{"id":1538,"date":"2016-10-24T12:27:28","date_gmt":"2016-10-24T03:27:28","guid":{"rendered":"https:\/\/blog.ymyzk.com\/?p=1538"},"modified":"2016-10-24T12:27:28","modified_gmt":"2016-10-24T03:27:28","slug":"openvpn-slack-notification","status":"publish","type":"post","link":"https:\/\/blog.ymyzk.com\/2016\/10\/openvpn-slack-notification\/","title":{"rendered":"OpenVPN \u306e\u63a5\u7d9a\u30fb\u5207\u65ad\u6642\u306b Slack \u306b\u901a\u77e5\u3059\u308b"},"content":{"rendered":"<p>\u3053\u306e\u8a18\u4e8b\u3067\u306f, OpenVPN \u30b5\u30fc\u30d0\u30fc\u306e\u8a2d\u5b9a\u3092\u884c\u3046\u3053\u3068\u3067, OpenVPN \u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u30b5\u30fc\u30d0\u30fc\u306b\u63a5\u7d9a\u30fb\u5207\u65ad\u3057\u305f\u969b\u306b, Slack \u306b\u901a\u77e5\u3092\u9001\u308b\u65b9\u6cd5\u3092\u7d39\u4ecb\u3057\u307e\u3059. \u63a5\u7d9a\u30fb\u5207\u65ad\u6642\u306b\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308b\u306e\u3067, Slack \u901a\u77e5\u4ee5\u5916\u306b\u3082\u6d3b\u7528\u3067\u304d\u308b\u306f\u305a\u3067\u3059.<\/p>\n<p><!--more--><\/p>\n<h2>\u74b0\u5883<\/h2>\n<p>\u4eca\u56de\u306e\u8a18\u4e8b\u3067\u5229\u7528\u3057\u305f\u74b0\u5883\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059.<\/p>\n<ul>\n<li>Debian 8 amd64<\/li>\n<li>OpenVPN 2.3.4<\/li>\n<li>curl 7.38.0<\/li>\n<\/ul>\n<h2>\u63a5\u7d9a\u30fb\u5207\u65ad\u6642\u306b\u51e6\u7406\u3092\u5b9f\u884c\u3059\u308b<\/h2>\n<p>OpenVPN \u306e\u30b5\u30fc\u30d0\u30fc\u306e\u8a2d\u5b9a\u9805\u76ee\u306b <code>--client-connect<\/code> \u3068 <code>--client-disconnected<\/code> \u304c\u3042\u308a, \u305d\u308c\u305e\u308c\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u30b5\u30fc\u30d0\u30fc\u306b\u63a5\u7d9a\u30fb\u5207\u65ad\u3057\u305f\u969b\u306b\u5b9f\u884c\u3059\u308b\u30b3\u30de\u30f3\u30c9\u3092\u6307\u5b9a\u3059\u308b\u3053\u3068\u304c\u51fa\u6765\u307e\u3059. \u8a73\u7d30\u306a\u8aac\u660e\u306f <a href=\"https:\/\/community.openvpn.net\/openvpn\/wiki\/Openvpn23ManPage\" target=\"_blank\" rel=\"nofollow noopener\">man page<\/a> \u306b\u66f8\u304b\u308c\u3066\u3044\u307e\u3059:<\/p>\n<blockquote><p>&#8211;client-connect cmd<br \/>\nRun command cmd on client connection.<br \/>\ncmd consists of a path to script (or executable program), optionally followed by arguments. The path and arguments may be single- or double-quoted and\/or escaped using a backslash, and should be separated by one or more spaces.<\/p><\/blockquote>\n<blockquote><p>&#8211;client-disconnect cmd<br \/>\nLike &#8211;client-connect but called on client instance shutdown. Will not be called unless the &#8211;client-connect script and plugins (if defined) were previously called on this instance with successful (0) status returns.<\/p><\/blockquote>\n<p>\u307e\u305f, OpenVPN \u306b\u306f\u5b9f\u884c\u53ef\u80fd\u306a\u5916\u90e8\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u3084\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u6307\u5b9a\u3059\u308b <code>--script-security<\/code> \u3068\u3044\u3046\u8a2d\u5b9a\u9805\u76ee\u304c\u3042\u308b\u305f\u3081, \u3053\u308c\u3082\u9069\u5207\u306b\u8a2d\u5b9a\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059. curl \u306a\u3069\u306e\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u5b9f\u884c\u3059\u308b\u306b\u306f, \u30c7\u30d5\u30a9\u30eb\u30c8\u306e <code>1<\/code> \u304b\u3089 <code>2<\/code> \u306b\u5909\u66f4\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059. \u4ee5\u4e0b\u3082 man page \u304b\u3089\u306e\u5f15\u7528\u3067\u3059:<\/p>\n<blockquote><p>&#8211;script-security level<br \/>\nThis directive offers policy-level control over OpenVPN&#8217;s usage of external programs and scripts. Lower level values are more restrictive, higher values are more permissive. Settings for level:<br \/>\n0 &#8212; Strictly no calling of external programs.<br \/>\n1 &#8212; (Default) Only call built-in executables such as ifconfig, ip, route, or netsh.<br \/>\n2 &#8212; Allow calling of built-in executables and user-defined scripts.<br \/>\n3 &#8212; Allow passwords to be passed to scripts via environmental variables (potentially unsafe).<\/p><\/blockquote>\n<h2>Slack \u306b\u901a\u77e5\u3059\u308b<\/h2>\n<p>Slack \u3078\u306e\u901a\u77e5\u306f <a href=\"https:\/\/api.slack.com\/incoming-webhooks\" target=\"_blank\" rel=\"nofollow noopener\">Slack \u306e incoming webhook<\/a> \u3092 curl \u3067\u53e9\u304f\u3053\u3068\u3067\u5b9f\u73fe\u3067\u304d\u307e\u3059. \u307e\u305a<a href=\"https:\/\/my.slack.com\/services\/new\/incoming-webhook\/\" target=\"_blank\" rel=\"nofollow noopener\">\u3053\u3061\u3089<\/a>\u304b\u3089 Integration \u3092\u4f5c\u6210\u3057\u3066 Webhook URL \u3092\u53d6\u5f97\u3057\u3066\u304a\u304d\u307e\u3059.<\/p>\n<p>\u6b21\u306b, \u63a5\u7d9a\u6642\u306b\u5b9f\u884c\u3059\u308b\u30b9\u30af\u30ea\u30d7\u30c8\u3068, \u5207\u65ad\u6642\u306b\u5b9f\u884c\u3059\u308b\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u305d\u308c\u305e\u308c <code>connected.sh<\/code> \u3068 <code>disconnected.sh<\/code> \u3068\u3057\u3066\u4f5c\u6210\u3057\u3066\u304a\u304d\u307e\u3059. (Webhook URL \u306f\u9069\u5b9c\u8a2d\u5b9a\u3057\u3066\u4e0b\u3055\u3044.)<\/p>\n<p>connected.sh:<\/p>\n<pre><code class=\"bash\">#!\/bin\/bash\r\ncurl -X POST --silent --data-urlencode \"payload={\\\"channel\\\": \\\"#openvpn\\\", \\\"username\\\": \\\"OpenVPN (Connected)\\\", \\\"text\\\": \\\"Connected\\nName: $common_name\\nGlobal IP: $untrusted_ip\\nLocal IP: $ifconfig_pool_remote_ip\\\", \\\"icon_emoji\\\": \\\":airplane_departure:\\\"}\" https:\/\/hooks.slack.com\/services\/......\r\n<\/code><\/pre>\n<p>disconnected.sh:<\/p>\n<pre><code class=\"bash\">#!\/bin\/bash\r\ncurl -X POST --silent --data-urlencode \"payload={\\\"channel\\\": \\\"#openvpn\\\", \\\"username\\\": \\\"OpenVPN (Disconnected)\\\", \\\"text\\\": \\\"Disconnected\\nName: $common_name\\nGlobal IP: $untrusted_ip\\nLocal IP: $ifconfig_pool_remote_ip\\\", \\\"icon_emoji\\\": \\\":airplane_arriving:\\\"}\" https:\/\/hooks.slack.com\/services\/......\r\n<\/code><\/pre>\n<p>\u3053\u308c\u3089\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u306b <code>$\u00a0sudo chmod +x connected.sh disconnected.sh<\/code> \u306a\u3069\u3068\u3057\u3066\u5b9f\u884c\u6a29\u9650\u3092\u4e0e\u3048\u3066\u304a\u304d\u307e\u3059.<\/p>\n<p>\u30b9\u30af\u30ea\u30d7\u30c8\u306e\u4e2d\u3067\u306f\u74b0\u5883\u5909\u6570\u304b\u3089\u60c5\u5831\u3092\u53d6\u5f97\u3059\u308b\u3053\u3068\u304c\u51fa\u6765\u307e\u3059. \u4f8b\u3048\u3070 <code>$common_name<\/code> \u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u8a3c\u660e\u66f8\u306e Common Name, <code>$untrusted_ip<\/code> \u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e IP \u30a2\u30c9\u30ec\u30b9, <code>$ifconfig_pool_remote_ip<\/code> \u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e VPN \u3067\u306e IP \u30a2\u30c9\u30ec\u30b9\u304c\u53d6\u5f97\u3067\u304d\u307e\u3059. \u305d\u306e\u4ed6\u306e\u74b0\u5883\u5909\u6570\u306b\u3064\u3044\u3066\u306f\u00a0<a href=\"https:\/\/community.openvpn.net\/openvpn\/wiki\/Openvpn23ManPage\" target=\"_blank\" rel=\"nofollow noopener\">man page<\/a>\u00a0\u3092\u53c2\u7167\u3057\u3066\u4e0b\u3055\u3044.<\/p>\n<p>\u6b21\u306b OpenVPN \u306e\u30b5\u30fc\u30d0\u30fc\u306e\u8a2d\u5b9a\u306b\u4ee5\u4e0b\u3092\u8ffd\u8a18\u3057, \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u306e\u63a5\u7d9a\u30fb\u5207\u65ad\u6642\u306b\u5148\u307b\u3069\u4f5c\u6210\u3057\u305f\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3059\u308b\u3088\u3046\u306b\u3057\u307e\u3059.<\/p>\n<pre><code class=\"custom-plain\">script-security 2\r\nclient-connect connected.sh\r\nclient-disconnect disconnected.sh<\/code><\/pre>\n<p>OpenVPN \u30b5\u30fc\u30d0\u30fc\u3092\u518d\u8d77\u52d5\u3057\u3066, \u6b63\u3057\u304f\u52d5\u4f5c\u3059\u308b\u304b\u30c6\u30b9\u30c8\u3057\u307e\u3059. \u6b63\u3057\u304f\u52d5\u4f5c\u3059\u308b\u3068\u4ee5\u4e0b\u306e\u3088\u3046\u306b\u306a\u308a\u307e\u3059.<\/p>\n<p><a href=\"https:\/\/blog.ymyzk.com\/wp-content\/uploads\/2016\/10\/openvpn-slack.png\" rel=\"nofollow noopener\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-1545\" src=\"https:\/\/blog.ymyzk.com\/wp-content\/uploads\/2016\/10\/openvpn-slack.png\" alt=\"OpenVPN Slack\" width=\"600\" height=\"573\" srcset=\"https:\/\/blog.ymyzk.com\/wp-content\/uploads\/2016\/10\/openvpn-slack.png 1000w, https:\/\/blog.ymyzk.com\/wp-content\/uploads\/2016\/10\/openvpn-slack-300x287.png 300w, https:\/\/blog.ymyzk.com\/wp-content\/uploads\/2016\/10\/openvpn-slack-768x733.png 768w\" sizes=\"(max-width: 600px) 100vw, 600px\" \/><\/a><\/p>\n<p>\u6b63\u3057\u304f\u52d5\u4f5c\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u306f OpenVPN \u30b5\u30fc\u30d0\u30fc\u306e\u30ed\u30b0\u3092\u78ba\u8a8d\u3057\u3066\u4e0b\u3055\u3044.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u3053\u306e\u8a18\u4e8b\u3067\u306f, OpenVPN \u30b5\u30fc\u30d0\u30fc\u306e\u8a2d\u5b9a\u3092\u884c\u3046\u3053\u3068\u3067, OpenVPN \u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304c\u30b5\u30fc\u30d0\u30fc\u306b\u63a5\u7d9a\u30fb\u5207\u65ad\u3057\u305f\u969b\u306b, Slack \u306b\u901a\u77e5\u3092\u9001\u308b\u65b9\u6cd5\u3092\u7d39\u4ecb\u3057\u307e\u3059. \u63a5\u7d9a\u30fb\u5207\u65ad\u6642\u306b\u4efb\u610f\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3059\u308b\u3053\u3068\u304c\u3067\u304d [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":1549,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[16,97,77],"_links":{"self":[{"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/posts\/1538"}],"collection":[{"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/comments?post=1538"}],"version-history":[{"count":10,"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/posts\/1538\/revisions"}],"predecessor-version":[{"id":1560,"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/posts\/1538\/revisions\/1560"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/media\/1549"}],"wp:attachment":[{"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/media?parent=1538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/categories?post=1538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.ymyzk.com\/wp-json\/wp\/v2\/tags?post=1538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}