Chinaunix首页 | 论坛 | 博客

抽刀断水writer15.blog.chinaunix.net

首页　| 　博文目录　| 　关于我

writer15

  • 博客访问： 164584
  • 博文数量： 36
  • 博客积分： 1466
  • 博客等级： 上尉
  • 技术积分： 380
  • 用 户 组： 普通用户
  • 注册时间： 2007-04-17 17:43
文章分类

全部博文（36）

推荐博文
相关博文
openwrt 14.07 R42625搭建pppoe-server笔记

分类： 网络与安全

2016-11-21 21:42:27

下载并安装rp-pppoe-server包

点击(此处)折叠或打开

  1. opgk update
  2. opkg install rp-pppoe-server
  3. cp /usr/lib/pppd/2.4.7/rp-pppoe.so /etc/ppp/plugins/rp-pppoe.so

修改/etc/init.d/pppoe-server

点击(此处)折叠或打开

  1. #!/bin/sh /etc/rc.common
  2. # Copyright (C) 2006-2011 OpenWrt.org

  4. START=50

  6. DEFAULT=/etc/default/pppoe-server


  9. start() {
  10.         [ -f $DEFAULT ] && . $DEFAULT
  11.         OPTIONS="-k -L 17.16.1.1 -R 172.16.1.100 -I eth0 -S 189"
  12.         service_start /usr/sbin/pppoe-server $OPTIONS
  13. }

  15. stop() {
  16.         service_stop /usr/sbin/pppoe-server
  17. }


修改/etc/ppp/options


  1. debug
  2. dump
  3. unit 100
  4. ms-dns 114.114.114.114
  5. ms-dns 10.168.10.11
  6. defaultroute
  7. logfile /dev/null
  8. noipdefault
  9. noaccomp
  10. nopcomp
  11. nocrtscts
  12. lock
  13. maxfail 0
  14. lcp-echo-failure 5
  15. lcp-echo-interval 1


修改/etc/ppp/pppoe-server-options

点击(此处)折叠或打开

  1. # PPP options for the PPPoE server
  2. # LIC: GPL
  3. require-chap
  4. #login
  5. lcp-echo-interval 10
  6. lcp-echo-failure 2

修改防火墙文件/etc/config/firewall

点击(此处)折叠或打开

  1. config defaults
  2.         option syn_flood 1
  3.         option input ACCEPT
  4.         option output ACCEPT
  5.         option forward REJECT
  6. # Uncomment this line to disable ipv6 rules
  7.         option disable_ipv6 1

  9. config zone
  10.         option name lan
  11.         list network 'lan'
  12.         option input ACCEPT
  13.         option output ACCEPT
  14.         option forward ACCEPT

  16. config zone
  17.         option name wan
  18.         list network 'wan'
  19.         list network 'wan6'
  20.         option input REJECT
  21.         option output ACCEPT
  22.         option forward REJECT
  23.         option masq 1
  24.         option mtu_fix 1

  26. config zone
  27.         option name 'ppp'
  28.         option device 'ppp1+'
  29.         option input 'ACCEPT'
  30.         option output 'ACCEPT'
  31.         option forward 'ACCEPT'

  33. config forwarding
  34.         option src lan
  35.         option dest wan

  37. config forwarding
  38.         option src ppp
  39.         option dest wan

  41. # We need to accept udp packets on port 68,
  42. # see https://dev.openwrt.org/ticket/4108
  43. config rule
  44.         option name Allow-DHCP-Renew
  45.         option src wan
  46.         option proto udp
  47.         option dest_port 68
  48.         option target ACCEPT
  49.         option family ipv4

  51. # Allow IPv4 ping
  52. config rule
  53.         option name Allow-Ping
  54.         option src wan
  55.         option proto icmp
  56.         option icmp_type echo-request
  57.         option family ipv4
  58.         option target ACCEPT

  60. # Allow DHCPv6 replies
  61. # see https://dev.openwrt.org/ticket/10381
  62. config rule
  63.         option name Allow-DHCPv6
  64.         option src wan
  65.         option proto udp
  66.         option src_ip fe80::/10
  67.         option src_port 547
  68.         option dest_ip fe80::/10
  69.         option dest_port 546
  70.         option family ipv6
  71.         option target ACCEPT

  73. # Allow essential incoming IPv6 ICMP traffic
  74. config rule
  75.         option name Allow-ICMPv6-Input
  76.         option src wan
  77.         option proto icmp
  78.         list icmp_type echo-request
  79.         list icmp_type echo-reply
  80.         list icmp_type destination-unreachable
  81.         list icmp_type packet-too-big
  82.         list icmp_type time-exceeded
  83.         list icmp_type bad-header
  84.         list icmp_type unknown-header-type
  85.         list icmp_type router-solicitation
  86.         list icmp_type neighbour-solicitation
  87.         list icmp_type router-advertisement
  88.         list icmp_type neighbour-advertisement
  89.         option limit 1000/sec
  90.         option family ipv6
  91.         option target ACCEPT

  93. # Allow essential forwarded IPv6 ICMP traffic
  94. config rule
  95.         option name Allow-ICMPv6-Forward
  96.         option src wan
  97.         option dest *
  98.         option proto icmp
  99.         list icmp_type echo-request
  100.         list icmp_type echo-reply
  101.         list icmp_type destination-unreachable
  102.         list icmp_type packet-too-big
  103.         list icmp_type time-exceeded
  104.         list icmp_type bad-header
  105.         list icmp_type unknown-header-type
  106.         option limit 1000/sec
  107.         option family ipv6
  108.         option target ACCEPT

  110. # include a file with users custom iptables rules
  111. config include
  112.         option path /etc/firewall.user


  115. ### EXAMPLE CONFIG SECTIONS
  116. # do not allow a specific ip to access wan
  117. #config rule
  118. # option src lan
  119. # option src_ip 192.168.45.2
  120. # option dest wan
  121. # option proto tcp
  122. # option target REJECT

  124. # block a specific mac on wan
  125. #config rule
  126. # option dest wan
  127. # option src_mac 00:11:22:33:44:66
  128. # option target REJECT

  130. # block incoming ICMP traffic on a zone
  131. #config rule
  132. # option src lan
  133. # option proto ICMP
  134. # option target DROP

  136. # port redirect port coming in on wan to lan
  137. #config redirect
  138. # option src wan
  139. # option src_dport 80
  140. # option dest lan
  141. # option dest_ip 192.168.16.235
  142. # option dest_port 80
  143. # option proto tcp

  145. # port redirect of remapped ssh port (22001) on wan
  146. #config redirect
  147. # option src wan
  148. # option src_dport 22001
  149. # option dest lan
  150. # option dest_port 22
  151. # option proto tcp

  153. # allow IPsec/ESP and ISAKMP passthrough
  154. #config rule
  155. # option src wan
  156. # option dest lan
  157. # option protocol esp
  158. # option target ACCEPT

  160. #config rule
  161. # option src wan
  162. # option dest lan
  163. # option src_port 500
  164. # option dest_port 500
  165. # option proto udp
  166. # option target ACCEPT

  168. ### FULL CONFIG SECTIONS
  169. #config rule
  170. # option src lan
  171. # option src_ip 192.168.45.2
  172. # option src_mac 00:11:22:33:44:55
  173. # option src_port 80
  174. # option dest wan
  175. # option dest_ip 194.25.2.129
  176. # option dest_port 120
  177. # option proto tcp
  178. # option target REJECT

  180. #config redirect
  181. # option src lan
  182. # option src_ip 192.168.45.2
  183. # option src_mac 00:11:22:33:44:55
  184. # option src_port 1024
  185. # option src_dport 80
  186. # option dest_ip 194.25.2.129
  187. # option dest_port 120
  188. # option proto tcp

阅读(2603) | 评论(0) | 转发(0) |
0

上一篇：openwrt fw3 命令笔记。

下一篇：scapy笔记

给主人留下些什么吧！~~
关于我们 | 关于IT168 | 联系方式 | 广告合作 | 法律声明 | 免费注册

Copyright 2001-2010 ChinaUnix.net All Rights Reserved 北京皓辰网域网络信息技术有限公司. 版权所有

感谢所有关心和支持过ChinaUnix的朋友们

16024965号-6