[ask]Konfigurasi squid untuk transparent proxy

Diskusi tentang Ubuntu Server baik webserver, database server, samba server dan service lainnya serta jaringan menggunakan Sistem Operasi Ubuntu.
User avatar
G7X
Posts: 150
Joined: 19 May 2010, 12:41
Location: Semarang

[ask]Konfigurasi squid untuk transparent proxy

Postby G7X » 03 Jun 2011, 16:53

Gan ane mau tanya gimana konfigurasi squid untuk transparent proxy, tapi yang masih standartnya, belum menggunakan pembatasan2 ip/situs2 tertentu

Ini pertama kalinya ane maenan squid.......
Tolongin ya gan....
User avatar
yudiarbi
Posts: 627
Joined: 22 Mar 2011, 09:31
Location: Probolinggo, Jawa Timur
Contact:

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby yudiarbi » 03 Jun 2011, 18:41

standard dr squid tinggal di tambahin di atas sendiri
http_port 3128 transparent, mgkn ini yang bos maksud?
User avatar
G7X
Posts: 150
Joined: 19 May 2010, 12:41
Location: Semarang

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby G7X » 04 Jun 2011, 17:05

Ow Begitu ya....

Lalu bagaimana mengetahui bahwa fasilitas delay pada squid sudah berjalan?
User avatar
sipelaut
Posts: 1963
Joined: 03 Jan 2010, 17:25
Location: madura-sampang
Contact:

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby sipelaut » 04 Jun 2011, 18:46

yaa tinggal diaktifin aja broo... delaynya
btw ini delay apaan dulu nichh... ??? delay pool kan maksudnya??!!!
User avatar
G7X
Posts: 150
Joined: 19 May 2010, 12:41
Location: Semarang

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby G7X » 06 Jun 2011, 17:57

kenapa ya setting squid saya ini tidak bekerja?
rule aclnya tidak berlaku.

# Squid biasanya dijalankan di port 3128
http_port 3128 transparent


# DISK CACHE OPTIONS
# -----------------------------------------------------------------------------

# Saya alokasikan 2000 MB space harddisk
cache_dir ufs /var/spool/squid 2000 16 256


# LOGFILE OPTIONS
# -----------------------------------------------------------------------------
access_log /var/log/squid/access.log squid


# OPTIONS FOR TUNING THE CACHE
# -----------------------------------------------------------------------------
acl QUERY urlpath_regex cgi-bin \?
cache deny QUERY

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320


# HTTP OPTIONS
# -----------------------------------------------------------------------------

# Apache mod_gzip and mod_deflate known to be broken so don't trust
# Apache to signal ETag correctly on such responses
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache

# TAG: extension_methods
# Squid only knows about standardized HTTP request methods.
# You can add up to 20 additional "extension" methods here.
extension_methods REPORT MERGE MKACTIVITY CHECKOUT



# ACCESS CONTROLS
# -----------------------------------------------------------------------------
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT

# Ijinkan akses cachemgr hanya dari localhost
http_access allow manager localhost
http_access deny manager

# Ijinkan request purge hanya dari localhost
http_access allow purge localhost
http_access deny purge

# Deny request ke ports yang tidak dikenal
http_access deny !Safe_ports

# Deny CONNECT selain ke port SSL
http_access deny CONNECT !SSL_ports


# Ini adalah network LAN di kantor Anda
acl jaringan_saya src 192.168.2.131-192.168.2.254/255.255.255.0
acl lab src 192.168.2.11-192.168.2.40/255.255.255.0
http_access deny lab
http_access allow jaringan_saya
http_access allow localhost

# Dan akhirnya deny semua akses ke proxy ini
http_access deny all

icp_access deny all

# DNS OPTIONS
# -----------------------------------------------------------------------------
hosts_file /etc/hosts


# MISCELLANEOUS
# -----------------------------------------------------------------------------
coredump_dir /var/spool/squid


tolongin Gan death line hari kamis nih.
User avatar
yudiarbi
Posts: 627
Joined: 22 Mar 2011, 09:31
Location: Probolinggo, Jawa Timur
Contact:

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby yudiarbi » 06 Jun 2011, 19:24

Code: Select all

acl jaringan_saya src 192.168.2.131-192.168.2.254/255.255.255.0
http_access deny lab
http_access allow jaringan_saya

coba diganti

Code: Select all

acl jaringan_saya src "/etc/squid/daf.txt"
acl lab src "/etc/squid/lab.txt"
http_access deny !jaringan_saya

bikin file daf.txt berisi ip client dimaksud
bikin file jaringan saya berisi ip client dimaksud, sesuaikan direktory bisa diganti sesuai keinginan
User avatar
G7X
Posts: 150
Joined: 19 May 2010, 12:41
Location: Semarang

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby G7X » 06 Jun 2011, 20:16

metode penulisan dalam filenya bagaimana, apakah dari atas ke bawah atau menyamping seperti ini(192.168.2.131-192.168.2.254/255.255.255.0)?
User avatar
yudiarbi
Posts: 627
Joined: 22 Mar 2011, 09:31
Location: Probolinggo, Jawa Timur
Contact:

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby yudiarbi » 06 Jun 2011, 22:53

dr atas ke bawah, contoh :
192.168.2.131
192.168.2.132
User avatar
G7X
Posts: 150
Joined: 19 May 2010, 12:41
Location: Semarang

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby G7X » 07 Jun 2011, 10:23

ok sudah jalan.

Lalu sekarang bagaimana biar bisa transparent proxy, jadi gak usa setting alamat proxynya manual
User avatar
yudiarbi
Posts: 627
Joined: 22 Mar 2011, 09:31
Location: Probolinggo, Jawa Timur
Contact:

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby yudiarbi » 07 Jun 2011, 10:39

udah : http_port 3128 transparent kan?
tinggal setting iptables...
User avatar
G7X
Posts: 150
Joined: 19 May 2010, 12:41
Location: Semarang

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby G7X » 07 Jun 2011, 10:41

Uda Gan trus setting iptablesnya gimana, uda pake macem3 tutorial tetep gak mau jalan.
User avatar
yudiarbi
Posts: 627
Joined: 22 Mar 2011, 09:31
Location: Probolinggo, Jawa Timur
Contact:

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby yudiarbi » 07 Jun 2011, 11:04

posting topologinya.....
User avatar
sipelaut
Posts: 1963
Joined: 03 Jan 2010, 17:25
Location: madura-sampang
Contact:

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby sipelaut » 07 Jun 2011, 11:05

takutnya masih ada firewall yang jalan, copas disini perintah iptables anda
# iptables -t nat -L
User avatar
G7X
Posts: 150
Joined: 19 May 2010, 12:41
Location: Semarang

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby G7X » 07 Jun 2011, 11:20

uda jalan Gan, terima kasih Banyak ya
User avatar
sipelaut
Posts: 1963
Joined: 03 Jan 2010, 17:25
Location: madura-sampang
Contact:

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby sipelaut » 07 Jun 2011, 12:56

wow... karena udah bisa
share dong caranya.. :)
User avatar
G7X
Posts: 150
Joined: 19 May 2010, 12:41
Location: Semarang

Re: [ask]Konfigurasi squid untuk transparent proxy

Postby G7X » 07 Jun 2011, 13:32

ane dapat dari temen ane Gan.
Ini ane sharing cara setting iptablesnya
http://www.cyberciti.biz/tips/linux-set ... howto.html

terima kasih banget, buat yang uda mo ngebantu ane.

Return to “Ubuntu Server”

Who is online

Users browsing this forum: No registered users and 6 guests