Support: صفحه‌ای جدید حاوی 'Category:Linux
TOC

* Download Openvpn & Lzo from http://dag.wieers.com/packages/ * ...' ایجاد کرد

2011-09-18T11:13:46Z

صفحه‌ای جدید حاوی 'Category:Linux <div dir=rtl lang=en> __TOC__ </div> <div dir=ltr lang=en> * Download Openvpn & Lzo from http://dag.wieers.com/packages/ * ...' ایجاد کرد

صفحهٔ جدید

[[Category:Linux]]
<div dir=rtl lang=en>
__TOC__
</div>
<div dir=ltr lang=en>
* Download Openvpn & Lzo from
http://dag.wieers.com/packages/

* Install this rpms

* copy configuration file in /etc/openvpn/client.conf

* service openvpn start

==Adjusting this service with allow all ips pass from the tunnel or do not==
* nano /usr/local/sbin/cache_vpn

#!/bin/bash
if [ "$1" = "VPN" ] ; then
iptables -t mangle -A OUTPUT -p tcp --dport 80 -j MARK --set-mark 1
else
iptables -t mangle -D OUTPUT -p tcp --dport 80 -j MARK --set-mark 1
iptables -t mangle -D OUTPUT -p tcp --dport 80 -j MARK --set-mark 1
iptables -t mangle -D OUTPUT -p tcp --dport 80 -j MARK --set-mark 1
iptables -t mangle -D OUTPUT -p tcp --dport 80 -j MARK --set-mark 1
iptables -t mangle -D OUTPUT -p tcp --dport 80 -j MARK --set-mark 1
fi

* cd /usr/local/sbin
* chmod a+x cache_vpn
* nano /usr/local/sbin/setup_vpn_routes
#!/bin/bash
ip route add default via < ip of tunnel> table 11

* cd /usr/local/sbin
* chmod a+x setup_vpn_routes
* add this lines in client.conf
up-delay
up "/usr/local/sbin/setup_vpn_routes"

* add this lines in /etc/rc.local
ip rule add fwmark 1 table 11
ip route flush cache

* nano /var/www/html/openvpn/index.html
<html>
<body>
<form method=POST>
<input type=submit name="vpn" value="VPN">
<input type=submit name="no_vpn" value="NO_VPN">
<br>
<?php
if(isset($_REQUEST["vpn"]))
{
run("VPN");
}
else if (isset($_REQUEST["no_vpn"]))
{
run("NO_VPN");
}
function run($arg)
{
$ret=system("sudo /usr/local/sbin/cache_vpn {$arg}");
if($ret==0)
print "Successfully Changed to {$arg}";
else
print "Error Occured";
}
?>
</body>
</html>

==Adjusting openvpn is for passing a defined ip range from tunnel==

*alias an valid ip on NIC

*add this lines in /etc/squid/squid.conf

acl nofilter src <range of ip>
http_access allow nofilter
tcp_outgoing_address <valid ip > nofilter

*add this lines in /etc/rc.local

ip rule add from <valid ip > table N(number)
ip route flush cache

==adjusting this service is for the time when users must set proxy to pass from tunnel==
*alias an valid ip on NIC

*alias an ip on NIC for proxy

*add this lines in /etc/squid/squid.conf

acl openvpn myip <proxy ip >
tcp_outgoing_address <valid ip > openvpn

*add this line in router
ip route <proxy ip > 255.255.255.0 <ethenet 0>
</div>

OpenVPN - تاریخچهٔ ویرایش‌ها

Support: صفحه‌ای جدید حاوی 'Category:Linux __TOC__ * Download Openvpn & Lzo from http://dag.wieers.com/packages/ * ...' ایجاد کرد

Support: صفحه‌ای جدید حاوی 'Category:Linux
TOC

* Download Openvpn & Lzo from http://dag.wieers.com/packages/ * ...' ایجاد کرد