tracyhatemice

This project has moved to a GitHub repository:

https://github.com/hwdsl2/setup-ipsec-vpn

测试平台：DigitalOcean VPS ubuntu14.04 x64, strongswan5.2.2

运行以下命令请使用root权限

一：安装strongswan

由于ubuntu软件仓库中strongswan版本较低，因此从官网源码编译安装

apt-get install build-essential     #编译环境
aptitude install libgmp10 libgmp3-dev libssl-dev pkg-config libpcsclite-dev libpam0g-dev     #编译所需要的软件

Update: For those interested, here's the version for updating from Android 5.1.0 (LMY47D/LMY47I) to Android 5.1.1 (LMY48B):
https://gist.github.com/eyecatchup/dab5cf7977008e504213

  UPDATE `NEXUS 5` 
     SET `VERSION`='5.0.1', `BUILD`='LRX22C', `RECOVERY`='CUSTOM', `ROOTED`=1 
   WHERE `VERSION`='5.0' && `BUILD`='LRX21O' && `RECOVERY`='CUSTOM' && `ROOTED`=1 
         && `WANNA_KEEP_USERDATA`=1;

Stangri's VPN Policy Routing package is a mainstay of my OpenWRT builds. It works great for IPv4, but I couldn't, for the life of me, get it working with IPv6. Instead, I had to faux-implement PBR as follows.

My VPN provider only gave me a single IP address with a /128 prefix, so I was forced to use NAT6. This left me with a stanza in my firewall config that looks like this; note the masq6 option

config zone
	option name 'wan_vpn'
	option input 'REJECT'
	option output 'ACCEPT'
	option forward 'REJECT'

	# take one

	# subdirectory (one server, multiple services)
	location /btsync/ {
	rewrite ^/btsync/gui(.*) /btsync$1 last;
	proxy_pass http://127.0.0.1:8888/gui/;
	proxy_redirect /gui/ /btsync/;
	proxy_buffering off;
	proxy_set_header Host $host;
	proxy_set_header X-Real-IP $remote_addr;

	#!/bin/sh

	# Script to route traffic from home network through VPN selectively.
	# Based off the discussion at http://www.smallnetbuilder.com/forums/showthread.php?t=9311
	# The setup is a Roku box, a Home PC running Plex, and a Synology NAS with a torrent client running a web interface.
	# The aim is to have all traffic from Roku go through the VPN, all traffic from the Home PC (and all other devices) bypassing the VPN,
	# and the Synology NAS using the VPN. There are however some exceptions. Since Plex uses port 32400, Roku has to bypass the VPN when
	# using that port. In addition, port 9091 has to bypass the VPN as well in order to access the Synology torrent client.
	#
	# Requirements: Asuswrt-Merlin with OpenVPN already set up

	# Install dependencies
	#
	# * checkinstall: package the .deb
	# * libpcre3, libpcre3-dev: required for HTTP rewrite module
	# * zlib1g zlib1g-dbg zlib1g-dev: required for HTTP gzip module
	apt-get install checkinstall libpcre3 libpcre3-dev zlib1g zlib1g-dbg zlib1g-dev && \

	mkdir -p ~/sources/ && \

	# Compile against OpenSSL to enable NPN

	auth_basic "Restricted";
	auth_basic_user_file /etc/nginx/htpasswd;