#!/bin/bash
# clean
yum -y remove pptpd ppp
iptables --flush POSTROUTING --table nat
iptables --flush FORWARD
rm -rf /etc/pptpd.conf
rm -rf /etc/ppp
rm -rf /dev/ppp
# install component
yum install -y ppp pptpd
pass=qqqq
echo "qqqq pptpd ${pass} *" >> /etc/ppp/chap-secrets
echo "q pptpd q *" >> /etc/ppp/chap-secrets
# /etc/pptpd.conf
echo "localip 192.168.0.1" >> /etc/pptpd.conf
echo "remoteip 192.168.0.234-238" >> /etc/pptpd.conf
# /etc/ppp/options.pptpd
echo "ms-dns 114.114.114.114" >> /etc/ppp/options.pptpd
# /etc/sysctl.conf
echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf
#
chmod +x /etc/rc.d/rc.local
echo "mknod /dev/ppp c 108 0" >> /etc/rc.local
echo "iptables -A INPUT -p tcp --dport 22 -j ACCEPT" >> /etc/rc.local
echo "iptables -A INPUT -p tcp --dport 65522 -j ACCEPT" >> /etc/rc.local
echo "iptables -A INPUT -p tcp --dport 1723 -j ACCEPT" >> /etc/rc.local
echo "iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT" >> /etc/rc.local
echo "iptables -A INPUT -p gre -j ACCEPT" >> /etc/rc.local
echo "iptables -A OUTPUT -p gre -j ACCEPT" >> /etc/rc.local
echo "iptables -A FORWARD -p tcp --syn -s 192.168.0.0/24 -j TCPMSS --set-mss 1356" >> /etc/rc.local
echo "iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE" >> /etc/rc.local
# 开机自动启动
systemctl enable pptpd
echo "VPN service is installed"