在linode中centos 6.5 搭建vpn

至今为此google已经被墙个半月了,作为工程师不能用google真是“生不如死”,linode已经降到10$,而且可以用信用卡支付,想要用google的服务顺心点,自建vpn是很有必要的,linode装cent os 6.5环境搭建vpn很多,该脚本是在网上找到,可以用,修改了dns为阿里云223.5.5.5,8.8.8.8这个已经被封了

#!/bin/bash
function installVPN(){
        echo "begin to install VPN services";
        #check wether vps suppot ppp and tun
        yum remove -y pptpd ppp
        iptables --flush POSTROUTING --table nat
        iptables --flush FORWARD
        rm -rf /etc/pptpd.conf
        rm -rf /etc/ppp
        arch=`uname -m`
        wget http://www.hi-vps.com/downloads/dkms-2.0.17.5-1.noarch.rpm
        wget http://wty.name/linux/sources/kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
        wget http://www.hi-vps.com/downloads/kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
        wget http://www.hi-vps.com/downloads/pptpd-1.3.4-2.el6.$arch.rpm
        wget http://www.hi-vps.com/downloads/ppp-2.4.5-17.0.rhel6.$arch.rpm
        yum -y install make libpcap iptables gcc-c++ logrotate tar cpio perl pam tcp_wrappers
        rpm -ivh dkms-2.0.17.5-1.noarch.rpm
        rpm -ivh kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
        rpm -qa kernel_ppp_mppe
        rpm -Uvh ppp-2.4.5-17.0.rhel6.$arch.rpm
        rpm -ivh pptpd-1.3.4-2.el6.$arch.rpm
        mknod /dev/ppp c 108 0
        echo 1 > /proc/sys/net/ipv4/ip_forward
        echo "mknod /dev/ppp c 108 0" >> /etc/rc.local
        echo "echo 1 > /proc/sys/net/ipv4/ip_forward" >> /etc/rc.local
        echo "localip 172.16.36.1" >> /etc/pptpd.conf
        echo "remoteip 172.16.36.2-254" >> /etc/pptpd.conf
        echo "ms-dns 114.114.114.114" >> /etc/ppp/options.pptpd
        echo "ms-dns 223.5.5.5" >> /etc/ppp/options.pptpd
        pass=`openssl rand 6 -base64`
        if [ "$1" != "" ]
        then pass=$1
        fi
        echo "vpn pptpd ${pass} *" >> /etc/ppp/chap-secrets
        iptables -t nat -A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source `ifconfig  | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk 'NR==1 { print $1}'`
        iptables -A FORWARD -p tcp --syn -s 172.16.36.0/24 -j TCPMSS --set-mss 1356
        service iptables save
        chkconfig iptables on
        chkconfig pptpd on
        service iptables start
        service pptpd start
        echo "VPN service is installed, your VPN username is vpn, VPN password is ${pass}"
}
function addVPNuser(){
        echo "input user name:"
        read username
        echo "input password:"
        read userpassword
        echo "${username} pptpd ${userpassword} *" >> /etc/ppp/chap-secrets
        service iptables restart
        service pptpd start
}
echo "which do you want to?input the number."
echo "1. install VPN service"
echo "2. repaire VPN service"
echo "3. add VPN user"
read num
case "$num" in
[1] ) (installVPN);;
[2] ) (repaireVPN);;
[3] ) (addVPNuser);;
*) echo "nothing,exit";;
esac
function repaireVPN(){
        echo "begin to repaire VPN";
        mknod /dev/ppp c 108 0
        service iptables restart
        service pptpd start
}

打开防火墙

-A RH-Firewall-1-INPUT -p tcp -m state –state NEW -m tcp –dport 1723 -j ACCEPT

把脚本保存为vpn.sh,并执行

 

 

chmod a+x vpn.sh
./vpn.sh

 

 

1. install VPN service –安装


2. repaire VPN service –修复


3. add VPN user –增加新用户

 

发布日期:
分类:Linux

发表评论

邮箱地址不会被公开。 必填项已用*标注