|
首先下载:以下软件包 dkms-1.12-2.noarch.rpm kernel_ppp_mppe-0.0.4-2dkms.noarch.rpm ppp-2.4.3-0.cvs_20040527.2.fc2.i386.rpm pptpd-1.2.1-1.i386.rpm 依次安装这些软件包 2)配置/etc/pptpd.conf ################################################################################ # # Sample PoPToP configuration file # # for PoPToP version 1.1.4 # ################################################################################ # TAG: speed # # Specifies the speed for the PPP daemon to talk at. # #speed 115200 # TAG: option # # Specifies the location of the PPP options file. # By default PPP looks in '/etc/ppp/options' # #option /etc/ppp/options.pptpd # TAG: stimeout # # Specifies timeout (in seconds) on starting ctrl connection # # stimeout 10 # TAG: debug # # Turns on (more) debugging to syslog # #debug # TAG: bcrelay # # Turns on broadcast relay to clients from interface # Not yet implemented this way. Read README.bcrelay # #bcrelay eth1 # TAG: localip # TAG: remoteip # # Specifies the local and remote IP address ranges. # # You can specify single IP addresses seperated by commas or you can # specify ranges, or both. For example: # # 192.168.0.234,192.168.0.245-249,192.168.0.254 # # IMPORTANT RESTRICTIONS: # # 1. No spaces are permitted between commas or within addresses. # # 2. If you give more IP addresses than MAX_CONNECTIONS, it will # start at the beginning of the list and go until it gets # MAX_CONNECTIONS IPs. Others will be ignored. # # 3. No shortcuts in ranges! ie. 234-8 does not mean 234 to 238, # you must type 234-238 if you mean this. # # 4. If you give a single localIP, that's ok - all local IPs will # be set to the given one. You MUST still give at least one remote # IP for each simultaneous client. # option /etc/ppp/options.pptpd #localip 10.10.40.32 # remoteip 10.10.40.250-254 # or localip 192.168.0.1 remoteip 192.168.0.2-254 netmask 255.255.255.0 2) 配置 /etc/ppp/options.pptpd ## CHANGE TO SUIT YOUR SYSTEM lock ## turn pppd syslog debugging on debug dump logfd 2 logfile /var/log/pptpd.log ## change 'pptpd' to whatever you specify as your server name in chap-secrets name pptpd proxyarp #asyncmap auth # This option applies if you use ppp with chapms-strip-domain patch #chapms-strip-domain # These options apply if you use ppp with mppe patch # NB! You should also apply the ChapMS-V2 patch -chap -mschap +mschap-v2 require-mppe lcp-echo-failure 30 lcp-echo-interval 5 ipcp-accept-local ipcp-accept-remote #-chapms #+chapms-v2 #mppe-128 #mppe-stateless multilink 3) 配置 /etc/ppp/chap-secrets # Secrets for authentication using CHAP # client server secret IP addresses "vpn" pptpd "vpn" * # 帐号名 服务名 密码 自动分配IP地址 # +++ pptpconfig added for tunnel vpn vpn * # --- pptpconfig added for tunnel vpn 4) 启动NAT转发机制 echo 1 >; /proc/sys/net/ipv4/ip_forward /sbin/modprobe ip_tables /sbin/modprobe iptable_filter /sbin/modprobe iptable_nat /sbin/modprobe ip_conntrack /sbin/modprobe ip_conntrack_ftp /sbin/modprobe ip_nat_ftp /sbin/iptables --flush INPUT /sbin/iptables --flush FORWARD /sbin/iptables --flush POSTROUTING --table nat echo 2 >; /proc/sys/net/ipv4/ip_dynaddr echo 0 >; /proc/sys/net/ipv4/tcp_ecn echo 1 >; /proc/sys/net/ipv4/tcp_syncookies for f in /proc/sys/net/ipv4/conf/*/rp_filter; do echo 1 >; $f done echo 1 >; /proc/sys/net/ipv4/ip_forward iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE iptables -F FORWARD iptables -P FORWARD ACCEPT iptables -t nat -A POSTROUTING -j MASQUERADE iptables -F FORWARD iptables -A FORWARD -p udp -s 192.168.0.0/24 --dport 53 -j ACCEPT iptables -A FORWARD -p tcp -s 192.168.0.0/24 --dport 1723 -j ACCEPT iptables -A FORWARD -p gre -s 192.168.0.0/24 -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT 至此 VPN就配置通了 但是本人有一个问题: 还望高手解决 就是VPN的客户端在通过VPN连接FTP的时候 在LIST的时候 就无法出现文件列表 请问这个问题该如何解决 应该讲这个是IPTABLES里面的问题 (责任编辑：IT) |