mirror/setup-ipsec-vpn
1
0
Fork 0
mirror of synced 2024-11-23 21:36:09 +03:00
Code Issues Projects Releases Wiki Activity
1,165 Commits 1 Branch 0 Tags 20 MiB
c1630afb7e
Commit Graph

1165 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
hwdsl2
e6ebdeaaf8 Update docs 
[ci skip]
 2016-12-30 16:24:47 -06:00
hwdsl2
69caa65512 Improve options 
- Remove some xl2tpd (pppd) options for Ubuntu/Debian
- They are not recognized in the new xl2tpd version 1.3.8
- Ref: 261e472
 2016-12-30 16:16:33 -06:00
hwdsl2
261e472e3e Bugfix 
- In xl2tpd version 1.3.8, which was pushed to the EPEL repository
  in Dec. 2016, the options "crtscts" and "lock" are no longer
  recognized in "/etc/ppp/options.xl2tpd" and generates an error.
- This commit fixes the VPN on CentOS by removing those options.
- Ref: https://github.com/xelerance/xl2tpd/issues/108
 2016-12-30 00:56:38 -06:00
hwdsl2
b59389a03f Use L2TP kernel support 
- Use L2TP kernel support on CentOS 6
- This could improve L2TP performance
 2016-12-29 00:53:30 -06:00
hwdsl2
9b3eeed571 Improve tests 2016-12-28 13:24:17 -06:00
hwdsl2
8cc1362d17 Workaround for xl2tpd bug 
- Temporary workaround for an xl2tpd bug which affects CentOS 7
- Ref: https://bugzilla.redhat.com/show_bug.cgi?id=1406360
 2016-12-28 13:23:27 -06:00
hwdsl2
eba1e4e08e Update docs 
[ci skip]
 2016-12-22 10:27:56 -06:00
hwdsl2
72f5ddf145 Improve tests 2016-12-13 13:49:55 -06:00
hwdsl2
6479212c45 Improve workaround 
- Improve workaround for non-eth0 network interfaces
- Fixed an issue where it cannot be used with sudo
 2016-11-28 13:11:57 -06:00
hwdsl2
af1af539aa Update docs 
[ci skip]
 2016-11-23 20:19:05 -06:00
hwdsl2
61bd1254ed Minor clean up 2016-11-10 13:02:04 -06:00
hwdsl2
6d99a01b0a Remove SHA2 workaround 
- Libreswan 3.18 and higher prefers sha2_512 over sha2_256
- The 'sha2-truncbug=yes' workaround is no longer needed
- Ref: https://libreswan.org/wiki/FAQ#Configuration_Matters
 2016-11-06 14:40:30 -06:00
hwdsl2
6e16712bc5 Minor clean up 2016-10-31 01:59:11 -05:00
hwdsl2
75bcdfae75 Update docs 
[ci skip]
 2016-10-29 18:36:58 -05:00
hwdsl2
9319ce8ae2 Clean up IPTables rules 
- Only add the necessary IPTables rules for the VPN
- Other minor clean ups
 2016-10-29 18:00:24 -05:00
hwdsl2
e3d830dfd4 Improve services on boot 
- Better handling of starting IPTables & Fail2Ban on boot
- Use iptables-services and disable firewalld for CentOS 7
 2016-10-29 18:00:11 -05:00
hwdsl2
895d46c0c9 Fix for Raspbian 
- On Raspberry Pis /etc/rc.local can run early during boot
- If the network is not ready, IPsec may fail to start
- A delay has been added as a workaround. Ref: #76
 2016-10-25 21:32:52 -05:00
hwdsl2
13db1d4a7f Improve Linux instructions 
- Add option "noipdefault" to fix Linux clients behind NAT
- Specify VPN username and password in the config file
- Combine the Ubuntu/Debian and CentOS/Fedora sections
- [ci skip]
 2016-10-25 18:08:36 -05:00
hwdsl2
44eb55f9f3 Update docs 
[ci skip]
 2016-10-24 09:53:07 -05:00
hwdsl2
5193d199ca Improve Linux client instructions 
[ci skip]
 2016-10-21 09:05:33 -05:00
hwdsl2
2e7913bd44 Update docs 
[ci skip]
 2016-10-15 14:49:20 -05:00
hwdsl2
6f2818753a Minor improvements and clean up 2016-10-10 22:34:51 -05:00
hwdsl2
4c6de2af29 Improve network interfaces 
- Better handling of non-eth0 network interfaces
- Now easier to use on servers with new interface names
 2016-10-10 16:49:46 -05:00
hwdsl2
65f1bcd726 Update docs 
[ci skip]
 2016-10-08 15:03:06 -05:00
hwdsl2
1f7d9f1687 Update IKEv2 howto 
[ci skip]
 2016-09-28 14:58:04 -05:00
Lin Song
37b5726ffd Merge pull request #66 from derdanu/master 
new Api Version, dynamic Storage Uri to support multi cloud environments
 2016-09-28 13:35:49 -05:00
hwdsl2
6d3b7239de Update docs 
[ci skip]
 2016-09-28 00:00:19 -05:00
hwdsl2
0e51150d84 Check VPN credentials 
- If the provided VPN credentials contain \ " or ', exit with error
- The above special characters can cause issues with the VPN
 2016-09-23 14:31:10 -05:00
hwdsl2
cce15b7f08 Improve IP checking 
- Use a function to simplify code for IP checking
- Remove new lines before matching with IP regex
 2016-09-23 00:39:36 -05:00
hwdsl2
7cdd372a6e Improve IPTables rules 
- Fixed an uncommon use case where the setup script is run again after
  a server IP change. Make sure to update IPTables rules in this case.
- Thanks @larryisthere! Ref: #17
 2016-09-21 21:06:22 -05:00
hwdsl2
b8bc702f21 Update docs 
[ci skip]
 2016-09-18 17:30:23 -05:00
hwdsl2
56a96603f9 Update docs 
[ci skip]
 2016-09-11 16:16:52 -05:00
hwdsl2
7937a74469 Improve IP detection 
- Remove unneeded code for Amazon EC2
- Check IPs for correct format after each try
 2016-09-09 15:41:02 -05:00
hwdsl2
6d4bad1fd2 Update README.md 
[ci skip]
 2016-09-07 15:45:13 -05:00
hwdsl2
77d0f0bc93 Add IKEv2 how to 
[ci skip]
 2016-08-30 11:35:24 -05:00
hwdsl2
72d0f7ff52 Clean up docs 
[ci skip]
 2016-08-26 15:48:32 -05:00
hwdsl2
96a071ebc5 Improve VPN ciphers 
- Add stronger cipher options
- Fix for Android 6.0 VPN clients
 2016-08-26 00:21:10 -05:00
hwdsl2
dad10f7ad7 Update docs 
- Fix instructions for Shrew Soft client
- [ci skip]
 2016-08-25 23:36:34 -05:00
Daniel Falkner
cd7febb13d new Api Version, dynamic Storage Uri to support multi cloud environments e.g. Microsoft Cloud Deutschland. 2016-08-22 15:34:45 +02:00
Daniel Falkner
78698bd2ff Merge pull request #1 from hwdsl2/master 
Update from origin
 2016-08-22 13:15:48 +02:00
hwdsl2
5064f3a6d6 Update docs 
- Improve Android 6 workaround
- [ci skip]
 2016-08-19 01:52:13 -05:00
hwdsl2
963242bf41 Update docs 
- Minor corrections
- [ci skip]
 2016-08-15 11:40:54 -05:00
hwdsl2
b27f58f785 Update README.md 
[ci skip]
 2016-08-15 01:13:15 -05:00
hwdsl2
2cb4d2f909 Improve tests 2016-08-12 16:37:08 -05:00
hwdsl2
28a8d496f0 Update docs 
[ci skip]
 2016-08-12 16:34:57 -05:00
hwdsl2
14767d354f Reduce wget timeout 2016-08-11 22:12:22 -05:00
hwdsl2
dc97e46542 Update docs 
[ci skip]
 2016-08-11 17:31:08 -05:00
hwdsl2
0c3b2851f5 Add support for Raspbian 
[ci skip]
 2016-08-11 15:14:52 -05:00
Lin Song
1f1cbb069e Merge pull request #52 from kaendfinger/master 
Add support for Raspbian
 2016-08-11 15:09:06 -05:00
Kenneth Endfinger
d3651890bd Add support for Raspbian 2016-08-11 15:06:50 -04:00