Following a post a couple of days a go, I bumped into a piece of software called openvpn-monitor. It allows you to see all active incoming OpenVPN connections to ClearOS in a web browser. This Howto shows how to install it.

yum install mod_python python-GeoIP python-ipaddr python-argparse python-humanize python-semantic_version git --enablerepo=clearos-core,clearos-epel

cd /var/www/html

git clone https://github.com/furlongm/openvpn-monitor.git

chown apache:apache /var/www/html/openvpn-monitor -R

Note mod_python and python-argparse are not needed in ClearOS 7.x and may not be needed in 6.x.

Create a file /etc/httpd/conf.d/openvpn-monitor.conf:

#    AddHandler cgi-script .cgi

<Directory /var/www/html/openvpn-monitor>

	Options +ExecCGI

	AddHandler cgi-script .py

	DirectoryIndex openvpn-monitor.py



	Order deny,allow

	Deny from all

	Allow from 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8



</Directory>

Edit the file /var/www/html/openvpn-monitor/openvpn-monitor.conf changing site, latitude, longitude and name. I used this site to find my latitude and longitude from my postcode. You may need another site depending on where you are. I also turned the map off.

Set up the GeoIP:

cd /usr/share/GeoIP/

wget http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz

gunzip GeoLiteCity.dat.gz

mv GeoLiteCity.dat GeoIPCity.dat

Restart apache:

service httpd restart

In /etc/openvpn/clients.conf add a line:

management 127.0.0.1 5555

Then restart OpenVPN e.g.

service openvpn restart

Then navigate to http://your_server_IP/openvpn-monitor and there you are.

Then you look at /var/log/messages and see it gets spammed with openvpn MANAGEMENT rubbish. To get rid of that, create a file in /etc/rsyslog.d. I have a general one I use for filtering bits of rubbish called messages-filter.conf but call it what you like. Add the lines:

# Suppress Openvpn MAMAGEMENT messages

if $programname == 'openvpn' and $msg contains 'MANAGEMENT' then ~

Then restart rsyslog:

service rsyslog restart

End of messages

I have only used this with the UDP configuration of OpenVPN. I have a feeling that if your want to monitor another instance of OpenVPN, such as the TCP configuration, you'll need to use a different management port and have a separate instance of OpenVPN Monitor running in the web server (change the port in /var/www/html/openvpn-monitor/openvpn-monitor.cfg and the line you add to clients.conf and use a different subdirectory of /var/www/html/ to install the second instance of OpenVPN Monitor).

[edit]
Edited 11/03/2016 following this post
Credit to Dennis Pantazis
[/edit]
[edit2 02/10/2016]
/var/www/html/openvpn-monitor/openvpn-monitor.cfg is now /var/www/html/openvpn-monitor/openvpn-monitor.conf
lat is now latitude
long is now longitude
[/edit2]
[edit3 04/10/2019]
Added python-semantic_version to the yum command
[/edit3]