Big refresh

2015-07-09 21:19:54 +02:00
parent 8dd87a4acd
commit d14ae374a4
109 changed files with 1333 additions and 8772 deletions
@@ -0,0 +1,31 @@
+client
+dev tun
+proto tcp-client
+remote xxx.xxx.xxx.xxx 443
+resolv-retry infinite
+cipher AES-256-CBC
+redirect-gateway
+
+# Keys
+# Identity
+ca ca.crt
+tls-auth ta.key 1
+key-direction 1
+ns-cert-type server
+auth-user-pass
+auth-nocache
+
+# Security
+nobind
+persist-key
+persist-tun
+comp-lzo
+verb 3
+
+# DNS
+script-security 2
+up ./update-resolv.sh
+down ./update-resolv.sh
+
+# Proxy ?
+# http-proxy cache.univ.fr 3128
@@ -0,0 +1,55 @@
+#!/bin/bash
+#
+# Parses DHCP options from openvpn to update resolv.conf
+# To use set as 'up' and 'down' script in your openvpn *.conf:
+# up /etc/openvpn/update-resolv-conf
+# down /etc/openvpn/update-resolv-conf
+#
+# Used snippets of resolvconf script by Thomas Hood <jdthood@yahoo.co.uk>
+# and Chris Hanson
+# Licensed under the GNU GPL.  See /usr/share/common-licenses/GPL.
+# 07/2013 colin@daedrum.net Fixed intet name
+# 05/2006 chlauber@bnc.ch
+#
+# Example envs set from openvpn:
+# foreign_option_1='dhcp-option DNS 193.43.27.132'
+# foreign_option_2='dhcp-option DNS 193.43.27.133'
+# foreign_option_3='dhcp-option DOMAIN be.bnc.ch'
+
+#[ -x $(which resolvconf) ] || exit 0
+[ -x /usr/bin/resolvconf ] || exit 0
+
+case $script_type in
+
+up)
+   for optionname in ${!foreign_option_*} ; do
+      option="${!optionname}"
+      echo $option
+      part1=$(echo "$option" | cut -d " " -f 1)
+      if [ "$part1" == "dhcp-option" ] ; then
+         part2=$(echo "$option" | cut -d " " -f 2)
+         part3=$(echo "$option" | cut -d " " -f 3)
+         if [ "$part2" == "DNS" ] ; then
+            IF_DNS_NAMESERVERS="$IF_DNS_NAMESERVERS $part3"
+         fi
+         if [ "$part2" == "DOMAIN" ] ; then
+            IF_DNS_SEARCH="$IF_DNS_SEARCH $part3"
+         fi
+      fi
+   done
+   R=""
+   if [ "$IF_DNS_SEARCH" ] ; then
+           R="${R}search $IF_DNS_SEARCH
+"
+   fi
+   for NS in $IF_DNS_NAMESERVERS ; do
+           R="${R}nameserver $NS
+"
+   done
+   #echo -n "$R" | resolvconf -p -a "${dev}"
+   echo -n "$R" | /usr/bin/resolvconf -a "${dev}.inet"
+   ;;
+down)
+   resolvconf -d "${dev}.inet"
+   ;;
+esac