Comments for O.N.E.Z http://onez.web.id N.o. B.o.d.y P.e.r.f.e.c.t Sat, 31 Jul 2010 09:04:49 +0000 http://wordpress.org/?v=2.9.2 hourly 1 Comment on Cara Mounting pada NFS (Network File System) by investasi emas http://onez.web.id/2009/06/24/cara-mounting-pada-nfs-network-file-system/comment-page-1/#comment-205 investasi emas Sat, 31 Jul 2010 09:04:49 +0000 http://onez.web.id/2009/06/24/cara-mounting-pada-nfs-network-file-system/#comment-205 makasi buat postingannya ya,.. makasi buat postingannya ya,..

]]> Comment on Transparent Proxy pada Centos-5 by ika http://onez.web.id/2007/08/02/transparant-proxy-pada-centos-5/comment-page-1/#comment-204 ika Fri, 04 Sep 2009 05:38:59 +0000 http://onez.web.id/?p=9#comment-204 kok proxy transparent Q gak kebaca di client. eth1 192.168.3.135 (internet) eth0 192.168.2.1 (lan). mohon bantuannya. ini konfiguransinya http_port 3128 transparent icp_port 0 cache_mem 6 MB cache_swap_low 94 cache_swap_high 96 cache_access_log /var/log/squid/access.log cache_store_log /var/log/squid/store.log maximum_object_size 16384 KB minimum_object_size 4 KB maximum_object_size_in_memory 2048 KB # OPTION FOR TUNING THE CACHE refresh_pattern -i ^ftp: 1440 50% 20160 refresh_pattern -i ^gopher: 1440 50% 20160 # FILE-FILE YANG JARANG BERUBAH refresh_pattern -i \.bin$ 180 90% 20160 reload-into-ims refresh_pattern -i \.cab$ 180 90% 20160 reload-into-ims refresh_pattern -i \.dat$ 180 90% 20160 reload-into-ims refresh_pattern -i \.exe$ 180 90% 20160 reload-into-ims refresh_pattern -i \.flv$ 180 90% 20160 reload-into-ims refresh_pattern -i \.msi$ 180 90% 20160 reload-into-ims refresh_pattern -i \.rar$ 180 90% 20160 reload-into-ims refresh_pattern -i \.zip$ 180 90% 20160 reload-into-ims refresh_pattern -i \.swf$ 180 90% 20160 reload-into-ims refresh_pattern -i \.css$ 120 80% 10080 reload-into-ims refresh_pattern -i \.js$ 120 80% 10080 reload-into-ims refresh_pattern -i \.pdf$ 90 80% 10080 reload-into-ims refresh_pattern -i \.gif$ 45 70% 10080 reload-into-ims refresh_pattern -i \.ico$ 45 70% 10080 reload-into-ims refresh_pattern -i \.jpg$ 45 70% 10080 reload-into-ims refresh_pattern -i \.png$ 45 70% 10080 reload-into-ims # REFRESH LEBIH CEPAT UNTUK YANG SERING BERUBAH refresh_pattern -i \.html$ 10 40% 4320 refresh_pattern -i \.htm$ 10 40% 4320 refresh_pattern -i \.xml$ 10 40% 4320 refresh_pattern . 25 60% 4320 fqdncache_size 1024 cache_replacement_policy heap GDSF memory_replacement_policy heap GDSF visible_hostname localhost cache_mgr admin@localhost cache_effective_user squid cache_effective_group squid acl apache rep_header Server ^Apache broken_vary_encoding allow apache cache_mgr admin@proxy.sman5.com #nama admin squid cache_effective_user squid cache_effective_group squid visible_hostname proxy.sman5.com #hostname unutk squid # DEFAULT ACL acl all src 0.0.0.0/0.0.0.0 acl manager proto cache_object acl localhost src 127.0.0.1/255.255.255.255 acl lan src 192.168.2.0/24 acl to_localhost dst 127.0.0.0/8 acl SSL_ports port 443 563 acl safe_ports port 80 # http acl safe_ports port 21 # ftp acl safe_ports port 443 563 # https, snews acl safe_ports port 70 # gopher acl safe_ports port 210 # wais acl safe_ports port 280 # http-mgmt acl safe_ports port 488 # gss-http acl safe_ports port 591 # filemaker acl safe_ports port 777 # multiling http # MEMBLOCK SITUS TERLARANG (BLACKLIST) SECARA MANUAL # _______________________________________________ acl porn url_regex "/etc/squid/acl/porn.txt" acl noporn url_regex "/etc/squid/acl/noporn.txt" acl ip-porn dst "/etc/squid/acl/ip-porn.txt" acl download url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .tar .rpm .zip .rar .avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov .msi .mp4 http_access allow porn all http_access allow noporn all http_access deny porn all http_access deny ip-porn all http_access allow localhost http_access allow all http_access allow lan acl PURGE method PURGE acl CONNECT method CONNECT http_access allow manager localhost http_access deny manager http_access allow PURGE localhost http_access deny PURGE http_access deny !safe_ports http_access deny CONNECT !SSL_ports http_access deny to_localhost acl our_networks src 192.168.2.0/24 192.168.3.0/24 http_access allow our_networks http_reply_access allow lan http_reply_access allow localhost http_reply_access deny all http_reply_access allow all icp_access allow lan icp_access allow localhost icp_access deny all icp_access allow all http_access allow localhost http_reply_access allow all http_access deny all # MANAJEMEN BANDWIDTH # ___________________________________________ delay_pools 2 delay_class 1 2 delay_parameters 1 -1/-1 -1/-1 delay_class 2 2 delay_parameters 2 -1/2048000 10000/2049000 delay_access 2 allow download delay_access 2 deny all delay_access 1 deny download delay_access 1 allow all kok proxy transparent Q gak kebaca di client. eth1 192.168.3.135 (internet) eth0 192.168.2.1 (lan). mohon bantuannya. ini konfiguransinya

http_port 3128 transparent
icp_port 0

cache_mem 6 MB
cache_swap_low 94
cache_swap_high 96

cache_access_log /var/log/squid/access.log
cache_store_log /var/log/squid/store.log

maximum_object_size 16384 KB
minimum_object_size 4 KB
maximum_object_size_in_memory 2048 KB

# OPTION FOR TUNING THE CACHE
refresh_pattern -i ^ftp: 1440 50% 20160
refresh_pattern -i ^gopher: 1440 50% 20160

# FILE-FILE YANG JARANG BERUBAH
refresh_pattern -i \.bin$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.cab$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.dat$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.exe$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.flv$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.msi$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.rar$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.zip$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.swf$ 180 90% 20160 reload-into-ims
refresh_pattern -i \.css$ 120 80% 10080 reload-into-ims
refresh_pattern -i \.js$ 120 80% 10080 reload-into-ims
refresh_pattern -i \.pdf$ 90 80% 10080 reload-into-ims
refresh_pattern -i \.gif$ 45 70% 10080 reload-into-ims
refresh_pattern -i \.ico$ 45 70% 10080 reload-into-ims
refresh_pattern -i \.jpg$ 45 70% 10080 reload-into-ims
refresh_pattern -i \.png$ 45 70% 10080 reload-into-ims

# REFRESH LEBIH CEPAT UNTUK YANG SERING BERUBAH
refresh_pattern -i \.html$ 10 40% 4320
refresh_pattern -i \.htm$ 10 40% 4320
refresh_pattern -i \.xml$ 10 40% 4320
refresh_pattern . 25 60% 4320

fqdncache_size 1024
cache_replacement_policy heap GDSF
memory_replacement_policy heap GDSF

visible_hostname localhost
cache_mgr admin@localhost
cache_effective_user squid
cache_effective_group squid

acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_mgr admin@proxy.sman5.com #nama admin squid
cache_effective_user squid
cache_effective_group squid
visible_hostname proxy.sman5.com #hostname unutk squid

# DEFAULT ACL
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl lan src 192.168.2.0/24
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl safe_ports port 80 # http
acl safe_ports port 21 # ftp
acl safe_ports port 443 563 # https, snews
acl safe_ports port 70 # gopher
acl safe_ports port 210 # wais
acl safe_ports port 280 # http-mgmt
acl safe_ports port 488 # gss-http
acl safe_ports port 591 # filemaker
acl safe_ports port 777 # multiling http

# MEMBLOCK SITUS TERLARANG (BLACKLIST) SECARA MANUAL
# _______________________________________________
acl porn url_regex “/etc/squid/acl/porn.txt”
acl noporn url_regex “/etc/squid/acl/noporn.txt”
acl ip-porn dst “/etc/squid/acl/ip-porn.txt”
acl download url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .tar .rpm .zip .rar .avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov .msi .mp4

http_access allow porn all
http_access allow noporn all
http_access deny porn all
http_access deny ip-porn all
http_access allow localhost

http_access allow all
http_access allow lan

acl PURGE method PURGE
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager

http_access allow PURGE localhost
http_access deny PURGE

http_access deny !safe_ports
http_access deny CONNECT !SSL_ports
http_access deny to_localhost
acl our_networks src 192.168.2.0/24 192.168.3.0/24
http_access allow our_networks

http_reply_access allow lan
http_reply_access allow localhost
http_reply_access deny all
http_reply_access allow all

icp_access allow lan
icp_access allow localhost
icp_access deny all
icp_access allow all

http_access allow localhost
http_reply_access allow all
http_access deny all

# MANAJEMEN BANDWIDTH
# ___________________________________________
delay_pools 2
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_class 2 2
delay_parameters 2 -1/2048000 10000/2049000

delay_access 2 allow download
delay_access 2 deny all
delay_access 1 deny download
delay_access 1 allow all

]]> Comment on Setting buat Server SOHO atau Warnet pada Linux by Casino 1250517869 http://onez.web.id/2007/08/03/setting-buat-server-soho-atau-warnet-pada-linux/comment-page-1/#comment-202 Casino 1250517869 Tue, 18 Aug 2009 02:49:57 +0000 http://onez.web.id/?p=10#comment-202 <strong>Casino 1250517869...</strong> Casino 1250517869... Casino 1250517869…

Casino 1250517869…

]]> Comment on Authentication Access di Squid Proxy by admin http://onez.web.id/2007/11/30/authentication-access-di-squid-proxy/comment-page-1/#comment-195 admin Wed, 24 Jun 2009 19:08:27 +0000 http://onez.web.id/2007/11/30/authentication-access-di-squid-proxy/#comment-195 rakha : bisa bung, dengan autentifikasi ini membuat si client harus melakukan autentifikasi dulu, jika dia tidak benar memasukan autentifikasi maka client tidak dapat melakukan browsing (baik transparant atw bukan transparant, kemudian kan di router sudah kita paksa untuk port 80 ke port proxy kita). Dan pada intinya bahwa ncsa ini adalah fitur tambahan yang di berikan squid. Ahkip : Wah untuk merubah tampilan login belom pernah ngerubah (bisa atw nggak masih lom bisa jawab nih :) ) . Maksud dengan menampilkan 2 halaman sekaligus nggak ngerti nih bung. rakha : bisa bung, dengan autentifikasi ini membuat si client harus melakukan autentifikasi dulu, jika dia tidak benar memasukan autentifikasi maka client tidak dapat melakukan browsing (baik transparant atw bukan transparant, kemudian kan di router sudah kita paksa untuk port 80 ke port proxy kita). Dan pada intinya bahwa ncsa ini adalah fitur tambahan yang di berikan squid.

Ahkip : Wah untuk merubah tampilan login belom pernah ngerubah (bisa atw nggak masih lom bisa jawab nih :) ) . Maksud dengan menampilkan 2 halaman sekaligus nggak ngerti nih bung.

]]> Comment on Authentication Access di Squid Proxy by Панькив http://onez.web.id/2007/11/30/authentication-access-di-squid-proxy/comment-page-1/#comment-194 Панькив Tue, 16 Jun 2009 04:23:14 +0000 http://onez.web.id/2007/11/30/authentication-access-di-squid-proxy/#comment-194 ползная инфа ползная инфа

]]>