朝2時に突然電話が鳴ったとき、何も問題はありませんでした。
-こんにちは、ハニー！ YouTubeが機能しません！
「細かく、眠りにつく！」
-Nuuu！ そこで新しいシリーズが登場しました！
-明日は何でもします！
-まあ、barえ、まあ！
-わかった！ わかった！ 今。
...
この投稿から、次の質問への回答がわかります。
午前2時のストレスからあなたの最愛の人を救う方法は？ プロバイダーがブロックしている場合、youtube.comへのアクセスを返す方法は？ VPNをすばやく上げて、クライアントデバイス（Android、Windows、Debian、dd-wrt）を設定して、それを使用するにはどうすればよいですか？ オープンアクセスポイントでインターネットを安全にサーフィンする方法は？ 彼の愛する人の目にカルマを獲得するには？ 興味があれば、猫へようこそ！
開始する
私が最初に尋ねたのは、DNSプロバイダーとGoogle Public DNSを使用してyoutube.comをトレースして落ち着かせることでした
, DNS IP , IP youtube.com, 8.8.8.8 .tracert youtube.com nslookup youtube.com nslookup youtube.com 8.8.8.8
, . , , . , , , . .
, , , , VPN , — . .
vServer VQ 7 — Hetzner , 7.90 /, .. VPN , .
, , , . VISA.
, vServer VQ 7,
debian ( ). Linux, Debian 6.0 minimal, 32bit, Activate.
, .. , vServer, SSH.
. root , SSH .
#
passwd root
# mc ( , )
apt-get update
apt-get install mc
# openvpn
apt-get install openvpn
cd /usr/share/doc/openvpn/examples/easy-rsa/2.0/
#
nano ./vars
#
export KEY_SIZE=1024 #
export KEY_EXPIRE=3650 #
# -
export KEY_COUNTRY="RU"
export KEY_PROVINCE="RU"
export KEY_CITY="Moscow"
export KEY_ORG="http://habrahabr.ru"
export KEY_EMAIL="org@example.com"
#
# keys
. ./vars
. ./clean-all
./build-ca #
./build-key-server server #
./build-dh #
# tls-auth, vpn , DoS , :
openvpn --genkey --secret ./keys/ta.key
# tls-auth? ta.key , .
#
cp ./keys/ca.crt /etc/openvpn
cp ./keys/server.crt /etc/openvpn
cp ./keys/server.key /etc/openvpn
cp ./keys/dh1024.pem /etc/openvpn
# tls-auth, :
cp ./keys/ta.key /etc/openvpn
# , ( , -, Enter. (Enter export password), , )
./build-key-pkcs12 vpn.android
./build-key-pkcs12 vpn.windows
./build-key-pkcs12 vpn.debian
./build-key-pkcs12 vpn.ddwrt
./build-key-pkcs12 vpn.home
# /usr/share/doc/openvpn/examples/easy-rsa/2.0/keys/ vpn.android.*, vpn.windows.* .
# , SSH, :
# cd /usr/share/doc/openvpn/examples/easy-rsa/2.0/
# . ./vars
# ./build-key-pkcs12 vpn.newuser1
# ./build-key-pkcs12 vpn.newuser2
#
zcat /usr/share/doc/openvpn/examples/sample-config-files/server.conf.gz > /etc/openvpn/server.conf
nano /etc/openvpn/server.conf
# - , , :
local IP___
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
client-to-client # , VPN
# tls-auth, ( #)
# tls-auth ta.key 0
# , , . .
port 1194
#
# rc.local, , .
nano /etc/rc.local
# exit 0
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
#
nano /etc/sysctl.conf
#
net.ipv4.ip_forward=1
# ,
reboot
, . . , :
SSH, mc ftp . , ./usr/share/doc/openvpn/examples/easy-rsa/2.0/keys/
android (root )
1. OpenVPN for Android
2. p12,
/usr/share/doc/openvpn/examples/easy-rsa/2.0/keys/vpn.android.p12
3. OpenVPN for Android
4. VPN Profiles > Add, . :
- Basic > Server Address: IP VPN ,
- Type: PKCS12 File
- Select: *.p12
- PKCS12 Password: , .
- upd: , remote-cert-tls server -. ,
- tls-auth , tls-auth ta.key
5. . , ( VPN, , . , ).
Windows
1. : 32bit | 64bit
2. myvpnconfig.ovpn ( ):
remote IP__ 1194 client dev tun ping 10 comp-lzo proto udp tls-client remote-cert-tls server pkcs12 vpn.windows.p12 verb 3 pull
# tls-auth , :
tls-auth ta.key 1
3. batch (start_my_vpn.cmd) VPN :
cd C:\some\path\openvpn\
"C:\Program Files\OpenVPN\bin\openvpn.exe" --config C:\some\path\openvpn\myvpnconfig.ovpn
4. , vpn.windows.p12 ,
/usr/share/doc/openvpn/examples/easy-rsa/2.0/keys/vpn.windows.p12
5. , , , «» .
, :
, p12 ca.crt, vpn.windows.key vpn.windows.crt, ,
:pkcs12 vpn.windows.p12
ca ca.crt cert vpn.windows.crt key vpn.windows.key
myvpnconfig.ovpn start_my_vpn.cmd./usr/share/doc/openvpn/examples/easy-rsa/2.0/keys/
Linux
debian 6.0
# openvpn
apt-get install openvpn
# , VPN
mkdir /opt/openvpn
#
echo 'cd /opt/openvpn
/usr/sbin/openvpn --config /opt/openvpn/myvpnconfig.ovpn
' > /opt/openvpn/start_vpn.run
#
echo 'remote IP__ 1194
client
dev tun
ping 10
comp-lzo
proto udp
tls-client
remote-cert-tls server
pkcs12 vpn.debian.p12
verb 3
pull' > /opt/openvpn/myvpnconfig.ovpn
# tls-auth , :
# tls-auth ta.key 1
# vpn.debian.p12 /usr/share/doc/openvpn/examples/easy-rsa/2.0/keys/
# , p12 ca.crt, vpn.debian.key vpn.debian.crt, windows, VPN, VPN.
chmod +x /opt/openvpn/start_vpn.run
. vpn.debian.p12 ca.crt, vpn.debian.key vpn.debian.crt .
VPN, :
/opt/openvpn/start_vpn.run
dd-wrt (Big Mega)
, VPN, , , NAT' IP. , VPN.
1. router_ip/Diagnostics.asp (.->)
2. « », , , . « » « »
3. :
#### CERT ####
CA_CRT='-----BEGIN CERTIFICATE-----
C4dczC6ZeWIgri7krQzPIrX5hNYAc676PNv6iomNWVJNkugr
-----END CERTIFICATE-----'
CLIENT_CRT='-----BEGIN CERTIFICATE-----
C4dczC6ZeWIgri7krQzPIrX5hNYAc676PNv6iomNWVJNkugr
-----END CERTIFICATE-----'
CLIENT_KEY='-----BEGIN RSA PRIVATE KEY-----
C4dczC6ZeWIgri7krQzPIrX5hNYAc676PNv6iomNWVJNkugr
-----END RSA PRIVATE KEY-----'
#### CERT ####
#### OPEN VPN ####
OPVPNENABLE=`nvram get openvpncl_enable | awk '$1 == "0" {print $1}'`
if [ "$OPVPNENABLE" != 0 ]
then
nvram set openvpncl_enable=0
nvram commit
fi
sleep 30
mkdir /tmp/openvpn; cd /tmp/openvpn
echo "$CA_CRT" > ca.crt
echo "$CLIENT_CRT" > client.crt
echo "$CLIENT_KEY" > client.key
chmod 644 ca.crt client.crt
chmod 600 client.key
sleep 30
echo 'remote IP__ 1194
client
dev tun
ping 10
comp-lzo
proto udp
tls-client
remote-cert-tls server
ca ca.crt
cert client.crt
key client.key
verb 3
pull' > openvpn.conf
# tls-auth , :
# tls-auth ta.key 1
killall openvpn
openvpn --config /tmp/openvpn/openvpn.conf&
### MASQUERADE
iptables -I FORWARD -i br0 -o tun0 -j ACCEPT
iptables -I FORWARD -i tun0 -o br0 -j ACCEPT
iptables -I INPUT -i tun0 -j ACCEPT
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE
###
4. CA_CRT, CLIENT_CRT CLIENT_KEY, ca.crt, vpn.ddwrt.crt vpn.ddwrt.key , , vpn.ddwrt.crt , .
/usr/share/doc/openvpn/examples/easy-rsa/2.0/keys/
5. IP__ « ».
6. , VPN. VPN IP ifconfig.
fin
OpenVPN , , 2ip.ru, IP , Hetzner, .
VPN Wi-Fi.
, wi-fi ( , . ).
, , NAT , . client-to-client .
:
1. www.opennet.ru/base/sec/openvpn_server.txt.html
2. wiki.hidemyass.com/DD-WRT_OpenVPN_Setup
3. www.hetzner.de
p.s.: youtube.com.
p.p.s.: android One X SGS II.
p.p.p.s.: , .