wget http://mirrors.linuxeye.com/scripts/***_centos.sh

chmod +x ./***_centos.sh

./***_centos.sh

#!/bin/bash

#

# Author:? yeho <lj2007331 AT gmail.com>

# Blog:? //blog.linuxeye.com

#

# Installs a PPTP ×××-only system for CentOS

# Check if user is root

[ $(id -u) != "0" ] && { echo -e "\033[31mError: You must be root to run this script\033[0m"; exit 1; }

export PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin

clear

printf "

#######################################################################

#??? LNMP/LAMP/LANMP for CentOS/RadHat 5+ Debian 6+ and Ubuntu 12+??? #

#??????????? Installs a PPTP ×××-only system for CentOS?????????????? #

# For more information please visit //blog.linuxeye.com/31.html? #

#######################################################################

"

[ ! -e '/usr/bin/curl' ] && yum -y install curl

×××_IP=`curl ipv4.icanhazip.com`

×××_USER="linuxeye"

×××_PASS="linuxeye"

×××_LOCAL="192.168.0.150"

×××_REMOTE="192.168.0.151-200"

while :; do echo

??? read -p "Please input username: " ×××_USER

??? [ -n "$×××_USER" ] && break

done

while :; do echo

??? read -p "Please input password: " ×××_PASS

??? [ -n "$×××_PASS" ] && break

done

clear

if [ -f /etc/redhat-release -a -n "`grep ' 7\.' /etc/redhat-release`" ];then

??? #CentOS_REL=7

??? if [ ! -e /etc/yum.repos.d/epel.repo ];then

??????? cat > /etc/yum.repos.d/epel.repo << EOF

[epel]

name=Extra Packages for Enterprise Linux 7 - \$basearch

#baseurl=http://download.fedoraproject.org/pub/epel/7/\$basearch

mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=\$basearch

failovermethod=priority

enabled=1

gpgcheck=0

EOF

??? fi

??? for Package in wget make openssl gcc-c++ ppp pptpd iptables iptables-services

??? do

??????? yum -y install $Package

??? done

??? echo 'net.ipv4.ip_forward = 1' >> /etc/sysctl.conf

elif [ -f /etc/redhat-release -a -n "`grep ' 6\.' /etc/redhat-release`" ];then

??? #CentOS_REL=6

??? for Package in wget make openssl gcc-c++ iptables ppp

??? do

??????? yum -y install $Package

??? done

??? sed -i 's@net.ipv4.ip_forward.*@net.ipv4.ip_forward = 1@g' /etc/sysctl.conf

??? rpm -Uvh http://poptop.sourceforge.net/yum/stable/rhel6/pptp-release-current.noarch.rpm

??? yum -y install pptpd

else

??? echo -e "\033[31mDoes not support this OS, Please contact the author! \033[0m"

??? exit 1

fi

echo "1" > /proc/sys/net/ipv4/ip_forward

sysctl -p /etc/sysctl.conf

[ -z "`grep '^localip' /etc/pptpd.conf`" ] && echo "localip $×××_LOCAL" >> /etc/pptpd.conf # Local IP address of your ××× server

[ -z "`grep '^remoteip' /etc/pptpd.conf`" ] && echo "remoteip $×××_REMOTE" >> /etc/pptpd.conf # Scope for your home network

if [ -z "`grep '^ms-dns' /etc/ppp/options.pptpd`" ];then

???? cat >> /etc/ppp/options.pptpd << EOF

ms-dns 223.5.5.5 # Aliyun DNS Primary

ms-dns 114.114.114.114 # 114 DNS Primary

ms-dns 8.8.8.8 # Google DNS Primary

ms-dns 209.244.0.3 # Level3 Primary

ms-dns 208.67.222.222 # OpenDNS Primary

EOF

fi

echo "$×××_USER pptpd $×××_PASS *" >> /etc/ppp/chap-secrets

ETH=`route | grep default | awk '{print $NF}'`

[ -z "`grep '1723 -j ACCEPT' /etc/sysconfig/iptables`" ] && iptables -I INPUT 4 -p tcp -m state --state NEW -m tcp --dport 1723 -j ACCEPT

[ -z "`grep 'gre -j ACCEPT' /etc/sysconfig/iptables`" ] && iptables -I INPUT 5 -p gre -j ACCEPT

iptables -t nat -A POSTROUTING -o $ETH -j MASQUERADE

iptables -I FORWARD -p tcp --syn -i ppp+ -j TCPMSS --set-mss 1356

service iptables save

sed -i 's@^-A INPUT -j REJECT --reject-with icmp-host-prohibited@#-A INPUT -j REJECT --reject-with icmp-host-prohibited@' /etc/sysconfig/iptables

sed -i 's@^-A FORWARD -j REJECT --reject-with icmp-host-prohibited@#-A FORWARD -j REJECT --reject-with icmp-host-prohibited@' /etc/sysconfig/iptables

service iptables restart

chkconfig iptables on

service pptpd restart

chkconfig pptpd on

clear

echo -e "You can now connect to your ××× via your external IP \033[32m${×××_IP}\033[0m"

echo -e "Username: \033[32m${×××_USER}\033[0m"

echo -e "Password: \033[32m${×××_PASS}\033[0m"