How To Install FreePBX on CentOS

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 class="entry-title" itemprop="headline" style="background-color: #fdfdfd; box-sizing: border-box; font-family: proxima-nova, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 39px; line-height: 1.1; margin: 21px 0px 0px;"> <u><span style="color: red;">Install FreePBX on CentOS</span></u></h1> <div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">PBX (stands for private branch exchange) is a private telephone network used that can be very easily connected to the public landline and mobile networks. The PBX network also provides audio, video and instant messaging communication through the TCP/IP protocol stack for its internal network and interconnects its internal network with the Public Switched Telephone Network (PSTN) for telephony communication.</span></div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggyfE0RGe3F6bNgKJwgmfEIGAcZp-aiPwwHnE7ozF_zlWvKp6oKjpXoSWvr5RXrWcAJ0XpN_TmttG36GOIdt3cSBN8CNZCjuQBl6Xmstji8pMAmlkpIxsB-Pgel9vbFNWYbrxi08fkUEOx/s1600/asterisk_centos_freepbx_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggyfE0RGe3F6bNgKJwgmfEIGAcZp-aiPwwHnE7ozF_zlWvKp6oKjpXoSWvr5RXrWcAJ0XpN_TmttG36GOIdt3cSBN8CNZCjuQBl6Xmstji8pMAmlkpIxsB-Pgel9vbFNWYbrxi08fkUEOx/s1600/asterisk_centos_freepbx_www.hackthesec.co.in.png" /></a></div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;"><br /></span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">A lot of successful businesses are aiming to have their own telephony system that will allow them to have many different features, lower their costs using VoIP, especially on international calls, but inside that company as well. Some of them are choosing hosted solution, some are having their own In-House solution. In this tutorial we are installing FreePBX & Asterisk VoIP on a base <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS</a> 6.4 installation.</span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Asterisk is an open source software implementation of a telephone private branch exchange (PBX); it was created in 1999. Like any PBX, it allows attached telephones to make calls to one another, and to connect to other telephone services, such as the public switched telephone network (PSTN) and Voice over Internet Protocol (VoIP) services. Its name comes from the asterisk symbol, *. Asterisk includes many features like Voice mail, conference calling, Interactive voice response, automatic call distribution, Fax to email services etc.</span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">In order to control Asterisk, we will use FreePBX. It is open source graphical user interface that makes asterisk management very easy. It is usually included in the asterisk distribution, but it can be installed manually if needed. FreePBX distribution is unified server distribution that includes all of the software packages and dependencies required for Asterisk VoIP server, such as:</span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;"> </div> <ul style="text-align: left;"> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/Apache" target="_blank">Apache Web Server</a></span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Cyrus SASL (Simple Authentication Security Layer)</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Dnsmasq</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/fail2ban" target="_blank">Fail2ban</a></span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/Iptables" target="_blank">iptables</a></span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Mailx</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/Mysql" target="_blank">MySQL </a>Server</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Network Time Protocol</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/VPN" target="_blank">OpenVPN </a>Server</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;"><a href="http://www.hackthesec.co.in/search/label/postfix" target="_blank">Postfix </a>MTA</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Prosody XMPP Server</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">TFTP Server</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Very Secure FTP Daemon (<a href="http://www.hackthesec.co.in/search/label/vsftp" target="_blank">vsftpd</a>)</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Vim text editor</span></li> </ul> <br /> <div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;"> </div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Before we start with the installation, we must make sure that the server has decent and stable internet connection and it should be in a geographical location near the place where the majority of our calls will come from. We also need to determine the size of our server. That will depends mostly on the number of the concurrent calls that we anticipate to have. It is not that bad even if we choose wrong, since we can resize our server at any time later, but some best practices showed that we should follow this calculations.</span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;"> </div> <ul style="text-align: left;"> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 512 MB RAM can support approximately 5-15 concurrent calls</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 1 GB can support approximately 15-25 concurrent calls</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 2 GB can support approximately 25-50 concurrent calls</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 4 GB can support approximately 50-100 concurrent calls</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 8 GB can support approximately 100-175 concurrent calls</span></li> <li><span style="font-family: Georgia, 'Times New Roman', serif; font-size: 18px; line-height: 28px;">Server with 16 GB can support approximately 175+ concurrent calls</span></li> </ul> <br /> <div style="background-color: #fdfdfd; box-sizing: border-box; margin-bottom: 10.5px;"> </div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Next, we must make sure that our fully qualified domain name is properly set in our hosts file and make sure that the server time setting match the appropriate time zone that server belongs to. The last step before we actually start with the installation is to update our currently installed packages from the standard <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS </a>repositories:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># yum update </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Now, we are ready to start the deployment. We will use installation script that we need to download. The script will download some file during the installation, so we will use <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">/tmp</code> folder during the installations.</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cd /tmp # wget http://upgrades.freepbxdistro.org/blank-centos-installer/5.211.65-track/5.211.65-1-Installer-Script.sh # /tmp/4.211.64-1-Installer-Script.sh </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Once it is finished, we will have fully functional IP-PBX server, based on the FreePBX Distribution. Now, we need to test if our GUI works. To do that, we will open our browser and point to the fully qualified name or the IP of our newly installed PBX, we will be presented with FreePBX administrator-account setup screen. We should setup our admin account using the GUI. That will be the information that we will use later for managing the server through the GUI.</span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">If we want to upgrade out FreePBX system later, we can search for available upgrades, download the upgrade script and execute it, similar to the installation process. First, we need to determine which our current version is:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cat /etc/schmooze/pbx-version </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Then, we can check the change list for the new version that is available and make decision whether we would like to upgrade or not. The upgrade process work same as the installation. The upgrade script might ask us for some additional information or confirmation. Once the upgrade is done we can check and confirm that our system is upgraded but executing:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cat /etc/schmooze/pbx-version </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">If there is more than one upgrade script available, we should execute every upgrade script, one by one, is sequential order and save every script in the same folder. This Asterisk and OpenPBX server are part of a very wide field and there are a lot of additional things to be considered and explored. However, this tutorial underlines the very basic information and steps that are required in order to get our own PBX system up and running.</span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;"><a href="http://hackthesec.co.in/" target="_blank">hackthesec.co.in</a><br /><a href="http://hackthesec.co.in/" target="_blank">hackthesec</a></span></div> </div> </div>

How To Install FreePBX on CentOS

Install FreePBX on CentOS PBX (stands for private branch exchange) is a private telephone network used that can be very easily connecte...

Read more »

How To Setup Your Own VPN With PPTP on Linux (CentOS, Ubuntu, Debian)

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 class="entry-title" itemprop="headline" style="background-color: #fdfdfd; box-sizing: border-box; font-family: proxima-nova, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 39px; font-weight: 500; line-height: 1.1; margin: 21px 0px 0px;"> <u><span style="color: red;">Setup Your Own VPN With PPTP on Linux</span></u></h1> <div> <span style="background-color: #fdfdfd; color: #333333; font-size: 18px; line-height: 28px;"><span style="font-family: Georgia, Times New Roman, serif;">A virtual private network (VPN) is network that extends a private network (i.e. LAN) across a public network, such as the Internet. It enables a communications between computers and devices across shared or public networks as if it were directly connected to the private network, while benefiting from the functionality, security and management policies of the private network.</span></span></div> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbGgZsZxHpGmfsc4ruZzAb9wex7f3ymd1FVb8zvx6gV5P8wjiQqZd-steeQUGuPHjAkgfrmV5BRgMUGmLyvkzVT1MqHvxJRCWK2AVkWGmo15RlgPhZuuTcgzdo5AFpodeTQbaTM5H7KEcV/s1600/VPN.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhbGgZsZxHpGmfsc4ruZzAb9wex7f3ymd1FVb8zvx6gV5P8wjiQqZd-steeQUGuPHjAkgfrmV5BRgMUGmLyvkzVT1MqHvxJRCWK2AVkWGmo15RlgPhZuuTcgzdo5AFpodeTQbaTM5H7KEcV/s320/VPN.png" width="288" /></a></div> <div> <span style="background-color: #fdfdfd; color: #333333; font-size: 18px; line-height: 28px;"><span style="font-family: Georgia, Times New Roman, serif;"><br /></span></span></div> <div> <h3 id="server-side-setup-and-configuration" style="background-color: #fdfdfd; box-sizing: border-box; font-family: proxima-nova, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 26px; font-weight: 500; line-height: 1.1; margin-bottom: 10.5px; margin-top: 21px;"> <span style="color: #0b5394;"><u>Server side setup and configuration</u></span></h3> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">The most popular VPN solutions are OpenVPN and PPTP. We will use PPTP. Before we proceed and setup our own VPN network, we should have one computer that will be the VPN server. That computer will be responsible for assigning IP addresses to the clients, establishing initial connection between the clients or between client and the server, handling the security protocols and users/clients authentication. In order to install PPTP we will execute the following command:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># apt-get install pptpd </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Alternatively, if we are using <a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS</a> we should execute:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># rpm -i http://poptop.sourceforge.net/yum/stable/rhel6/pptp-release-current.noarch.rpm # yum -y install pptpd </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Next step is to edit the default configuration file <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/pptpd.conf</span></code>, using our favourite editor and add the following lines:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">localip 172.16.0.1 remoteip 172.16.0.100-200 </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">In this case, 172.16.0.1 is the IP that will be used inside the VPN by the VPN server, and An IP from the range 172.16.0.100-200 will be assigned to each client that will be authenticated.</span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Now we need to add new users. The file that contains the users and their password is <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/ppp/chap-secrets</span></code>. The client should be entered with the following information in the following order:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># client server secret IP addresses </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">In order to create new client called <span style="color: red;"><code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">client1</code> </span>that will be able to use the <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">pptpd</code> server from any location using the password <span style="color: red;"><code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">password1</code> </span>we should add the following line, in the following case, the asterisk means that anyone IP address can use that login information:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">client1 pptpd password1 * </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">The last thing that we need to do before starting our VPN server is to add DNS server. We can add the DNS servers provided by or internet provider or we can use Google DNS servers and insert them in the file.</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">ms-dns 8.8.8.8 ms-dns 8.8.4.4 </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Now we can start the pptpd daemon using the command:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">service pptpd start </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">In order to verify that it is running and listening for incoming connections, we should execute:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">netstat -alpn | grep pptp </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">The output should look something like this:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">tcp 0 0 0.0.0.0:1723 0.0.0.0:* LISTEN 20934/pptpd unix 2 [ ] DGRAM 5992346 20934/pptpd </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">In order for VPN server to work properly and be able to forward the requests we should make sure that the following line exists in <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/systl.conf</span></code>.</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">net.ipv4.ip_forward = 1 </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">If it doesn’t exist, we need to add it and then apply the configuration using the following command:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">sysctl -p </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">If we want the clients to be able to communicate to each other inside the VPN network we should create the following <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">iptables</code> rules:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE && iptables-save # iptables --table nat --append POSTROUTING --out-interface ppp0 -j # iptables -I INPUT -s 172.16.0.0/16 -i ppp0 -j ACCEPT # iptables --append FORWARD --in-interface eth0 -j ACCEPT </code></pre> <h3 id="client-side-setup-and-configuration" style="background-color: #fdfdfd; box-sizing: border-box; font-family: proxima-nova, 'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 26px; font-weight: 500; line-height: 1.1; margin-bottom: 10.5px; margin-top: 21px;"> <span style="color: #0b5394;"><u>Client side setup and configuration</u></span></h3> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">In order for a client computer to be able to connect to our VPN server, we should install the PPTP client using the following command (the first one is for <a href="http://www.hackthesec.co.in/search/label/centos7" target="_blank">CentOS</a>, the second is for <a href="http://www.hackthesec.co.in/search/label/Debian" target="_blank">Debian</a>/<a href="http://www.hackthesec.co.in/search/label/Ubuntu" target="_blank">Ubuntu</a>):</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># yum -y install pptp # apt-get install pptp-linux </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">The VPN client request the ppp_mppe module, so we need to load it:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># modprobe ppp_mppe </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Client configuration should be created in <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/ppp/peers/</span></code> folder. In order to configure the parameters for the server we want to use, we should create the configuration file using our favorite editor and set the following parameters (we are at <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;">client1</code> now):</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">pty "pptp --nolaunchpppd" name client1 password password1 remotename PPTP require-mope-128 </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">If our config files in the example above, was named <code style="background-color: #f9f2f4; border-radius: 4px; box-sizing: border-box; font-size: 16.2px; padding: 2px 4px;"><span style="color: red;">/etc/ppp/peers/vpnserver</span></code>, then in order to start the client and connect to the VPN server we should execute:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># pppd call vpnserver </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">After starting the client, check the log files for possible errors or successful connection info using the following command:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;"># cat /var/log/syslog | grep pptp </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">We should explicitly set proper routing for the VPN traffic on our clients:</span></div> <pre style="background-color: whitesmoke; border-radius: 4px; border: 1px solid rgb(204, 204, 204); box-sizing: border-box; color: #333333; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: 14px; line-height: 1.42857; margin-bottom: 10.5px; overflow: auto; padding: 10px; word-break: break-all; word-wrap: break-word;"><code style="background-color: transparent; border-radius: 0px; box-sizing: border-box; color: inherit; font-family: Menlo, Monaco, Consolas, 'Courier New', monospace; font-size: inherit; padding: 0px; white-space: pre-wrap;">ip route add 172.16.0.0/16 dev ppp0 </code></pre> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;">Once this is done, we can repeat the procedure and add more client and they will all be able to communicate to each other inside secured virtual private network. The computer can communicate using any protocol or service, such as HTTP, SMTP, telnet, MySQL, FTP etc. PPTP server doesn’t demand high usage of CPU resources, but still, all traffic is 128-bit encrypted. This provides decent level of security and protection for our sensitive data and information.</span></div> <div style="background-color: #fdfdfd; box-sizing: border-box; font-size: 18px; line-height: 28px; margin-bottom: 10.5px;"> <span style="font-family: Georgia, Times New Roman, serif;"><a href="http://www.hackthesec.co.in/">www.hackthesec.co.in</a></span></div> </div> </div>

How To Setup Your Own VPN With PPTP on Linux (CentOS, Ubuntu, Debian)

Setup Your Own VPN With PPTP on Linux A virtual private network (VPN) is network that extends a private network (i.e. LAN) across a publ...

Read more »