diff options
author | brian <brian@FreeBSD.org> | 1999-02-11 16:30:56 +0000 |
---|---|---|
committer | brian <brian@FreeBSD.org> | 1999-02-11 16:30:56 +0000 |
commit | 8b86cda1310b9ff08687d347211972d6eb386730 (patch) | |
tree | 6dfb0db96f2b8f61802d6dd3beb879d9f183e19e /etc/ppp | |
parent | abf0bd82656b3b01b68bd800f2f5c6c5c0800bfc (diff) | |
download | FreeBSD-src-8b86cda1310b9ff08687d347211972d6eb386730.zip FreeBSD-src-8b86cda1310b9ff08687d347211972d6eb386730.tar.gz |
Add /usr/share/examples/ppp directory
Don't install /etc/ppp/ppp.*.example
Remove ppp/ppp.{conf,linkup,linkdown,secret}.sample
Diffstat (limited to 'etc/ppp')
-rw-r--r-- | etc/ppp/ppp.conf.sample | 430 | ||||
-rw-r--r-- | etc/ppp/ppp.linkdown.sample | 34 | ||||
-rw-r--r-- | etc/ppp/ppp.linkup.sample | 49 | ||||
-rw-r--r-- | etc/ppp/ppp.secret.sample | 41 |
4 files changed, 0 insertions, 554 deletions
diff --git a/etc/ppp/ppp.conf.sample b/etc/ppp/ppp.conf.sample deleted file mode 100644 index 1eed752..0000000 --- a/etc/ppp/ppp.conf.sample +++ /dev/null @@ -1,430 +0,0 @@ -################################################################# -# -# PPP Sample Configuration File -# -# Originally written by Toshiharu OHNO -# -# $Id: ppp.conf.sample,v 1.32 1998/09/06 13:55:51 brian Exp $ -# -################################################################# - -# This file is separated into sections. Each section is named with -# a label starting in column 0 and followed directly by a ``:''. The -# section continues until the next section. Blank lines and lines -# beginning with ``#'' are ignored. -# -# Lines beginning with "!include" will ``include'' another file. You -# may want to ``!include ~/.ppp.conf'' for backwards compatibility. -# - -# Default setup. Always executed when PPP is invoked. -# This section is *not* loaded by the ``load'' or ``dial'' commands. -# -# This is the best place to specify your modem device, it's DTR rate, -# and any logging specification. Logging specs should be done first -# so that subsequent commands are logged. -# -default: - set log Phase Chat LCP IPCP CCP tun command - set device /dev/cuaa1 - set speed 115200 - set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \"\" AT OK-AT-OK ATE1Q0 OK \\dATDT\\T TIMEOUT 40 CONNECT" - -# Client side PPP -# -# Although the PPP protocol is a peer to peer protocol, we normally -# consider the side that makes the connection as the client and the -# side that receives the connection as the server. Authentication -# is required by the server either using a unix-style login proceedure -# or by demanding PAP or CHAP authentication from the client. -# - -# An on demand example where we have dynamic IP addresses: -# If the peer assigns us an arbitrary IP (most ISPs do this) and we -# can't predict what their IP will be either, take a wild guess at -# some IPs that you can't currently route to. -# -# The /0 bit in "set ifaddr" says that we insist on 0 bits of the -# specified IP actually being correct, therefore, the other side can assign -# any IP numbers. -# -# The forth arg to "set ifaddr" makes us send "0.0.0.0" as our requested -# IP number, forcing the peer to make the decision. -# -# This entry also works with static IP numbers or when not in -auto mode. -# The ``add'' line adds a `sticky' default route that will be updated if -# and when any of the IP numbers are changed in IPCP negotiations. -# The "set ifaddr" is required in -auto mode. -# -# Finally, the ``enable dns'' bit tells ppp to ask the peer for the -# nameserver addresses that should be used. This isn't always supported -# by the other side, but if it is, /etc/resolv.conf will automatically be -# updated. -# -pmdemand: - set phone 1234567 - set login "ABORT NO\\sCARRIER TIMEOUT 5 ogin:--ogin: ppp word: ppp" - set timeout 120 - set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0 - add default HISADDR - enable dns - -# When we want to use PAP or CHAP instead of using a unix-style login -# proceedure, we do the following. Note, the peer suggests whether we -# should send PAP or CHAP. By default, we send whatever we're asked for. -# -PAPorCHAPpmdemand: - set phone 1234567 - set login - set authname MyName - set authkey MyKey - set timeout 120 - set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0 - add default HISADDR - enable dns - -# On demand dialup example with static IP addresses: -# Here, the local side uses 192.244.185.226 and the remote side -# uses 192.244.176.44. -# -# # ppp -auto ondemand -# -# With static IP numbers, our setup is similar to dynamic: -# Remember, ppp.linkup is searched for a "192.244.176.44" label, then -# a "ondemand" label, and finally the "MYADDR" label. -# -ondemand: - set phone 1234567 - set login "ABORT NO\\sCARRIER TIMEOUT 5 ogin:--ogin: ppp word: ppp" - set timeout 120 - set ifaddr 192.244.185.226 192.244.176.44 - add default HISADDR - enable dns - -# Example segments -# -# The following lines may be included as part of your configuration -# section and aren't themselves complete. They're provided as examples -# of how to achieve different things. - -examples: -# Multi-phone example. Numbers separated by a : are used sequentially. -# Numbers separated by a | are used if the previous dial or login script -# failed. Usually, you will prefer to use only one of | or :, but both -# are allowed. -# - set phone 12345678|12345679:12345670|12345671 -# -# Ppp can accept control instructions from the ``pppctl'' program. -# First, you must set up your control socket. It's safest to use -# a UNIX domain socket, and watch the permissions: -# - set server /var/tmp/internet MySecretPassword 0177 -# -# Although a TCP port may be used if you want to allow control -# connections from other machines: -# - set server 6670 MySecretpassword -# -# If you don't like ppp's builtin chat, use an external one: -# - set login "\"!chat \\\\-f /etc/ppp/ppp.dev.chat\"" -# -# If we have a ``strange'' modem that must be re-initialized when we -# hangup: -# - set hangup "\"\" AT OK-AT-OK ATZ OK" -# -# To adjust logging withouth blasting the setting in default: -# - set log -command +tcp/ip -# -# To see log messages on the screen in interactive mode: -# - set log local LCP IPCP CCP -# -# If you're seeing a lot of magic number problems and failed connections, -# try this (see the man page): -# - set openmode active 5 -# -# For noisy lines, we may want to reconnect (up to 20 times) after loss -# of carrier, with 3 second delays between each attempt: -# - set reconnect 3 20 -# -# When playing server for M$ clients, tell them who our NetBIOS name -# servers are: -# - set nbns 10.0.0.1 10.0.0.2 -# -# Inform the client if they ask for our DNS IP numbers: -# - enable dns -# -# If you don't want to tell them what's in your /etc/resolf.conf file -# with `enable dns', override the values: -# - set dns 10.0.0.1 10.0.0.2 -# -# If we're using the -alias switch, redirect ftp and http to an internal -# machine: -# - alias port 10.0.0.2:ftp ftp - alias port 10.0.0.2:http http -# -# or don't trust the outside at all -# - alias deny_incoming yes -# -# I trust user brian to run ppp, so this goes in the `default' section: -# - allow user brian -# -# But label `internet' contains passwords that even brian can't have, so -# I empty out the user access list in that section so that only root can -# have access: -# - allow users -# -# I also may wish to set up my ppp login script so that it asks the client -# for the label they wish to use. I may only want user ``dodgy'' to access -# their own label in direct mode: -# -dodgy: - allow user dodgy - allow mode direct -# -# If we don't want ICMP and DNS packets to keep the connection alive: -# - set filter alive 0 deny icmp - set filter alive 1 deny udp src eq 53 - set filter alive 2 deny udp dst eq 53 - set filter alive 3 permit 0 0 -# -# And we don't want ICMPs to cause a dialup: -# - set filter dial 0 deny icmp - set filter dial 1 permit 0 0 -# -# or any TCP SYN or RST packets (badly closed TCP channels): -# - set filter dial 2 deny 0 0 tcp syn finrst -# -# Once the line's up, allow connections for ident (113), telnet (23), -# ftp (20 & 21), DNS (53), my place of work (192.244.191.0/24), -# ICMP (ping) and traceroute (>33433). -# -# Anything else is blocked by default -# - set filter in 0 permit tcp dst eq 113 - set filter out 0 permit tcp src eq 113 - set filter in 1 permit tcp src eq 23 estab - set filter out 1 permit tcp dst eq 23 - set filter in 2 permit tcp src eq 21 estab - set filter out 2 permit tcp dst eq 21 - set filter in 3 permit tcp src eq 20 dst gt 1023 - set filter out 3 permit tcp dst eq 20 - set filter in 4 permit udp src eq 53 - set filter out 4 permit udp dst eq 53 - set filter in 5 permit 192.244.191.0/24 0/0 - set filter out 5 permit 0/0 192.244.191.0/24 - set filter in 6 permit icmp - set filter out 6 permit icmp - set filter in 7 permit udp dst gt 33433 - set filter out 7 permit udp dst gt 33433 - - -# Server side PPP -# If you want the remote system to authenticate itself, you insist -# that the peer uses CHAP (or PAP) with the "enable" keyword. Both CHAP and -# PAP are disabled by default (we usually only "enable" one of them if the -# other side is dialing into our server). -# When the peer authenticates itself, we use ppp.secret for verification. -# -# Ppp is launched with: -# # ppp -direct CHAPserver -# -# Note: We can supply a third field in ppp.secret specifying the IP address -# for that user. We can even specify a forth field to specify the -# ppp.link{up,down} label to use. -# -CHAPserver: - enable chap - enable proxy - set ifaddr 192.244.176.44 292.244.184.31 - accept dns - -# If we wish to act as a server, allowing PAP access according to -# accounts in /etc/passwd, we do this (Without `enable passwdauth', -# you may still enter ``*'' as the users password in ppp.secret and -# ppp will look it up in the passwd database. This is useful if you -# need to assign a special label or IP number or range): -# -PAPServerwithPASSWD: - enable pap - enable passwdauth - enable proxy - set ifaddr 192.244.176.44 292.244.184.31 - accept dns - - -# Example to connect using a null-modem cable: -# The important thing here is to allow the lqr packets on both sides. -# Without them enabled, we can't tell if the line's dropped - there -# should always be carrier on a direct connection. -# Here, the server sends lqr's every 10 seconds and quits if five in a -# row fail. -# -# Make sure you don't have "deny lqr" in your default: on the client ! -# If the peer denies LQR, we still send ECHO LQR packets at the given -# lqrperiod interval (ppp-style-pings). -# -direct-client: - set dial "" - set line /dev/cuaa0 - set sp 115200 - set timeout 900 - set lqrperiod 10 - set log Phase Chat LQM - set login "ABORT NO\\sCARRIER TIMEOUT 5 ogin:--ogin: ppp word: ppp HELLO" - set ifaddr 10.0.4.2 10.0.4.1 - enable lqr - accept lqr - -direct-server: - set timeout 0 - set lqrperiod 10 - set log Phase LQM - set ifaddr 10.0.4.1 10.0.4.2 - enable lqr - accept lqr - - -# Example to connect via compuserve (who insist on 7 bits even parity -# during the chat phase). -# -compuserve: - set phone 1234567 - set parity even - set login "TIMEOUT 10 \"\" \"\" Name: CIS ID: 99999,9999/go:pppconnect \ - word: XXXXXXXX" - set timeout 300 - set ifaddr 10.0.0.1/0 10.0.0.2/0 255.255.255.0 0.0.0.0 - delete ALL - add default HISADDR - - -# Example for PPP over TCP. -# We assume that inetd on tcpsrv.mynet has been -# configured to run "ppp -direct tcp-server" when it gets a connection on -# port 1234. Read the man page for further details -# -# Note, we assume we're using a binary-clean connection. If something -# such as `rlogin' is involved, you may need to ``set escape 0xff'' -# -tcp-client: - set device tcpsrv.mynet:1234 - set dial - set login - set ifaddr 10.0.5.1 10.0.4.1 255.255.255.0 - -tcp-server: - set ifaddr 10.0.4.1 10.0.5.1 255.255.255.0 - -# If you want to test ppp, do it through a loopback: -# -# Requires a line in /etc/services: -# ppploop 6671/tcp # loopback ppp daemon -# -# and a line in /etc/inetd.conf: -# ppploop stream tcp nowait root /usr/sbin/ppp ppp -direct loop-in -# -loop: - set timeout 0 - set log phase chat connect lcp ipcp command - set device localhost:ppploop - set dial - set login - set ifaddr 127.0.0.2 127.0.0.3 - set server /var/tmp/loop "" 0177 - -loop-in: - set timeout 0 - set log phase lcp ipcp command - allow mode direct - -# If you're going to create a tunnel through a public network, your VPN -# should be set up something like this: -# -# /etc/ppp/secure (which should be executable) says: -# #! /bin/sh -# exec ssh whatevermachine /usr/sbin/ppp -direct loop-in -# -sloop: - load loop - set device !/etc/ppp/secure - -# If you wish to connect to a server that will dial back *without* using -# the ppp callback facility (rfc1570), take advantage of the fact that -# ppp doesn't look for carrier 'till `set login' is complete: -# -# Here, we expect the server to say DIALBACK then disconnect after -# we've authenticated ourselves. When this has happened, we wait -# 60 seconds for a RING. -# -dialback: - set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \"\" ATZ OK-ATZ-OK \ - ATDT\\T TIMEOUT 60 CONNECT" - set login "TIMEOUT 5 ogin:--ogin: ppp word: ppp TIMEOUT 15 DIALBACK \ - \"\" NO\\sCARRIER \"\" TIMEOUT 60 RING ATA CONNECT" - -# Alternatively, if the peer is using the PPP callback protocol, use -# normal dial and login scripts and add -# - set callback auth cbcp e.164 1234567 - set cbcp 1234567 - -# If we're running a ppp server that wants to only call back microsoft -# clients on numbers configured in /etc/ppp/ppp.secret (the 5th field): -# - set callback cbcp - set cbcp - set log +cbcp - set redial 3 1 - set device /dev/cuaa0 - set speed 115200 - set dial "TIMEOUT 10 \"\" AT OK-AT-OK ATDT\\T CONNECT" - -# Or if we want to allow authenticated clients to specify their own -# callback number, use this ``set cbcp'' line instead: -# - set cbcp * - -# Multilink mode is available (rfc1990). -# To enable multilink capabilities, you must specify a MRRU. 1500 is -# a reasonable value. To create new links, use the ``clone'' command -# to duplicate an existing link. If you already have more than one -# link, you must specify which link you wish to run the command on via -# the ``link'' command. -# -# You can now ``dial'' specific links, or even dial all links at the -# same time. The `dial' command may also be prefixed with a specific -# link that should do the dialing. -# - -mloop: - load loop - set mode interactive - set mrru 1500 - clone 1 2 3 - link deflink remove - # dial - # link 2 dial - # link 3 dial - -mloop-in: - set timeout 0 - set log tun phase - allow mode direct - set mrru 1500 diff --git a/etc/ppp/ppp.linkdown.sample b/etc/ppp/ppp.linkdown.sample deleted file mode 100644 index c0fa638..0000000 --- a/etc/ppp/ppp.linkdown.sample +++ /dev/null @@ -1,34 +0,0 @@ -######################################################################### -# -# Example of ppp.linkdown file -# -# This file is checked when ppp closes a connection. -# ppp searches the labels in this file as follows: -# -# 1) The label that matches the IP number assigned to our side. -# -# 2) The label specified on the command line to ppp. -# -# 3) If no label has been found, use MYADDR if it exists. -# -# -# $Id: ppp.linkdown.sample,v 1.1 1997/11/08 20:58:40 brian Exp $ -# -######################################################################### - -# We don't really need to do much here. If we have notified a DNS -# of our temporary IP number, we may want to ``un-notify'' them. -# -# If you're into sound effects when the link goes down, you can run -# ``auplay'' (assuming NAS is installed and configured). -# -MYADDR: - !bg /usr/X11R6/bin/auplay /etc/ppp/linkdown.au - -# If you're running ``ppp -auto -alias dynamic-alias-auto'', and are -# assigned a dynamic IP number by the peer, this may be worth while -# to keep the interface aliases to a minimum (see ``enable iface-alias'' -# in the man page): -# -dynamic-alias-auto: - iface clear diff --git a/etc/ppp/ppp.linkup.sample b/etc/ppp/ppp.linkup.sample deleted file mode 100644 index 7fe9fd6..0000000 --- a/etc/ppp/ppp.linkup.sample +++ /dev/null @@ -1,49 +0,0 @@ -######################################################################### -# -# Example of ppp.linkup file -# -# This file is checked when ppp establishes a connection. -# ppp searches the labels in this file as follows: -# -# 1) The label that matches the IP number assigned to our side. -# -# 2) The label specified on the command line to ppp. -# -# 3) If no label has been found, use MYADDR if it exists. -# -# -# $Id: ppp.linkup.sample,v 1.13.2.1 1998/05/05 23:31:45 brian Exp $ -# -######################################################################### - -# It is no longer necessary to re-add the default route here as our -# ppp.conf route is `sticky' (see the man page). -# If you're into sound effects when the link comes up, you can run -# ``auplay'' (assuming NAS is installed and configured). -# -MYADDR: - !bg /usr/X11R6/bin/auplay /etc/ppp/linkup.au - -# If we've got 192.244.176.32 as our address, then regard peer as a gateway -# to 192.244.176.0 network. This may also be done in ppp.conf instead. -# -192.244.176.32: - add 192.244.176.0 0 HISADDR - -#You may want to execute a script after connecting. This script can do -# nice things such as kick off "sendmail -q", "popclient my.isp" and -# "slurp -d news". It can be passed MYADDR, HISADDR and INTERFACE -# as arguments too - useful for informing a DNS of your assigned IP. -# -# You may also want some sound effects.... -# -pmdemand: - !bg /etc/ppp/ppp.etherup.pmdemand - ! sh -c "cat /etc/ppp/linkup.au >/dev/audio" - -# If your minimum call charge is 5 minutes, you may as well stay on -# the line for that amount of time. If we want a 60 second subsequent -# timeout, set your timeout to 300 in ppp.conf and then do this: -# -min5minutes: - !bg sh -c "sleep 240; pppctl -p mypassword 3000 set timeout 60" diff --git a/etc/ppp/ppp.secret.sample b/etc/ppp/ppp.secret.sample deleted file mode 100644 index 151a2a2..0000000 --- a/etc/ppp/ppp.secret.sample +++ /dev/null @@ -1,41 +0,0 @@ -################################################## -# -# Example of ppp.secret file -# -# This file is used to authenticate incoming connections. -# You must ``enable'' either PAP or CHAP in your ppp.conf file. -# The peer may then use any of the Authname/Authkey pairs listed. -# Additionally, if ``passwdauth'' is enabled and an entry isn't -# found in this file, the passwd(5) database is used. -# -# If the password is specified as "*", look it up in passwd(5). -# This doesn't work for CHAP connections as ppp must have access -# to the unencrypted password for CHAP. -# -# If an IP address or address range is given as the third field, it -# will be assigned to the peer. A ``*'' or an empty field may be -# used as a placeholder if you do not wish to override the IP -# address, but wish to specify further fields. -# -# If a label is given as the forth field, it is used when reading -# the ppp.linkup and ppp.linkdown files. A ``*'' or an empty field -# can be used as a placeholder if you do not wish to override the -# label, but wish to specify further fields. -# -# If a phone number or list of phone numbers is given as the fifth -# field, these numbers will be used to call back the client if -# ``auth'' or ``cbcp'' callback is enabled (see ``set callback''). -# A ``*'' specifies that the client must specify the number. -# -# $Id: ppp.secret.sample,v 1.7 1998/07/18 15:34:39 brian Exp $ -# -################################################## - -# Authname Authkey Peer's IP address Label Callback - -oscar OurSecretKey 192.2.18.34 -BigBird X4dWg9327 192.2.18.33/32 -fred * * fred -subnet * 192.2.18.35-192.2.18.70 subnet -admin * * * * -homeworker * * * 1234567 |