sudo apt update && sudo apt install gpg -y

sudo apt install nautilus-wipe -y

sudo apt update && sudo apt install pptpd -y

sudo vim /etc/pptpd.conf

option /etc/ppp/options.pptpd
localip 10.0.0.1
remoteip 10.0.0.100-200

sudo vim /etc/ppp/options.pptpd

# Read man pppd to see the full list of available options

# The name of the local system for authentication purposes
name pptpd

# Refuse PAP, CHAP or MS-CHAP connections but accept connections with
# MS-CHAPv2 or MPPE with 128-bit encryption
refuse-pap
refuse-chap
refuse-mschap
require-mschap-v2
require-mppe-128

# Add entry to the ARP system table
proxyarp

# For the serial device to ensure exclusive access to the device
lock

# Disable BSD-Compress and Van Jacobson TCP/IP header compression
nobsdcomp
novj
novjccomp

# Disable file logging
nolog

# DNS servers for Microsoft Windows clients. Using Google's public servers here
ms-dns 8.8.8.8
ms-dns 8.8.4.4

sudo vim /etc/ppp/chap-secrets

username_1 pptpd password_1 *
username_2 pptpd password_2 *

sudo vim /etc/sysctl.conf

net.ipv4.ip_forward = 1

sudo sysctl -p
sudo systemctl enable pptpd
sudo systemctl restart pptpd

sudo vim /etc/default/ufw

DEFAULT_FORWARD_POLICY="ACCEPT"

sudo vim /etc/ufw/before.rules

# nat Table rules
*nat
:POSTROUTING ACCEPT [0:0]

# Allow traffic from clients to eth0
-A POSTROUTING -s 10.0.0.0/24 -o eth0 -j MASQUERADE

# commit to apply changes
COMMIT

-A ufw-before-input -p 47 -i eth0 -j ACCEPT

sudo ufw allow 1723
sudo ufw disable && sudo ufw enable

opkg update
opkg install kmod-nf-nathelper-extra
vim /etc/sysctl.conf

net.netfilter.nf_conntrack_helper = 1

sysctl -p

fc-list :lang=zh