openvpn搭建

整理命令
官网安装openvpn
https://openvpn.net/
摘抄如下4条命令
1.安装依赖
apt update && apt -y install ca-certificates wget net-tools gnupg
2.下载apt源
wget https://as-repository.openvpn.net/as-repo-public.asc -qO /etc/apt/trusted.gpg.d/as-repository.asc
3.修改apt源
echo "deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/as-repository.asc] http://as-repository.openvpn.net/as/debian jammy main">/etc/apt/sources.list.d/openvpn-as-repo.list
4.安装openvpn，在安装打印日志中找admin web访问地址和 client web访问地址，账号和密码
apt update && apt -y install openvpn-as

5.登录admin web访问地址修改设置：
1)Server Network Settings 中修改 Hostname or IP Address: 为公网ip地址，同时可以修改TCP端口
2)VPN Settings中修改dns为 8.8.8.8 和 180.76.76.76

6.配置端口转发

1)确保在服务器上启用了IP转发。这可以通过编辑/etc/sysctl.conf文件并设置net.ipv4.ip_forward=1来实现。之后，运行sudo sysctl -p来应用更改

2)端口转发

iptables -t nat -A PREROUTING -p tcp --dport 31401 -j REDIRECT --to-port 31400 && \
iptables -t nat -A PREROUTING -p tcp --dport 31402 -j REDIRECT --to-port 31400 && \
iptables -t nat -A PREROUTING -p tcp --dport 31403 -j REDIRECT --to-port 31400 && \
iptables -t nat -A PREROUTING -p tcp --dport 31404 -j REDIRECT --to-port 31400 && \
iptables -t nat -A PREROUTING -p tcp --dport 31405 -j REDIRECT --to-port 31400 && \
iptables -t nat -A PREROUTING -p tcp --dport 31406 -j REDIRECT --to-port 31400 && \
iptables -t nat -A PREROUTING -p tcp --dport 31407 -j REDIRECT --to-port 31400 && \
iptables -t nat -A PREROUTING -p tcp --dport 31408 -j REDIRECT --to-port 31400 && \
iptables -t nat -A PREROUTING -p tcp --dport 31409 -j REDIRECT --to-port 31400

3)ubuntu iptables保存重启生效 4条命令
sudo iptables-save > /etc/iptables/rules.v4
sudo nano /etc/rc.local
iptables-restore < /etc/iptables/rules.v4
sudo chmod +x /etc/rc.local

sudo iptables-save > /etc/iptables/rules.v4
sudo ip6tables-save > /etc/iptables/rules.v6

查看端口转发：

Open Port Checker & Scanner | Test Port Forwarding | Internet Protocol Tools (ipfingerprints.com)

AI工具：

Cici

Coze

ChatGPT (openai.com)

备注其他命令：

Admin  UI: https://8.222.165.63:943/admin
Client UI: https://8.222.165.63:943/
openvpn
WT74gfK0GIoG

https://8.222.165.63:943/download_installer?type=win_v3

172.27.224.3

sudo iptables -t nat -A POSTROUTING -s 172.27.224.0/24 -o eth0 -j MASQUERADE

sudo iptables -t nat -A PREROUTING -p tcp --dport 31401 -j DNAT --to-destination 127.0.0.1:31400
sudo iptables -t nat -A PREROUTING -p tcp --dport 31401 -j DNAT --to-destination 172.23.99.242:31400
配置端口转发
iptables -t nat -A PREROUTING -p tcp --dport 31401 -j REDIRECT --to-port 31400

sudo sysctl net.ipv4.ip_forward=1
sudo iptables -A FORWARD -p tcp --dport 31400 -j ACCEPT
sudo sh -c "iptables-save > /etc/iptables.conf"
sudo iptables -t nat -A POSTROUTING -j MASQUERADE
sudo iptables -A INPUT -p tcp --dport 31401 -j ACCEPT
sudo iptables-save | sudo tee /etc/iptables/rules.v4

删除规则

sudo iptables -L --line-numbers
sudo iptables -D 
sudo iptables -L FORWARD --line-numbers
sudo iptables -D FORWARD
sudo iptables -t nat -L PREROUTING --line-numbers
sudo iptables -t nat -D PREROUTING 2

修改位置
sudo iptables -t nat -D PREROUTING 2
sudo iptables -t nat -I PREROUTING 1 -p tcp --dport 31401 -j DNAT --to-destination 172.23.99.242:31400

保存iptables
sudo iptables-save > /etc/iptables/rules.v4

经验证，端口转发后，不能telnet内网ip，只能telnet公网ip

telnet 172.23.99.242 31401

重启网络
sudo systemctl restart systemd-networkd