You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

532 lines
19 KiB

This file contains ambiguous Unicode characters!

This file contains ambiguous Unicode characters that may be confused with others in your current locale. If your use case is intentional and legitimate, you can safely ignore this warning. Use the Escape button to highlight these characters.

<!doctype html>
<html class="no-js" lang="en">
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="author" content="Lednerb">
<meta name="description" content="Bilberry Premium Theme for Hugo.">
<meta name="keywords" content="blog,personal,responsive,search,font awesome,pages,posts,multilingual,highlight.js,syntax highlighting,premium,shortcuts">
<meta name="generator" content="Hugo 0.50" />
<title> [筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server | My cool new Blog</title>
<meta name="description" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server - Bilberry Premium Theme for Hugo.">
<meta itemprop="name" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server">
<meta itemprop="description" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server - Bilberry Premium Theme for Hugo.">
<meta property="og:title" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server">
<meta property="og:description" content="[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server - Bilberry Premium Theme for Hugo.">
<meta property="og:image" content="https://www.gravatar.com/avatar/88188b6cc451928eba90e8400bc68086?size=200">
<meta property="og:url" content="https://h.cowbay.org/article/e7-ad-86-e8-a8-98-freebsd-10-e6-9e-b6-e8-a8-ad-mpd5-e4-bd-9c-e7-82-ba-pptp-vpn-server/">
<meta property="og:site_name" content="My cool new Blog">
<meta property="og:type" content="article">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-32x32.png" sizes="32x32">
<link rel="icon" type="image/png" href="https://h.cowbay.org/favicon-16x16.png" sizes="16x16">
<link rel="stylesheet" href="https://h.cowbay.org/sass/combined.min.717098cb5503581e75f12e486a847ca410bf8367d4d8713f4c37affc868c5a1d.css">
</head>
<body class="bilberry-hugo-theme">
<nav>
<div class="container">
<ul class="topnav">
<li><a href="/page/about-bilberry/">About Bilberry</a></li>
<li><a href="https://github.com/Lednerb/bilberry-hugo-theme" target="_blank">Github</a></li>
</ul>
<div id="search-box" class="search">
<i class="fa fa-search"></i>
<input id="search" type="text" placeholder="Search ...">
</div>
</div>
</nav>
<header>
<div class="container">
<div class="logo">
<a href="/" class="logo">
<img src="https://www.gravatar.com/avatar/88188b6cc451928eba90e8400bc68086?d=mm&size=200" alt="">
<span class="overlay"><i class="fa fa-home"></i></span>
</a>
</div>
<div class="titles">
<h3 class="title"><a href="/">My cool new Blog</a></h3>
<span class="subtitle">Hello World! This is the most epic subtitle ever.</span>
</div>
<div class="languages">
<a href="/en" class="active">en</a>
<a href="/de">de</a>
</div>
<div class="toggler">
<i class="fa fa-bars" aria-hidden="true"></i>
</div>
</div>
</header>
<div class="main container">
<div class="article-wrapper u-cf single">
<a class="bubble" href="/article/e7-ad-86-e8-a8-98-freebsd-10-e6-9e-b6-e8-a8-ad-mpd5-e4-bd-9c-e7-82-ba-pptp-vpn-server/">
<i class="fa fa-fw fa-pencil"></i>
</a>
<article class="default article">
<div class="content">
<h3><a href="/article/e7-ad-86-e8-a8-98-freebsd-10-e6-9e-b6-e8-a8-ad-mpd5-e4-bd-9c-e7-82-ba-pptp-vpn-server/">[筆記] FreeBSD 10 架設 MPD5 作為 PPTP VPN Server</a></h3>
<div class="meta">
<span class="date moment">2015-03-16</span>
<span class="categories">
<a href="/categories/%E5%B7%A5%E4%BD%9C%E7%AD%86%E8%A8%98">工作筆記</a>
</span>
</div>
<p>其實都是看人家整好的筆記&hellip;</p>
<p>參考這篇</p>
<h3 id="freebsd使用mpd5架設vpn-pptp協定-http-gp671112-blogspot-tw-2014-07-freebsdmpd5vpnpptp-html"><a href="http://gp671112.blogspot.tw/2014/07/freebsdmpd5vpnpptp.html">FreeBSD使用MPD5架設VPN(PPTP協定)</a></h3>
<p>還有 這篇</p>
<h2 id="install-mpd5-pptp-server-on-freebsd-9-2-and-freebsd10-https-www-netroby-com-view-php-id-3598"><a href="https://www.netroby.com/view.php?id=3598">Install mpd5 pptp server on FreeBSD 9.2 and FreeBSD10</a></h2>
<p></p>
<p>&nbsp;</p>
<p>複製一個 mpd.conf
<pre class="codeblock">cp /usr/local/etc/mpd5/mpd.conf.sample mpd.conf</p>
<p>編輯
vim /usr/local/etc/mpd5/mpd.conf</pre>
&gt; <pre class="prettyprint lang-bsh"><span class="pln">startup</span><span class="pun">:</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> user netroby password admin
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> console self </span><span class="lit">127.0</span><span class="pun">.</span><span class="lit">0.1</span> <span class="lit">5005</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> console open
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> web self </span><span class="lit">0.0</span><span class="pun">.</span><span class="lit">0.0</span> <span class="lit">5006</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> web open
&gt;
&gt; default</span><span class="pun">:</span><span class="pln">
&gt;
&gt; load pptp_server
&gt;
&gt; pptp_server</span><span class="pun">:</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> ippool add pool1 </span><span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.50</span> <span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.99</span><span class="pln">
&gt;
&gt; create bundle template B
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> iface enable proxy</span><span class="pun">-</span><span class="pln">arp
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> iface idle </span><span class="lit">1800</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> iface enable tcpmssfix
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> iface route </span><span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.1</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> ipcp yes vjcomp
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> ipcp ranges </span><span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.1</span><span class="pun">/</span><span class="lit">32</span><span class="pln"> ippool pool1
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> ipcp dns </span><span class="lit">8.8.8.8 &lt;&mdash;改成 google DNS</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> ipcp dns </span><span class="lit">8.8.4.4</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> ipcp nbns </span><span class="lit">192.168</span><span class="pun">.</span><span class="lit">88.1</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> bundle enable compression
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> ccp yes mppc
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> mppc yes e40
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> mppc yes e128
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> mppc yes stateless
&gt;
&gt; create link template L pptp
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link fsm</span><span class="pun">-</span><span class="pln">timeout </span><span class="lit">5</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> link action bundle B
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link enable multilink
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link yes acfcomp protocomp
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link no pap chap eap chap</span><span class="pun">-</span><span class="pln">msv2
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link enable chap chap</span><span class="pun">-</span><span class="pln">msv2 eap
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link accept chap</span><span class="pun">-</span><span class="pln">msv2
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> link keep</span><span class="pun">-</span><span class="pln">alive </span><span class="lit">10</span> <span class="lit">60</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> link mtu </span><span class="lit">1460</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> pptp self </span><span class="lit">your_ip_address &lt;&ndash;改成伺服器的WAN IP</span>
&gt;
&gt; <span class="kwd">set</span><span class="pln"> link enable incoming</span></pre>
<pre class="codeblock">
vim /etc/pf.conf</pre>
&gt; <pre class="prettyprint lang-bsh"><span class="pln">my_int </span><span class="pun">=</span> <span class="str">&ldquo;vtnet0&rdquo;</span><span class="pln">
&gt;
&gt; internal_net </span><span class="pun">=</span> <span class="str">&ldquo;192.168.0.0/16&rdquo;</span><span class="pln">
&gt;
&gt; external_addr </span><span class="pun">=</span> <span class="str">&ldquo;your_ip_addr</span><span class="str">&rdquo; &lt;&ndash;改成伺服器的 WAN IP</span><span class="pln">
&gt;
&gt; nat on $my_int from $internal_net to any </span><span class="pun">-&gt;</span><span class="pln"> $external_addr
&gt;
&gt; </span><span class="kwd">set</span><span class="pln"> skip on lo
&gt;
&gt; block </span><span class="kwd">in</span><span class="pln"> log all
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> on $my_int proto tcp from any to any port </span><span class="lit">1723</span><span class="pln"> keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> on $my_int proto tcp from any to any port </span><span class="lit">22</span><span class="pln"> keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> on $my_int proto tcp from any to any port </span><span class="lit">80</span><span class="pln"> keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> on $my_int proto tcp from any to any port </span><span class="lit">443</span><span class="pln"> keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> quick on $my_int proto icmp all keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> proto gre all keep state
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> from any to $internal_net
&gt;
&gt; pass </span><span class="kwd">in</span><span class="pln"> from $internal_net to any
&gt;
&gt; pass out proto </span><span class="pun">{</span><span class="pln"> gre</span><span class="pun">,</span><span class="pln"> tcp</span><span class="pun">,</span><span class="pln"> udp</span><span class="pun">,</span><span class="pln"> icmp </span><span class="pun">}</span><span class="pln"> all keep state
&gt;
&gt; </span></pre>
<pre class="codeblock">
service pf restart 現有的 SSH會中斷 要重連
重開 pietty 測試連線OK之後開IPHONE來連 VPN確認正常可是速度很糟糕..
要拿來看片,我想應該是不可能了&hellip;</p>
<p>改天再來測試 Linode / Vultr 的 VPS吧..</p>
<p></pre>
&nbsp;</p>
<p>&nbsp;</p>
</div>
<div class="footer no-tags">
</div>
</article>
</div>
<div id="disqus_thread"></div>
<script type="application/javascript">
var disqus_config = function () {
};
(function() {
if (["localhost", "127.0.0.1"].indexOf(window.location.hostname) != -1) {
document.getElementById('disqus_thread').innerHTML = 'Disqus comments not available by default when the website is previewed locally.';
return;
}
var d = document, s = d.createElement('script'); s.async = true;
s.src = '//' + "bilberry-hugo-theme" + '.disqus.com/embed.js';
s.setAttribute('data-timestamp', +new Date());
(d.head || d.body).appendChild(s);
})();
</script>
<noscript>Please enable JavaScript to view the <a href="https://disqus.com/?ref_noscript">comments powered by Disqus.</a></noscript>
<a href="https://disqus.com" class="dsq-brlink">comments powered by <span class="logo-disqus">Disqus</span></a>
</div>
<footer>
<div class="container">
<div class="recent-posts">
<strong>Latest posts</strong>
<ul>
<li>
<a href="/article/google-550-5-7-1-sloution/">寄信給google被退信 錯誤 550-5.7.1的解法</a>
</li>
<li>
<a href="/article/netdata-linux-system-performance-monitor-dashboard/">Netdata Linux System Performance Monitor Dashboard</a>
</li>
<li>
<a href="/article/linux-performance-monitor-dashboard-netdata-md/">Linux 底下極其詳細的System performace Monitor Dashboard - Netdata</a>
</li>
<li>
<a href="/article/syntax-test/">Syntax Test</a>
</li>
<li>
<a href="/article/psql-create-role-and-assign-priviledges/">psql create role and assign priviledges</a>
</li>
<li>
<a href="/article/study-url/">Study URL</a>
</li>
<li>
<a href="/article/rsync-time-backup/">[筆記] Linux 底下好用的備份工具 rsync-time-backup</a>
</li>
</ul>
</div>
<div class="categories">
<a href="/categories/"><strong>Categories</strong></a>
<ul>
<li>
<a href="/categories/%E6%9C%AA%E5%88%86%E9%A1%9E">未分類 (86)</a>
</li>
<li>
<a href="/categories/%E5%B7%A5%E4%BD%9C%E7%AD%86%E8%A8%98">工作筆記 (68)</a>
</li>
<li>
<a href="/categories/%E5%85%B6%E4%BB%96">其他 (46)</a>
</li>
<li>
<a href="/categories/%E7%AD%86%E8%A8%98">筆記 (30)</a>
</li>
<li>
<a href="/categories/%E5%89%AA%E5%A0%B1">剪報 (18)</a>
</li>
<li>
<a href="/categories/starting">Starting (5)</a>
</li>
<li>
<a href="/categories/blog">Blog (4)</a>
</li>
</ul>
</div>
<div class="right">
<div class="external-profiles">
<strong>Social media</strong>
<a href="https://twitter.com/TheRealLednerb" target="_blank"><i class="fa fa-twitter-adblock-proof"></i></a>
<a href="https://github.com/Lednerb" target="_blank"><i class="fa fa-github"></i></a>
</div>
<div class="languages">
<strong>Other languages</strong>
<a href="/en" class="active">en</a>
<a href="/de">de</a>
</div>
</div>
</div>
</footer>
<div class="credits">
<div class="container">
<div class="copyright">
<a href="https://github.com/Lednerb" target="_blank">
&copy;
2017
by Lednerb
</a>
</div>
<div class="author">
<a href="https://github.com/Lednerb/bilberry-hugo-theme" target="_blank">Bilberry Hugo Theme</a>
</div>
</div>
</div>
<script type="text/javascript" src="https://h.cowbay.org/js/externalDependencies.39c47e10e241eae2947b3fe21809c572.js" integrity="md5-OcR&#43;EOJB6uKUez/iGAnFcg=="></script>
<script type="text/javascript" src="https://h.cowbay.org/js/theme.ff50ae6dc1bfc220b23bf69dbb41b54e.js" integrity="md5-/1CubcG/wiCyO/adu0G1Tg=="></script>
<script>
$(".moment").each(function() {
$(this).text(
moment( $(this).text() )
.locale( "en" )
.format('LL')
);
});
$(".footnote-return sup").html("");
</script>
<script>
var client = algoliasearch("Y2C4RWMPXW", "50ea7f8c41c0ad233926e0be2b769ed1");
var index = client.initIndex("default-content");
$('#search').autocomplete({ hint: false, autoselect: true, debug: false },
[
{
source: $.fn.autocomplete.sources.hits(index, { hitsPerPage: 5, filters: 'language: en' }),
displayKey: function(suggestion) {
return suggestion.title || suggestion.author
},
templates: {
suggestion: function(suggestion) {
return "<span class='entry " + suggestion.type + "'>"
+ "<span class='title'>" + suggestion.title + "</span>"
+ "<span class='fa fa-fw " + suggestion.iconClass + "'></span>"
+ "</span>"
;
},
empty: function() {
return "<span class='empty'>Nothing found.</span>"
},
footer: function() {
return '<div class="branding">Powered by <img src="https:\/\/h.cowbay.org\/dist\/algolia-logo-light.svg" /></div>'
}
},
}
])
.on('autocomplete:selected', function(event, suggestion, dataset) {
window.location = (suggestion.url);
})
.keypress(function (event, suggestion) {
if (event.which == 13) {
window.location = (suggestion.url);
}
});
</script>
</body>
</html>