yum 安装pptpd

yum install ppp iptables

 

安装 pptpd

 

加入 yum 源加入 yum 源

 

rpm -Uvh http://poptop.sourceforge.net/yum/stable/rhel6/pptp-release-current.noarch.rpm

 

安装 pptpd

 

 

yum install pptpd

 

--------------------------------- 设置 ------------------------------------

 

开启路由转发

 

vim  /etc/sysctl.conf

 

修改

 

net.ipv4.ip_forward = 1

 

执行：

 

/sbin/sysctl -p 让修改的内核参数生效

 

配置

 

vim /etc/ppp/options.pptpd

 

修改：

 

ms-dns 202.106.0.20 当地能用的dns

 

ms-dns 8.8.8.8

 

vim  /etc/pptpd.conf

 

修改 :

 

localip 10.0.0.1 为vpn管道的ip （VPN主机IP）

 

remoteip 10.0.0.1-245 为给客户端连接分配的ip地址范围

 

开机启动、运行

 

 

chkconfig pptpd on

 

service pptpd start

 

添加账号

 

echo -e 'vpntest * vpntestpassword *' >> /etc/ppp/chap-secrets

 

注：chap-secrets保存的信息客户端连接信息依次是：用户名，服务名，密码，允许的ip。服务名在options.pptpd的name定义，默认为pptpd

iptables 设置：
# Enable Native Network Transfer
/sbin/iptables -A INPUT -i lo -j ACCEPT
# Accept Established Connections
/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# ICMP Control
/sbin/iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 10 -j ACCEPT
iptables -A OUTPUT -p tcp -m tcp -j ACCEPT
iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp -m multiport --dport 80,25,110,143,903,22,3306,1723 -j ACCEPT
iptables -I INPUT -p gre -j ACCEPT

iptables -t nat -A POSTROUTING -j MASQUERADE


#####  or  ######

# Generated by iptables-save v1.4.7 on Fri Nov 29 14:09:33 2013
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [20394:1441184]

-A INPUT -p gre -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -m limit --limit 1/sec --limit-burst 10 -j ACCEPT
-A INPUT -p tcp -m multiport --dports 47,1723 -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A FORWARD -p icmp -j ACCEPT
-A FORWARD -i lo -j ACCEPT
-A FORWARD -m state --state INVALID -j DROP
-A OUTPUT -p tcp -m tcp -j ACCEPT
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT

*nat
:PREROUTING ACCEPT [72480:6005057]
:POSTROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [1682:92102]
-A POSTROUTING -j MASQUERADE
COMMIT

# Completed on Fri Nov 29 14:09:33 2013