私藏小福利，pptp+l2tp 一键安装包 首发

guaku

求VPN系统

guaku

1. #!/bin/bash
   
2. clear
   
3. if [ $(id -u) != "0" ]; then
   
4.     printf "Error: You must be root to run this tool!\n"
   
5.     exit 1
   
6. fi
   
7. 
   
8. host_ip=`ifconfig eth0 | awk '/inet addr/ {print $2}' | awk -F ':' '{print $2}'`
   
9. cur_dir=`pwd`
   
10. read -p "(Please input PSK: )" psk
    
11. if [ "$psk" = "" ]; then
    
12.         psk="fuck高墙"
    
13. fi
    
14. 
    
15. read -p "Enter vpn username: " username
    
16. if [ "$username" = "" ];then
    
17.         username="vpn"
    
18. fi
    
19. 
    
20. read -p "Enter vpn password: " userpsw
    
21. if [ "$userpsw" = "" ];then
    
22.         userpsw="vpn"
    
23. fi
    
24. 
    
25. clear
    
26. get_char()
    
27. {
    
28. SAVEDSTTY=`stty -g`
    
29. stty -echo
    
30. stty cbreak
    
31. dd if=/dev/tty bs=1 count=1 2> /dev/null
    
32. stty -raw
    
33. stty echo
    
34. stty $SAVEDSTTY
    
35. }
    
36. echo ""
    
37. echo "ServerIP:"
    
38. echo "$host_ip"
    
39. echo ""
    
40. echo "PSK:"
    
41. echo "$psk"
    
42. echo ""
    
43. echo "VPN Account:"
    
44. echo "$username"
    
45. echo ""
    
46. echo "Account Password:"
    
47. echo "$userpsw"
    
48. echo ""
    
49. echo "Press any key to start..."
    
50. char=`get_char`
    
51. clear
    
52. 
    
53. yum -y update
    
54. yum remove  -y pptpd ppp
    
55. yum install -y make gcc gmp-devel bison flex libpcap-devel ppp lsof perl iptables
    
56. yum install -y libpcap gcc-c++ logrotate tar cpio pam tcp_wrappers
    
57. 
    
58. wget http://fastlnmp.googlecode.com/files/dkms-2.0.17.5-1.noarch.rpm
    
59. wget http://fastlnmp.googlecode.com/files/kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
    
60. wget http://fastlnmp.googlecode.com/files/pptpd-1.3.4-1.rhel5.1.i386.rpm
    
61. 
    
62. rpm -ivh dkms-2.0.17.5-1.noarch.rpm
    
63. rpm -ivh kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
    
64. rpm -qa kernel_ppp_mppe
    
65. rpm -ivh pptpd-1.3.4-1.rhel5.1.i386.rpm
    
66. 
    
67. 
    
68. wget http://www.openswan.org/download/openswan-2.6.34.tar.gz
    
69. tar zxvf openswan-2.6.34.tar.gz
    
70. cd openswan-2.6.34/
    
71. make programs install
    
72. cd ../
    
73. 
    
74. cat > /etc/ipsec.conf <<EOF
    
75. version 2.0
    
76. config setup
    
77.     nat_traversal=yes
    
78.     virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
    
79.     oe=off
    
80.     protostack=netkey
    
81. 
    
82. conn L2TP-PSK-NAT
    
83.     rightsubnet=vhost:%priv
    
84.     also=L2TP-PSK-noNAT
    
85. 
    
86. conn L2TP-PSK-noNAT
    
87.     authby=secret
    
88.     pfs=no
    
89.     auto=add
    
90.     keyingtries=3
    
91.     rekey=no
    
92.     ikelifetime=8h
    
93.     keylife=1h
    
94.     type=transport
    
95.     left=$host_ip
    
96.     leftprotoport=17/1701
    
97.     right=%any
    
98.     rightprotoport=17/%any
    
99. EOF
    
100. 
     
101. cat > /etc/ipsec.secrets <<EOF
     
102. $host_ip %any: PSK "$psk"
     
103. EOF
     
104. 
     
105. for each in /proc/sys/net/ipv4/conf/*
     
106. do
     
107. echo 0 > $each/accept_redirects
     
108. echo 0 > $each/send_redirects
     
109. done
     
110. echo 1 > /proc/sys/net/core/xfrm_larval_drop
     
111. iptables --table nat --append POSTROUTING -o eth0 --jump MASQUERADE
     
112. 
     
113. service iptables save
     
114. service iptables restart
     
115. chkconfig iptables on
     
116. 
     
117. sed -i 's/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/g' /etc/sysctl.conf
     
118. sysctl -p
     
119. 
     
120. /etc/init.d/ipsec restart
     
121. ipsec verify
     
122. 
     
123. cd $cur_dir
     
124. wget http://downloads.sourceforge.net/project/rp-l2tp/rp-l2tp/0.4/rp-l2tp-0.4.tar.gz
     
125. tar zxvf rp-l2tp-0.4.tar.gz
     
126. cd rp-l2tp-0.4
     
127. ./configure
     
128. make
     
129. cp handlers/l2tp-control /usr/local/sbin/
     
130. mkdir /var/run/xl2tpd/
     
131. ln -s /usr/local/sbin/l2tp-control /var/run/xl2tpd/l2tp-control
     
132. 
     
133. cd $cur_dir
     
134. wget  http://fastlnmp.googlecode.com/files/xl2tpd-1.2.8.tar
     
135. tar zxvf xl2tpd-1.2.8.tar
     
136. cd xl2tpd-1.2.8
     
137. make install
     
138. cd ..
     
139. 
     
140. mkdir -p /etc/xl2tpd
     
141. touch /etc/xl2tpd/xl2tpd.conf
     
142. cat >> /etc/xl2tpd/xl2tpd.conf <<EOF
     
143. [global]
     
144. ipsec saref = yes
     
145. 
     
146. [lns default]
     
147. ip range = 10.85.91.10-10.85.91.254
     
148. local ip = 10.85.91.1
     
149. refuse chap = yes
     
150. refuse pap = yes
     
151. require authentication = yes
     
152. ppp debug = yes
     
153. pppoptfile = /etc/ppp/options.xl2tpd
     
154. length bit = yes
     
155. EOF
     
156. 
     
157. touch /etc/ppp/options.xl2tpd
     
158. cat >> /etc/ppp/options.xl2tpd <<EOF
     
159. require-mschap-v2
     
160. ms-dns 8.8.8.8
     
161. ms-dns 8.8.4.4
     
162. asyncmap 0
     
163. auth
     
164. crtscts
     
165. lock
     
166. hide-password
     
167. modem
     
168. debug
     
169. name l2tpd
     
170. proxyarp
     
171. lcp-echo-interval 30
     
172. lcp-echo-failure 4
     
173. EOF
     
174. 
     
175. mknod /dev/ppp c 108 0
     
176. echo "localip 10.85.92.1" >> /etc/pptpd.conf
     
177. echo "remoteip 10.85.92.10-254" >> /etc/pptpd.conf
     
178. echo "ms-dns 8.8.8.8" >> /etc/ppp/options.pptpd
     
179. echo "ms-dns 8.8.4.4" >> /etc/ppp/options.pptpd
     
180. 
     
181. chkconfig pptpd on
     
182. service pptpd restart
     
183. 
     
184. echo "$username l2tpd $userpsw *" >> /etc/ppp/chap-secrets
     
185. echo "$username pptpd $userpsw *" >> /etc/ppp/chap-secrets
     
186. /usr/local/sbin/xl2tpd
     
187. 
     
188. cat >> /etc/rc.local <<EOF
     
189. mknod /dev/ppp c 108 0
     
190. for each in /proc/sys/net/ipv4/conf/*
     
191. do
     
192.         echo 0 > \$each/accept_redirects
     
193.         echo 0 > \$each/send_redirects
     
194. done
     
195. echo 1 > /proc/sys/net/core/xfrm_larval_drop
     
196. /etc/init.d/ipsec restart
     
197. /usr/local/sbin/xl2tpd
     
198. EOF
     
199. 
     
200. clear
     
201. 
     
202. ipsec verify
     
203. 
     
204. printf "
     
205. if there are no [FAILED] above, then you can
     
206. connect to your L2TP&PPTP VPN Server with the default
     
207. user/pass below:
     
208. 
     
209. ServerIP:$host_ip
     
210. username:$username
     
211. password:$userpsw
     
212. PSK:$psk (for L2TP VPN)
     
213. "

复制代码

guaku

cdm 发表于 2012-3-19 08:50
亲~

亲，求VPN系统

飞天金猪

好东西  辛苦了

guaku

cdm 发表于 2012-3-19 08:58
论坛上有发whmcs接口了 亲

可以限制流量？

cnx

支持一下.