Poptop On Centos
su
cd /etc/yum.repos.d/
vi poptop.repo
copy and paste into poptop.repo:
[poptop]
name=poptop CentOS
baseurl=http://poptop.sourceforge.net/yum/stable/rhel5/i386/
gpgcheck=1
gpgkey=http://poptop.sourceforge.net/yum/RPM-GPG-KEY-PPTP
enabled=1
priority=30
then:
yum install pptpd
edit few config files.
see also: http://poptop.sourceforge.net/dox/
then you can start the daemon;
/etc/init.d/pptpd start
make it start on boot:
chkconfig --level 345 pptpd on
example pptpd.conf
bcrelay br0
localip 192.168.18.18
remoteip 192.168.18.20-30
example options.pptpd
lock
name *
proxyarp
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 3
lcp-echo-interval 5
deflate 0
auth
-chap
-mschap
+mschap-v2
mppe stateless
mppc
ms-ignore-domain
chap-secrets /tmp/pptpd/chap-secrets
ip-up-script /tmp/pptpd/ip-up
ip-down-script /tmp/pptpd/ip-down
ms-dns 192.168.18.126
mtu 1450
mru 1450
example chap-secrets. DO NOT USE THESE SETTINGS! SET YOUR OWN PASSWORD!
username * password *
anotheruser * anotherpassowrd *
moreuser * morepassw *
example ip-up scripts
#!/bin/sh
/usr/sbin/iptables -I FORWARD -i $1 -p tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1353: -j TCPMSS --set-mss 1352
/usr/sbin/iptables -I INPUT -i $1 -j ACCEPT
/usr/sbin/iptables -I FORWARD -i $1 -j ACCEPT
example ip-down scripts
#!/bin/sh
/usr/sbin/iptables -D FORWARD -i $1 -p tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1353: -j TCPMSS --set-mss 1352
/usr/sbin/iptables -D INPUT -i $1 -j ACCEPT
/usr/sbin/iptables -D FORWARD -i $1 -j ACCEPT
if you got firewall/nat/router in front of your poptop server,
do port forwarding on port 1723 to your server
