Topics

I have two questions concerning running an OpenVPN server.

1. What is the recommended way to set advanced options of an OpenVPN server?

I saw the ,,Advanced" field in VPN –> OpenVPN -> Servers section but the description states that this field will be removed:
This option will be removed in the future due to being insecure by nature. In the mean time only full administrators are allowed to change this setting.

2. Can I connect to the shell and see the complete configuration file somewhere? (I would like to double check that all the options are set as expected)

[WAN]

The following page describes how to configure the Spamhaus blocklist:
https://docs.opnsense.org/manual/how-tos/edrop.html

The blocklist is applied to both the WAN and the LAN interface.

What is the advantage of using the blocklist on the WAN interface?
I would have expected that this isn't necessary since the WAN interface denies everything by default (default deny rule).