Seting router dan transparent Proxy dengan RedHat 9.0

=====================================<br />Setting router pada redhat !!!!<br />=====================================<br />1. seting ip address pada eth0 (ethernet terluar dengan isp)<br /> #vi /stc/sysconfig/network-scripts/ifcfg-eth0<br /> DEVICE=eth0<br /> BOOTPROTO=static<br /> ONBOOT=yes<br /> IPADDR=172.16.0.10<br /> BROADCAST=172.16.0.127<br /> NETMASK=255.255.255.128<br /> GATEWAY=172.16.0.126<br /> USERCTL=NO<br /><span class="fullpost"><br />2. seting ip address pada eth1 (ethernet -down yang berhubungan dengan LAN)<br /> #vi /stc/sysconfig/network-scripts/ifcfg-eth1<br /> DEVICE=eth1<br /> BOOTPROTO=static<br /> ONBOOT=yes<br /> IPADDR=192.168.13.10<br /> BROADCAST=192.168.13.63<br /> NETMASK=255.255.255.192<br /> GATEWAY=172.16.0.10<br /> USERCTL=NO<br />3. SETING DNS NAMESERVER<br /> #vi /etc/resolve.conf<br /> nameserver 172.16.0.126<br /> nameserver 219.83.63.145<br />4. SETING IPTABLES / FIREWALL<br /> #vi /etc/rc.d/rc.local<br /> #!/bin/sh<br /> #<br /> # This script will be executed *after* all the other init scripts.<br /> # You can put your own initialization stuff in here if you don't<br /> # want to do the full Sys V style init stuff.<br /> #/etc/rc.d/rc.local<br /> #touch /var/lock/subsys/local<br /> echo "1" > /proc/sys/net/ipv4/ip_forward<br /> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE<br /> <br /> #konfigurasi squid transparant<br /> /sbin/iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-ports 3128<br /> /sbin/iptables -t nat -A PREROUTING -i eth1 -p udp --dport 80 -j REDIRECT --to-ports 3128<br />5. JALANKAN IPTABLES<br /> #service iptables start | stop | restart<br />=======================================<br />akhirnya selesai juga !!!!<br />=======================================<br />***************************************<br /><br />===========================================<br />Seting dan konfigurasi transparent proxy !!<br />===========================================<br /><br />1. download squid nya dulu<br />#wget http://swelltech.com/support/updates/squid/9/i386/squid-2.5.STABLE3-1rh.i386.rpm<br /><br />2. habis di download, install dech di server lo<br />#rpm -ivh squid-2.5.STABLE3-1rh.i386.rpm<br /><br />3. pindahkan file squid yang asli<br />#mv /etc/squid/squid.conf /etc/squid/squid.conf.original<br /><br />4. buat konfigurasi squid yang baru.<br />#vi /etc/squid/squid.conf<br /><br />-- copy tulisan dibawah ini --<br /><br />http_port 3128<br />icp_port 3130<br />cache_mem 64 MB<br />connect_timeout 2 minutes<br />maximum_object_size 20480 KB<br />minimum_object_size 0 KB<br />maximum_object_size_in_memory 4096 KB<br />cache_replacement_policy lru<br />memory_replacement_policy lru<br />cache_dir diskd /gambar 1000 16 256<br />cache_access_log /var/log/squid/access.log<br />cache_log /var/log/squid/cache.log<br />cache_store_log none<br />log_ip_on_direct on<br />refresh_pattern ^ftp: 1440 20% 10080<br />refresh_pattern ^gopher: 1440 0% 1440<br />refresh_pattern . 0 20% 4320<br />acl all src 0.0.0.0/0.0.0.0<br />acl manager proto cache_object<br />acl localhost src 127.0.0.1/255.255.255.255<br />acl SSL_ports port 443 563 6667 7000<br />acl Safe_ports port 80<br />acl Safe_ports port 21<br />acl Safe_ports port 443 563<br />acl Safe_ports port 70<br />acl Safe_ports port 210<br />acl Safe_ports port 1025-65535<br />acl Safe_ports port 280<br />acl Safe_ports port 488<br />acl Safe_ports port 591<br />acl Safe_ports port 777 110<br />acl Safe_ports port 5050<br />acl CONNECT method CONNECT<br />http_access allow manager localhost<br />http_access deny manager<br />http_access deny !Safe_ports<br />http_access deny CONNECT !SSL_ports<br />http_access deny all<br />icp_access allow all<br />cache_mgr andinovianto@ymail.com<br />visible_hostname andinovianto@ymail.com<br />httpd_accel_host virtual<br />httpd_accel_port 80<br />httpd_accel_with_proxy on<br />httpd_accel_uses_host_header on<br /><br />-- berakhir diatas tulisan ini --<br />simpen make esc :wq (tekan enter)<br /><br />ket: kali ini gue gak make konsep delay pools, males....!!!<br /><br />5. buat folder gambar di / caranya:<br />#cd /<br />#mkdir gambar<br />atau buat folder cache<br />#mkdir /cache<br /><br />6. ubah kepemilikan gambar jadi group<br />#chown -R squid.squid /gambar<br />atau<br /># chown squid.squid /cache -Rf<br /><br />7. jalankan squid<br />#/etc/init.d/squid start<br /><br />8. agar squid dijalankan otomatis saat reboot komputer:<br />#setup<br />cari "system services" (tanpa tanda kutip), run tool, kemudian cari squid dan ceklis/aktifkan<br /><br />9. masukin juga transparant proxynya, agar user gak perlu masukin proxy di program webnya<br />#/sbin/iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-ports 3128<br />#/sbin/iptables -t nat -A PREROUTING -i eth1 -p udp --dport 80 -j REDIRECT --to-ports 3128<br /><br />10. agar transparant proxy dijalankan saat server dinyalain masukin juga di rc.local<br />#vi /etc/rc.local<br /><br />/sbin/iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-ports 3128<br />/sbin/iptables -t nat -A PREROUTING -i eth1 -p udp --dport 80 -j REDIRECT --to-ports 3128<br /><br />simpen dengan menekan esc :wq (kemudian enter)<br /><br />oya jgn lupa ubah konfigurasi file /etc/sysctl.conf<br />#vim /etc/sysctl.conf<br /> net.ipv4.ip_forward = 0<br />menjadi:<br />net.ipv4.ip_forward = 1<br /><br />=====================================<br />akhirnya selesai juga lho !!!!!<br />=====================================<br />nb : konfigurasi ini diambil dari komputer server penulis<br /></span>

Seting router dan transparent Proxy dengan RedHat 9.0

===================================== Setting router pada redhat !!!! ===================================== 1. seting ip address pada eth0 (...

Read more »