self-hosted/dockerfiles
1
0
Fork 0
mirror of https://github.com/vimagick/dockerfiles.git synced 2024-11-28 09:08:50 +02:00
Code Issues Releases Activity
7b0b7c5d59
dockerfiles/pptpd
History
kev 82143a5b63 swith to new domain: easypi.pro
2017-05-08 07:05:07 +08:00
..
chap-secrets add pptpd 2015-06-27 18:32:24 +08:00
docker-compose.yml update 2015-06-28 12:36:09 +08:00
Dockerfile swith to new domain: easypi.pro 2017-05-08 07:05:07 +08:00
Dockerfile.debian swith to new domain: easypi.pro 2017-05-08 07:05:07 +08:00
pptpd-options update 2015-06-28 16:39:01 +08:00
pptpd.conf update 2015-06-28 11:42:35 +08:00
README.md upgrade moodle to 3.1 2016-07-08 20:46:26 +08:00

README.md

pptpd

The Point-to-Point Tunneling Protocol is a method for implementing virtual private networks.

PPTP uses a control channel over TCP and a GRE tunnel operating to encapsulate PPP packets.

Directory Tree

~/fig/pptpd/
├── docker-compose.yml
├── pptpd.conf
├── pptpd-options
└── chap-secrets

file: docker-compose.yml

pptpd:
  image: vimagick/pptpd
  volumes:
    - ./pptpd.conf:/etc/pptpd.conf
    - ./pptpd-options:/etc/ppp/pptpd-options
    - ./chap-secrets:/etc/ppp/chap-secrets
  privileged: true
  restart: always

file: pptpd.conf

option /etc/ppp/pptpd-options
pidfile /var/run/pptpd.pid
localip 192.168.127.1
remoteip 192.168.127.100-199

file: pptpd-options

name pptpd
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
require-mppe-128
proxyarp
nodefaultroute
lock
nobsdcomp
novj
novjccomp
nologfd
ms-dns 8.8.8.8
ms-dns 8.8.4.4

file: chap-secrets

# Secrets for authentication using CHAP
# client    server  secret          IP addresses

username    *       password        *

Please use strong password in chap-secrets file to protect your server.

Server Setup

$ modprobe nf_conntrack_pptp nf_nat_pptp
$ cd ~/fig/pptpd/
$ docker-compose up -d
$ docker-compose logs -f

You need to config firewall:

  • To let PPTP tunnel maintenance traffic, allow port 1723/tcp.
  • To let PPTP tunneled data to pass through router, allow proto gre.
  • Set DEFAULT_FORWARD_POLICY=ACCEPT
  • Set net.ipv4.ip_forward=1 (sysctl)

Client Setup

Connect PPTP server using username:password with mschap-v2/mppe-128 encyption.

References