buat file dengan nama block_samba.sh

#!/bin/sh

SAMBA_SERVER=”10.10.8.3″
NETWORK=”192.168.9.0/24″
BROADCAST=”192.168.9.255″
IPT=”/sbin/iptables”

# to the UDP inbound chain
$IPT -A INPUT -p udp -s $SAMBA_SERVER -d $NETWORK -m multiport –dports 137,138 -j DROP
$IPT -A INPUT -p udp -s $SAMBA_SERVER -d $NETWORK -m multiport –dports 139,445 -j DROP

# to the input chain
$IPT -A INPUT -p udp -s $NETWORK -d $SAMBA_SERVER -m multiport –dports 137,138 -j DROP
$IPT -A INPUT -p tcp -s $NETWORK -d $SAMBA_SERVER -m multiport –dports 139,445 -j DROP
$IPT -A INPUT -p udp -s $NETWORK -d $BROADCAST –dport 137 -j DROP
$IPT -A INPUT -p udp -d $SAMBA_SERVER -m multiport –dports 137,138 -j DROP
$IPT -A INPUT -p tcp -d $SAMBA_SERVER -m multiport –dports 139,445 -j DROP

# to the output chain
$IPT -A OUTPUT -s $SAMBA_SERVER -d $NETWORK -m state –state ESTABLISHED,RELATED -j DROP

dari script diatas bisa kita block berdasarkan network tertentu ataupun hanya beberapa ip saja, tapi tetap menggunakan blok ip network. Setelah file disimpan beri akses execute dengan cara

chmod +x block_samba.sh

untuk runningnya

./block_samba.sh

agar perintah ini jalan setiap booting PC silahkan masukkan perintah diatas ke rc.local

Related posts:

1. Firewall untuk Web Server Menggunakan IPTABLES

Tidak sulit untuk melakukannya, ada beberapa bagian yang perlu di edit yaitu vendorid pada wireless. Tapi semua sudah bundle kedalam satu paket driver yang sudah jadi, sehingga tinggal install dan running.. cayoo

silahkan download drivernya Buffalo NFINITI WLI-UC-GN

silahkan di extract, sebelum melakukan installasi driver, jangan di colokin usb wirelessnya

1. Masuk folder rt5370sta

2. eksekusi

make

make install

setelah itu restart dulu PC, biar modules terload

pasang usb buffalo wireless, cek interface apakah sudah ada

ifconfig -a

bila terdapat interface ra0 maka usb buffalo wireless sudah terdeteksi, dan perhatikan MAC address masih kosong. Ini karena interface belum up

ifconfig ra0 up

cek kembali interfacenya

ifconfig -a

akan terlihat mac address, tinggal setting wifinya ..

iwconfig ra0 essid “AP-Paidjo”
iwconfig ra0 mode Managed
dhclient ra0

supaya bisa up saat PC dinyalakan, tambahkan script di /etc/rc.local

nano -w /etc/rc.local

ifconfig ra0 up
iwconfig ra0 essid “AP-Paidjo”
iwconfig ra0 mode Managed
dhclient ra0

yuhuuuu proses selesai

Related posts:

1. Bandwidth Management HTB di Mesin Ubuntu

1. Download file HTB

2. Hasil Download disimpan di /usr/local/src/

3. Ekstrak

tar -zxvf  HTB-tools-0.3.0a-i486-1.tgz

akan terdapat beberapa folder diantaranya etc, install, dan sbin

4. Pindah ke folder sbin

cd /usr/local/src/sbin
cp htb /sbin
cp htbgen /sbin
cp q_checkcfg /sbin
cp q_parser /sbin
cp q_show /sbin

cd /usr/local/src/etc
cp htb /etc

cp /etc/htb/eth0-qos.cfg.new /etc/htb/eth0-qos.cfg
cp /etc/htb/eth1-qos.cfg.new /etc/htb/eth1-qos.cfg

cd /usr/local/src/etc/rc.d
cp rc.htb.new /etc/init.d/rc.htb
chmod 755 /etc/init.d/rc.htb

4. Kemudian setting LAN konfigurasi, disini interface yang digunakan ke LAN adalah eth1

nano -w /etc/htb/eth1-qos.cfg

class Internet_Office {
bandwidth 1024;
limit 2048;
burst 2;
priority 1;

client Manager {
bandwidth 256;
limit 512;
burst 2;
priority 1;
dst {
192.168.168.5/32;
};
};

client hotspot {
bandwidth 32;
limit 256;
burst 2;
priority 1;
dst {
192.168.168.6/32;
};
};

client secretary {
bandwidth 64;
limit 256;
burst 2;
priority 1;
dst {
192.168.168.7/32;
};
};

client Staff {
bandwidth 256;
limit 512;
burst 2;
priority 1;
dst {
192.168.168.11/32;
192.168.168.12/32;
};
};
};

class default { bandwidth 8; };

Keterangan:
Manager: bandwidth 512 Kbps (1:2), yang artinya maximum 512 dan minimum 256.
Hotspot: bandwidth 512 Kbps (1:8), yang artinya maximum 512 dan  64.
Secretary: bandwidth 512 Kbps (1:4), yang artinya maximum 512 dan minimum 128.
Staff: bandwidth 512 Kbps (1:2), yang artinya maximum 512 dan 256.

Menjalankan HTB dengan perintah

/etc/init.d/rc.htb start_eth1

Melihat traffic

/etc/init.d/rc.htb show_eth1

Mengentikan HTB

/etc/init.d/rc.htb stop_eth1

semoga dapat bermanfaat bila ada salah mohon koreksinya

Related posts:

1. Setting USB Wireless Buffalo NFINITI WLI-UC-GN di mesin Ubuntu

Sekenario:

client 10.0.0.2 menggunakan WAN1 (192.168.0.10)

client 10.0.0.3 dan 10.0.0.4 menggunakan WAN2 (172.16.0.10)

perhatikan gambar diatas untuk setting ethernet nya

eth0 : 192.168.0.10 sebagai WAN1

eth1 : 172.16.0.10 sebagai WAN2

eth2 : 10.0.0.1 sebagai LAN

untuk default route-nya adalah mengarah ke 192.168.0.1

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.0.0 0.0.0.0 255.255.255.0 U 1 0 0 eth0
172.16.0.0 0.0.0.0 255.255.255.0 U 1 0 0 eth1
0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 eth0

Langkah berikutnya adalah dengan membuat routing kedua dari 172.16.0.10 melewati 172.16.0.1

echo “1 isp2″ >> /etc/iproute2/rt_tables

setelah itu add routingnya

ip route add 172.16.0.0/24 dev eth1 src 172.16.0.10 table isp2
ip route add default via 172.16.0.1 dev eth1 table isp2
ip rule add from 172.16.0.10/24 table isp2
ip rule add to 172.16.0.10/24 table isp2

untuk ngeceknya apakah sudah melewati routing yang benar

traceroute -i eth0 180.131.144.144

dan

traceroute -i eth1 180.131.144.144

Kalo sudah ok.. lanjut ke konfigurasi squid proxy nya.

acl wan1 src 10.0.0.2
acl wan2 src 10.0.0.3
acl wan2 src 10.0.0.4

tcp_outgoing_address 192.168.0.10 wan1
tcp_outgoing_address 172.16.0.10 wan2
tcp_outgoing_address 172.16.0.10 wan2

semoga bermanfaat, kalo ada pertanyaan monggo isi commentnya..

Related posts:

1. Bandwidth Management HTB di Mesin Ubuntu
2. Firewall untuk Web Server Menggunakan IPTABLES

Awalnya masuk dalam directory yang akan kita protect

cd /var/www/html/blog/protect-directory/

Kemudian buat file .htaccess

touch .htaccess

isikan file tersebut dengan baris berikut ini

AuthUserFile /var/www/html/blog/protect-directory/.htpasswd
AuthName “Authorization Required”
AuthType Basic
require valid-user

Langkah selanjutnya membuat username dan password, misalnya usernamenya paidjo

htpasswd -nb paidjo inipassword

akan muncul (yang muncul dibawah ini setiap kali berbeda, karena menggunakan sistem random)

paidjo:STHiPUJrrrIEw

Kemudian buat file .htpasswd dengan cara

touch .htpasswd

isikan file .htpasswd dengan

paidjo:STHiPUJrrrIEw

Kemudian rubah hak aksesnya

chmod 644 .htaccess
chmod 644 .htpasswd

Monggo dicoba..

Related posts:

1. Google Talk dengan Show Music Status Winamp

Ijinkan semua akses keluar dan blok trafik yang masuk (Akses Server keluar)

iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP

Ijinkan established

iptables -A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT

Ijinkan hanya beberapa port yang boleh masuk ke Server (ssh, dns, ldap, ftp, www)

iptables -A INPUT -p tcp –dport ssh -i eth0 -j ACCEPT
iptables -A INPUT -p tcp –dport domain -i eth0 -j ACCEPT
iptables -A INPUT -p tcp –dport ldap -i eth0 -j ACCEPT
iptables -A INPUT -p udp –dport ldap -i eth0 -j ACCEPT
iptables -A INPUT -p tcp –dport ftp -i eth0 -j ACCEPT
iptables -A INPUT -p udp –dport ftp -i eth0 -j ACCEPT
iptables -A INPUT -p tcp –dport ftp-data -i eth0 -j ACCEPT
iptables -A INPUT -p udp –dport ftp-data -i eth0 -j ACCEPT
iptables -A INPUT -p tcp –dport 80 -i eth0 -j ACCEPT

Ijinkan loopback lokal

iptables -A INPUT -i lo -j ACCEPT

Ijinkan akses PING (ini sesuai kebutuhan, kalo saya ini tidak dipasang)

iptables -A INPUT -p icmp -m icmp –icmp-type 0 -j ACCEPT
iptables -A INPUT -p icmp -m icmp –icmp-type 8 -j ACCEPT
iptables -A INPUT -p icmp -m icmp –icmp-type 3 -j ACCEPT
iptables -A INPUT -p icmp -m icmp –icmp-type 11 -j ACCEPT

Semua firewall tergantung dengan kebutuhan Web Server anda, bila database terpisah seperti MySQL atau yang lain dapat juga ditambahkan port mysql (3306)

Related posts:

1. Block Samba Connection with Iptables
2. Squid dengan Multi ISP

Bagi yang masih dasar dengan urusan server saya yakin bingung dengan tulisan saya ini..

Uninstall paket email lain bisa sudah ada

rpm -qa | grep sendmail;rpm -qa | grep postfix;rpm -qa | grep cyrus;rpm -qa | grep dovecot

Bila masih menemukan paket tersebut silahkan di uninstall

rpm -e namapaketnya

Install paket yang diperlukan

yum -y install openldap-devel openldap-servers expect-devel gamin-devel httpd* php* mysql* rpm-build* libtool gdbm-devel pam-devel gcc-c++ redhat-rpm-config libtool-ltdl-devel libtool-ltdl postgresql-devel pam-devel

Download paket Mail server

squirrelmail-1.4.19.tar.gz
postfix-2.6.5.tar.gz
cyrus-sasl-2.1.22.tar.gz
courier-packet.rar
postfixadmin-2.3.2.tar.gz

Install Cyrus
set variabelnya..

export CPPFLAGS=”-I/usr/include/mysql”
export LDFLAGS=”-L/usr/lib/mysql -lmysqlclient -lz -lm”

Compile

./configure –enable-anon –enable-plain –enable-login –enable-sql –disable-krb4 –disable-otp –disable-cram –disable-digest –with-mysql=/usr/lib/mysql –without-pam –without-saslauthd –without-pwcheck –prefix=/usr –with-plugindir=/usr/lib/sasl2; make -j2; make install

Install Postfix
Create user dan Group

userdel postfix
groupdel postdrop
groupadd -g 500 postfix
groupadd -g 501 postdrop
useradd -g 500 -G postdrop postfix
id postfix

Compile postfix

make makefiles ‘CCARGS=-DHAS_MYSQL -I/usr/include/mysql -DUSE_SASL_AUTH -DUSE_TLS -DUSE_CYRUS_SASL -I/usr/include/sasl’ ‘AUXLIBS=-L/usr/lib/mysql -lmysqlclient -lz -lm -L/usr/lib -lssl -lcrypto -lsasl2′

make install

Buat SSL

mkdir /etc/postfix/ssl
cd /etc/postfix/ssl/
openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024
chmod 600 smtpd.key
openssl req -new -key smtpd.key -out smtpd.csr
openssl x509 -req -days 3650 -in smtpd.csr -signkey smtpd.key -out smtpd.crt
openssl rsa -in smtpd.key -out smtpd.key.unencrypted
mv -f smtpd.key.unencrypted smtpd.key
openssl req -new -x509 -extensions v3_ca -keyout cakey.pem -out cacert.pem -days 3650
chmod o= /etc/postfix/ssl/smtpd.key

Configure postfix di /etc/postfix/main.cf

nano -w /etc/postfix/main.cf

alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf,hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
home_mailbox = Maildir/
#mailbox_size_limit = 10240000
message_size_limit = 1638400
html_directory = no
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
mydomain = paidjo.web.id
myhostname = mx-gw.paidjo.web.id
myorigin = $mydomain
mynetworks = 192.168.9.0/26,127.0.0.1
mydestination = $myhostname, localhost.$mydomain, localhost
#inet_interfaces = $myhostname, localhost
#transport_maps = hash:/etc/postfix/transport
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtp_host_lookup = dns, native
smtpd_client_restrictions = permit_mynetworks,reject_invalid_hostname,reject_rbl_client combined.njabl.org,reject_rbl_client combined.rbl.msrbl.net,reject_rbl_client cbl.abuseat.org,reject_rbl_client dnsbl.sorbs.net,reject_rbl_client bl.spamcop.net,reject_rbl_client cbl.anti-spam.org.cn,
smtpd_tls_auth_only = no
smtpd_banner = ESMTP mx-gw.paidjo.web.id
smtpd_delay_reject = no
smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject_invalid_hostname,reject_non_fqdn_hostname,reject_unknown_sender_domain,reject_non_fqdn_sender,reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_unauth_pipelining,reject_unauth_destination,permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
local_recipient_maps =
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_aliad_domains = $virtual_alias_maps
virtual_gid_maps = static:500
virtual_mailbox_base = /var/vmail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 500
virtual_transport = virtual
virtual_uid_maps = static:500

NOTE: pada configurasi main.cf, mohon ditulis dalam satu baris dalam setiap barisnya.. walaupun hasilnya panjang

Buat file berikut dan tambahkan isinya sesuai yang saya tuliskan

nano -w mysql_virtual_alias_maps.cf
user = postfixuser
password = postfixpass
hosts = localhost
dbname = postfix
query = SELECT goto FROM alias WHERE address=’%s’ AND active = ’1′

nano -w mysql_virtual_domains_maps.cf
user = postfixuser
password = postfixpass
hosts = localhost
dbname = postfix
query = SELECT domain FROM domain WHERE domain=’%s’ AND active = ’1′

nano -w mysql_virtual_mailbox_maps.cf
user = postfixuser
password = postfixpass
hosts = localhost
dbname = postfix
query = SELECT maildir FROM mailbox WHERE username=’%s’ AND active = ’1′

Install Courier Authlib

cd /usr/local/src –> tergantung dimana anda meletakan filenya
rpmbuild -ta courier-authlib-0.62.4.tar.bz2
cd /usr/src/redhat/RPMS/i386/
rpm -ivh courier-authlib*

Install Courier Imap

Install courier imap dilakukan oleh user biasa

useradd courier
su courier
mkdir $HOME/rpm
mkdir $HOME/rpm/SOURCES
mkdir $HOME/rpm/SPECS
mkdir $HOME/rpm/BUILD
mkdir $HOME/rpm/SRPMS
mkdir $HOME/rpm/RPMS
mkdir $HOME/rpm/RPMS/i386
echo “%_topdir $HOME/rpm” >> $HOME/.rpmmacros
mkdir $HOME/downloads
cd $HOME/downloads
cd /usr/local/src
cp courier-imap* $HOME/downloads
cd $HOME/downloads
rpmbuild -ta courier-imap*

back to root alias kembali ke root..

exit
cd /home/courier/rpm/RPMS/i386
rpm -ivh courier-imap*

buat file baru

nano -w  /etc/authlib/authmysqlrc
MYSQL_SERVER localhost
MYSQL_USERNAME postfixuser
MYSQL_PASSWORD postfixpass
MYSQL_PORT 0
MYSQL_OPT 0
MYSQL_DATABASE postfix
MYSQL_USER_TABLE mailbox
MYSQL_CRYPT_PWFIELD password
MYSQL_CLEAR_PWFIELD password
MYSQL_UID_FIELD ’500′
MYSQL_GID_FIELD ’500′
MYSQL_LOGIN_FIELD username
MYSQL_HOME_FIELD ‘/var/vmail/’
MYSQL_NAME_FIELD name
MYSQL_MAILDIR_FIELD maildir

nano -w /etc/authlib/authdaemonrc
authmodulelist=”authmysql authpam”
DEBUG_LOGIN=1

nano -w /usr/lib/sasl2/smtpd.conf
pwcheck_method: authdaemond
log_level: 3
mech_list: PLAIN LOGIN
authdaemond_path:/var/spool/authdaemon/socket

chmod o+x /var/spool/authdaemon

Buat directory untuk user mail atau mailboxnya

mkdir /var/vmail
chown -R postfixostfix /var/vmail/

Nyalakan service

####Nyalakan courier-authlib
chkconfig –levels 235 courier-authlib on
/etc/init.d/courier-authlib start

####Nyalakan authdaemon
chkconfig –levels 235 courier-imap on
/etc/init.d/courier-imap start

####running postfix
postfix start

Create Database MySQL

mysql -u root -p

create database postfix;

grant all on postfix.* to postfixuser@localhost identified by ‘postfixpass’;

Install squirrelmail

tar -zxvf squirrelmail-1.4.19.tar.gz
mv squirrelmail-1.4.19 webmail
mv webmail /var/www/html/
mkdir -p /var/local/squirrelmail/data/
mkdir -p /var/local/squirrelmail/attach/
chown apache:apache /var/local/squirrelmail/data/
chown apache:apache /var/local/squirrelmail/attach/

cd /var/www/html/webmail
./configure

- Pilih Nomor 2 (Server Settings)
- Pilih Huruf A (Update IMAP Settings)
- Pilih nomor 4 lalu ketikkan alamat IP anda

- Pilih Nomor 6 (Authentification type)

Jawab Pertanyaan dengan menjawab N dan login

- Pilih Nomor 8 (Server Software)

Tulis courier

- Pilih Huruf B (Update SMTP Settings)

- Pilih Nomor 7 (SMTP Authentification)

Jawab Pertanyaan dengan N, login, dan N

- Pilih Huruf S

- Pilih Huruf Q

Mail Server sudah siap digunakan.. nanti lain waktu akan saya tambahkan bagaimana menginstall amavisd dan clamav

Related posts:

1. Firewall untuk Web Server Menggunakan IPTABLES

Merubah Username dari paidjo menjadi kangpaidjo

# id paidjo
# usermod -l kangpaidjo paidjo
# id kangpaidjo
# id paidjo

setelah itu anda coba logout, dan lakukan login dengan user baru tersebut…

Cukup singkat dan mudah.

Related posts:

1. Password Protection Web Directory dengan .htaccess
2. Setting USB Wireless Buffalo NFINITI WLI-UC-GN di mesin Ubuntu

###########################################
#      HIGH PERFORMANCE SQUID 2.7
#        paidjo.web.id IT Infra
#     Config date : 6 Desember 2010
###########################################

# ACCESS CONTROLS
# —————————————————————————–

acl QUERY urlpath_regex -i cgi-bin \? \.php$ \.asp$ \.shtml$ \.cfm$ \.cfml$ \.phtml$ \.php3$ localhost
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
acl SSL_ports port 443 563 81
acl Safe_ports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535
acl CONNECT method CONNECT
acl purge method PURGE

http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access deny all

# NETWORK OPTIONS
# —————————————————————————–

http_port 3121
zph_mode tos
zph_local 0×30
zph_parent 0
zph_option 136

icp_port 0
htcp_port 0
icp_access allow all
htcp_access allow all

snmp_port 0
snmp_access allow all

# OPTIONS WHICH AFFECT THE CACHE SIZE
# —————————————————————————–

cache_mem 8 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
cache_dir aufs /var/spool/squid/cache1 7500 16 256
cache_dir aufs /var/spool/squid/cache2 7500 16 256
cache_dir aufs /var/spool/squid/cache3 7500 16 256
store_dir_select_algorithm least-load
maximum_object_size 128000 KB
cache_swap_low 90
cache_swap_high 95
#update_headers off

# LOGFILE PATHNAMES AND CACHE DIRECTORIES
# —————————————————————————–

access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
logfile_rotate 5
log_ip_on_direct off
log_icp_queries off
buffered_logs off
netdb_filename none
emulate_httpd_log on

# OPTIONS FOR TUNING THE CACHE
# —————————————————————————–

cache deny QUERY
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i \.(gif|png|jp?g|ico|bmp|tiff?)$ 10080 95% 43200
refresh_pattern -i \.(rpm|cab|deb|exe|msi|msu|zip|tar|gz|tgz|rar|bin|7z|doc?|xls?|ppt?|pdf|nth|psd|sis)$ 10080 90% 43200
refresh_pattern -i \.(avi|iso|wav|mid|mp?|mpeg|mov|3gp|wm?|swf|flv|x-flv|axd)$ 43200 95% 432000
refresh_pattern -i \.(html|htm|css|js)$ 1440 75% 40320
refresh_pattern -i \.index.(html|htm)$ 0 75% 10080
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 1440 90% 10080

quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 98
store_avg_object_size 13 KB

#refresh_pattern ((facebook.com)|(69.63.181.11|69.63.181.12|69.63.1 89.11|69.63.189.16)).*\.(jpg|png|gif|swf|mp3|mp4|m pg|3gp|flv|swf|wmv|zip|rar) 12960 99% 12960
refresh_pattern -i \.facebook.com.*\.(jpg|gif|png|swf|wav|mp(e?g|a|e|1|2|3|4)|3gp|flv|swf|wmv|zip|rar) 12960 999999% 129600
refresh_pattern -i \.fbcdn.net.*\.(jpg|gif|png|swf|wav|mp(e?g|a|e|1|2|3|4)|3gp|flv|swf|wmv|zip|rar) 12960 999999% 129690
refresh_pattern -i \.zynga.com.*\.(jpg|gif|png|swf|wav|mp(e?g|a|e|1|2|3|4)|3gp|flv|swf|wmv) 12960 999999% 129609
refresh_pattern -i \.crowdstar.com.*\.(jpg|gif|png|swf|wav|mp(e?g|a|e|1|2|3|4)|3gp|flv|swf|wmv) 12960 999999% 129609
refresh_pattern ^http:\/\/\static\.ak\.fbcdn\.net*\.(jpg|gif|png|mp(e?g|a|e|1|2|3|4)|3gp|flv|swf|wmv) 129600 999999% 129600
refresh_pattern ^http:\/\/\videoxl\.l[0-9]\.facebook.com\/(.*)(3gp|flv|swf|wmv|mp(e?g|a|e|1|2|3|4)) 129600 999999% 129600
refresh_pattern ^http:\/\/\*.channel\.facebook\.com\/(.*)(js|css|swf|jpg|gif|png|mp(e?g|a|e|1|2|3|4)) 129600 999999% 129600
refresh_pattern ^http:\/\/video\.ak\.facebook.com*\.(3gp|flv|swf|wmv|mp(e?g|a|e|1|2|3|4)) 129600 999999% 129600
refresh_pattern ^http:\/\/photos-[a-z]\.ak\.fbcdn\.net\/(.*)(css|swf|jpg|gif|png|mp(e?g|a|e|1|2|3|4)) 129600 999999% 129600
refresh_pattern ^http:\/\/profile\.ak\.fbcdn.net*\.(jpg|gif|png) 129600 999999% 129600
refresh_pattern ^http://platform.ak.fbcdn.net/.* 720 100% 4320
refresh_pattern ^http://creative.ak.fbcdn.net/.* 720 100% 4320
refresh_pattern ^http://apps.facebook.com/.* 720 100% 4320
refresh_pattern ^http:\/\/static\.ak\.fbcdn.net*\.(js|css|jpg|gif|png) 129600 999999% 129600
refresh_pattern ^http:\/\/\statics\.poker\.static\.zynga\.com\/(.*)(swf|jpg|gif|png|mp(e?g|a|e|1|2|3|4)) 129600 999999% 129600
refresh_pattern ^http://statics.poker.static.zynga.com/.* 720 100% 4320
refresh_pattern ^http:\/\/\*.zynga.com*\.(swf|jpg|gif|png|wav|mp(e?g|a|e|1|2|3|4)) 129600 999999% 129600
refresh_pattern ^http:\/\/\*.crowdstar.com*\.(swf|jpg|gif|png|wav|mp(e?g|a|e|1|2|3|4)) 129600 999999% 129600
refresh_pattern ^http://*.google-analytics.*/.* 720 100% 4320
refresh_pattern -i \.kaskus.com.*\.(jpg|gif|png|swf|wav|mp(e?g|a|e|1|2|3|4)|3gp|flv|swf|wmv|zip|rar) 12960 999999% 129600
refresh_pattern -i \.kaskus.us.*\.(jpg|gif|png|swf|wav|mp(e?g|a|e|1|2|3|4)|3gp|flv|swf|wmv|zip|rar) 12960 999999% 129600
refresh_pattern ^http:\/\/\*.kaskus\.us*\.*(jpg|gif|png|mp(e?g|a|e|1|2|3|4)|3gp|flv|swf|wmv) 129600 999999% 129600

# HTTP OPTIONS
# —————————————————————————–

server_http11 on
collapsed_forwarding on
vary_ignore_expire on
#header_access From deny all
#header_access Server deny all
#header_access Link deny all
#header_access Via deny all
#header_access X-Forwarded-For deny all

# TIMEOUTS
# —————————————————————————–

forward_timeout 240 seconds
connect_timeout 30 second
peer_connect_timeout 5 seconds
read_timeout 600 second
request_timeout 60 second
persistent_request_timeout 60 seconds
client_lifetime 86400 second
half_closed_clients off
pconn_timeout 60 second
shutdown_lifetime 10 second

# ADMINISTRATIVE PARAMETERS
# —————————————————————————–

cache_mgr kang@paidjo.web.id
cache_effective_user squid
cache_effective_group squid
httpd_suppress_version_string on
visible_hostname paidjo.web.id

# DELAY POOL PARAMETERS
# —————————————————————————–

# ADVANCED NETWORKING OPTIONS
# —————————————————————————–

max_filedescriptors 4096

# DNS OPTIONS
# —————————————————————————–

check_hostnames off
#dns_timeout 10 seconds
#dns_nameservers 125.160.4.82 203.130.196.155 203.130.196.5 222.124.204.34 202.134.0.61 8.8.4.4 8.8.8.8
#hosts_file /etc/hosts
ipcache_size 8192
ipcache_low 90
ipcache_high 95
fqdncache_size 4096

# MISCELLANEOUS
# —————————————————————————–

memory_pools off
forwarded_for off
#reload_into_ims on
coredump_dir /var/spool/squid/cache1
pipeline_prefetch on
offline_mode off

# -=EoF=-

yang ingin download filenya disini KLIK

execute untuk membuat swap baru sesuai dengan config diatas

squid -z

Bila ada error silahkan disesuaikan bagian yang errornya..

Related posts:

1. Squid dengan Multi ISP

Awalnya ada kendala saat install di Virtualbox, yaitu terdapat error HostMemoryLow ini aneh banget, padahal ram 1GB. Akhirnya menemukan solusi yaitu hanya memberikan alokasi RAM pada Ubuntu 10.10 dengan hanya 256MB padahal awalnya saya berikan 512MB tapi malah error..

Proses Install Ubuntu 10.10 relatif sama dengan Ubuntu versi sebelumnya (berarti gampang dong.. )

bersambung.. (lagi repot)

Related posts:

1. Setting USB Wireless Buffalo NFINITI WLI-UC-GN di mesin Ubuntu
2. Bandwidth Management HTB di Mesin Ubuntu