#/bin/sh
for i in `nvram show|grep openvpn|cut -d '=' -f1`; do nvram unset $i; done
nvram set rc_startup='mkdir /tmp/ovpn
cd /tmp/ovpn
nvram get ovpn_up>up
nvram get ovpn_dn>dn
chmod +x up dn
nvram get ovpn_cfg>ovpn.conf
mkdir -p /tmp/etc/config
echo -e "#!/bin/sh\nkillall openvpn\nping -c4 localhost\nopenvpn --daemon --config /tmp/ovpn/ovpn.conf">/tmp/etc/config/ovpn.wanup
chmod +x /tmp/etc/config/ovpn.wanup
openvpn --daemon --config ovpn.conf'
nvram set ovpn_cfg='remote 207.204.235.75 443
proto tcp
tls-auth ta.key 1
client
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
verb 4
mute 5
tun-mtu 1500
script-security 2
route-up "/tmp/ovpn/up"
down "/tmp/ovpn/dn"
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
871270a747e4f1f290924daa00d8962b
7b3d339fa7364705015eac86a57dad8d
9256ddc5e74c1c38141cba565411d903
5ecf71ebb13a3a53563f65ab90226c30
27c65681fae3c62e54bc076cfa6f3e59
7e643e29c67a94d57b5935e0f2faf994
4b33a8385ab4accdb2b402f4ac4aada3
4a0800c5f8efc80c8a74de671d2a4223
fe8b350dbb6d8f84ae7f7abcff273a8a
d5fdb070116c1d770e1ed6a33b1636c5
89513c26825cc08142643d6b0188fc4f
4a01d4fcc683ae268eca06a9eecb70f9
01b199a5647d7a762a226bb69c04eb0c
76f0abda7faf51ac72393ea2dd6c16fb
c0f80cff4bfc47efd8251a8a925920c3
e38cefa7e3f9bdcfd564adc19c57dc09
-----END OpenVPN Static key V1-----
</tls-auth>
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
</key>
'
nvram set ovpn_up='iptables -t nat -A POSTROUTING -o $dev -j MASQUERADE
for R in /tmp/resolv.conf /tmp/resolv.dnsmasq; do
mv $R $R~
for O in "$foreign_option_1" "$foreign_option_2"; do
P="$O"
p1=$(echo "$P" | cut -d " " -f1)
if [ "$p1" == "dhcp-option" ]; then
p2=$(echo "$P" | cut -d " " -f2)
p3=$(echo "$P" | cut -d " " -f3)
if [ "$p2" == "DNS" ] ; then
echo "nameserver $p3">>$R
fi
fi
done
done
'
nvram set ovpn_dn='iptables -t nat -D POSTROUTING -o $dev -j MASQUERADE
for R in /tmp/resolv.conf /tmp/resolv.dnsmasq; do
mv $R~ $R
done
killall -HUP dnsmasq'
nvram commit