04/09/2015 - 小小泪

listen=YES
anonymous_enable=NO
local_enable=YES
write_enable=YES
dirmessage_enable=YES
use_localtime=YES
xferlog_enable=YES
connect_from_port_20=YES
chroot_local_user=YES
secure_chroot_dir=/var/run/vsftpd/empty
pam_service_name=vsftpd
rsa_cert_file=/etc/ssl/private/vsftpd.pem
rsa_private_key_file=/etc/ssl/private/vsftpd.pem
ssl_enable=YES
allow_anon_ssl=NO
force_local_data_ssl=YES
force_local_logins_ssl=YES
ssl_tlsv1=YES
ssl_sslv2=NO
ssl_sslv3=NO
require_ssl_reuse=NO
ssl_ciphers=HIGH

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

listen=YES

anonymous_enable=NO

local_enable=YES

write_enable=YES

dirmessage_enable=YES

use_localtime=YES

xferlog_enable=YES

connect_from_port_20=YES

chroot_local_user=YES

secure_chroot_dir=/var/run/vsftpd/empty

pam_service_name=vsftpd

rsa_cert_file=/etc/ssl/private/vsftpd.pem

rsa_private_key_file=/etc/ssl/private/vsftpd.pem

ssl_enable=YES

allow_anon_ssl=NO

force_local_data_ssl=YES

force_local_logins_ssl=YES

ssl_tlsv1=YES

ssl_sslv2=NO

ssl_sslv3=NO

require_ssl_reuse=NO

ssl_ciphers=HIGH

Crontab of raspberry pi

04/09/2015vanabel

for pi

*/5 * * * * curl -d "domain=vanraspi&token=YOURTOKENS" dnamer.net/update >> /home/pi/mylog/dnamer.log 2>&1
@reboot sudo -u pi /usr/bin/vncserver :1 -geometry 800x600 -depth 24 -dpi 96 >> /home/pi/mylog/vnc.log 2>&1

1 2	/5 * * * curl -d "domain=vanraspi&token=YOURTOKENS" dnamer.net/update >> /home/pi/mylog/dnamer.log 2>&1 @reboot sudo -u pi /usr/bin/vncserver :1 -geometry 800x600 -depth 24 -dpi 96 >> /home/pi/mylog/vnc.log 2>&1

for root

*/15 * * * * /bin/bash /home/pi/mybash/checknet.sh
@reboot sleep 300 && sudo service openvpn restart >> /home/pi/mylog/openvpn.log 2>&1
@reboot sleep 300 && sudo service minidlna start >> /home/pi/mylog/minidlna.log 2>&1

1

2

3

*/15 * * * * /bin/bash /home/pi/mybash/checknet.sh

@reboot sleep 300 && sudo service openvpn restart >> /home/pi/mylog/openvpn.log 2>&1

@reboot sleep 300 && sudo service minidlna start >> /home/pi/mylog/minidlna.log 2>&1

由于openvpn和minidlna都要在获取到ip地址后才能正常运行，我设置了延迟300秒。

Check network bash

04/09/2015vanabel Leave a Comment

#!/bin/bash
timestamp=$(date +%Y/%m/%d_%T%Z)
ping -c5 www.ustc.edu.cn
if [ $? -ne 0 ]; then
  echo "[${timestamp}] Can't Connect to internate, reboot now..." >> /var/log/checknet.log
  /sbin/reboot
fi

1

2

3

4

5

6

7

#!/bin/bash

timestamp=$(date +%Y/%m/%d_%T%Z)

ping -c5 www.ustc.edu.cn

if [ $? -ne 0 ]; then

echo "[${timestamp}] Can't Connect to internate, reboot now..." >> /var/log/checknet.log

/sbin/reboot

fi

OpenVPN add client bash

04/09/2015vanabel Leave a Comment

#!/bin/bash
#script to create a openvpn user
if [ -z "$1" ]; then
        echo "Usage: $0 <vpn -user-name>"
        exit 1
fi
if [[ ! "$1" =~ ^[a-zA-Z0-9_-]+$ ]]; then
        echo "Invalid VPN user name"
        exit 1
fi
if [ `whoami` != "root" ]; then
        echo "Must run as root!"
        exit 1
fi
if [ -f "$1.ovpn" ]; then
        echo "User $1 already exists!"
        exit 1
fi

#pushd `dirname $0` >/dev/null

SCRIPTDIR=/etc/openvpn/easy-rsa
if [ ! -d  "$SCRIPTDIR" ]; then
        echo "$SCRIPTDIR not found, check again!"
        exit 1
fi
pushd $SCRIPTDIR >/dev/null

echo "======================="
echo "Your will need to enter PEM pass phrase, and MUST left challeng password blank!"
echo
. ./vars
./build-key-pass $1

echo "======================="
echo "openssl des3 encryption, your can use the same password as before."
echo
openssl rsa -in keys/$1.key -des3 -out keys/$1.3des.key

echo "======================="
echo "generate Diffie-Hellman key exchange"
echo
./build-dh

if [ -f "keys/ta.key" ]; then
        echo "HMAC key exists already!"
else
        echo "======================="
        echo "generate the static HMAC key"
        echo
        openvpn --genkey --secret keys/ta.key
fi

echo "======================="
echo "make ovpn"
echo
pushd $SCRIPTDIR/keys/ >/dev/null
bash MakeOVPN.sh $1

echo "===== Done! ===="
echo "Your can mail the $1.ovpn to your friend!"
</vpn>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

#!/bin/bash

#script to create a openvpn user

if [ -z "$1" ]; then

echo "Usage: $0 <vpn -user-name>"

exit 1

fi

if [[ ! "$1" =~ ^[a-zA-Z0-9_-]+$ ]]; then

echo "Invalid VPN user name"

exit 1

fi

if [ `whoami` != "root" ]; then

echo "Must run as root!"

exit 1

fi

if [ -f "$1.ovpn" ]; then

echo "User $1 already exists!"

exit 1

fi

#pushd `dirname $0` >/dev/null

SCRIPTDIR=/etc/openvpn/easy-rsa

if [ ! -d "$SCRIPTDIR" ]; then

echo "$SCRIPTDIR not found, check again!"

exit 1

fi

pushd $SCRIPTDIR >/dev/null

echo "======================="

echo "Your will need to enter PEM pass phrase, and MUST left challeng password blank!"

echo

. ./vars

./build-key-pass $1

echo "======================="

echo "openssl des3 encryption, your can use the same password as before."

echo

openssl rsa -in keys/$1.key -des3 -out keys/$1.3des.key

echo "======================="

echo "generate Diffie-Hellman key exchange"

echo

./build-dh

if [ -f "keys/ta.key" ]; then

echo "HMAC key exists already!"

else

echo "======================="

echo "generate the static HMAC key"

echo

openvpn --genkey --secret keys/ta.key

fi

echo "======================="

echo "make ovpn"

echo

pushd $SCRIPTDIR/keys/ >/dev/null

bash MakeOVPN.sh $1

echo "===== Done! ===="

echo "Your can mail the $1.ovpn to your friend!"

</vpn>

Day: 04/09/2015

My Vsftpd Config

Crontab of raspberry pi

Check network bash

OpenVPN add client bash

2015年四月
一	二	三	四	五	六	日
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30