[gull] ssh tunneling en background au demarrage.

[Mark]

Jiang, Wei wrote:
> Je me demande s'il y a un moyen de passer en background la session de ssh?
> ou il me faut une configuration de vpn au lieu de ce "tunnel du pauvre"?

Voici sont les scripts pour faire un VPN via un tunnel ssh.
Vous devrez seulement changer le nom du host et utilisateur.

Moi, je les utilise avec cron, comme ça:

*  *    * * *   root    /usr/local/bin/vpnwatch > /var/log/vpn.log 2>&1 


Vous pouvez aussi utilisez iptables et route pour parvenir
les autres hosts sur le réseau.


-mark



--
=================================================================
-- mark at geekhive dot net --
-------------- next part --------------
#!/bin/sh

if ping -q -c1 192.168.1.2 > /dev/null 2>&1
then
    echo "VPN is up"
else
    /usr/local/bin/vpn-ssh stop
    sleep 3
    /usr/local/bin/vpn-ssh start
fi
-------------- next part --------------
#!/bin/sh
# /usr/local/bin/vpn-pppssh
#
# This script initiates a ppp-ssh vpn connection.
# see the VPN PPP-SSH HOWTO on http://www.linuxdoc.org for more information.
#
# revision history:
# 1.6 11-Nov-1996 miquels at cistron.nl
# 1.7 20-Dec-1999 bart at jukie.net
# 2.0 16-May-2001 bronson at trestle.com

#
# You will need to change these variables...
#

# The host name or IP address of the SSH server that we are
# sending the connection request to:
SERVER_HOSTNAME=yourhost.yourdomain.net

# The username on the VPN server that will run the tunnel.
# For security reasons, this should NOT be root.  (Any user
# that can use PPP can intitiate the connection on the client)
SERVER_USERNAME=somepppuser

# The VPN network interface on the server should use this address:
SERVER_IFIPADDR=192.168.3.2

# ...and on the client, this address:
CLIENT_IFIPADDR=192.168.3.1

# This tells ssh to use unprivileged high ports, even though it's
# running as root.  This way, you don't have to punch custom holes
# through your firewall.
LOCAL_SSH_OPTS="-P"


#
# The rest of this file should not need to be changed.
#

PATH=/usr/local/sbin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/bin/X11/:

#
# required commands...
#

PPPD=/usr/sbin/pppd
SSH=/usr/bin/ssh

if ! test -f $PPPD  ; then echo "can't find $PPPD";  exit 3; fi
if ! test -f $SSH   ; then echo "can't find $SSH";   exit 4; fi

case "$1" in
  start)
    echo -n "Starting vpn to $SERVER_HOSTNAME: "
    ${PPPD} updetach noauth passive pty "${SSH} ${LOCAL_SSH_OPTS} ${SERVER_HOSTNAME} -l${SERVER_USERNAME} -o Batchmode=yes sudo ${PPPD} nodetach notty noauth" ipparam vpn ${CLIENT_IFIPADDR}:${SERVER_IFIPADDR}
    echo "connected."
    ;;

  stop)
        # echo -n "Stopping vpn to $SERVER_HOSTNAME: "
        PID=`ps ax | grep "${SSH} ${LOCAL_SSH_OPTS} ${SERVER_HOSTNAME} -l${SERVER_USERNAME} -o" | grep -v ' passive ' | grep -v 'grep ' | awk '{print $1}'`
        if [ "${PID}" != "" ]; then
          route del -net 192.168.0.0 netmask 255.255.255.0 gw 192.168.1.2
          kill $PID
          echo "disconnected."
        else
          echo "VPN not running."
        fi
    ;;

  config)
    echo "SERVER_HOSTNAME=$SERVER_HOSTNAME"
    echo "SERVER_USERNAME=$SERVER_USERNAME"
    echo "SERVER_IFIPADDR=$SERVER_IFIPADDR"
    echo "CLIENT_IFIPADDR=$CLIENT_IFIPADDR"
  ;;

  *)
    echo "Usage: vpn {start|stop|config}"
    exit 1
    ;;
esac

exit 0