Tuesday, September 1, 2015

Install VPS Debian untuk Keperluan SSH dan VPN

Kali ini akan saya uraikan penginstalan VPS dengan Operating Sistem ( OS ) Linux Debian. Disini saya contohkan untuk VPS dari Digital Ocean, karena banyak sekali keuntungan dari VPS Digital Ocean. Salah satu nya soal bandwidth, hehehe, walopun tertera tapi bisa dikatakan unlimited. Disini akan saya jabarkan urutan yang akan di install dan akan saya rangkum dalam 1 script.

Jika VPS kita baru install ulang, atau ingin mencoba-coba install semua keperluan SSH / VPN sendiri, maka urutannya bisa di ikuti seperti dibawah ini :

 # kita disable dahulu ipv6

echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6
sed -i '$ i\echo 1 > /proc/sys/net/ipv6/conf/all/disable_ipv6' /etc/rc.local

# seting waktu/jam GMT +7

ln -fs /usr/share/zoneinfo/Asia/Jakarta /etc/localtime

# seting locale

sed -i 's/AcceptEnv/#AcceptEnv/g' /etc/ssh/sshd_config
service ssh restart

# install essential package

apt-get update && apt-get -y upgrade
apt-get -y install make nano wget perl openssl apt-show-versions python screen curl sysv-rc-conf bmon iftop htop nmap axel nano iptables traceroute sysv-rc-conf dnsutils bc nethogs openvpn vnstat less p$
apt-get -y install build-essential

# install webmin

wget http://prdownloads.sourceforge.net/webadmin/webmin_1.760_all.deb
dpkg --install webmin_1.760_all.deb
apt-get -y -f install
rm /root/webmin_1.760_all.deb
service webmin restart

# hapus program yang tidak diperlukan

apt-get -y --purge remove samba*;
apt-get -y --purge remove apache2*;
apt-get -y --purge remove sendmail*;
apt-get -y --purge remove bind9*;
service exim4 stop
sysv-rc-conf exim4 off

# seting port openssh

sed -i '/Port 22/a Port 143' /etc/ssh/sshd_config
sed -i 's/Port 22/Port  22/g' /etc/ssh/sshd_config
service ssh restart

# install dan seting port dropbear

apt-get -y install dropbear
sed -i 's/NO_START=1/NO_START=0/g' /etc/default/dropbear
sed -i 's/DROPBEAR_PORT=22/DROPBEAR_PORT=443/g' /etc/default/dropbear
sed -i 's/DROPBEAR_EXTRA_ARGS=/DROPBEAR_EXTRA_ARGS="-p 109 -p 110"/g' /etc/default/dropbear
echo "/bin/false" >> /etc/shells
service ssh restart
service dropbear restart

# seting dan install squid

OS=`uname -m`;
MYIP=`ifconfig | grep -Eo 'inet (addr:)?([0-9]*\.){3}[0-9]*' | grep -Eo '([0-9]*\.){3}[0-9]*' | grep -v '127.0.0'`;
MYIP2="s/xxxxxxxxx/$MYIP/g";
apt-get -y install squid3
wget -O /etc/squid3/squid.conf "http://128.199.66.10:82/downloads/skrip/squid.conf"
sed -i $MYIP2 /etc/squid3/squid.conf;
service squid3 restart

# install badvpn untuk tun2socks

wget -O /usr/bin/badvpn-udpgw "http://128.199.66.10:82/downloads/skrip/badvpn-udpgw"
if [ "$OS" == "x86_64" ]; then 
wget -O /usr/bin/badvpn-udpgw "http://128.199.66.10:82/downloads/skrip/badvpn-udpgw64"
fi
sed -i '$ i\screen -AmdS badvpn badvpn-udpgw --listen-addr 127.0.0.1:7300' /etc/rc.local
chmod +x /usr/bin/badvpn-udpgw
screen -AmdS badvpn badvpn-udpgw --listen-addr 127.0.0.1:7300

# install fail2ban

apt-get -y install fail2ban;service fail2ban restart

# install virtual ram

dd if=/dev/zero of=/swapfile bs=1024 count=524288
mkswap /swapfile
chown root:root /swapfile
chmod 0600 /swapfile
swapon /swapfile
sed -i '$ i\swapon /swapfile' /etc/rc.local
sed -i '$ i\swapon /swapfile' /etc/rc.d/rc.local

# install script monitoring user

wget -O /usr/bin/tendang "http://128.199.66.10:82/downloads/skrip/tendang"
wget http://128.199.66.10:82/downloads/skrip/userexp
wget http://128.199.66.10:82/downloads/skrip/userlogin.sh
wget http://128.199.66.10:82/downloads/skrip/akun
chmod +x /usr/bin/tendang
chmod +x userexp
chmod +x userlogin.sh
chmod +x akun

# rebooting server

apt-get -y autoremove
reboot

========================================================

Nah Sampai disini VPS kita sudah siap kita gunakan untuk berjualan SSH.
Penjabaran dari instalasi diatas adalah :

Webmin : https://ip_server_vps_anda:10000/
OpenSSH Port : 22 / 143
Dropbear port :
109 / 110 / 443
BadVPN Socks port : 7300
Squid Port : 80 / 8080 / 3128

Kill User Multi Login : tendang
Cek User Login : ./userlogin.sh
Cek Masa Aktif User : ./akun
Lock User Expired : ./userexp




2 comments:

  1. nice gan.....
    kalo setting bwat host gmn ya...??
    bisa minta tutornya gan.....

    ReplyDelete