PPTP VPN 自动安装 脚本(CentOS6.0)

beyes

这个脚本适用于 CentOS6.0 ，自动生成密码和用户名。

[Plain Text] 纯文本查看 复制代码

yum remove -y pptpd ppp
iptables --flush POSTROUTING --table nat
iptables --flush FORWARD
rm -rf /etc/pptpd.conf
rm -rf /etc/ppp

wget [url=http://poptop.sourceforge.net/yum/stable/packages/dkms-2.0.17.5-1.noarch.rpm]http://poptop.sourceforge.net/yum/stable/packages/dkms-2.0.17.5-1.noarch.rpm[/url]
wget [url=http://poptop.sourceforge.net/yum/stable/packages/kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm]http://poptop.sourceforge.net/yum/stable/packages/kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm[/url]
wget [url=http://mirror.centos.org/centos/6/os/i386/Packages/ppp-2.4.5-5.el6.i686.rpm]http://mirror.centos.org/centos/6/os/i386/Packages/ppp-2.4.5-5.el6.i686.rpm[/url]
wget [url=http://poptop.sourceforge.net/yum/stable/packages/pptpd-1.3.4-2.el6.i686.rpm]http://poptop.sourceforge.net/yum/stable/packages/pptpd-1.3.4-2.el6.i686.rpm[/url]

yum -y install make libpcap iptables gcc-c++ logrotate tar cpio perl pam tcp_wrappers
rpm -ivh dkms-2.0.17.5-1.noarch.rpm
rpm -ivh kernel_ppp_mppe-1.0.2-3dkms.noarch.rpm
rpm -qa kernel_ppp_mppe
rpm -Uvh ppp-2.4.5-5.el6.i686.rpm
rpm -ivh pptpd-1.3.4-2.el6.i686.rpm

mknod /dev/ppp c 108 0
echo 1 > /proc/sys/net/ipv4/ip_forward
echo "mknod /dev/ppp c 108 0" >> /etc/rc.local
echo "echo 1 > /proc/sys/net/ipv4/ip_forward" >> /etc/rc.local
echo "localip 172.16.36.1" >> /etc/pptpd.conf
echo "remoteip 172.16.36.2-254" >> /etc/pptpd.conf
echo "ms-dns 8.8.8.8" >> /etc/ppp/options.pptpd
echo "ms-dns 8.8.4.4" >> /etc/ppp/options.pptpd

pass=`openssl rand 6 -base64`
if [ "$1" != "" ]
then pass=$1
fi

echo "vpn pptpd ${pass} *" >> /etc/ppp/chap-secrets

iptables -t nat -A POSTROUTING -s 172.16.36.0/24 -j SNAT --to-source `ifconfig  | grep 'inet addr:'| grep -v '127.0.0.1' | cut -d: -f2 | awk 'NR==1 { print $1}'`
iptables -A FORWARD -p tcp --syn -s 172.16.36.0/24 -j TCPMSS --set-mss 1356
service iptables save

chkconfig iptables on
chkconfig pptpd on

service iptables start
service pptpd start

echo "VPN service is installed, your VPN username is vpn, VPN password is ${pass}"

在有些 VPS 环境下，可能默认会设置好一条响应 “reject-with icmp-host-prohibited” 拒绝信息的规则导致了你的连接失败，粗暴的做法是将其删除：

iptables -nvL --line-number

iptables -D INPUT 10

其中 10 就是第一条命令所获取的行号。