?????????? ? ??????????: ???? ??????, ???????? ??? ??????? ????? ????????
??????. ????? ???? ??????????. ??????? ??????? RAID ???????????? ??? ??????
? ??????, ???????????? ?????? ??????? ? PCI Hot Swap ?? ????.
???????? ????????? ?????? ?? ??????????: ??????? ?????????? ?????, PIII-700,
512 ??????, 80?? ??????? ????, CDROM, 2 ??????? ?????, ??? ??? ??????? ?
??????? ??????? ? ??????? ?????? ??????? ? ?????????? ? UPS. ? ????????
???????????? ?????? ASPLinux 7.3
???? 1. ????????? ???????.
??? ????????? ????????? ?????? ?????????, ??? ????? ???????????????? ?? ? ???.
?????? ??????? ???? ?? ??? ???????. ????, ?? 512??, ????? ??? swap, ???
?????????? ????? ??? /. ?????? ????????? ????????? ? ????? ???????. ????????
????????, ????????? ?????? ??? ??????? ????, ????????? ?????????. ? ?????,
?????? ?????????? ? ???????-?????? ???????????.
? ????? ????? ????? ?? ?????? ???????? ????????????? Linux ??????, ???????
??????? ????? ??????? ?????? (??? ??? ???) ? ????????, ?????? - ? ?????????
????.
???? 2. ?????????? ???????????? ???????????.
?? ??? ???? ?? ??????, ??? ?? ??????? ??????? ???????????? ???? ???????
??????, ???????? ?????????? ??? ??????? ? ??? ????? ? ???? ????????.
??? ?????? ???????? ??? ?????, ??? ???? ??? 7.3:
wget -m ftp://ftp.asplinux.ru/pub/i386/updates/7.3/i386/
???????, ????????? ?????? ????? ????????? - ???? ???? ?? ?????? ???????
??? i686 ? ??? ?????. ?? ??? ? ???? ???? ?????? ???? ????? - ? ?? ???????
?????-?? ?????? ??????? ???????, ? ?????? ? ???? ?? ??????? ?? ????
???????? ? ???????? ?? ????????????, ????? ???????????? ?????? PIII
???????????.
???????, ?????????? ?? ??????????? ?????????? ??? ??? ?? ?????. ?????? ?????
??? ?????? ???-???? ? ?????? ????? - ??? ??? ?? ???? ?????.
cd ftp.asplinux.ru/pub/i386/updates/7.3/i386/
?????? ????? ???????? ? ??????? ??????? ???????:
rpm -Uhv apache-1.3.27-2asp.i386.rpm mm-1.1.3-11.i386.rpm
bind-9.2.1-1.7x.2asp.i386.rpm bind-utils-9.2.1-1.7x.2asp.i386.rpm
mod_ssl-2.8.12-2.i386.rpm modutils-2.4.18-3.7x.asp.i386.rpm
cpp-2.96-113asp.i386.rpm opensll* dev-3.3-4.2asp.i386.rpm
php-4.1.2-7.3.6asp.i386.rpm gcc-2.96-113asp.i386.rpm glibc*
iptables-1.2.7a-3asp.i386.rpm kernel-2.4.18-19.7asp.i386.rpm
kernel-utils-2.4-8.13.7.3asp.i386.rpm wget-1.8.2-4.73.i386.rpm
libstdc++-2.96-113asp.i386.rpm xinetd-2.3.7-4.7x.i386.rpm
MAKEDEV-3.3-4.2asp.i386.rpm
???? ???????? ? ??????? ???, ??? ????? ?????, ??? ??????????? ? ???? ???????.
rpm -Uhv * ?? ???????? ??-?? ????, ??? ? ??????????? ????? ?? ?????? ?????????
??????. ??, ????? ????? ????, ??? ? ???? ???????, ????? ?? ??????
????????? ??????, ?????? ??????? ????? ??? ????? ??????, ??? ??? ?? ?????????.
? ?????, ??????? ??? - ???????? ??, ??? ? ??? ????? ? ????? ??????????????.
??? ??? ?? ???????? ????, ?? ?????????? ????????? /etc/lilo.conf
(??? ????? ?? ??????????? ???????????) ?? ??????? ????? ?????? ???? ? initrd.
?????????????? ?????????, ??? ?? ??? ????????? ???????????? ??? ???????????
? ????? ?????.
???? 3. ????? ??? ??????.
???? ???? ????? ??????? ??? ??????????, ??????? ??? ????? ??? ??????????.
???? ??? ? ???, ??? ??????????? ????????????, ??? ?? ?? ?? ???????, ??
????????? ?????????? ????? ????? ??????? ??? ??????? ?????. ? ????? ???????,
??? ?????? - ?????? ??? ??? ????? ?????. ? ? ?????? - ???-?? ???????????
??????? ?? ???????, ??????? ?? ????? ???????? ???????, cups.
? ?????? ???????? ??? ????? ? ???????: ? ????? ?????
rpm -qa > list; less list ??? ????????? ????????????? ???????,
? ?? ?????? ?????? ?????? ??? ?????? ???????? ??? ?????????????????
???? ??????.
????? ???????? ???? "?????" ? ???????? ??? ? ?????? ???????????? ???????,
? ?????? ?? ntsysv, ??? ????????? ? ???????? ???????? ??????? ????
sendmail (?? 25? ????? ?? ?????? ?? ?????, ?? ???????, ???? cron, ?????
???????? ?????)
???? 4. ????????? ????, ??? ????????.
?????? ????? ? ?????? /etc/aliases, ??? ?? ??? ????? ?? root ???????? ????,
???? ????. ?????, ??? ?? ????????? ???????? ? ????, ???????? newaliases.
????? ???????? /etc/hosts, /etc/sysconfig/network ?? ???????????? ????????
?????????.
????? ?????? /etc/resolv.conf
[root@vpn root]# cat /etc/resolv.conf
nameserver 172.16.0.10
nameserver 127.0.0.1
?????? ?????? ? ?????? - ??? DNS ?????? ? ????????? ????, ??????? ??
????????? ??????????? ?? ????? ???????. ?????? ??????? - ??? ?????????
DNS, ???????? ? ?????????? ??????. ????? ? ??? ??????? ???? DNS ??????
? ?? ???????, ?? ?????? ?????? ?? ?????. ????? ???????, ??? DNS ???????
?????????? ? ????? ?????. ?? ??? ?? ??????, ???? ?? ?????-?? ??????? ??
????? ?????, ????? ?????????????? ????????? DNS.
????? ? ???????? /etc/named.conf ?? ??????? ????, ??? ?? bind ?? ????????
??????? ?? ???? ?????????? ???????????. ??? ???????? ??????: ? ??????
options ?????? ????????? ???? ???????:
listen-on { 127.0.0.1; };
?????? ??? ???????????? bind ????? ?????? ?????? ?? lo.
?????? ??????? apache: ?????? httpd.conf ? ?????? ???????? BindAddress ?
Listen, ??? ?? httpd ?? ?????? ?????? - ??? ?? ??? ????? ????????? ????????
?????? ? ? ??? ?????? ?? ??????? ?????? ??????? ???????.
???. ????? ??? ????? ??????????? ????????????? ?????? ??? ?? ?????????, ???
???, ??? ????, ??????????? ???, ??? ???? ? ? ?????? ??????????????????.
? ???? ?????? ??? ??????????? ?????? ? ????????????.
???????:
[root@vpn root]# netstat -npl|grep LIST
tcp 0 0 172.16.0.250:80 0.0.0.0:* LISTEN 1136/httpd
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 688/named
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 709/sshd
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 688/named
tcp 0 0 172.16.0.250:443 0.0.0.0:* LISTEN 1136/httpd
[root@vpn root]#
??? ?????, ?????? ?????? ???????? ?????? ???? ssh. ?????? ?? ???????? ???,
?? ?? ???? ?????? ???????? ? ?????????? ????? ? ??????? nmap:
(The 1541 ports scanned but not shown below are in state: closed)
Port State Service
22/tcp open ssh
? ????? ???. ?????????????? ????????? ??????? ?????????. ????? ?????????????
? ??????????? ??? ??????????? ??? ???????? ??????.
???? 5. ????????? VPN ???????.
????? ? ?????? pptpd-1.1.2, ???????? ? ???????? ASPLinux. ????????? ??
ntsysv, ??? ?????? pptpd ??????????? ?? ?????????.
??????????? ??????? ?? ???? /etc/pptpd.conf ? ??????????? ???.
? ???????? ????????? ??????
option /etc/ppp/options.pptpd
????? ????? ????????? ????????? PPP ??? PPTP
localip 172.16.0.250
remoteip 172.16.0.230-249
??? ? ?????? ???????? ???????, ??????? ????? ??????????? VPN ????????.
?????? ?????? ?? ?????.
?????? ??????? ???? /etc/ppp/options.pptpd
lock
mtu 1490
mru 1490
ipcp-accept-local
ipcp-accept-remote
lcp-echo-failure 3
lcp-echo-interval 5
deflate 0
auth
+chap
-pap
proxyarp
ms-dns 172.16.0.10
+chapms
+chapms-v2
nobsdcomp
nodeflate
nodefaultroute
+mppe-40
+mppe-128
+mppe-stateless
? ???????? ??? ??? ???????, ????? ??????? mppe-40 ? mppe-128. ??? ????????
?????? ?????-???? ?????????? (mppe-40) ? ????????? 128 ?????? ??????????
(mppe-128).
?? ??? ?????? ????? ? ????????? pptpd: /etc/init.d/pptpd start
??? ?????? ??????????? ??? ???????. ???? ???-?? ?? ??, ?? ????????? debug
? ????? ?????? ? ????????????. ? ???? ??????????? ??? ????? ? ??????? ????
??????????.
??????????? ? ????? /etc/ppp/chap-secrets ?????? ? ?????? ? ????
????? * ?????? *_???_??????????_ip_???_???????
??? ?????????? ??????? ????????? ?????????? ???????????: ??? VPN ???????
????? ???????? ? ????????? ?????? ??? ????? ???????? VPN ???????? ??????????
? ???????? "?????????????" ? ?????? ??? ?????????? ????????? ??? ??
????????? ...
????? ?? ?????? ? ??????? ????????? ????????? ? ????????, ??? ???? ?? ????
????? ??????? ?? ????????? ??????. ???? ? ??????? ???? ????? ???????????,
??? ? ??????? ? ????, ?????????? ?? ????????.
echo 1 > /proc/sys/net/ipv4/ip_forward
??? ??????? ???????? ?? ????????? ????????? ???????. ??? ??? ?????? ???????
????? ? ??? - ?????? ?? ????? ? ?? ??????.
?????? 1. ?????? ??????? ?????? ????? VPN ??????. ????? ?????? ???? ???????:
iptables -t nat -A POSTROUTING -s 172.16.0.0/24 -j MASQUERADE
(172.16 - ??? ????????? ???????). ???? ???????? ? ??????? ???????????
ip ???????. ????????? - ??????? iptables-tutorial ? ?????? ????????????
?????? 2. VPN ?????? ????? ???????? ?? ???????? ???????.
????? ?? ????????????? ??? ?????????? source based policy routing.
echo 200 multik >> /etc/iproute2/rt_tables
????????? ??????? ????????
ip rule add from 172.16.0.249 table multik
????????? ip ????? ? ??????? ???????? (172.16.0.249 ? ???????? ??? ???? ?
chap-secrets)
ip route add default via 172.16.0.10 dev eth1 table multik
???????, ??? ?? ???, ??? ???????? ? ??????? ???????? multik, ????????????
?? ?? ???????? ????????, ? ?? 172.16.0.10 (???????-?????? ? ???? ????).
ip route flush cache
????????? ????????? ? ????. ?? ????????????? ??????????? ??
www.linuxguruz.org/iptables/howto/2.4routing-4.html.
?????? ????? ?????? ?????????? ??? ???? Win2000 ??? WinXP, ??????? ???????
VPN ??????????, ????????? ????? VPN ???????, ?????? ????? ? ??????? ?
???????????? ????? ?????????????? VPN.
???? 6. ????????? MySQL ? ???????.
??? ? ?????? ?????? ?? ????, ?????? ??? ????????? ? ????????? MySQL, apache,
php ? ??????? ? ???????? ???? ??? ????? ? ?????? ?????????. ;-)
(?) 2003 ???????? ??????? multik@multik.ru
????????? ??????? ?????????? ?????????? kad@asplinux.ru ?? ??????.
© Vadim Fedorov <fedorov@vadim.org.ua>
2003
|