{"id":61,"date":"2020-03-07T19:09:23","date_gmt":"2020-03-07T11:09:23","guid":{"rendered":""},"modified":"2024-03-19T21:58:57","modified_gmt":"2024-03-19T13:58:57","slug":"centos-6%e3%80%817%e4%b8%8bpptp-vpn%e4%b8%80%e9%94%ae%e5%ae%89%e8%a3%85%e8%84%9a%e6%9c%ac","status":"publish","type":"post","link":"https:\/\/www.fatesky.com\/?p=61","title":{"rendered":"CentOS 6\u30017\u4e0bpptp vpn\u4e00\u952e\u5b89\u88c5\u811a\u672c"},"content":{"rendered":"

CentOS<\/a> 6\u30017\u4e0bpptp vpn\u4e00\u952e\u5b89\u88c5\u811a\u672c\uff0c\u5b89\u88c5\u5982\u4e0b\uff1a<\/p>\n

\n
    \n
  1. \n

    wget http:\/\/mirrors.linuxeye.com\/scripts\/vpn_centos.sh<\/p>\n<\/li>\n

  2. \n

    chmod +x .\/vpn_centos.sh<\/p>\n<\/li>\n

  3. \n

    .\/vpn_centos.sh<\/p>\n<\/li>\n<\/ol>\n<\/div>\n

    \"pptp_install.png\"<\/div><\/div>\n

    \u811a\u672c\u5185\u5bb9\u5982\u4e0b\uff08vpn_centos.sh<\/a>\uff09\uff1a<\/p>\n

    \n
      \n
    1. \n

      #!\/bin\/bash<\/p>\n<\/li>\n

    2. \n

      #<\/p>\n<\/li>\n

    3. \n

      # Author:  yeho <<\/span>lj2007331<\/span> AT gmail.com><\/span><\/p>\n<\/li>\n

    4. \n

      # Blog:  \/\/linuxeye.com<\/p>\n<\/li>\n

    5. \n

      #<\/p>\n<\/li>\n

    6. \n

      # Installs a PPTP VPN-only system for CentOS<\/p>\n<\/li>\n

    7. \n

      <\/p>\n<\/li>\n

    8. \n

      # Check if user is root<\/p>\n<\/li>\n

    9. \n

      [ $(id -u) != "0" ] && { echo -e "\\033[31mError: You must be root to run this script\\033[0m"; exit 1; }<\/p>\n<\/li>\n

    10. \n

      <\/p>\n<\/li>\n

    11. \n

      export PATH<\/span>=\/usr\/local\/sbin:\/usr\/local\/bin:\/sbin:\/bin:\/usr\/sbin:\/usr\/bin<\/p>\n<\/li>\n

    12. \n

      clear<\/p>\n<\/li>\n

    13. \n

      printf "<\/p>\n<\/li>\n

    14. \n

      #######################################################################<\/p>\n<\/li>\n

    15. \n

      #    LNMP\/LAMP\/LANMP for CentOS\/RadHat 5+ Debian 6+ and Ubuntu 12+    #<\/p>\n<\/li>\n

    16. \n

      #            Installs a PPTP VPN-only system for CentOS               #<\/p>\n<\/li>\n

    17. \n

      # For more information please visit \/\/linuxeye.com\/31.html  #<\/p>\n<\/li>\n

    18. \n

      #######################################################################<\/p>\n<\/li>\n

    19. \n

      "<\/p>\n<\/li>\n

    20. \n

      <\/p>\n<\/li>\n

    21. \n

      [ ! -e '\/usr\/bin\/curl' ] && yum -y install curl<\/p>\n<\/li>\n

    22. \n

      <\/p>\n<\/li>\n

    23. \n

      VPN_IP<\/span>=`curl ipv4.icanhazip.com`<\/p>\n<\/li>\n

    24. \n

      <\/p>\n<\/li>\n

    25. \n

      VPN_USER<\/span>="linuxeye"<\/span><\/p>\n<\/li>\n

    26. \n

      VPN_PASS<\/span>="linuxeye"<\/span><\/p>\n<\/li>\n

    27. \n

      <\/p>\n<\/li>\n

    28. \n

      VPN_LOCAL<\/span>="192.168.0.150"<\/span><\/p>\n<\/li>\n

    29. \n

      VPN_REMOTE<\/span>="192.168.0.151-200"<\/span><\/p>\n<\/li>\n

    30. \n

      <\/p>\n<\/li>\n

    31. \n

      <\/p>\n<\/li>\n

    32. \n

      while :; do echo<\/p>\n<\/li>\n

    33. \n

          read -p "Please input username: " VPN_USER<\/p>\n<\/li>\n

    34. \n

          [ -n "$VPN_USER" ] && break<\/p>\n<\/li>\n

    35. \n

      done<\/p>\n<\/li>\n

    36. \n

      <\/p>\n<\/li>\n

    37. \n

      while :; do echo<\/p>\n<\/li>\n

    38. \n

          read -p "Please input password: " VPN_PASS<\/p>\n<\/li>\n

    39. \n

          [ -n "$VPN_PASS" ] && break<\/p>\n<\/li>\n

    40. \n

      done<\/p>\n<\/li>\n

    41. \n

      clear<\/p>\n<\/li>\n

    42. \n

      <\/p>\n<\/li>\n

    43. \n

      <\/p>\n<\/li>\n

    44. \n

      if [ -f \/etc\/redhat-release -a -n "`grep ' 7\\.' \/etc\/redhat-release`" ];then<\/p>\n<\/li>\n

    45. \n

          #CentOS_REL<\/span>=7<\/span><\/p>\n<\/li>\n

    46. \n

          if [ ! -e \/etc\/yum.repos.d\/epel.repo ];then<\/p>\n<\/li>\n

    47. \n

              cat ><\/span> \/etc\/yum.repos.d\/epel.repo <<\/span><<\/span> EOF<\/span><\/p>\n<\/li>\n

    48. \n

      [epel]<\/p>\n<\/li>\n

    49. \n

      name<\/span>=Extra<\/span> Packages for Enterprise Linux 7 – \\$basearch<\/p>\n<\/li>\n

    50. \n

      #baseurl<\/span>=http<\/span>:\/\/download.fedoraproject.org\/pub\/epel\/7\/\\$basearch<\/p>\n<\/li>\n

    51. \n

      mirrorlist<\/span>=https<\/span>:\/\/mirrors.fedoraproject.org\/metalink?repo<\/span>=epel<\/span>-7&arch<\/span>=\\$basearch<\/p>\n<\/li>\n

    52. \n

      failovermethod<\/span>=priority<\/span><\/p>\n<\/li>\n

    53. \n

      enabled<\/span>=1<\/span><\/p>\n<\/li>\n

    54. \n

      gpgcheck<\/span>=0<\/span><\/p>\n<\/li>\n

    55. \n

      EOF<\/p>\n<\/li>\n

    56. \n

          fi<\/p>\n<\/li>\n

    57. \n

          for Package in wget make openssl gcc-c++ ppp pptpd iptables iptables-services<\/p>\n<\/li>\n

    58. \n

          do<\/p>\n<\/li>\n

    59. \n

              yum -y install $Package<\/p>\n<\/li>\n

    60. \n

          done<\/p>\n<\/li>\n

    61. \n

          echo 'net.ipv4.ip_forward<\/span> = 1<\/span>' ><\/span>><\/span> \/etc\/sysctl.conf<\/p>\n<\/li>\n

    62. \n

      elif [ -f \/etc\/redhat-release -a -n "`grep ' 6\\.' \/etc\/redhat-release`" ];then<\/p>\n<\/li>\n

    63. \n

          #CentOS_REL<\/span>=6<\/span><\/p>\n<\/li>\n

    64. \n

          for Package in wget make openssl gcc-c++ iptables ppp<\/p>\n<\/li>\n

    65. \n

          do<\/p>\n<\/li>\n

    66. \n

              yum -y install $Package<\/p>\n<\/li>\n

    67. \n

          done<\/p>\n<\/li>\n

    68. \n

          sed -i 's@net.ipv4.ip_forward.*@net.ipv4.ip_forward<\/span> = 1<\/span>@g' \/etc\/sysctl.conf<\/p>\n<\/li>\n

    69. \n

          rpm -Uvh http:\/\/poptop.sourceforge.net\/yum\/stable\/rhel6\/pptp-release-current.noarch.rpm<\/p>\n<\/li>\n

    70. \n

          yum -y install pptpd<\/p>\n<\/li>\n

    71. \n

      else<\/p>\n<\/li>\n

    72. \n

          echo -e "\\033[31mDoes not support this OS, Please contact the author! \\033[0m"<\/p>\n<\/li>\n

    73. \n

          exit 1<\/p>\n<\/li>\n

    74. \n

      fi<\/p>\n<\/li>\n

    75. \n

      <\/p>\n<\/li>\n

    76. \n

      echo "1" ><\/span> \/proc\/sys\/net\/ipv4\/ip_forward<\/p>\n<\/li>\n

    77. \n

      <\/p>\n<\/li>\n

    78. \n

      sysctl -p \/etc\/sysctl.conf<\/p>\n<\/li>\n

    79. \n

      <\/p>\n<\/li>\n

    80. \n

      [ -z "`grep '^localip' \/etc\/pptpd.conf`" ] && echo "localip $VPN_LOCAL" ><\/span>><\/span> \/etc\/pptpd.conf # Local IP address of your VPN server<\/p>\n<\/li>\n

    81. \n

      [ -z "`grep '^remoteip' \/etc\/pptpd.conf`" ] && echo "remoteip $VPN_REMOTE" ><\/span>><\/span> \/etc\/pptpd.conf # Scope for your home network<\/p>\n<\/li>\n

    82. \n

      <\/p>\n<\/li>\n

    83. \n

      if [ -z "`grep '^ms-dns' \/etc\/ppp\/options.pptpd`" ];then<\/p>\n<\/li>\n

    84. \n

           cat ><\/span>><\/span> \/etc\/ppp\/options.pptpd <<\/span><<\/span> EOF<\/span><\/p>\n<\/li>\n

    85. \n

      ms-dns 223.5.5.5 # Aliyun DNS Primary<\/p>\n<\/li>\n

    86. \n

      ms-dns 114.114.114.114 # 114 DNS Primary<\/p>\n<\/li>\n

    87. \n

      ms-dns 8.8.8.8 # Google DNS Primary<\/p>\n<\/li>\n

    88. \n

      ms-dns 209.244.0.3 # Level3 Primary<\/p>\n<\/li>\n

    89. \n

      ms-dns 208.67.222.222 # OpenDNS Primary<\/p>\n<\/li>\n

    90. \n

      EOF<\/p>\n<\/li>\n

    91. \n

      fi<\/p>\n<\/li>\n

    92. \n

      <\/p>\n<\/li>\n

    93. \n

      echo "$VPN_USER pptpd $VPN_PASS *" ><\/span>><\/span> \/etc\/ppp\/chap-secrets<\/p>\n<\/li>\n

    94. \n

      <\/p>\n<\/li>\n

    95. \n

      ETH<\/span>=`route | grep default | awk '{print $NF}'`<\/p>\n<\/li>\n

    96. \n

      [ -z "`grep '1723 -j ACCEPT' \/etc\/sysconfig\/iptables`" ] && iptables -I INPUT 4 -p tcp -m state –state NEW -m tcp –dport 1723 -j ACCEPT<\/p>\n<\/li>\n

    97. \n

      [ -z "`grep 'gre -j ACCEPT' \/etc\/sysconfig\/iptables`" ] && iptables -I INPUT 5 -p gre -j ACCEPT<\/p>\n<\/li>\n

    98. \n

      iptables -t nat -A POSTROUTING -o $ETH -j MASQUERADE<\/p>\n<\/li>\n

    99. \n

      iptables -I FORWARD -p tcp –syn -i ppp+ -j TCPMSS –set-mss 1356<\/p>\n<\/li>\n

    100. \n

      service iptables save<\/p>\n<\/li>\n

    101. \n

      sed -i 's@^-A INPUT -j REJECT –reject-with icmp-host-prohibited@#-A INPUT -j REJECT –reject-with icmp-host-prohibited@' \/etc\/sysconfig\/iptables<\/p>\n<\/li>\n

    102. \n

      sed -i 's@^-A FORWARD -j REJECT –reject-with icmp-host-prohibited@#-A FORWARD -j REJECT –reject-with icmp-host-prohibited@' \/etc\/sysconfig\/iptables<\/p>\n<\/li>\n

    103. \n

      service iptables restart<\/p>\n<\/li>\n

    104. \n

      chkconfig iptables on<\/p>\n<\/li>\n

    105. \n

      <\/p>\n<\/li>\n

    106. \n

      service pptpd restart<\/p>\n<\/li>\n

    107. \n

      chkconfig pptpd on<\/p>\n<\/li>\n

    108. \n

      clear<\/p>\n<\/li>\n

    109. \n

      <\/p>\n<\/li>\n

    110. \n

      echo -e "You can now connect to your VPN via your external IP \\033[32m${VPN_IP}\\033[0m"<\/p>\n<\/li>\n

    111. \n

      <\/p>\n<\/li>\n

    112. \n

      echo -e "Username: \\033[32m${VPN_USER}\\033[0m"<\/p>\n<\/li>\n

    113. \n

      echo -e "Password: \\033[32m${VPN_PASS}\\033[0m"<\/p>\n<\/li>\n<\/ol>\n<\/div>\n

      \u5185\u5bb9\u8f6c\u81ea\uff1a https:\/\/linuxeye.com\/<\/p>\n

      \u53c2\u8003\uff1ahttps:\/\/github.com\/drewsymo\/VPN<\/p>\n

      <\/p>\n","protected":false},"excerpt":{"rendered":"

      CentOS 6\u30017\u4e0bpptp vpn\u4e00\u952e\u5b89\u88c5\u811a\u672c\uff0c\u5b89\u88c5\u5982\u4e0b\uff1a wget http:\/\/m […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[57,420,421,376],"class_list":["post-61","post","type-post","status-publish","format-standard","hentry","category-2","tag-centos","tag-pptp","tag-vpn","tag-376"],"_links":{"self":[{"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/posts\/61","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=61"}],"version-history":[{"count":1,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/posts\/61\/revisions"}],"predecessor-version":[{"id":3395,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=\/wp\/v2\/posts\/61\/revisions\/3395"}],"wp:attachment":[{"href":"https:\/\/www.fatesky.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=61"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=61"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.fatesky.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=61"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}