Bernhard.Linz/openvpn-install
1
0
Fork 0
mirror of https://github.com/angristan/openvpn-install.git synced 2025-07-04 13:34:21 +02:00
Code Issues Projects Releases Wiki Activity

fix something

Browse Source
This commit is contained in:
xiagw 2018-01-05 19:14:49 +08:00
parent e051f53b5d
commit 13d5265b59
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
openvpn-install.sh
View File

@ -127,9 +127,12 @@ echo "</tls-auth>" >> ${file_client}
## function: install iptables for debian ## function: install iptables for debian
install_iptables_service(){ install_iptables_service(){
dir_ipt='/etc/iptables'
file_ipt_svc='/etc/systemd/system/iptables.service'
file_ipt_sh="${dir_ipt}/flush-iptables.sh"
# Install iptables service # Install iptables service
if [[ ! -e /etc/systemd/system/iptables.service ]]; then if [[ ! -e ${file_ipt_svc} ]]; then
mkdir /etc/iptables mkdir ${dir_ipt}
iptables-save > ${file_iptables} iptables-save > ${file_iptables}
echo "#!/bin/sh echo "#!/bin/sh
iptables -F iptables -F
@ -140,8 +143,8 @@ iptables -t mangle -F
iptables -t mangle -X iptables -t mangle -X
iptables -P INPUT ACCEPT iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT" > /etc/iptables/flush-iptables.sh iptables -P OUTPUT ACCEPT" > ${file_ipt_sh}
chmod +x /etc/iptables/flush-iptables.sh chmod +x ${file_ipt_sh}
echo "[Unit] echo "[Unit]
Description=Packet Filtering Framework Description=Packet Filtering Framework
DefaultDependencies=no DefaultDependencies=no
@ -154,7 +157,7 @@ ExecReload=/sbin/iptables-restore ${file_iptables}
ExecStop=/etc/iptables/flush-iptables.sh ExecStop=/etc/iptables/flush-iptables.sh
RemainAfterExit=yes RemainAfterExit=yes
[Install] [Install]
WantedBy=multi-user.target" > /etc/systemd/system/iptables.service WantedBy=multi-user.target" > ${file_ipt_svc}
systemctl daemon-reload systemctl daemon-reload
systemctl enable iptables.service systemctl enable iptables.service
fi fi
@ -586,7 +589,7 @@ EOF
else else
read -p "Select one client [1-$NUMBEROFCLIENTS]: " CLIENTNUMBER read -p "Select one client [1-$NUMBEROFCLIENTS]: " CLIENTNUMBER
fi fi
CLIENT=$(tail -n +2 ${file_index} | grep "^V" | cut -d '=' -f 2 | sed -n "$CLIENTNUMBER"p) CLIENT=$(tail -n +2 ${file_index} | grep "^V" | cut -d '=' -f 2 | sed -n "${CLIENTNUMBER:?empty-var}"p)
cd ${dir_easy} cd ${dir_easy}
${bin_easy} --batch revoke $CLIENT ${bin_easy} --batch revoke $CLIENT
EASYRSA_CRL_DAYS=3650 ${bin_easy} gen-crl EASYRSA_CRL_DAYS=3650 ${bin_easy} gen-crl