

<HTML><BODY><p>Ð—Ð´Ñ€Ð°Ð²ÑÑ‚Ð²ÑƒÐ¹Ñ‚Ðµ! ÐšÐ¾Ð³Ð´Ð° Ð¶Ðµ Ð½Ð°Ñ‡Ð½ÑƒÑ‚ÑÑ Ð²Ñ‹Ñ…Ð¾Ð´Ð½Ñ‹Ðµ!&nbsp;<img title="" src="http://img.mail.ru/ru/btn/kolobki/sad.gif" alt="" border="0" data-mce-src="http://img.mail.ru/ru/btn/kolobki/sad.gif"><br><br>ÐŸÐµÑ€ÐµÐ²ÐµÐ» Ð¾Ð´Ð¸Ð½ Ð¸Ð· ÑÐµÑ€Ð²ÐµÑ€Ð¾Ð² Ð½Ð° AltLinux 6.0 Centaurus. Ð’ÑÐµ ÐºÐ¾Ð½Ñ„Ð¸Ð³Ð¸ Ð¿ÐµÑ€ÐµÐºÐ¸Ð½ÑƒÐ» Ñ 4.1. ÐŸÐ¾Ñ‡Ñ‚Ð¸ Ð²ÑÐµ ÑÐµÑ€Ð²Ð¸ÑÑ‹, Ð¿Ð¾ÑÐ»Ðµ Ð½ÐµÐºÐ¾Ñ‚Ð¾Ñ€Ñ‹Ñ… Ð¿Ð»ÑÑÐ¾Ðº, Ð·Ð°Ñ€Ð°Ð±Ð¾Ñ‚Ð°Ð»Ð¸ ÐºÑ€Ð¾Ð¼Ðµ OpenVPN ÑÐµÑ€Ð²ÐµÑ€Ð°. Ð¡ÐµÑ€Ð²ÐµÑ€ Ð·Ð°Ð¿ÑƒÑÐºÐ°ÐµÑ‚ÑÑ, ÐºÐ»Ð¸ÐµÐ½Ñ‚Ñ‹ Ñ†ÐµÐ¿Ð»ÑÑŽÑ‚ÑÑ, ÐÐž, ÐºÐ»Ð¸ÐµÐ½Ñ‚Ñ‹ Ð²Ð¸Ð´ÑÑ‚ ÑÐµÑ€Ð²ÐµÑ€ Ð¸ ÑÐµÑ‚ÑŒ Ð·Ð° Ð½Ð¸Ð¼, Ð° ÑÐµÑ€Ð²ÐµÑ€ Ð½Ðµ Ð²Ð¸Ð´Ð¸Ñ‚ ÐºÐ»Ð¸ÐµÐ½Ñ‚Ð¾Ð² Ð¸, ÑÐ¾Ð¾Ñ‚Ð²ÐµÑ‚ÑÑ‚Ð²ÐµÐ½Ð½Ð¾. Ð¸ ÑÐµÑ‚Ð¸ Ð·Ð° Ð½Ð¸Ð¼. ÐŸÑ€Ð¸ Ñ‚Ð¾Ð¼, Ñ‡Ñ‚Ð¾ Ð½Ð° ÑÑ‚Ð°Ñ€Ð¾Ð¼ ÑÐµÑ€Ð²ÐµÑ€Ðµ Ñ ÐÐ»ÑŒÑ‚Ð¾Ð¼ 4.1 Ñ‚Ð°ÐºÐ¸Ñ… Ð¿Ñ€Ð¾Ð±Ð»ÐµÐ¼ Ð½Ðµ Ð½Ð°Ð±Ð»ÑŽÐ´Ð°ÑŽ. ÐœÐ¾Ð¶ÐµÑ‚ ÐºÑ‚Ð¾ Ñ‚Ð¾ ÑƒÐ²Ð¸Ð´Ð¸Ñ‚ Ð¼Ð¾ÑŽ Ð¾ÑˆÐ¸Ð±ÐºÑƒ ÑÐ²ÐµÐ¶Ð¸Ð¼ Ð²Ð·Ð³Ð»ÑÐ´Ð¾Ð¼. ÐžÐ³Ð¾Ð²Ð¾Ñ€ÑŽÑÑŒ Ð·Ð°Ñ€Ð°Ð½ÐµÐµ, Ñ‡Ñ‚Ð¾ Ñ„Ð°ÐµÑ€Ð²Ð¾Ð», Ð² Ð¿Ð¾Ñ€ÑÐ´ÐºÐµ ÑÐºÑÐ¿ÐµÑ€ÐµÐ¼ÐµÐ½Ñ‚Ð°, Ð²Ñ‹ÐºÐ»ÑŽÑ‡ÐµÐ½ Ñ Ð¾Ð±Ð¾Ð¸Ñ… ÑÑ‚Ð¾Ñ€Ð¾Ð½, Ð° Ð²Ð½ÐµÑˆÐ½Ð¸Ðµ Ð°Ð´Ñ€ÐµÑÐ° Ð² ÐºÐ¾Ð½Ñ„Ð¸Ð³Ð°Ñ… Ð·Ð°Ð¼ÐµÐ½ÐµÐ½Ñ‹. Ð¤Ð¾Ñ€Ð²Ð°Ð´Ð¸Ð½Ð³ Ð²ÐºÐ»ÑŽÑ‡ÐµÐ½.<br><br>Ð½Ð¸Ð¶Ðµ ÐºÐ¾Ð½Ñ„Ð¸Ð³Ð¸<br><br>ip a   Ð½Ð° ÑÐµÑ€Ð²ÐµÑ€Ðµ<br><br><em>[root@localhost ~]# ip a</em><br><em>1: lo: &lt;LOOPBACK,UP,LOWER_UP&gt; mtu 16436 qdisc noqueue state UNKNOWN</em><br><em>    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00</em><br><em>    inet 127.0.0.1/8 scope host lo</em><br><em>2: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UP qlen 1000</em><br><em>    link/ether b4:99:ba:a9:08:0c brd ff:ff:ff:ff:ff:ff</em><br><em>    inet 172.21.0.1/16 brd 172.21.255.255 scope global eth0</em><br><em>3: eth1: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UP qlen 1000</em><br><em>    link/ether b4:99:ba:a9:08:0d brd ff:ff:ff:ff:ff:ff</em><br><em>    inet 123.123.123.123/28 brd 123.123.123.122 scope global eth1</em><br><em>5: vpnserver: &lt;POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100</em><br><em>    link/none</em><br><em>&nbsp;   inet 172.19.0.1 peer 172.19.0.2/32 scope global vpnserver</em><br><br>Ñ‚Ð°Ð±Ð»Ð¸Ñ†Ð° Ð¼Ð°Ñ€ÑˆÑ€ÑƒÑ‚Ð¾Ð² Ð½Ð° ÑÐµÑ€Ð²ÐµÑ€Ðµ<br><em>[root@localhost ~]# route</em><br><em>Kernel IP routing table</em><br><em>Destination     Gateway         Genmask         Flags Metric Ref    Use Iface</em><br><em>172.19.0.2      *               255.255.255.255 UH    0      0        0 vpnserver</em><br><em>123.123.123.121 *               255.255.255.240 U     0      0        0 eth1</em><br><em>192.168.2.0     172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>192.168.1.0     172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>192.168.17.0    172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>192.168.16.0    172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>192.168.15.0    172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>192.168.14.0    172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>192.168.12.0    172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>192.168.11.0    172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>192.168.10.0    172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>172.19.0.0      172.19.0.2      255.255.255.0   UG    0      0        0 vpnserver</em><br><em>172.21.0.0      *               255.255.0.0     U     1      0        0 eth0</em><br><em>default         123.123.123.122 0.0.0.0         UG    0      0        0 eth1</em><br><br>ÐºÐ¾Ð½Ñ„Ð¸Ð³ VPN-ÑÐµÑ€Ð²ÐµÑ€Ð°<br><br><em>[root@localhost ~]# cat /etc/openvpn/server.conf</em><br><em>port 20000</em><br><em>proto udp</em><br><em>dev vpnserver</em><br><em>dev-type tun</em><br><br><em>ca /etc/openvpn/keys/ca.crt</em><br><em>cert /etc/openvpn/keys/server.crt</em><br><em>key /etc/openvpn/keys/server.key  # This file should be kept secret</em><br><em>dh /etc/openvpn/keys/dh1024.pem</em><br><br><em>server 172.19.0.0 255.255.255.0</em><br><em>ifconfig-pool-persist ipp.txt</em><br><br><em>push "route 172.21.0.0 255.255.0.0"</em><br><em>client-config-dir /etc/openvpn/ccd</em><br><em>route 192.168.2.0 255.255.255.0 172.19.0.2</em><br><em>route 192.168.11.0 255.255.255.0</em><br><em>route 192.168.10.0 255.255.255.0</em><br><em>route 192.168.12.0 255.255.255.0</em><br><em>route 192.168.14.0 255.255.255.0</em><br><em>route 192.168.15.0 255.255.255.0</em><br><em>route 192.168.16.0 255.255.255.0</em><br><em>route 192.168.17.0 255.255.255.0</em><br><em>route 192.168.1.0 255.255.255.0</em><br><br><em>keepalive 10 60</em><br><em>tls-auth /etc/openvpn/keys/ta.key 0 # This file is secret</em><br><em>comp-lzo</em><br><em>user openvpn</em><br><em>group openvpn</em><br><br><em>persist-key</em><br><em>persist-tun</em><br><em>status /etc/openvpn/client-status.log</em><br><em>verb 3</em><br><br><br>ip a Ð½Ð° Ð¾Ð´Ð½Ð¾Ð¼ Ð¸Ð· ÐºÐ»Ð¸ÐµÐ½Ñ‚Ð¾Ð²<br><br><em>bash-3.1# /sbin/ip a</em><br><em>2: lo: &lt;LOOPBACK,UP,LOWER_UP&gt; mtu 16436 qdisc noqueue</em><br><em>    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00</em><br><em>    inet 127.0.0.1/8 scope host lo</em><br><em>4: eth0: &lt;BROADCAST,MULTICAST,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast qlen 1000</em><br><em>    link/ether 00:1d:60:6d:1f:21 brd ff:ff:ff:ff:ff:ff</em><br><em>    inet 192.168.1.1/24 brd 192.168.1.255 scope global eth0</em><br><em>6: eth1: &lt;BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast qlen 1000</em><br><em>    link/ether 00:19:5b:71:1d:d1 brd ff:ff:ff:ff:ff:ff</em><br><em>    inet 111.111.111.111/30 brd 111.111.111.112 scope global eth1</em><br><em>8: eth2: &lt;BROADCAST,MULTICAST,PROMISC&gt; mtu 1500 qdisc noop qlen 1000</em><br><em>    link/ether 00:19:5b:71:20:35 brd ff:ff:ff:ff:ff:ff</em><br><em>1: openvpn: &lt;POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP&gt; mtu 1500 qdisc pfifo_fast qlen 100</em><br><em>    link/[65534]</em><br><em>    inet 172.19.0.10 peer 172.19.0.9/32 scope global openvpn</em><br><em>3: venet0: &lt;BROADCAST,POINTOPOINT,NOARP,UP,LOWER_UP&gt; mtu 1500 qdisc noqueue</em><br><em>    link/void</em><br><br><br>Ñ‚Ð°Ð±Ð»Ð¸Ñ†Ð° Ð¼Ð°Ñ€ÑˆÑ€ÑƒÑ‚Ð¾Ð² Ð½Ð° ÐºÐ»Ð¸ÐµÐ½Ñ‚Ðµ<br><br><em>bash-3.1# /sbin/route</em><br><em>Kernel IP routing table</em><br><em>Destination     Gateway         Genmask         Flags Metric Ref    Use Iface</em><br><em>172.19.0.1      172.19.0.9      255.255.255.255 UGH   0      0        0 openvpn</em><br><em>172.19.0.9      *               255.255.255.255 UH    0      0        0 openvpn</em><br><em>111.111.110 *               255.255.255.252 U     0      0        0 eth1</em><br><em>192.168.1.0     *               255.255.255.0   U     0      0        0 eth0</em><br><em>172.21.0.0      172.19.0.9      255.255.0.0     UG    0      0        0 openvpn</em><br><em>default         111.111.111.112 0.0.0.0         UG    0      0        0 eth1</em><br><br><br>ÐºÐ¾Ð½Ñ„Ð¸Ð³ OpenVPN Ð½Ð° ÐºÐ»Ð¸ÐµÐ½Ñ‚Ðµ<br><br><em>client</em><br><em>dev openvpn</em><br><em>dev-type tun</em><br><em>proto udp</em><br><em>remote 123.123.123.123 20000</em><br><em>resolv-retry infinite</em><br><em>nobind</em><br><em>user openvpn</em><br><em>group openvpn</em><br><em>persist-key</em><br><em>persist-tun</em><br><em>ca /etc/openvpn/keys/ca.crt</em><br><em>cert /etc/openvpn/keys/client1.crt</em><br><em>tls-auth /etc/openvpn/keys/ta.key 1</em><br><em>comp-lzo</em><br><em>verb 3</em><br><em>log /etc/openvpn/openvpn.log</em><br><br><br><br></p></BODY></HTML>