[Openvpn-users] How to collect per-client usage stats

[Bryon <Br...@Ro...>]

I would simply suggest, make a clear written policy.  If some one goes against the policy, 
disable access to your system.

On 8/24/2010 2:49 PM, Carl Youngblood wrote:
> Thanks Bryon. I don't want to restrict specific ports (unless you guys
> think that's a good idea). Basically, I'm ok with p2p usage, but, in
> my experience, many open ports at the same time causes much higher
> resource usage than one port doing a big download. So I'm trying to be
> aware of all the different ways that users can tax the system and come
> up with fair usage policies so I don't have a loophole that can be
> exploited by some individuals. Any advice you guys have would be
> appreciated.
>
> On Tue, Aug 24, 2010 at 5:06 PM, Bryon<Br...@ro...>  wrote:
>> If you want to monitor each clients bandwidth usage then you really need to
>> use radius to do so.
>>
>> About port monitoring, I would suggest just firewalling any ports that you
>> do not want clients to be able to use, and open up allowed ports.
>>
>> -Bryon
>>
>> On 8/24/2010 10:16 AM, ope...@li... wrote:
>>>
>>> Message: 5
>>> Date: Tue, 24 Aug 2010 13:24:04 +0200
>>> From: Carl Youngblood<ca...@yo...>
>>> Subject: [Openvpn-users] How to collect per-client usage stats
>>> To:ope...@li...
>>> Message-ID:
>>>         <AAN...@ma...>
>>> Content-Type: text/plain; charset=UTF-8
>>>
>>> I need to be able to track bandwidth usage as well as certain kinds of
>>> abusive usage on an openvpn server, such as if a user has a lot of
>>> ports open at the same time. What is the right way to do this? Do I
>>> take care of it at the openvpn layer or somewhere else on the network?
>>> Does anyone have any advice for certain types of behavior that I'll
>>> need to protect against so that all the clients have a good
>>> experience?
>>>
>>> Thanks,
>>> Carl Youngblood
>>