Ïðîøèâêà Îëåãà íà ðîóòåðå DIR-320

Ðåáÿò, ïîäñêàæèòå ïîæàëóéñòà, ÷òî ìîæåò áûòü? Äàâíî, åù¸ ëåòîì, ïðîøèëñÿ ïî èíñòðóêöèè ñ 'http://seculab.ru/dlink-320/'. Íà äíÿõ íåìíîãî íàïîðòà÷èë ñ íàñòðîéêàìè (ñóãóáî ÷åðåç âåá-èíòåðôåéñ), ñäåëàë ïîëíûé ñáðîñ. Åñòåññòâåííî Yota ïåðåñòàëà ïîäêëþ÷àòüñÿ(îðàíæåâàÿ ëàìïî÷êà). Ïîâòîðèë óêàçàííûå øàãè (òå, ÷òî ÷åðåç telnet), ïåðåçàãðóçèë - âðîäå áû ïîäêëþ÷èëîñü(ãîëóáàÿ ëàìïî÷êà), íî èíòåðíåòà íå äà¸ò :-( Ìîäåì ïîäêëþ÷åí/ïðîïëà÷åí, íàïðÿìóþ ñ êîìïîì âñ¸ ðàáîòàåò.  ÷åì ïðîáëåìà?
PS: åñëè íàäî êàêèå-ëèáî ëîãè - ïîäñêàæèòå, êîòîðûå è ãäå èõ èñêàòü.
PPS: óâû, â ëèíóõå íå ðàçáèðàþñü îò ñëîâà âîîáùå :-(

Quote:

---

Originally Posted by Dimorus

çíà÷èò ìíå â post mount íàäî áóäåò äîïèñàòü
sleep 30
è ïîòîì ïóòü äî ôàéëà?

---

íó íàïèñàë ÿ... ïåðåçàãðóçèë ðîóòåð... è ó ìåíÿ ñíîâà ñòàðûå äàííûå Â ÝÒÎÌ ÔÀÉËÅ....
ãäå ñîáàêà ïîðûëàñü?

Quote:

---

Originally Posted by Dimorus

íó íàïèñàë ÿ... ïåðåçàãðóçèë ðîóòåð... è ó ìåíÿ ñíîâà ñòàðûå äàííûå Â ÝÒÎÌ ÔÀÉËÅ....
ãäå ñîáàêà ïîðûëàñü?

---

À "ñïàñè è ñîõðàíè" äëÿ êîãî íàïèñàíî, ÷òî íóæíî äåëàòü? :D

Quote:

---

Originally Posted by JHBTYN

À "ñïàñè è ñîõðàíè" äëÿ êîãî íàïèñàíî, ÷òî íóæíî äåëàòü? :D

---

åñëè á ÿ åùå çíàë êàê ýòî ñäåëàòü....

Quote:

---

Originally Posted by Dimorus

åñëè á ÿ åùå çíàë êàê ýòî ñäåëàòü....

---

×èòàé FAQ flashfs save && flashfs commit && flashfs enable

Quote:

---

Originally Posted by Gair

Ðåáÿò, ïîäñêàæèòå ïîæàëóéñòà, ÷òî ìîæåò áûòü? Äàâíî, åù¸ ëåòîì, ïðîøèëñÿ ïî èíñòðóêöèè ñ 'http://seculab.ru/dlink-320/'. Íà äíÿõ íåìíîãî íàïîðòà÷èë ñ íàñòðîéêàìè (ñóãóáî ÷åðåç âåá-èíòåðôåéñ), ñäåëàë ïîëíûé ñáðîñ. Åñòåññòâåííî Yota ïåðåñòàëà ïîäêëþ÷àòüñÿ(îðàíæåâàÿ ëàìïî÷êà). Ïîâòîðèë óêàçàííûå øàãè (òå, ÷òî ÷åðåç telnet), ïåðåçàãðóçèë - âðîäå áû ïîäêëþ÷èëîñü(ãîëóáàÿ ëàìïî÷êà), íî èíòåðíåòà íå äà¸ò :-( Ìîäåì ïîäêëþ÷åí/ïðîïëà÷åí, íàïðÿìóþ ñ êîìïîì âñ¸ ðàáîòàåò.  ÷åì ïðîáëåìà?
PS: åñëè íàäî êàêèå-ëèáî ëîãè - ïîäñêàæèòå, êîòîðûå è ãäå èõ èñêàòü.
PPS: óâû, â ëèíóõå íå ðàçáèðàþñü îò ñëîâà âîîáùå :-(

---

Òóò âûì íèêòî íå ïîìîæåò. Õç ÷å âû òàì äåëàëè :) Åùå ðàç ñáðîñüòå â äåôîëò è íàñòðàèâàéòå ñ ñàìîãî íà÷àëà.

Quote:

---

Originally Posted by AndreyUA

×èòàé FAQ flashfs save && flashfs commit && flashfs enable

---

íàïèñàë , ñîõðàíèë...
â ôàéëèêå post-mount íàïèñàíî ñëåäóþùåå :


post-mount [----] 0 L:[ 1+ 0 1/ 5] *(0 / 75b)= # 35 0x23

Code:

---

#!/bin/sh

/opt/etc/init.d/rc.unslung start
sleep 30
/opt/openvpn.sh start

---

ïîñëå çàãðóçêè íå çàïóñêàåòñÿ VPN ... :(

Quote:

---

Originally Posted by Dimorus

íàïèñàë , ñîõðàíèë...
â ôàéëèêå post-mount íàïèñàíî ñëåäóþùåå :


post-mount [----] 0 L:[ 1+ 0 1/ 5] *(0 / 75b)= # 35 0x23

Code:

---

#!/bin/sh

/opt/etc/init.d/rc.unslung start
sleep 30
/opt/openvpn.sh start

---

ïîñëå çàãðóçêè íå çàïóñêàåòñÿ VPN ... :(

---

Ïîêàæèòå cat /opt/openvpn.sh

 ýòîò ôàéë äîáàâüòå ñòðî÷êó
logger " Starting OpenVPN "
È ñìîòðèòå â ëîãå ýòó ñòðî÷êó. Åñëè åå íåò, òî ñìîòðèòå post-mount. Çàïóñòèòå post-mount âðó÷íóþ, ïîñìîòðèòå ÷òî îí ãîâîðèò.

Quote:

---

Originally Posted by AndreyUA

Ïîêàæèòå cat /opt/openvpn.sh

 ýòîò ôàéë äîáàâüòå ñòðî÷êó
logger " Starting OpenVPN "
È ñìîòðèòå â ëîãå ýòó ñòðî÷êó. Åñëè åå íåò, òî ñìîòðèòå post-mount. Çàïóñòèòå post-mount âðó÷íóþ, ïîñìîòðèòå ÷òî îí ãîâîðèò.

---

â ôàéëå

openvpn.sh [----] 0 L:[ 1+ 0 1/ 9] *(0 / 192b)= # 35 0x23

Code:

---

#!/bin/sh

iptables -I INPUT 1 -p udp -s x.x.x.x --dport 1194 -j ACCEPT
iptables -I INPUT 1 -i tun0 -j ACCEPT
iptables -I FORWARD 1 -i tun0 -j ACCEPT

/opt/etc/init.d/S20openvpn start

---

ïðè÷åì êîãäà âðó÷íóþ çàïóñêàþ ýòîò ôàéë (openvpn.sh) òî âñå çàìå÷àòåëüíî....

è åñòü ëè ðàçíèöà êîãäà ôàéë ñî çâåçäî÷êîé è çåëåíûé?
â ïóòè ê ôàéëó íàäî ýòó çâåçäî÷êó óêàçûâàòü?

Quote:

---

Originally Posted by AndreyUA

Òóò âûì íèêòî íå ïîìîæåò. Õç ÷å âû òàì äåëàëè :) Åùå ðàç ñáðîñüòå â äåôîëò è íàñòðàèâàéòå ñ ñàìîãî íà÷àëà.

---

Ñïàñèáî. Ðàçîáðàëñÿ â èòîãå î÷èñòêîé ôëåøà è ïðîøèâêîé çàíîâî =)

Quote:

---

Originally Posted by Omega

À ìàðøðóòèçàöèÿ ïðàâèëüíî ïðîïèñàíà ? ;) Íà êîìïå ñäåëàëè route -f ? :D

---

ìàðøðóòèçàöèþ ðîóòåð ñàì çàáàöàë, ÿ íè÷å íå ââîäèë...

ðîóò ô ñäåëàë, íå ïîìîãëî, äà è íå äîëæíî áûëî ïîìî÷ü, ìàðøðóòû òî íå ââîäèë ÿ, à çíà÷èò è ñáðàñûâàòü íå÷åãî

Quote:

---

Destination Gateway Genmask Flags Metric Ref Use Iface
195.14.50.16 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
217.118.84.35 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
217.118.84.134 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
217.118.84.167 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
194.67.1.203 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
194.67.18.19 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
10.10.0.9 10.6.34.1 255.255.255.255 UGH 1 0 0 WAN vlan1
172.16.255.10 10.6.34.1 255.255.255.255 UGH 2 0 0 WAN vlan1
194.67.1.32 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
194.67.1.114 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
10.10.0.10 10.6.34.1 255.255.255.255 UGH 1 0 0 WAN vlan1
85.21.79.38 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
85.21.78.93 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
85.21.78.139 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
217.118.84.218 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
217.118.84.249 10.6.34.1 255.255.255.255 UGH 0 0 0 WAN vlan1
217.30.243.144 10.6.34.1 255.255.255.252 UG 0 0 0 WAN vlan1
85.21.72.80 10.6.34.1 255.255.255.240 UG 0 0 0 WAN vlan1
217.30.243.112 10.6.34.1 255.255.255.240 UG 0 0 0 WAN vlan1
217.30.244.64 10.6.34.1 255.255.255.224 UG 0 0 0 WAN vlan1
192.168.1.0 * 255.255.255.0 U 0 0 0 LAN br0
78.107.52.0 10.6.34.1 255.255.255.0 UG 0 0 0 WAN vlan1
10.6.34.0 * 255.255.254.0 U 0 0 0 WAN vlan1
default 172.16.255.10 0.0.0.0 UG 0 0 0 WAN ppp0
default 10.6.34.1 0.0.0.0 UG 1 0 0 WAN vlan1

---

Quote:

---

Originally Posted by Dimorus

íàïèñàë , ñîõðàíèë...
â ôàéëèêå post-mount íàïèñàíî ñëåäóþùåå :


post-mount [----] 0 L:[ 1+ 0 1/ 5] *(0 / 75b)= # 35 0x23

Code:

---

#!/bin/sh

/opt/etc/init.d/rc.unslung start
sleep 30
/opt/openvpn.sh start

---

ïîñëå çàãðóçêè íå çàïóñêàåòñÿ VPN ... :(

---

start ïîñëå /opt/openvpn.sh íå íóæíî ïèñàòü. Âñå ÷òî â ïàïêå init.d ñòàðòóåò àâòîìàòîì, ïîýòîìó âîçìîæíî ó âàñ äâàæäû ñòàðòóåò îäèí è òîò æå ôàéë. ß áû íà âàøåì ìåñòå èç post-mount óáðàë çàïóñê openvpn.sh, à

Code:

---

iptables -I INPUT 1 -p udp -s x.x.x.x --dport 1194 -j ACCEPT
iptables -I INPUT 1 -i tun0 -j ACCEPT
iptables -I FORWARD 1 -i tun0 -j ACCEPT

---

Çàïèõíóë áû â êîíöå ñåêöèè start ôàéëà S20openvpn

Quote:

---

Originally Posted by AndreyUA

start ïîñëå /opt/openvpn.sh íå íóæíî ïèñàòü. Âñå ÷òî â ïàïêå init.d ñòàðòóåò àâòîìàòîì, ïîýòîìó âîçìîæíî ó âàñ äâàæäû ñòàðòóåò îäèí è òîò æå ôàéë. ß áû íà âàøåì ìåñòå èç post-mount óáðàë çàïóñê openvpn.sh, à

Code:

---

iptables -I INPUT 1 -p udp -s x.x.x.x --dport 1194 -j ACCEPT
iptables -I INPUT 1 -i tun0 -j ACCEPT
iptables -I FORWARD 1 -i tun0 -j ACCEPT

---

Çàïèõíóë áû â êîíöå ñåêöèè start ôàéëà S20openvpn

---

ñòàðò óáðàë íå ïîìîãëî...

à ïî÷åìó èìåííî â êîíåö òîãî ôàéëà ïèõàòü?

Quote:

---

Originally Posted by Dimorus

ñòàðò óáðàë íå ïîìîãëî...

à ïî÷åìó èìåííî â êîíåö òîãî ôàéëà ïèõàòü?

---

Íå â êîíåö ôàéëà, à â êîíåö ñåêöèè start. Ó âàñ íà 20-îé ñåêóíäå ñòàðòóåò ôàéë S20openvpn è â post-boot âû ñòàðòóåòå ñêðèïò ñ ñïðàâèëàìè iptables äëÿ íåñóùåñòâóþùåãî èíòåðôåéñà tun0, ïîòîì îïÿòü çàïóñêàåòå ôàéë S20openvpn. Â êîíåö ñåêöèè ñòàðò äëÿ òîãî ÷òîáû ïðèìåíèòü ïðàâèëà iptables ïîñëå ïîäíÿòèÿ èíòåðôåéñà. Âîîáùå, äëÿ ïðàâèë iptables åñòü ñïåöèàëüíûé ôàéë post-firewall . Óáèðàéòå âñå ýòè êîñòûëè.

PS Ïîêàæèòå âàø ôàéë S20openvpn

Quote:

---

Originally Posted by AndreyUA

Íå â êîíåö ôàéëà, à â êîíåö ñåêöèè start. Ó âàñ íà 20-îé ñåêóíäå ñòàðòóåò ôàéë S20openvpn è â post-boot âû ñòàðòóåòå ñêðèïò ñ ñïðàâèëàìè iptables äëÿ íåñóùåñòâóþùåãî èíòåðôåéñà tun0, ïîòîì îïÿòü çàïóñêàåòå ôàéë S20openvpn. Â êîíåö ñåêöèè ñòàðò äëÿ òîãî ÷òîáû ïðèìåíèòü ïðàâèëà iptables ïîñëå ïîäíÿòèÿ èíòåðôåéñà. Âîîáùå, äëÿ ïðàâèë iptables åñòü ñïåöèàëüíûé ôàéë post-firewall . Óáèðàéòå âñå ýòè êîñòûëè.

PS Ïîêàæèòå âàø ôàéë S20openvpn

---

post-firewall ó ìåíÿ âîîáùå ïóñòîé....

ôàéë S20openvpn âîò îí:

Code:

---

#!/bin/sh
#
# Startup script for openvpn as standalone server
#


# Make sure IP forwarding is enabled
echo 1 > /proc/sys/net/ipv4/ip_forward

# Make device if not present (not devfs)
if ( [ ! -c /dev/net/tun ] ) then
  # Make /dev/net directory if needed
  if ( [ ! -d /dev/net ] ) then
<------>mkdir -m 755 /dev/net
  fi
  mknod /dev/net/tun c 10 200
fi

# Make sure the tunnel driver is loaded
if ( !(lsmod | grep -q "^tun") ); then
<------>insmod tun
fi

# I you want a standalone server (not xinetd), comment out the return statement below
#return 0


## This is for standalone servers only!!!!
# Kill old server if still there
if [ -n "`pidof openvpn`" ]; then
    /bin/killall openvpn 2>/dev/null
fi

# Start afresh - add as many daemons as you want
/opt/sbin/openvpn --daemon --cd /opt/etc/openvpn --config openvpn.conf

iptables -I INPUT 1 -p udp -s x.x.x.x --dport 1194 -j ACCEPT
iptables -I INPUT 1 -i tun0 -j ACCEPT
iptables -I FORWARD 1 -i tun0 -j ACCEPT

---