Fedora 2下面架设VPN的全过程

时间:2016-05-26 02:02 来源:linux.it.net.cn 作者:IT

首先下载:以下软件包
dkms-1.12-2.noarch.rpm
kernel_ppp_mppe-0.0.4-2dkms.noarch.rpm
ppp-2.4.3-0.cvs_20040527.2.fc2.i386.rpm
pptpd-1.2.1-1.i386.rpm
依次安装这些软件包
2)配置/etc/pptpd.conf

################################################################################
#
# Sample PoPToP configuration file
#
# for PoPToP version 1.1.4
#
################################################################################

# TAG: speed
#
#       Specifies the speed for the PPP daemon to talk at.
#
#speed 115200

# TAG: option
#
#       Specifies the location of the PPP options file.
#       By default PPP looks in '/etc/ppp/options'
#
#option /etc/ppp/options.pptpd

# TAG: stimeout
#
#       Specifies timeout (in seconds) on starting ctrl connection
#
# stimeout 10

# TAG: debug
#
#       Turns on (more) debugging to syslog
#
#debug

# TAG: bcrelay ;
#
#       Turns on broadcast relay to clients from interface ;
#       Not yet implemented this way. Read README.bcrelay
#
#bcrelay eth1

# TAG: localip
# TAG: remoteip
#
#       Specifies the local and remote IP address ranges.
#
#       You can specify single IP addresses seperated by commas or you can
#       specify ranges, or both. For example:
#
#               192.168.0.234,192.168.0.245-249,192.168.0.254
#
#       IMPORTANT RESTRICTIONS:
#
#       1. No spaces are permitted between commas or within addresses.
#
#       2. If you give more IP addresses than MAX_CONNECTIONS, it will
#          start at the beginning of the list and go until it gets
#          MAX_CONNECTIONS IPs. Others will be ignored.

#
#       3. No shortcuts in ranges! ie. 234-8 does not mean 234 to 238,
#          you must type 234-238 if you mean this.
#
#       4. If you give a single localIP, that's ok - all local IPs will
#          be set to the given one. You MUST still give at least one remote
#          IP for each simultaneous client.
#
option /etc/ppp/options.pptpd
#localip 10.10.40.32
# remoteip 10.10.40.250-254
# or
localip 192.168.0.1
remoteip 192.168.0.2-254
netmask 255.255.255.0

2) 配置 /etc/ppp/options.pptpd
## CHANGE TO SUIT YOUR SYSTEM
lock

## turn pppd syslog debugging on
debug
dump
logfd 2
logfile /var/log/pptpd.log

## change 'pptpd' to whatever you specify as your server name in chap-secrets
name pptpd

proxyarp
#asyncmap

auth

# This option applies if you use ppp with chapms-strip-domain patch
#chapms-strip-domain

# These options apply if you use ppp with mppe patch
# NB! You should also apply the ChapMS-V2 patch
-chap
-mschap
+mschap-v2
require-mppe
lcp-echo-failure 30
lcp-echo-interval 5
ipcp-accept-local
ipcp-accept-remote

#-chapms
#+chapms-v2
#mppe-128
#mppe-stateless
multilink
3) 配置 /etc/ppp/chap-secrets
# Secrets for authentication using CHAP
# client        server  secret                  IP addresses
"vpn"   pptpd "vpn"  *
# 帐号名服务名  密码自动分配IP地址

# +++ pptpconfig added for tunnel vpn
vpn  *
# --- pptpconfig added for tunnel vpn

4) 启动NAT转发机制
echo 1 >; /proc/sys/net/ipv4/ip_forward
/sbin/modprobe ip_tables
/sbin/modprobe iptable_filter
/sbin/modprobe iptable_nat
/sbin/modprobe ip_conntrack
/sbin/modprobe ip_conntrack_ftp
/sbin/modprobe ip_nat_ftp
/sbin/iptables --flush INPUT
/sbin/iptables --flush FORWARD
/sbin/iptables --flush POSTROUTING --table nat
echo 2 >; /proc/sys/net/ipv4/ip_dynaddr

echo 0 >; /proc/sys/net/ipv4/tcp_ecn

echo 1 >; /proc/sys/net/ipv4/tcp_syncookies

for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
        echo 1 >; $f
done
echo 1 >; /proc/sys/net/ipv4/ip_forward

iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE
iptables -F FORWARD
iptables -P FORWARD ACCEPT

iptables -t nat -A POSTROUTING -j MASQUERADE
iptables -F FORWARD
iptables -A FORWARD -p udp -s 192.168.0.0/24 --dport 53 -j ACCEPT
iptables -A FORWARD -p tcp -s 192.168.0.0/24 --dport 1723 -j ACCEPT
iptables -A FORWARD -p gre -s 192.168.0.0/24 -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

至此 VPN就配置通了
但是本人有一个问题:
还望高手解决
就是VPN的客户端在通过VPN连接FTP的时候在LIST的时候就无法出现文件列表请问这个问题该如何解决应该讲这个是IPTABLES里面的问题

(责任编辑：IT)