Trying to create a openVPN monitoring script SOLVED

[Randall526]

Hey all, long time open source Linux user, and Linux admin, first time poster.

I am trying to create a monitoring script for my outbound openVPN client that drops like twice a week.  I have to constantly start it again,

With DD-WRT I created a shell script that pinged the VPN gateway provider and took corrective action as needed and logged all it's activity.

Would like to do the same thing with a cronjob but I can't see the vpn process running or how to start it via the Command Line.

ps -aux | grep -i vpn shows nothing.

With DD-WRT I could start it via command line and the GUI picked up the change no problem, can this be done?  All I need is the ability to start the VPN via command line.

[Randall526]

I figured this out.

Using php to restart openvpn wasn't expected and explains why I couldn't find it in the process list.

I wrote a quick script that checks your gateway provider IP and cycles VPN services upon 3 consecutive failures.  I did some basic testing and it's working.

I am posting my script for others.  It requires creating php script called pfsenceVPNrestart.php to cycle OpenVPN services.  The script is called by the main script VPNCheck.sh you would enter as a cron job.  Rename the file extensions so they are not .txt

You need to run netstat -r to try and find your VPN gateway IP address of your VPN provider and use it as a script parameter to my script.

Be sure to make them both executable with a chmod +x /root/scriptname command.

I didn't create that much input validation or safety checks so use at your own risk, perhaps I will later.  I am also not fluent with pfsence and some of the changes I had to make to the shell script due to syntax was a little new to me.  Linux veteran, pfsence noob here.  Any veterans see issues with the shell code here, just feel free to edit it and share.  The script outputs 1 to 4 lines to /tmp/VPNCheckLog each run to check up on what it's been doing.

An example of a cron job that runs every 4 hours would be like this substituting for your own IP address vpn gateway of course.

#VPN monitoring script
0 0,4,8,12,16,20 * * * /root/VPNCheck.sh 9.9.9.9

I see this is a busy forum with more people that need help compared to those available to provide it.  Here's my small contribution should it be helpful.

pfsenceVPNrestart.txt
VPNCheck.txt

[Randall526]

Update, had to update the VPNcheck.txt file due lazy scripting and not being familiar with pfsence :P.  Script wouldn't run correctly via cron prior to the update.  Manual script run was fine.

[TomT]

Are these scripts available anywhere ?
Thanks

[Randall526]

I see the attachment links are dead. I came here to get a copy of my old script having lost it myself and noticed the attachment links don't work.

I started using this.

https://www.foxypossibilities.com/2018/05/23/reestablish-pfsense-openvpn-clients-with-cron/

I like how it uses native capabilities to restart openvpn client, I might add a for loop to this so it doesn't restart the vpn on a single failure later when I have time.