Contoh Satu Konfigurasi Squid Ubuntu

# Port
http_port 3128 transparent
icp_port 3130
prefer_direct off
server_http11 on
# Cache
cache_mem 8 MB
cache_swap_low 98
cache_swap_high 99
max_filedesc 8192
maximum_object_size 128 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 128 KB
ipcache_size 10240
ipcache_low 98
ipcache_high 99
fqdncache_size 4096
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
cache_dir aufs /cache 30000 16 256 # untuk partisi /cache 50GB
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
pid_filename /var/run/squid.pid
cache_swap_log /var/log/squid/swap.state
dns_nameservers /etc/resolv.conf
emulate_httpd_log off
hosts_file /etc/hosts
half_closed_clients off
negative_ttl 1 minutes
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 873 # https snews rsync
acl Safe_ports port 80 # http
acl Safe_ports port 20 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 631 # cups
acl Safe_ports port 10000 # webmin
acl Safe_ports port 901 # SWAT
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 873 # rsync
acl Safe_ports port 110 # POP3
acl Safe_ports port 25 # SMTP
acl Safe_ports port 2095 2096 # webmail from cpanel
acl Safe_ports port 2082 2083 # cpanel
acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports !SSL_ports
http_access deny CONNECT !SSL_ports !Safe_ports
# pictures & images
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private
refresh_pattern -i \.(xml|html|htm|js|txt|css|php)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
#sound & video
refresh_pattern -i \.(flv|x-flv|mov|avi|qt|mpg|mpeg|swf)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache
refresh_pattern -i \.(wav|mp3|mp4|au|mid)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private
# files
refresh_pattern -i \.(iso|deb|rpm|zip|tar|tgz|ram|rar|bin|ppt|doc)$ 10080 90% 43200 ignore-no-cache ignore-auth
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
# -- refresh pattern for specific sites -- #
refresh_pattern ^http://*.jobstreet.com.*/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache
refresh_pattern ^http://*.indowebster.com.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
refresh_pattern ^http://*.21cineplex.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
refresh_pattern ^http://*.atmajaya.*/.* 720 100% 10080 override-expire ignore-no-cache ignore-auth
refresh_pattern ^http://*.kompas.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.theinquirer.*/.* 720 100% 10080 override-expire ignore-no-cache ignore-auth
refresh_pattern ^http://*.blogspot.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.wordpress.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.photobucket.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.tinypic.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.imageshack.us/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.kaskus.*/.* 720 100% 28800 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://www.kaskus.com/.* 720 100% 28800 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detik.*/.* 720 50% 2880 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detiknews.*/*.* 720 50% 2880 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://video.liputan6.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static.liputan6.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.friendster.com/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache ignore-auth
refresh_pattern ^http://*.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://apps.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://profile.ak.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static.playspoon.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://cooking.game.playspoon.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern -i http://[^a-z\.]*onemanga\.com/? 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://media?.onemanga.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.yahoo.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.google.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.forummikrotik.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.linux.or.id/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
#default option
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320
# ALLOWED ACCESS
acl localnet src 192.168.1.0/24 #IP lokal kamu
http_access allow localnet
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow localnet
icp_access allow localhost
icp_access deny all
always_direct deny all

cache_mgr putra.jaya.komputer@gmail.com
visible_hostname pjkwisp
cache_effective_user proxy
cache_effective_group proxy
coredump_dir /var/spool/squid
shutdown_lifetime 10 seconds
logfile_rotate 14
#-----------------------------------------------------------------#
#tcp_outgoing_tos 0x30 localnet
#-----------------------------------------------------------------#
zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

 Kode di atas lebih baik copy dulu ke notepad.

Read more »

Tahapan Instal Linux Ubuntu Server 11.10

Read more »

Kontes Konfigurasi Proxy Squid Video Cache Paling Handal

PJK-WISP mengadakan "Kontes Konfigurasi Proxy Squid Video Cache Paling Handal" terbuka bagi siswa-siswi SMK Jurusan TKJ se Wilayah Eks-Karisidenan Pekalongan. Bagi yang terpilih akan mendapat BEASISWA sampai lulus sebesar Rp 200.000,- (Dua ratus ribu ribu) setiap bulan dan selanjutnya setelah lulus dapat bekerja part-time / full-time di PJK-WISP.
Syarat:
1. Siswa-siswi SMK Jurusan TKJ.
2. Bertempat tinggal di Wilayah Eks-Karisidenan Pekalongan (Brebes,Tegal,Pemalang,Pekalongan & Batang).
3. Setiap peserta diwajibkan melakukan konfigurasi di PJK-WISP pada hari Sabtu & Minggu.
4. Hasil dari konfigurasi proxy squid harus di uji kehandalannya pada jaringan PJK-WISP.
5. CPU akan disediakan oleh PJK atau dapat membawa sendiri.

Pendaftaran dan Pelaksanaan "Kontes Konfigurasi Proxy Squid Video Cache Paling Handal" di buka mulai tanggal 4 Desember 2012 sampai dengan 30 Januari 2013

Read more »

Mengubah IP Statik di Ubuntu Server

1. Edit File /etc/network/interfaces
#sudo gedit /etc/network/interfaces

File ini memuat konfigurasi IP yang akan digunakan oleh Network Interface yang terpasang pada suatu komputer. Selain alamat IP, file ini juga menyimpan informasi tentang routing. Di bawah ini adalah contoh isi file /etc/network/intefaces:

auto lo
iface lo inet loopback
auto eth0
iface eth0 inet static
address 192.168.30.10
network 192.168.30.0
netmask 255.255.255.0
broadcast 192.168.30.255
gateway 192.168.1.1

Kata auto yang mendahului nama suatu interface menandakan bahwa interface tersebut akan dinyalakan secara otomatis pada saat booting. Interface lo tidak memiliki konfigurasi IP karena lo digunakan sebagai loopback sehingga memiliki IP yang pasti yakni 127.0.0.1. Alamat IP ini digunakan oleh komputer untuk berkomunikasi dengan dirinya sendiri. Konfigurasi untuk eth0 harus diberikan karena interface ini dikonfigurasi menggunakan IP statis.

Parameter-parameter yang harus disebutkan untuk jenis interface static adalah:

1. address: menentukan IP address yang digunakan suatu komputer.
2. network: menentukan Network Address komputer.
3. netmask: menentukan subnet mask network komputer.
4. broadcast: menentukan alamat broadcast yang digunakan komputer untuk memperkenalkan diri pada jaringan.
5. gateway: menentukan default gateway yang digunakan apabila komputer tersebut mengirimkan paket data ke luar jaringan anggotanya.

2.  Masukkan Preferred DNS Server dan Alternate DNS Server
#sudo gedit /etc/resolv.conf
nameserver 192.168.1.1
nameserver 202.134.1.10
nameserver 202.134.0.155
3. Restart Network
# /etc/init.d/networking restart
4. Cek IP Address
# ifconfig
5. Test
# ping www.google.com
6.  Edit File /etc/network/option bila di perlukan.
# /etc/network/options

File ini memuat beberapa pilihan yang dapat dijalankan bersamaan dengan aktifasi alamat IP pada bagian di atas. Secara default, file ini mengandung 3 baris. Isi file ini kurang lebih seperti di bawah ini.

ip_forward=no
spoofprotect=yes
syncookies=no

Baris pertama menunjukkan bahwa komputer ini tidak digunakan untuk memforward paket data yang diterimanya ke komputer lain. ip_forward harus diset yes bila memang komputer ini dibangun untuk bertindak sebagai router atau bridge. Baris kedua menunjukkan bahwa perlindungan ipspoof aktif. Ada baiknya pilihan ini selalu yes untuk menghindari terjadinya spoofing alamat IP kita oleh orang lain. Baris ketiga menyatakan bahwa syncookies tidak diaktifkan. Pilihan ini bertujuan untuk membatasi jumlah usaha membuat koneksi baru dari komputer lain ke komputer kita. Bila komputer kita menerima semua request secara serentak dengan jumlah banyak, besar kemungkinan bahwa komputer kita akan hang dalam waktu singkat.

sumber: http://www.debian-id.org

Read more »

Kursus Buat PROXY VIDEO CACHE hanya 500ribu

PJK membuka Kursus membuat Proxy Video Cache. Setiap angkatan dibatasi maksimal 5 peserta. Setiap hari Jumat sampai dengan Minggu. Kami menjamin setiap peserta dapat membuat Proxy Video Cache. Dengan begitu sudah tidak akan tergantung orang lain lagi.

Read more »

Command text di konsol terminal Linux

$ grep "license" readme.txt = mencari kata "license" dalam file readme.txt
$ df –h = disk free
$ du -h --max-depth=100 = estimate file usage
$ du /media/data/ --max-depth=1
-B M | sort –g = melihat penggunaan space pada folder
$ du -sh /media/data/ = melihat besaran (MB) folder
$ sudo fdisk -l = show partition table
$ free = melihat free RAM
$ cat /etc/fstab = static file system information
$ cat /proc/cpuinfo = info cpu
$ cat /proc/meminfo = info memory
$ cat /proc/partitio = info partition
$ cat /etc/rc.d/rc.s = startup
$ find / -name "namafile" = search nama file
$ find /media/data/ -name
"Thumbs.db" -print0 | xargs -0 rm -vr = menghapus hasil pencarian
$ find /home/user -size +30M = mencari file dengan ukuran diatas 30M
$ alias lihat='ls -l' = memberikan alias perintah
$ cal 2010 = show calender
$ clear = clear the terminal screen
$ sudo shutdown -h now = menshutdown pc sekarang
$ sudo shutdown -h +2 = menshutdown pc
$ init 0 = halt
$ init 6 = reboot
$ init 2 =
$ top -d 2 = melihat proses shift+?
$ who = Show who is logged on
$ w = Show who is logged on and what they are doing
$ dmesg = print message system
$ cfdisk = tool tabel manipulator for linux
$ killall sshd = mengkill proses ssh
$ arp -ne = cek arp tabel
$ pstree = melihat proses secara pohon kebutuhan
$ lspci -v = cek hardware via konsole
$ lshw -C processor = cek hardware processor
$ sudo pmi action sleep = menjalankan fungsi sleep
$ sudo pmi action suspend = menjalankan fungsi suspend
$ dig 192.168.1.1 = dns lookup utility
$ cat /proc/net/arp = cek arp
$ sudo gedit /etc/fstab = file konfigurasi mount hardisk
$ scp test.log
oniichan@192.168.1.12:~ = transfer file via jaringan kedalam home direktori
$ iwlist eth1 scanning = scanning access point
$ sudo ifconfig eth1 hw
ether 0013022e91c7 = mengganti mac address
$ sudo apt-get -d source
avant-window-navigator-bzr = download paket only, not install
$ sudo dpkg-reconfigure xserver-xorg = reconfigure ulang xserver
$ sudo /etc/init.d/gdm stop = mematikan service gdm stop
$ sudo iwconfig eth1 essid "pptik01" = mendaftarkan name access point
$ sudo dhclient = auto dhcp
$ chown oniichan:oniichan /media/data = mengubah owner folder
$ sudo adduser nama_user nama_group = menambah user
$ usermod -G namagroup namauser = memasukkan user ke group
$ cat /etc/group = cek group user
$ smbclient -U% -L localhost = cek samba di local
$ cat /proc/version = cek version linux header
$ mtr www.amikom.ac.id = gabungan ping dan traceroute
$ ls var/cache/apt/archives/ = data paket apt
$ ls /etc/rc2.d/ = list service
$ sudo update-rc.d -f rsync remove = meremove service rsync
$ sudo update-rc.d rsync defaults = mengadd service menjadi default service
$ ls -h = list human readeable
$ sudo apt-get install -f = fix dependency broken
$ cat /proc/acpi/acer/wireless = melihat penggunaan button
$ sudo tail -f
/var/log/cups/error_log = melihat error pada service cups
$ lshal = melihat hal daemon usb
$ sudo hald = mengaktifkan hald daemon
$ sudo /etc/init.d/dbus start = service dbus daemon
$ nmap -sP 192.168.1.10-30 = checking ip up or not
$ watch lsusb = execute a program periodically
$ speaker-test 1.0.12 = test sound
$ wget http://www3.indowebster.com
/591803763.avi -O coffe_prince_16.avi = download dan me-rename file
$ wget -c -t inf http://www3.
indowebster.com/591803763.avi = download dengan opsi continous, try infinite jika gagal
$ wget -i download.txt = download dengan opsi membaca url dari file download.txt
$ wget --limit-rate=10k = download dengan opsi bandwith hanya 10 kilobytes/s
$ displayconfig-gtk = screen and grafik configurations
$ md5sum LinuxMint-5-Fluxbox.iso
> md5sums = creating md5sum dari file iso
$ md5sum -c md5sums = checking md5sum dengan file iso
$ aplay -l = playing file
$ lsb_release -a = cek ubuntu version
$ lpinfo -v = cek printer
$ id = Print user and group inf for the specifie USERNAME
$ ps ax | grep screenlets | awk
'{print$1}' | xargs kill -9 = kill spesifik berdasarkan nama proses
$ file nama_file = Determine file type of FILEs
$ for i in {1..10}; do echo $i; done = Mengurutkan nomor
$ update-manager -d = Check if upgrading to the latest devel release is possible
$ cat /etc/passwd | grep 1000 |
awk -F: '{ print $1 }' = menampilkan user dengan UID 1000
$ find debian/ -iname '*'
-print0 | xargs -0 md5sum > md5sum = creating md5sum
$ espeak -s 80 "I love you" = text to speech
$ apt-cache policy ubuntu-desktop = print policy settings
$ sudo ip route replace default
nexthop via 192.168.0.1 dev eth0
weight 3 nexthop 192.168.1.1 dev
eth1 weight 2 = load balancing
$ sudo Xorg -configure :1 = print konfigurasi xorg.conf
$ for FILE in cd*.bin ; do bchunk
$FILE ${FILE%.*}.cue ${FILE%.*} ;
done = mengubah file bin menjadi cue
$ rm cd[1-5].@(bin|cue) = menghapus secara spesifik
$ ls -l | awk '{print $8}' = print secara list index
$ split -b 200MB avatar.avi
avatar.avi. = split file into separate file
$ cat avatar.avi.* > avatar.avi = merge into 1 file
$ sudo ifup eth0 = Stop a network interface
$ sudo ifdown eth0 = Start a network interface up
$ wc -ml /etc/apt/sources.list = Print byte, word, and line counts
$ history = Command History
$ netstat = Networking information

Read more »

Tes Proxy Squid Lusca

Tes dilakukan di salah satu warnet Kecamatan Kesesi,Pekalongan

Kami PJK telah berpengalaman membuat proxy squid lusca yang berguna mempercepat akses internet dan menghemat bandwidth.

Read more »