Cara Konfigurasi Proxy Dengan Squid3 di Debian Etch

Fungsi:1. Menyimpan cache tampilan halaman web2. Mengatur bandwidth internet ke client3. Mengontrol aktivitas client (misalnya hak akses situs tertentu, melihat situs-situs yang

dikunjungi client).

Bahan Membuat proxy:1. Komputer minimal 2 lan card.2. puter client3. Sambungan internet

Langkah-langkah membuat proxy:

1. Setting ip server#vim /etc/network/interfacesiface eth1 inet staticaddress 192.168.2.29netmask 255.255.255.128network 192.168.2.0broadcast 192.168.2.127gateway 192.168.2.1# dns­* options are implemented by the resolvconf package, if             installeddns­nameservers 202.134.0.155dns­search smkn1­tuban.sch.id

Simpan esc:wqRestart /etc/init.d/networking restart ­>>merestrat lan card

2. Instalasi squid3debian:~# apt­get install squid3Reading package lists... DoneBuilding dependency tree... DoneThe following extra packages will be installed:  squid3­commonSuggested packages:  squid3­client squid3­cgi resolvconf smbclientThe following NEW packages will be installed:  squid3 squid3­common0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.Need to get 985kB of archives.After unpacking 6312kB of additional disk space will be used.Do you want to continue [Y/n]? YWARNING: The following packages cannot be authenticated!  squid3­common squid3Install these packages without verification [y/N]? YGet:1 ftp://118.98.171.229 etch/main squid3­common 3.0.PRE5­5 [246kB]Get:2 ftp://118.98.171.229 etch/main squid3 3.0.PRE5­5 [739kB]

http://nunutjoe.blogspot.com

Fetched 985kB in 0s (7922kB/s)Selecting previously deselected package squid3­common.(Reading database ... 65462 files and directories currently installed.)Unpacking squid3­common (from .../squid3­common_3.0.PRE5­5_all.deb) ...Selecting previously deselected package squid3.Unpacking squid3 (from .../squid3_3.0.PRE5­5_i386.deb) ...Setting up squid3­common (3.0.PRE5­5) ...Setting up squid3 (3.0.PRE5­5) ...Creating Squid HTTP proxy 3.0 spool directory structure2009/11/26 05:33:15| Creating Swap Directories2009/11/26 05:33:15| /var/spool/squid3 exists2009/11/26 05:33:15| Making directories in /var/spool/squid3/002009/11/26 05:33:15| Making directories in /var/spool/squid3/012009/11/26 05:33:16| Making directories in /var/spool/squid3/022009/11/26 05:33:16| Making directories in /var/spool/squid3/032009/11/26 05:33:16| Making directories in /var/spool/squid3/042009/11/26 05:33:16| Making directories in /var/spool/squid3/052009/11/26 05:33:16| Making directories in /var/spool/squid3/062009/11/26 05:33:16| Making directories in /var/spool/squid3/072009/11/26 05:33:16| Making directories in /var/spool/squid3/082009/11/26 05:33:16| Making directories in /var/spool/squid3/092009/11/26 05:33:16| Making directories in /var/spool/squid3/0A2009/11/26 05:33:16| Making directories in /var/spool/squid3/0B2009/11/26 05:33:16| Making directories in /var/spool/squid3/0C2009/11/26 05:33:16| Making directories in /var/spool/squid3/0D2009/11/26 05:33:16| Making directories in /var/spool/squid3/0E2009/11/26 05:33:16| Making directories in /var/spool/squid3/0FRestarting Squid HTTP Proxy 3.0: squid3.

3. Membuat Partisidebian:~# squid3 ­z2009/11/26 05:45:45| Squid is already running!  Process ID 3254

4. Konfigurasi Squid#cp /etc/squid3/squid.conf /etc/squid3/squid.conf.ASLIvim /etc/squid3/squid.conf

 yang di blog merah harus di edit

# INSERT YOUR OWN RULE(S) HERE TO ALLOW ACCESS FROM YOUR CLIENTS

# Example rule allowing access from your local networks. Adapt# to list your (internal) IP networks from where browsing should# be allowed

acl our_networks src 192.168.1.0/24 192.168.2.0/25 {isi dengan jaringan anda}http_access allow our_networkshttp_access allow localhost

4. Menjalankan squiddebian:~# /etc/init.d/squid3 restartRestarting Squid HTTP Proxy 3.0: squid3 Waiting.....................done..

5. Menguji Proxy

http://nunutjoe.blogspot.com

a. Client

b Server proxydebian:/etc/squid3# tail ­f /var/log/squid3/access.log 

1259233445.417   9649 192.168.2.42 TCP_MISS/301 744 GET http://google.c om/ ­ DIRECT/74.125.67.100 text/html1259233453.882   8459 192.168.2.42 TCP_MISS/302 692 GET http://www.goog le.com/ ­ DIRECT/216.239.61.104 text/html1259233465.741  11851 192.168.2.42 TCP_MISS/200 4136 GET http://www.goo gle.co.id/ ­ DIRECT/216.239.61.104 text/html1259233475.348   5969 192.168.2.54 TCP_MISS/200 22633 GET http://smkn1­ tuban.sch.id/blog/? ­ DIRECT/118.98.171.227 text/html1259233480.397  14585 192.168.2.42 TCP_MISS/200 12358 GET http://www.go ogle.co.id/extern_js/f/CgJpZBICaWQrMAo4QUAdLCswDjgKLCswFjgULCswFzgELCsw GDgELCswHTgbLCswJTjJiAEsKzAmOAgsKzAnOAIsKzAqOAIsKzArOAgsKzBFOAAs/Qmf2fA ic6VA.js ­ NONE/­ text/javascript1259233481.653   1185 192.168.2.42 TCP_MISS/204 428 GET http://clients1 .google.co.id/generate_204 ­ DIRECT/74.125.153.138 text/html1259233481.952    394 192.168.2.54 TCP_MISS/200 19532 POST http://smkn1 ­tuban.sch.id/blog/? ­ DIRECT/118.98.171.227 text/html1259233482.595   7177 192.168.2.54 TCP_MISS/302 640 GET http://www.grav atar.com/avatar/0cef7edb45bce8144ade993abaef3413? ­ DIRECT/72.233.61.12 5 text/html1259233483.038   1358 192.168.2.42 TCP_MISS/204 481 GET http://www.goog le.co.id/csi? ­ NONE/­ text/html1259233518.967  11316 192.168.2.42 TCP_MISS/200 719 GET http://translat e.google.com/translate_a/t? ­ DIRECT/74.125.153.138 text/plain

http://nunutjoe.blogspot.com