1.0

vpn_centos_91yun.sh

@@ -0,0 +1,103 @@
+#!/bin/bash
+
+function installVPN(){
+	echo "begin to install VPN services";
+	#check wether vps suppot ppp and tun
+
+	#判断centos版本
+	yum install redhat-lsb -y
+	yum install wget vim curl -y
+	ver1str="lsb_release -rs | awk -F '.' '{ print \$1}'"
+	ver1=$(eval $ver1str)
+	if [ "$ver1" == "6" ]; then
+		rpm -Uvh http://download.fedoraproject.org/pub/epel/epel-release-latest-6.noarch.rpm
+	elif [ "$ver1" == "5" ]; then
+		rpm -Uvh http://download.fedoraproject.org/pub/epel/epel-release-latest-5.noarch.rpm
+	elif [ "$ver1" == "7" ]; then
+		rpm -Uvh http://download.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
+		#centos7要安装iptables把默认防火墙关了。
+		yum install iptables-services -y
+		yum install policycoreutils -y
+		systemctl stop firewalld
+		systemctl mask firewalld
+	fi
+
+	#先删除已经安装的pptpd和ppp
+	yum remove -y pptpd ppp
+	iptables --flush POSTROUTING --table nat
+	iptables --flush FORWARD
+	rm -rf /etc/pptpd.conf
+	rm -rf /etc/ppp
+
+
+
+
+
+
+	//rpm -Uvh http://poptop.sourceforge.net/yum/stable/rhel6/pptp-release-current.noarch.rpm
+	yum install -y ppp pptpd
+
+	#写配置文件
+	mknod /dev/ppp c 108 0 
+	echo 1 > /proc/sys/net/ipv4/ip_forward 
+	echo "mknod /dev/ppp c 108 0" >> /etc/rc.local
+	echo "echo 1 > /proc/sys/net/ipv4/ip_forward" >> /etc/rc.local
+	echo "localip 172.16.36.1" >> /etc/pptpd.conf
+	echo "remoteip 172.16.36.2-254" >> /etc/pptpd.conf
+	echo "ms-dns 8.8.8.8" >> /etc/ppp/options.pptpd
+	echo "ms-dns 8.8.4.4" >> /etc/ppp/options.pptpd
+
+	pass=`openssl rand 6 -base64`
+	if [ "$1" != "" ]
+	then pass=$1
+	fi
+
+	echo "vpn pptpd ${pass} *" >> /etc/ppp/chap-secrets
+
+	iptables -t nat -A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source `curl ip.cn | awk -F ' |：' '{print $3}'`
+	iptables -A FORWARD -p tcp --syn -s 172.16.36.0/24 -j TCPMSS --set-mss 1356
+	iptables -I INPUT -p gre -j ACCEPT
+	iptables -I INPUT -p tcp -m tcp --dport 1723 -j ACCEPT
+	service iptables save
+
+	if [ "ver1" == "7"]; then
+		systemctl enable iptables.service
+		systemctl enable pptpd.service
+		systemctl restart iptables.service
+		systemctl restart pptpd.service
+	else
+		chkconfig iptables on
+		chkconfig pptpd on
+		service iptables start
+		service pptpd start		
+	fi
+
+
+
+	echo "================================================"
+	echo "感谢使用www.91yun.org提供的pptpd vpn一键安装包"
+	echo -e "VPN的初始用户名是：\033[41;37m vpn  \033[0m, 初始密码是： \033[41;37m ${pass}  \033[0m"
+	echo "你也可以直接 vi /etc/ppp/chap-secrets修改用户名和密码"	
+	echo "================================================"
+}
+
+function addVPNuser(){
+	echo "input user name:"
+	read username
+	echo "input password:"
+	read userpassword
+	echo "${username} pptpd ${userpassword} *" >> /etc/ppp/chap-secrets
+	service iptables restart
+	service pptpd start
+}
+
+echo "which do you want to?input the number."
+echo "1. install VPN service"
+echo "2. add VPN user"
+read num
+
+case "$num" in
+[1] ) (installVPN);;
+[2] ) (addVPNuser);;
+*) echo "nothing,exit";;
+esac