| Re: [Actux] SIP derrière le parefeu de l'université |
[ Thread Index |
Date Index
| More lists.tuxfamily.org/actux Archives
]
- To: actux@xxxxxxxxxxxxxxxxxxx
- Subject: Re: [Actux] SIP derrière le parefeu de l'université
- From: Isabelle <zazooo5@xxxxxxxxx>
- Date: Tue, 29 Sep 2009 21:44:31 +0200
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=YNlIfw4jnHtAwGfhc1KasbUaxvX0/i66LFMp8VTPuKQ=; b=pK7Aet/x9qXM8AuyGjCXzcrMjocNJbrW0Lq8TZ0R+cGb9KYzw5wt8+rSCx/dUQgRUF +mLNes4ub3JEvuulzMFpQ6eJXPo3VXdAdtrnYNs0hkq3aK7x5AHFTA5o86pMUwWAY0sL lhqx5wy8QOwUuvXpssgVFzWujovgF49cxH+Ac=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=WQ1+LIUUkT3PyxnwCyBsUnw8bMqoh8euqSnc0S4CiPUUnEspt84EMWjmu4Rr37T1rX 1YPdOSpzlWhwIfTFwpFOOGOUy+Z7dcB4jU9m4/L+rKImsrxIMIkWHpF9t9Kdu2OH/ATi SAqVI79nY7gzKptZpViIyLPRRgLkuzo2rcLaU=
Config de base pour OpenVPN:
Côté serveur:
#-------------vpn.conf---------------
up vpn.sh
script-security 2
dev tun0
port 443
proto tcp-server
ifconfig 192.168.10.1 192.168.10.2
comp-lzo
secret /etc/openvpn/vpn.key
user nobody
group nogroup
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
log /var/log/openvpn.log
verb 3
#################
#-------------vpn.sh-----------------
#!/bin/sh
sysctl net.ipv4.conf.all.forwarding=1
iptables -t nat -F
iptables -t nat -A POSTROUTING -s 192.168.10.0/24 -d ! 192.168.10.0/24
-j MASQUERADE
##################
Côté client:
#-----------------vpn.conf--------------------
dev tun0
remote 88.164.242.235
proto tcp-client
port 443
ifconfig 192.168.10.2 192.168.10.1
comp-lzo
secret /etc/openvpn/vpn.key
user nobody
group nogroup
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
log /var/log/openvpn.log
verb 3
# pour utiliser le vpn comme route par defaut
#redirect-gateway
redirect-gateway def1
###################
Voilà, c'est tout!
--
Isabelle STEVANT
http://actux.fr - http://jstevant.free.fr - http://e17artwork.tuxfamily..org
---
---
Liste Actux, http://www.actux.fr