POPTOP install (óñòàíîâêà â îñíîâíóþ ïàìÿòü)

[Wolfgun]

PopTop Installation IMHO
Ïðåäûñòîðèÿ
Âñå íà÷àëîñü ñ òîãî ÷òî òðåáîâàëîñü îðãàíèçîâàòü äîñòóï ê âíóòðåííåé ñåòè, ñòàíäàðòíûìè ñðåäñòâàìè windows ( 98 % ó ìåíÿ ñ ñîáîé íîóò ) íàïðèìåð èç èíòåðíåò-êàôå, OpenVPN ìíå íå ïîäõîäèë(êîíå÷íî ìîæíî òàñêàòü ôëåøêó ñ äèñòðèáóòèâîì è ñåðòèôèêàòîì ÍÎ!!)
Òàê êàê âíÿòíî îòâåòèòü êàê ïîñòàâèòü äàííîå ÷óäî(POPTOP) íà Asus Wl500gp íå êòî íå ìîã, à â ðóññêîì ôîðóìå áîëüøå âîïðîñîâ, ÷åì îòâåòîâ, ïðèøëîñü ðàçáèðàåòñÿ ñàìîìó (à â Linux ÿ ïðàêòè÷åñêè íîëü).
Ñðàçó ïðåäóïðåæäàþ ÷òî ðàáîòàåò POPTOP íà ïðîøèâêè Îëåãà 1.9.2.7.-10 è ×åøñêîé íå ñòàáèëüíî, âåðíåå ñòàáèëüíî ñ 4-5 ïîïûòêå, íî íå îòâàëèâàåòñÿ. Ïðè÷èíà òàêîãî íå ñòàáèëüíîãî ïîâåäåíèÿ ñòàðûé ìîäóëè IPTABLES.
Íà ïðîøèâêè lly & TheMiron âñå ïðåêðàñíî ðàáîòàåò ïðîâåðÿëîñü íà R160 è R191, çà ÷òî èì îãðîìíîå ñïàñèáî.
Èñõîäíûå äàííûå
Ëîêàëüíàÿ ñåòü-192.168.40.240/28
Íàñòðîéêè DHCP- 192.168.40.242-247
Ñåðâåð (wl500gp)-192.168.40.241
Íàñòðîéêè VPN
VPN ñåðâåð -192.168.40.250
VPN êëèåíòû-192.168.40.251-253
Äëÿ îáëåã÷åíèÿ âñåãî ïðîöåññà óñòàíîâêè íàïèñàë ñêðèïò êîòîðûé ïðèâîæó íèæå, òå êòî õî÷åò, ìîæåò ââîäèòü ðóêàìè ( ïåðâûé ðàç äàæå æåëàòåëüíî!!!). Äëÿ óñòàíîâêè íàì ïîíàäîáèòñÿ ÷èñòàÿ ôëåøêà. Ñêîïèðóéòå ôàéëû íà ÷èñòóþ ôëåøêó è â òåëíåòå âûïîëíèòå ñëåäóþùóþ êîìàíäó

chmod +x /tmp/mnt/disc0/install-poptop
/tmp/mnt/disc0/install-poptop

Âîò ñàì ñêðèïò

#!/bin/sh

# Èçìåíèòå êðàñíûé òåêñ íà ñâîè ïàðàìåòðû
# Change the red text in your settings

# Ñîçäàåì äèðåêòîðèþ êóäà âñå áóäåì ñòàâèòü
# Create istall directory
mkdir /tmp/local/opt

# Ìîíòèðóåì åå â /opt
# Mount it in / opt
mount /tmp/local/opt /opt

# Îáíîâëÿåì ñïèñîê äîñòóïíûõ äëÿ óñòàíîâêè ïàêåòîâ
# update a list of available packages for installation
ipkg.sh update

# Óñòàíàâëèâàåì óñòàíîâùèê ïàêåòîâ ipkg
# Install the installer package ipkg
ipkg.sh install ipkg-opt

# Îáíîâëÿåì ñïèñîê äîñòóïíûõ äëÿ óñòàíîâêè ïàêåòîâ
# Refreshes the list of available packages for installation
ipkg update

# ñòàâèì poptop
# install poptop
ipkg install poptop

# ñîçäàåì äèðåêòîðèþ Var, ÷òîá â ëîãàõ íå ðóãàëñÿ íà åå îòñóòñòâèå
# Make a directory Var
mkdir /opt/var/
mkdir /opt/var/run/

# Êîììåíòèðóåì íå íóæíîå
# Comment is not correct
sed -i 's/logwtmp/# logwtmp/g' /opt/etc/pptpd.conf
# Äîáàâëÿåì IP VPN ñåðâåðà è ñåòè
# Add IP VPN server, and  VPN network
echo "localip 192.168.40.250
remoteip 192.168.40.251-253" >> /opt/etc/pptpd.conf

# Äîáàâëÿåì äàííûå â options.pptpd
# Add  data in the options.pptpd
sed -i '67 a\ms-dns 192.168.40.241' /opt/etc/ppp/options.pptpd
echo "
novj
novjccomp

# Disable change default route
nodefaultroute" >> /opt/etc/ppp/options.pptpd


# Äîáàâëÿåì äàííûå /tmp/ppp/chap-secrets
# * îçíà÷àåò ïðèñâàåíèå äîñòóïíîãî IP àäðåñà èç äîñòóïíîãî äèàïîçîíà
# add data / tmp / ppp / chap-secrets
# * Available from the VPN IP address range
echo "# PPP CHAP secrets file.
# See pppd(1) for file format.

# Secrets for authentication using CHAP
# client        server  secret      IP addresses
test            pptpd   "test"       *

# For ppp patched with smbauth you use
# *     pptpd   &/etc/samba/smbpasswd" > /tmp/ppp/chap-secrets
chmod go-rw /tmp/ppp/chap-secrets


# Ñîçäàåì äèðåêòîðèþ äëÿ ïîëüçîâàòåëüñêèõ ñêðèïòîâ
# Create a directory for user scripts
mkdir /usr/local/sbin

# Ñîçäàåì ôàéë post-boot äëÿ çàïóñêà poptop ñåðâåðà
# Äåëàåì ñèìëèíê íà chap-secret
# Create a file post-boot to start the poptop server
# Make symlink to the chap-secret
echo "#!/bin/sh
mount /tmp/local/opt /opt
/opt/etc/init.d/S20poptop start
ln -s /tmp/ppp/chap-secrets /opt/etc/ppp/" > /usr/local/sbin/post-boot

# Ñîçäàåì post-firewall ñ ïàðàìåòðàìè poptop
# Create a post-firewall, with settings poptop
echo "#!/bin/sh
iptables -I INPUT -p tcp --dport 1723 -j ACCEPT
iptables -t nat -I PREROUTING -p tcp --dport 1723 -j ACCEPT
iptables -I OUTPUT -p 47 -j ACCEPT
iptables -I INPUT -p 47 -j ACCEPT
iptables -I INPUT -i ppp+ -j ACCEPT
iptables -I FORWARD -i ppp+ -j ACCEPT
iptables -I FORWARD -o ppp+ -j ACCEPT
iptables -I OUTPUT -o ppp+ -j ACCEPT" > /usr/local/sbin/post-firewall

# Äåëàåì ôàéëû /usr/local/sbin/ èñïîëíÿåìûìè
# Do the all scrips executable
chmod +x /usr/local/sbin/*


# Cîõðàíÿòü âî ôëýø ñêðèïòû
# Saves in flash scripts
echo "/usr/local/sbin/post-firewall
/usr/local/sbin/post-boot
/tmp/ppp/chap-secrets" > /usr/local/.files


# ñîõðàíÿåì âñå
# Seved all
flashfs save
flashfs commit
flashfs enable
reboot

Ïðîøó íå ãëÿäÿ íå óñòàíàâëèâàòü ïî äàíîìó ñêðèïòó íå èçìåíèâ íàñòðîéêè ïîä Âàøè ïàðàìåòðû. ÄÀ åùå â ñêðèïòå åñòü ÎØÈÁÊÈ ÊÒÎ ÍÀÉÄÅÒ !!!???