Selasa, 19 Februari 2013

LANGKAH-LANGKAH INSTALL UBUNTU & SQUID

hari satu malam lagi keberangkatan ku menuju kota tercinta bumiayu,masih saja allah S.w.T menguji kesabaran dan ketabahan saya menjalani hidup yang penuh liku-liku.Tapi tak sedikitpun saja patah semangad dan selalu bersyukur karena dia(allah)masih memberi saya sakit dan kesehatan.Pada Bulan puasa yang tinggal menghitung hari untuk menuju kemenagan bagi umat islam yang menjalankan ibadah full tanpa ada cacad,emmmm jadi gak ngerti saya ngomongi apa,,oke la mau iseng-iseng aja ini

langsung saja!!!

di sini saya akan menjelaskan LANGKAH-LANGKAH INSTALL UBUNTU & SQUID

# Proxy Server Versi 2.7.Stable7
# by tetsu90

#-----------------------------------#


#---------------------------------------------------------------#
# Port

#---------------------------------------------------------------#


http_port 3128 transparent


#---------------------------------------------------------------#
#untuk facebook

#---------------------------------------------------------------#


server_http11 on


acl speedtest dstdomain .speedtest.cbn.net
acl speedtest dstdomain .speedtest.net

cache allow speedtest


#icp_port 3130
#prefer_direct off

#tambahan
hierarchy_stoplist cgi-bin ?

acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

#---------------------------------------------------------------#

# Cache & Object
#---------------------------------------------------------------#

cache_mem 8 MB

cache_swap_low 98
cache_swap_high 99

max_filedesc 8192
maximum_object_size 128 MB

minimum_object_size 0 KB
maximum_object_size_in_memory 125 KB

ipcache_size 4096

ipcache_low 98
ipcache_high 99

fqdncache_size 4096
cache_replacement_policy heap LFUDA

memory_replacement_policy heap GDSF


mime_table /usr/share/squid/mime.conf
#----------------------------------------------------------------#

# cache_dir <type> <directory-name> <space> <level1> <level2> <options></options></level2></level1></space></directory-name></type>
#----------------------------------------------------------------#

cache_dir aufs /home/proxy1 15000 30 256

cache_dir aufs /home/proxy2 15000 30 256


cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log

cache_store_log none
log_fqdn off

pid_filename /var/run/squid.pid
cache_swap_log /var/log/squid/swap.state

dns_nameservers 192.168.2.1
emulate_httpd_log off

hosts_file /etc/hosts
half_closed_clients off

negative_ttl 1 minutes
#anyar

positive_dns_ttl 1 hours


#ftp mode pasif


ftp_passive on
ftp_sanitycheck on

#---------------------------------------------------------------#

# Rules: Safe Port
#---------------------------------------------------------------#

#tambahan

quick_abort_min 0
quick_abort_max 0

quick_abort_pct 98
shutdown_lifetime 10 seconds

acl all src 0.0.0.0/0.0.0.0

acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255

acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 873 # https snews rsync

acl Safe_ports port 80 # http
acl Safe_ports port 20 21 # ftp

acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais

acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 631 # cups

acl Safe_ports port 10000 # webmin
acl Safe_ports port 901 # SWAT

acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http

acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http

acl Safe_ports port 873 # rsync
acl Safe_ports port 110 # POP3

acl Safe_ports port 25 # SMTP
acl Safe_ports port 2095 2096 # webmail from cpanel

acl Safe_ports port 2082 2083 # cpanel


acl purge method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager

http_access allow purge localhost
http_access deny purge

http_access deny !Safe_ports !SSL_ports
http_access deny CONNECT !SSL_ports !Safe_ports

#---------------------------------------------------------------#

# Refresh Pattern
#---------------------------------------------------------------#

# pictures & images

refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico)$ 10080 80% 43200 override-expire override-lastmod reload-into-ims ign$
refresh_pattern -i \.(xml|html|htm|js|txt|css|php)$ 10080 80% 43200 override-expire override-lastmod reload-into-ims ignore-re$

#sound, video multimedia

refresh_pattern -i \.(flv|x-flv|mov|avi|qt|mpg|mpeg|swf)$ 10080 90% 43200 override-expire override-lastmod reload-into-ims ign$
refresh_pattern -i \.(wav|mp3|mp4|au|mid)$ 10080 90% 43200 override-expire override-lastmod reload-into-ims ignore-reload igno$

# files

refresh_pattern -i \.(iso|deb|rpm|zip|tar|tgz|ram|rar|bin|ppt|doc)$ 21600 90% 43200 ignore-no-cache ignore-auth
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 21600 override-expire ignore-no-cache ignore-auth

refresh_pattern -i \.(rar|tgz|tar|exe|bin|arj)$ 21600 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 100000 100% 99000000 override-expire ignore-no-cache ignore-auth

refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 100000 100% 99000000 override-expire ignore-no-cache ignore-auth


refresh_pattern -i \.swf$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.3gp$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern -i \.rm$ 10080 90% 10080 override-expire override-lastmod reload-into-ims
refresh_pattern -i \.wma$ 10080 90% 10080 override-expire override-lastmod reload-into-ims

refresh_pattern ^

http://mail.yahoo.com/.* 720 100% 4320
refresh_pattern ^

http://*.yahoo.*/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern ^

http://*.google.*/.* 720 100% 4320
#refresh_pattern ^

http://pb.gemscool.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
#refresh_pattern ^

http://ayodance.megaxus.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
#refresh_pattern ^

http://luna.lytogame.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern ^

http://www.facebook.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern ^

http://kaskus.us/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
#refresh_pattern ^

http://perfectworld.lytogame.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
#refresh_pattern ^

http://seal.lytogame.com/.* 720 100% 4320 override-expire override-lastmod reload-into-ims
refresh_pattern ^

http://*.indowebster.*/.* 720 100% 4320
refresh_pattern ^

http://*.4shared.*/.* 720 100% 4320
refresh_pattern ^

http://www.yahoo.com/.* 720 100% 4320
refresh_pattern ^

http://*.yimg.*/.* 720 100% 4320
refresh_pattern ^

http://*.boleh.*/.* 720 100% 4320
#refresh_pattern ^

http://*.detik.*/.* 180 100% 4320
#refresh_pattern ^

http://*.detikinet.*/.* 180 100% 4320
#refresh_pattern ^

http://*.detikhot.*/.* 180 100% 4320
#refresh_pattern ^

http://*.detiportal.*/.* 180 100% 4320
#refresh_pattern ^

http://*.kompas.*/.* 180 100% 4320
refresh_pattern ^

http://*.facebook.*/.* 720 100% 4320
refresh_pattern ^

http://*.texas_holdem.*/.* 720 100% 4320
refresh_pattern ^

http://*.zynga.com.*/.* 720 100% 4320
refresh_pattern ^

http://*.ninjasaga.*/.* 720 100% 4320
refresh_pattern ^

http://*.texas.poker.*/.* 720 100% 4320
refresh_pattern ^

http://apps.facebook.com/.* 720 100% 4320
refresh_pattern ^

http://*.kapanlagi.*/.* 720 100% 4320
refresh_pattern ^

http://*.google-analytics.*/.* 720 100% 4320


#default option
refresh_pattern ^ftp: 1440 20% 10080

refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0

refresh_pattern . 0 20% 4320


#---------------------------------------------------------------#
# SNMP

#---------------------------------------------------------------#


snmp_port 3401
acl snmpsquid snmp_community public

snmp_access allow snmpsquid localhost
snmp_access deny all

#---------------------------------------------------------------#

# ALLOWED ACCESS
#---------------------------------------------------------------#

#acl tetsu90 src 192.168.1.0/24

acl tetsu90 src 192.168.2.0/24
http_access allow tetsu90

http_access allow localhost
http_access deny all

http_reply_access allow all
icp_access allow tetsu90

icp_access allow localhost
icp_access allow all

always_direct deny all


#---------------------------------------------------------------#
# Cache CGI & Administrative

#---------------------------------------------------------------#


cache_mgr alfanet
visible_hostname tetsu90

cache_effective_user proxy
cache_effective_group proxy

logfile_rotate 7

#tambahan

memory_pools on #biasanya off
icp_hit_stale on

query_icmp on
reload_into_ims on

coredump_dir /var/spool/squid
pipeline_prefetch on

vary_ignore_expire on


request_body_max_size 1048 KB


#-----------------------------------------------------------------#
#tcp_outgoing_tos 0x30 localnet

#-----------------------------------------------------------------#


zph_mode tos
zph_local 0x30

zph_parent 0
zph_option 136

Untuk menperjelas cara nanti saya akan ngpost step by step dengan gambar

0 komentar:

Posting Komentar

pembaca yang baik selalu,memberi comentar yang baik pula,buat artikel aljinet ini,biar ada masukan lebih dan memgembangkan blog aljinet ini,untuk itu disarankan comentlah artikel kami,beri kritikan yang pedas tidak masalah,silakan di coment kawan

Share

Twitter Delicious Facebook Digg Stumbleupon Favorites More