Translations by Federico Lazcano

Once you install PHP5 related packages and enabled PHP5 Apache 2 module, you should restart Apache2 Web server to run PHP5 scripts. You can run the following command at a terminal prompt to restart your web server: <screen><command>sudo service apache2 restart</command> </screen>

config openvpn client1 option enable 1 option client 1 # option dev tap option dev tun option proto udp option ca /etc/openvpn/ca.crt option cert /etc/openvpn/client.crt option key /etc/openvpn/client.key option comp_lzo 1

root@client:~# restart network-manager network-manager start/running, process 3078

The PHP5 is available in Ubuntu Linux. Unlike python and perl, which are installed in the base system, PHP must be added.

The server also reads a file containing mime document types; the filename is set by the <emphasis>TypesConfig</emphasis> directive, typically via <filename>/etc/apache2/mods-available/mime.conf</filename>, which might also include additions and overrides, and is <filename>/etc/mime.types</filename> by default.

<emphasis role="bold">Group</emphasis> - The Group directive is similar to the User directive. Group sets the group under which the server will answer requests. The default group is also "www-data".

If access must be granted to more than one group per directory, enable Access Control Lists (ACLs).

To install the Tomcat server, you can enter the following command in the terminal prompt:

OpenVPN is a Virtual Private Networking (VPN) solution provided in the Ubuntu Repositories. It is flexible, reliable and secure. It belongs to the family of SSL/TLS VPN stacks (different from IPSec VPNs). This chapter will cover installing and configuring <application>OpenVPN</application> to create a VPN.

Enter the following to generate the master Certificate Authority (CA) certificate and key:

/etc/openvpn/easy-rsa/keys/client1.key

sudo cp /usr/share/doc/openvpn/examples/sample-config-files/client.conf /etc/openvpn/

ca ca.crt cert client1.crt key client1.key

client remote vpnserver.example.com 1194

Now start the OpenVPN client:

Check if it created a tun0 interface:

root@client:/etc/openvpn# ifconfig tun0 tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.8.0.6 P-t-P:10.8.0.5 Mask:255.255.255.255 UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1

Check if you can ping the OpenVPN server:

root@client:/etc/openvpn# ping 10.8.0.1 PING 10.8.0.1 (10.8.0.1) 56(84) bytes of data. 64 bytes from 10.8.0.1: icmp_req=1 ttl=64 time=0.920 ms

Check out your routes:

root@client:/etc/openvpn# netstat -rn Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 10.8.0.5 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 10.8.0.1 10.8.0.5 255.255.255.255 UGH 0 0 0 tun0 192.168.42.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0 0.0.0.0 192.168.42.1 0.0.0.0 UG 0 0 0 eth0

push "route 10.0.0.0 255.0.0.0"

push "redirect-gateway def1 bypass-dhcp"

server 10.8.0.0 255.255.255.0

ifconfig-pool-persist ipp.txt

Push DNS servers to the client.

push "dhcp-option DNS 10.0.0.2" push "dhcp-option DNS 10.1.0.2"

Allow client to client communication.

client-to-client

Enable compression on the VPN link.

comp-lzo

keepalive 1 3

user nobody group nogroup

# client config! auth-user-pass

auto eth0 iface eth0 inet static address 1.2.3.4 netmask 255.255.255.248 default 1.2.3.1 auto eth1 iface eth1 inet static address 10.0.0.4 netmask 255.255.255.0

auto eth0 iface eth0 inet static address 1.2.3.4 netmask 255.255.255.248 default 1.2.3.1 auto eth1 iface eth1 inet manual up ip link set $IFACE up promisc on auto br0 iface br0 inet static address 10.0.0.4 netmask 255.255.255.0 bridge_ports eth1

;dev tun dev tap up "/etc/openvpn/up.sh br0 eth1" ;server 10.8.0.0 255.255.255.0 server-bridge 10.0.0.4 255.255.255.0 10.0.0.128 10.0.0.254

#!/bin/sh BR=$1 ETHDEV=$2 TAPDEV=$3 /sbin/ip link set "$TAPDEV" up /sbin/ip link set "$ETHDEV" promisc on /sbin/brctl addif $BR $TAPDEV

Then make it executable:

# sample client.ovpn for Tunnelblick client remote blue.example.com port 1194 proto udp dev tun dev-type tun ns-cert-type server reneg-sec 86400 auth-user-pass auth-nocache auth-retry interact comp-lzo yes verb 3 ca ca.crt cert client.crt key client.key

opkg update

opkg install openvpn

translator-credits