[help] tolong kang bantu ane...ane bingung ni udah 2 hari sq

Diskusi tentang Ubuntu Server baik webserver, database server, samba server dan service lainnya serta jaringan menggunakan Sistem Operasi Ubuntu.
User avatar
cross
Posts: 10
Joined: 06 Oct 2011, 01:23

[help] tolong kang bantu ane...ane bingung ni udah 2 hari sq

Postby cross » 06 Oct 2011, 13:48

eth0= 192.168.1.7
netmask = 255.255.255.0

eth 1= 192.168.100.0
netmask= 255.255.255.248
gateway=192.168.1.1
dns= 192.168.1.1

maksud ane, ane mw hubungi ke klien dengan menggunakan ip
ip untuk klient = 192.168.100.2
netmask= 255.255.255.248
gateway=192.168.1.1
dns= 192.168.100.1

# ========================#
# PORT KONEKSI
# ========================#

http_port 3128 transparent
icp_port 0

# ========================================================= #
# OPTIONS WHICH AFFECT THE CACHE SIZE
# ========================================================= #
# Ukuran memori (RAM) yang digunakan untuk meng-cache obyek.
#========================================================== #

cache_mem 64 MB

# Ukuran maksimum obyek yg di-cache ke Harddisk & Memory

maximum_object_size 50 MB
maximum_object_size_in_memory 128 KB

# Untuk mengatur agar squid selalu berusaha menyimpan obyek
# dalam memory
# Jika cache_mem sudah penuh, data akan di-swap ke harddisk


cache_swap_low 98%
cache_swap_high 99%

# Metode swapping data dari memory ke cache harddisk
# LFUDA = squid akan men-cache obyek2 berukuran besar
# GDSF = men-cache obyek2 kecil secara progressif

cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

# ==========================================#
# DIREKTORI LOG DAN CACHE
# ==========================================#

cache_dir aufs /var/spool/squid 10000 16 256
access_log /var/log/squid/access.log squid
cache_log /var/log/squid/cache.log squid
cache_store_log none

# Daftar mime squid. Agar proses filtering obyek lebih cepat

mime_table /usr/share/squid/mime.conf

# ========================================================== #
# HIERARCHY STOPLIST
# Daftar kata2 yg jika ditemukan dalam sebuah URL, menyebabkan
# obyek akan ditangani langsung oleh squid.
# ========================================================== #

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY

# ============================================== #
# DAFTAR AKSES KONTROL
# ============================================== #

acl all src 0.0.0.0/0
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl lan src 192.168.100.0/29
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # httpmgmt
acl Safe_ports port 488 # gsshttp
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT


# ============================================== #
# PEMBATASAN AKSES
# ============================================== #

acl waktu_boleh time MTWHFA 08:00-16:00
acl domain_dilarang dstdomain "/etc/squid/daftar_domain_dilarang.txt"
acl url_dilarang url_regex -i "/etc/squid/daftar_url_dilarang.txt"
acl dilarang_download time MTWHFA 08:00-12:00
acl x_file url_regex -i ftp .mp3 .mp4 .mpg .mpeg .avi .wmv .mkv .wav .3gp .dat $
acl bebas_download time MTWHFA 15:00-19:00

# =========================================== #

delay_pools 2
delay_class 1 2
delay_parameters 1 -1/-1 64000/80000
delay_access 1 allow !bebas_download
delay_access 1 deny all

delay_class 2 2
delay_parameters 2 -1/-1 2048000/3072000
delay_access 2 allow bebas_download
delay_access 2 deny all

# ============================================== #
# AKSES INTERNET
# ============================================== #

http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access deny !waktu_boleh
http_access deny domain_dilarang
http_access deny url_dilarang

http_access allow lan

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access allow localhost
http_reply_access allow all
icp_access allow all

# ========================= #
# Membatasi Download File
# ========================= #

#Tolak download jika file lebih besar dari 10MB=10000x1024 byte
# = 10240000 byte
reply_body_max_size 10240000 allow x_file !dilarang_download

# ========================= #
# Monitoring cachemgr.cgi
# ========================= #
# ========================= #

cachemgr_passwd yamakasi all

# =============================================== #
# TUNING CACHE PROXY
# =============================================== #

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern: 0 20% 4320


# ============================================= #
# ADMINISTRATIVE PARAMETERS
# ============================================= #

cache_mgr admin@dkp.co.id
cache_effective_user squid
cache_effective_group squid
visible_hostname proxy7.dkp.go.id

#==============================#
# PESAN ERROR BAHASA INDONESIA
#==============================#

error_directory /usr/share/squid/errors/id

pas ane mw jalanin cachenya
squid -z
muncul error kayak gini kang

2011/10/06 13:46:45| aclParseIpData: WARNING: Netmask masks away part of the specified IP in '127.0.0.1/255.0.0.0'
2011/10/06 13:46:45| WARNING: '0.0.0.0/0.0.0.0' is a subnetwork of '0.0.0.0/0.0.0.0'
2011/10/06 13:46:45| WARNING: because of this '0.0.0.0/0.0.0.0' is ignored to keep splay tree searching predictable
2011/10/06 13:46:45| WARNING: You should probably remove '0.0.0.0/0.0.0.0' from the ACL named 'all'
2011/10/06 13:46:45| WARNING: '127.0.0.1' is a subnetwork of '127.0.0.0/255.0.0.0'
2011/10/06 13:46:45| WARNING: because of this '127.0.0.1' is ignored to keep splay tree searching predictable
2011/10/06 13:46:45| WARNING: You should probably remove '127.0.0.1' from the ACL named 'localhost'
2011/10/06 13:46:45| WARNING: '127.0.0.0/255.0.0.0' is a subnetwork of '127.0.0.0/255.0.0.0'
2011/10/06 13:46:45| WARNING: because of this '127.0.0.0/255.0.0.0' is ignored to keep splay tree searching predictable
2011/10/06 13:46:45| WARNING: You should probably remove '127.0.0.0/255.0.0.0' from the ACL named 'to_localhost'
2011/10/06 13:46:45| Creating Swap Directories


kira2 apa yach kang masalahnya????
bantu ane donk kang!!!
:( :(
User avatar
reject24
Posts: 7
Joined: 29 Oct 2011, 21:41
Location: Palembang
Contact:

Re: [help] tolong kang bantu ane...ane bingung ni udah 2 har

Postby reject24 » 29 Oct 2011, 21:56

aduuh kang coba cek lagi script nya ..mungkin ada script yg double....
agan pasti copas lngsung aja kan gak di apus dulu scriptyg lama
User avatar
yudiarbi
Posts: 627
Joined: 22 Mar 2011, 09:31
Location: Probolinggo, Jawa Timur
Contact:

Re: [help] tolong kang bantu ane...ane bingung ni udah 2 har

Postby yudiarbi » 30 Oct 2011, 11:10

cross wrote:#==============================#
# PESAN ERROR BAHASA INDONESIA
#==============================#

error_directory /usr/share/squid/errors/id

pas ane mw jalanin cachenya
squid -z
muncul error kayak gini kang

2011/10/06 13:46:45| aclParseIpData: WARNING: Netmask masks away part of the specified IP in '127.0.0.1/255.0.0.0'
2011/10/06 13:46:45| WARNING: '0.0.0.0/0.0.0.0' is a subnetwork of '0.0.0.0/0.0.0.0'
2011/10/06 13:46:45| WARNING: because of this '0.0.0.0/0.0.0.0' is ignored to keep splay tree searching predictable
2011/10/06 13:46:45| WARNING: You should probably remove '0.0.0.0/0.0.0.0' from the ACL named 'all'
2011/10/06 13:46:45| WARNING: '127.0.0.1' is a subnetwork of '127.0.0.0/255.0.0.0'
2011/10/06 13:46:45| WARNING: because of this '127.0.0.1' is ignored to keep splay tree searching predictable
2011/10/06 13:46:45| WARNING: You should probably remove '127.0.0.1' from the ACL named 'localhost'
2011/10/06 13:46:45| WARNING: '127.0.0.0/255.0.0.0' is a subnetwork of '127.0.0.0/255.0.0.0'
2011/10/06 13:46:45| WARNING: because of this '127.0.0.0/255.0.0.0' is ignored to keep splay tree searching predictable
2011/10/06 13:46:45| WARNING: You should probably remove '127.0.0.0/255.0.0.0' from the ACL named 'to_localhost'
2011/10/06 13:46:45| Creating Swap Directories

kira2 apa yach kang masalahnya????
bantu ane donk kang!!!
:( :(

tuh baris2 squid coba diuncomment di bagian
acl all

Return to “Ubuntu Server”

Who is online

Users browsing this forum: No registered users and 4 guests