Lanjutkan lagi nah sekarang uda selsai install fedoranya.,.,Untuk install NAT serta GW saya rasa g usah dibahas karena tidak sesuai ama content nya (saya anggap NAT uda pada bisa) …..oke sekarang yang harus dilakukan

1.Install Squidnya bisa file tar atupun rpm,,,zaki tidak membahas cara penginstallannya

2.Setalah itu kita config proxy nya…ada beberapa hal yang perlu diperhatikan pertama space hardisk kita ,

copykan file berikut ke /etc/squid/squid.conf

http_port 8080
icp_port 3130
udp_incoming_address 0.0.0.0
udp_outgoing_address 255.255.255.255
hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin \?
no_cache deny QUERY
cache_mem 64 MB
cache_swap_low 90
cache_swap_high 95
maximum_object_size 1024 KB
minimum_object_size 0 KB
ipcache_size 1024
ipcache_low 90
ipcache_high 95
fqdncache_size 1024
cache_replacement_policy lru
memory_replacement_policy lru
cache_dir ufs /var/spool/squid 100 16 256
cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
pid_filename /var/run/squid.pid
debug_options ALL,1
client_netmask 255.255.255.240
dns_nameservers 219.83.35.45
diskd_program /usr/lib/squid/diskd
auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
client_lifetime 1 day
acl all src 0.0.0.0/0.0.0.0
snmp_port 3401
acl TESTSNMP src 192.168.11.0/255.255.255.240
acl snmppublic snmp_community public
snmp_access allow snmppublic TESTSNMP
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl lan src 192.168.11.0/255.255.255.240 #>>> network LAN ente
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563
acl Safe_ports port 80          # http
acl Safe_ports port 21          # ftp
acl Safe_ports port 443 563     # https, snews
acl Safe_ports port 70          # gopher
acl Safe_ports port 210         # wais
acl Safe_ports port 1025-65535  # unregistered ports
acl Safe_ports port 280         # http-mgmt
acl Safe_ports port 488         # gss-http
acl Safe_ports port 591         # filemaker
acl Safe_ports port 777         # multiling http
acl x dstdomain “/etc/squid/pornourl.txt”                    #blocking website
acl keywordblock url_regex -i “/etc/squid/keywordblock.txt”  # blocking keyword
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow !Safe_ports
http_access allow CONNECT !SSL_ports
http_access deny keywordblock
http_access deny x
http_access allow localhost
http_access allow lan
http_access deny all
http_reply_access allow all
http_reply_access allow lan
icp_access allow all
cache_effective_user squid
cache_effective_group squid
visible_hostname zaki_maulana.com
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

………………………………………………………………………..sampe header on aj loe copynya

Untuuk Lan  nya ,saya mengunakan ip 192.168.11.0/255.255.255.240..
Memblok situs terlarang (blacklist)secara manual terlihat pada acl x dstdomain “/etc/squid/pornourl.txt”                    #blocking website
acl keywordblock url_regex -i “/etc/squid/keywordblock.txt”  # blocking keyword

jadi kita harus membuat file di dalam /etc/squid/

[squid]# ls
errors  mib.txt    mime.conf.default  msntauth.conf.default  squid.conf
icons   mime.conf  msntauth.conf      pornourl.txt           squid.conf.default

didalam porno.txt kita isikan domain nya ja misalkan www.rldsex.com

sedangkan tuk keyword kita dapat isikan misalkan porn suck dll

Setingan ini berlaku juga tuk proxy transparent…

Setalah kita config semua jgan lupa kita jalankan pertama kali tuk menjalankan nya ketiik

[root@squid]# squid -z

[root@squid]# /etc/init./squid start

[root@squid]# /etc/init.d/squid status
squid (pid 2020 2018) is running…

Untuk menjalankan transparent proxy kita ketik diterminal

iptables -t nat -A PREROUTING -i eth1 -p TCP –dport 80 -j REDIRECT –to-port 8080
iptables -t nat -A PREROUTING -i eth1 -p UDP –dport 80 -j REDIRECT –to-port 8080

Oke kita lanjutakn seting htb nyaa …Kita bahas pada Install Proxy dan HTB (bag.2)