github/across
1
0
Fork 0
mirror of https://github.com/teddysun/across.git synced 2025-01-19 06:19:35 +08:00
Code Issues Packages Projects Releases Wiki Activity

changed installation log path to current folder

Browse Source 
added package "iptables" in Debian or Ubuntu
fixed xl2tpd.xml service problem in CentOS 7

Signed-off-by: Teddysun <i@teddysun.com>
This commit is contained in:
Teddysun 2017-05-28 22:54:17 +09:00
parent 855202d531
commit 673cd45162
No known key found for this signature in database
GPG Key ID: 09BD4C080AD6C46D
1 changed files with 32 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

56
l2tp.sh
View File

@ -255,11 +255,11 @@ install_l2tp(){
mknod /dev/random c 1 9 mknod /dev/random c 1 9
if check_sys packageManager apt;then if check_sys packageManager apt; then
apt-get -y update apt-get -y update
if debianversion 7;then if debianversion 7; then
if is_64bit;then if is_64bit; then
local libnspr4_filename1="libnspr4_4.10.7-1_amd64.deb" local libnspr4_filename1="libnspr4_4.10.7-1_amd64.deb"
local libnspr4_filename2="libnspr4-0d_4.10.7-1_amd64.deb" local libnspr4_filename2="libnspr4-0d_4.10.7-1_amd64.deb"
local libnspr4_filename3="libnspr4-dev_4.10.7-1_amd64.deb" local libnspr4_filename3="libnspr4-dev_4.10.7-1_amd64.deb"
@ -294,24 +294,34 @@ install_l2tp(){
download_file "${libnss3_filename5}" download_file "${libnss3_filename5}"
dpkg -i ${libnspr4_filename1} ${libnspr4_filename2} ${libnspr4_filename3} ${libnspr4_filename4} dpkg -i ${libnspr4_filename1} ${libnspr4_filename2} ${libnspr4_filename3} ${libnspr4_filename4}
dpkg -i ${libnss3_filename1} ${libnss3_filename2} ${libnss3_filename3} ${libnss3_filename4} ${libnss3_filename5} dpkg -i ${libnss3_filename1} ${libnss3_filename2} ${libnss3_filename3} ${libnss3_filename4} ${libnss3_filename5}
apt-get -y install wget gcc ppp flex bison make pkg-config libpam0g-dev libcap-ng-dev libcap-ng-utils libunbound-dev libevent-dev libcurl4-nss-dev libsystemd-daemon-dev
apt-get -y install wget gcc ppp flex bison make pkg-config libpam0g-dev libcap-ng-dev iptables \
libcap-ng-utils libunbound-dev libevent-dev libcurl4-nss-dev libsystemd-daemon-dev
else else
apt-get -y install wget gcc ppp flex bison make python libnss3-dev libnspr4-dev pkg-config libpam0g-dev libcap-ng-dev libcap-ng-utils libunbound-dev libnss3-tools libevent-dev libcurl4-nss-dev libsystemd-dev apt-get -y install wget gcc ppp flex bison make python libnss3-dev libnss3-tools libselinux-dev iptables \
libnspr4-dev pkg-config libpam0g-dev libcap-ng-dev libcap-ng-utils libunbound-dev \
libevent-dev libcurl4-nss-dev libsystemd-dev
fi fi
apt-get -y --no-install-recommends install xmlto apt-get -y --no-install-recommends install xmlto
apt-get -y install xl2tpd apt-get -y install xl2tpd
compile_install compile_install
elif check_sys packageManager yum; then elif check_sys packageManager yum; then
echo "Adding the EPEL repository..." echo "Adding the EPEL repository..."
yum -y install epel-release yum -y install epel-release
[ ! -f /etc/yum.repos.d/epel.repo ] && echo "Install EPEL repository failed, please check it." && exit 1
if centosversion 7; then if centosversion 7; then
yum -y install ppp libreswan xl2tpd firewalld yum -y install ppp libreswan xl2tpd firewalld
yum_install yum_install
elif centosversion 6; then elif centosversion 6; then
yum -y remove libevent-devel yum -y remove libevent-devel
yum -y install libevent2-devel yum -y install libevent2-devel
yum -y install gcc ppp iptables make gmp-devel xmlto bison flex libpcap-devel lsof yum -y install nss-devel nspr-devel pkgconfig pam-devel \
yum -y install xl2tpd curl-devel nss-devel nspr-devel pkgconfig pam-devel unbound-devel libcap-ng-devel libcap-ng-devel libselinux-devel lsof \
curl-devel flex bison gcc ppp make iptables gmp-devel \
fipscheck-devel unbound-devel xmlto libpcap-devel xl2tpd
compile_install compile_install
fi fi
fi fi
@ -414,7 +424,7 @@ compile_install(){
make programs && make install make programs && make install
/usr/local/sbin/ipsec --version >/dev/null 2>&1 /usr/local/sbin/ipsec --version >/dev/null 2>&1
if [ $? -ne 0 ];then if [ $? -ne 0 ]; then
echo "${libreswan_filename} install failed." echo "${libreswan_filename} install failed."
exit 1 exit 1
fi fi
@ -425,8 +435,7 @@ compile_install(){
sed -i 's/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/g' /etc/sysctl.conf sed -i 's/net.ipv4.ip_forward = 0/net.ipv4.ip_forward = 1/g' /etc/sysctl.conf
for each in `ls /proc/sys/net/ipv4/conf/` for each in `ls /proc/sys/net/ipv4/conf/`; do
do
echo "net.ipv4.conf.${each}.accept_source_route=0" >> /etc/sysctl.conf echo "net.ipv4.conf.${each}.accept_source_route=0" >> /etc/sysctl.conf
echo "net.ipv4.conf.${each}.accept_redirects=0" >> /etc/sysctl.conf echo "net.ipv4.conf.${each}.accept_redirects=0" >> /etc/sysctl.conf
echo "net.ipv4.conf.${each}.send_redirects=0" >> /etc/sysctl.conf echo "net.ipv4.conf.${each}.send_redirects=0" >> /etc/sysctl.conf
@ -437,7 +446,7 @@ compile_install(){
if centosversion 6; then if centosversion 6; then
[ -f /etc/sysconfig/iptables ] && cp -pf /etc/sysconfig/iptables /etc/sysconfig/iptables.old.`date +%Y%m%d` [ -f /etc/sysconfig/iptables ] && cp -pf /etc/sysconfig/iptables /etc/sysconfig/iptables.old.`date +%Y%m%d`
if [ "`/sbin/iptables-save | grep -c '^\-'`" = "0" ]; then if [ "`iptables -L -n | grep -c '\-\-'`" == "0" ]; then
cat > /etc/sysconfig/iptables <<EOF cat > /etc/sysconfig/iptables <<EOF
# Added by L2TP VPN script # Added by L2TP VPN script
*filter *filter
@ -487,7 +496,7 @@ EOF
else else
[ -f /etc/iptables.rules ] && cp -pf /etc/iptables.rules /etc/iptables.rules.old.`date +%Y%m%d` [ -f /etc/iptables.rules ] && cp -pf /etc/iptables.rules /etc/iptables.rules.old.`date +%Y%m%d`
if [ "`/sbin/iptables-save | grep -c '^\-'`" = "0" ]; then if [ "`iptables -L -n | grep -c '\-\-'`" == "0" ]; then
cat > /etc/iptables.rules <<EOF cat > /etc/iptables.rules <<EOF
# Added by L2TP VPN script # Added by L2TP VPN script
*filter *filter
@ -563,8 +572,7 @@ yum_install(){
echo "net.ipv4.icmp_echo_ignore_broadcasts=1" >> /etc/sysctl.conf echo "net.ipv4.icmp_echo_ignore_broadcasts=1" >> /etc/sysctl.conf
echo "net.ipv4.icmp_ignore_bogus_error_responses=1" >> /etc/sysctl.conf echo "net.ipv4.icmp_ignore_bogus_error_responses=1" >> /etc/sysctl.conf
for each in `ls /proc/sys/net/ipv4/conf/` for each in `ls /proc/sys/net/ipv4/conf/`; do
do
echo "net.ipv4.conf.${each}.accept_source_route=0" >> /etc/sysctl.conf echo "net.ipv4.conf.${each}.accept_source_route=0" >> /etc/sysctl.conf
echo "net.ipv4.conf.${each}.accept_redirects=0" >> /etc/sysctl.conf echo "net.ipv4.conf.${each}.accept_redirects=0" >> /etc/sysctl.conf
echo "net.ipv4.conf.${each}.send_redirects=0" >> /etc/sysctl.conf echo "net.ipv4.conf.${each}.send_redirects=0" >> /etc/sysctl.conf
@ -588,7 +596,7 @@ EOF
systemctl enable firewalld systemctl enable firewalld
systemctl status firewalld > /dev/null 2>&1 systemctl status firewalld > /dev/null 2>&1
if [ $? -eq 0 ];then if [ $? -eq 0 ]; then
firewall-cmd --reload firewall-cmd --reload
echo "Checking firewalld status..." echo "Checking firewalld status..."
firewall-cmd --list-all firewall-cmd --list-all
@ -600,7 +608,7 @@ EOF
else else
echo "Firewalld looks like not running, trying to start..." echo "Firewalld looks like not running, trying to start..."
systemctl start firewalld systemctl start firewalld
if [ $? -eq 0 ];then if [ $? -eq 0 ]; then
echo "Firewalld start successfully..." echo "Firewalld start successfully..."
firewall-cmd --reload firewall-cmd --reload
echo "Checking firewalld status..." echo "Checking firewalld status..."
@ -611,7 +619,7 @@ EOF
firewall-cmd --permanent --add-masquerade firewall-cmd --permanent --add-masquerade
firewall-cmd --reload firewall-cmd --reload
else else
echo "Failed to start firewalld. please enable port 500 4500 manually if necessary." echo "Failed to start firewalld. please enable udp port 500 4500 1701 manually if necessary."
fi fi
fi fi
@ -646,18 +654,18 @@ finally(){
echo "If there is no [FAILED] above, you can connect to your L2TP " echo "If there is no [FAILED] above, you can connect to your L2TP "
echo "VPN Server with the default Username/Password is below:" echo "VPN Server with the default Username/Password is below:"
echo echo
echo "ServerIP:${IP}" echo "Server IP: ${IP}"
echo "PSK:${mypsk}" echo "PSK : ${mypsk}"
echo "Username:${username}" echo "Username : ${username}"
echo "Password:${password}" echo "Password : ${password}"
echo echo
echo "If you want to modify user settings, please use command(s):" echo "If you want to modify user settings, please use below command(s):"
echo "l2tp -a (Add a user)" echo "l2tp -a (Add a user)"
echo "l2tp -d (Delete a user)" echo "l2tp -d (Delete a user)"
echo "l2tp -l (List all users)" echo "l2tp -l (List all users)"
echo "l2tp -m (Modify a user password)" echo "l2tp -m (Modify a user password)"
echo echo
echo "Welcome to visit https://teddysun.com/448.html" echo "Welcome to visit our website: https://teddysun.com/448.html"
echo "Enjoy it!" echo "Enjoy it!"
echo echo
} }
@ -769,7 +777,7 @@ fi
case ${action} in case ${action} in
install) install)
l2tp 2>&1 | tee /root/l2tp.log l2tp 2>&1 | tee ${cur_dir}/l2tp.log
;; ;;
-l|--list) -l|--list)
list_users list_users