, secured from bruteforce?

frenchn00b · 09-07-2009, 12:24 AM

Openvpn Server on port 443, secured?
Well to avoid brute force, can we really on the strength of the openvpn server and use 443?

watcher69b · 09-08-2009, 07:47 AM

i dont think 443 would help you any.
OpenVPN uses certificates for checking clients and server.
There are about 5 that i can remember from my setup. 3 on the server and 2 on each client.
a hacker would take a long time to crack each one. Or steal a laptop...

Either way you can use any port 443 is well know and people do scan for it. if you want to hide it then use a weird port like 10,000

frenchn00b · 09-08-2009, 10:45 AM

Quote:

Originally Posted by watcher69b

i dont think 443 would help you any.
OpenVPN uses certificates for checking clients and server.
There are about 5 that i can remember from my setup. 3 on the server and 2 on each client.
a hacker would take a long time to crack each one. Or steal a laptop...

Either way you can use any port 443 is well know and people do scan for it. if you want to hide it then use a weird port like 10,000

I noticed that once a year an hack try the port ssh, for brute forcing. Is there good trace or logs under openvpn, ; have you already been attacked? well if it is very secured openvpn, linux is un-penetrable.

GrapefruiTgirl · 09-08-2009, 11:53 AM

Moved: This thread is more suitable in <Security> and has been moved accordingly to help your thread/question get the exposure it deserves.