CentOS7下pptp ***一键安装脚本

CentOS 6、7下pptp ***一键安装脚本，安装如下：

1. wget http://mirrors.linuxeye.com/scripts/***_centos.sh

2. chmod +x ./***_centos.sh

3. ./***_centos.sh

脚本内容如下（***_centos.sh）：

1. #!/bin/bash

2. #

3. # Author:  yeho

4. # Blog:  //blog.linuxeye.com

5. #

6. # Installs a PPTP ×××-only system for CentOS

7. 
   

8. # Check if user is root

9. [ $(id -u) != "0" ] && { echo -e "\033[31mError: You must be root to run this script\033[0m"; exit 1; }

10. 
    

11. export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

12. clear

13. printf "

14. #######################################################################

15. #    LNMP/LAMP/LANMP for CentOS/RadHat 5+ Debian 6+ and Ubuntu 12+    #

16. #            Installs a PPTP ×××-only system for CentOS               #

17. # For more information please visit //blog.linuxeye.com/31.html  #

18. #######################################################################

19. "

20. 
    

21. [ ! -e '/usr/bin/curl' ] && yum -y install curl

22. 
    

23. ×××_IP=`curl ipv4.icanhazip.com`

24. 
    

25. ×××_USER="linuxeye"

26. ×××_PASS="linuxeye"

27. 
    

28. ×××_LOCAL="192.168.0.150"

29. ×××_REMOTE="192.168.0.151-200"

30. 
    

31. 
    

32. while :; do echo

33.     read -p "Please input username: " ×××_USER

34.     [ -n "$×××_USER" ] && break

35. done

36. 
    

37. while :; do echo

38.     read -p "Please input password: " ×××_PASS

39.     [ -n "$×××_PASS" ] && break

40. done

41. clear

42. 
    

43. 
    

44. if [ -f /etc/redhat-release -a -n "`grep ' 7\.' /etc/redhat-release`" ];then

45.     #CentOS_REL=7

46.     if [ ! -e /etc/yum.repos.d/epel.repo ];then

47.         cat > /etc/yum.repos.d/epel.repo << EOF

48. [epel]

49. name=Extra Packages for Enterprise Linux 7 - \$basearch

50. #baseurl=http://download.fedoraproject.org/pub/epel/7/\$basearch

51. mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=\$basearch

52. failovermethod=priority

53. enabled=1

54. gpgcheck=0

55. EOF

56.     fi

57.     for Package in wget make openssl gcc-c++ ppp pptpd iptables iptables-services

58.     do

59.         yum -y install $Package

60.     done

61.     echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf

62. elif [ -f /etc/redhat-release -a -n "`grep ' 6\.' /etc/redhat-release`" ];then

63.     #CentOS_REL=6

64.     for Package in wget make openssl gcc-c++ iptables ppp

65.     do

66.         yum -y install $Package

67.     done

68.     sed -i '[email protected]_forward.*@net.ipv4.ip_forward = 1@g' /etc/sysctl.conf

69.     rpm -Uvh http://poptop.sourceforge.net/yum/stable/rhel6/pptp-release-current.noarch.rpm

70.     yum -y install pptpd

71. else

72.     echo -e "\033[31mDoes not support this OS, Please contact the author! \033[0m"

73.     exit 1

74. fi

75. 
    

76. echo "1" > /proc/sys/net/ipv4/ip_forward

77. 
    

78. sysctl -p /etc/sysctl.conf

79. 
    

80. [ -z "`grep '^localip' /etc/pptpd.conf`" ] && echo "localip $×××_LOCAL" >> /etc/pptpd.conf # Local IP address of your ××× server

81. [ -z "`grep '^remoteip' /etc/pptpd.conf`" ] && echo "remoteip $×××_REMOTE" >> /etc/pptpd.conf # Scope for your home network

82. 
    

83. if [ -z "`grep '^ms-dns' /etc/ppp/options.pptpd`" ];then

84.      cat >> /etc/ppp/options.pptpd << EOF

85. ms-dns 223.5.5.5 # Aliyun DNS Primary

86. ms-dns 114.114.114.114 # 114 DNS Primary

87. ms-dns 8.8.8.8 # Google DNS Primary

88. ms-dns 209.244.0.3 # Level3 Primary

89. ms-dns 208.67.222.222 # OpenDNS Primary

90. EOF

91. fi

92. 
    

93. echo "$×××_USER pptpd $×××_PASS *" >> /etc/ppp/chap-secrets

94. 
    

95. ETH=`route | grep default | awk '{print $NF}'`

96. [ -z "`grep '1723 -j ACCEPT' /etc/sysconfig/iptables`" ] && iptables -I INPUT 4 -p tcp -m state --state NEW -m tcp --dport 1723 -j ACCEPT

97. [ -z "`grep 'gre -j ACCEPT' /etc/sysconfig/iptables`" ] && iptables -I INPUT 5 -p gre -j ACCEPT

98. iptables -t nat -A POSTROUTING -o $ETH -j MASQUERADE

99. iptables -I FORWARD -p tcp --syn -i ppp+ -j TCPMSS --set-mss 1356

100. service iptables save

101. sed -i 's@^-A INPUT -j REJECT --reject-with icmp-host-prohibited@#-A INPUT -j REJECT --reject-with icmp-host-prohibited@' /etc/sysconfig/iptables

102. sed -i 's@^-A FORWARD -j REJECT --reject-with icmp-host-prohibited@#-A FORWARD -j REJECT --reject-with icmp-host-prohibited@' /etc/sysconfig/iptables

103. service iptables restart

104. chkconfig iptables on

105. 
     

106. service pptpd restart

107. chkconfig pptpd on

108. clear

109. 
     

110. echo -e "You can now connect to your ××× via your external IP \033[32m${×××_IP}\033[0m"

111. 
     

112. echo -e "Username: \033[32m${×××_USER}\033[0m"

113. echo -e "Password: \033[32m${×××_PASS}\033[0m"

参考：https://github.com/drewsymo/×××

转载于:https://blog.51cto.com/wjb10000/1788384