Benj Dag
f035775047
restart all services at the end of install
|
7 rokov pred | |
|---|---|---|
| README.md | 7 rokov pred | |
| bash.bashrc | 7 rokov pred | |
| caddy.service | 7 rokov pred | |
| config.json | 7 rokov pred | |
| getconfig.sh | 7 rokov pred | |
| globe.txt | 7 rokov pred | |
| haproxy.cfg | 7 rokov pred | |
| hpi.txt | 7 rokov pred | |
| index.html | 7 rokov pred | |
| injector.txt | 7 rokov pred | |
| ip6tables-vpn.sh | 7 rokov pred | |
| iptables-vpn.sh | 7 rokov pred | |
| newuser.sh | 7 rokov pred | |
| openvpn.sh | 7 rokov pred | |
| setup.sh | 7 rokov pred | |
| sony-domains.txt | 7 rokov pred | |
| sprunge.sh | 7 rokov pred | |
| squid.conf | 7 rokov pred | |
| squid3.conf | 7 rokov pred | |
| tap_soft.interface | 7 rokov pred | |
| tmux.conf | 7 rokov pred | |
| tnt.txt | 7 rokov pred | |
| udp.txt | 7 rokov pred | |
| update-settings.sh | 7 rokov pred | |
| wordlist.txt | 7 rokov pred |
README.md
Readme
A shell script to install VPN using SoftEther on Ubuntu VPS like DigitalOcean now requires Ubuntu 16.04 or Debian Jessie or higher
Some parts adapted to Google Cloud Engine VMs
Execution
- Execution for installation and setup
wget -O - bit.ly/se-vpnsetup | sudo bash
This script fetches the SoftEtherVPN Server Source Code from github After SE-VPN is built, it setups the SE-VPN server.
The following are done:
- adds a VirtualHub named VPN
- adds a user to the hub VPN with the username vpn and password vpn
- Creates a tap device called soft for local bridging
- And bridges it to the hub VPN.
- The tap device is initialized with ip address of 192.168.199.1/24
DNSMasq is installed to provide DNS and DHCP to the VPN Clients
IP tables are configured to provide DDOS protection and port redirection:
- TCP ports: 5242,4244,9200,9201,21,137,8484,82 to-port 995
- to allow SE-VPN clients to connect to the TCP ports
- and to allow OpenVPN clients to connect to both TCP and UDP ports
Haproxy is installed to share port 80,443,8080 to squid, ssh and SE-VPN
Lastly: It outputs a URL with the Sample OpenVPN config which can be modified to connect to various ports.