i LoVE bLuE

Downgrade ah…………… puyenk……. ama squid 3.HEAD

langkah sama, conf lebih kurang sama, dan….. CIIMIIW

SQUID CONFIG

#
# WELCOME TO SQUID 3
# —————————-

# ACCESS CONTROLS
# —————————————————————————–

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 20.20.20.0/30 90.90.90.0/29 91.91.91.0/29
acl localnet src 92.92.92.0/28 92.92.92.16/28 92.92.92.32/28 92.92.92.48/28 92.92.92.64/28 92.92.92.80/28 92.92.92.96/28 92.92.92.128/27
acl localnet src 192.168.10.0/27

acl SSL_ports port 443 # https,snews
acl SSL_ports port 563
acl SSL_ports port 2082
acl SSL_ports port 2083
acl SSL_ports port 2086
acl SSL_ports port 2087
acl SSL_ports port 2093
acl SSL_ports port 2095
acl SSL_ports port 2096

acl Safe_ports port 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 80 # http
acl Safe_ports port 210 # wais
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 443 # https
acl Safe_ports port 448
acl Safe_ports port 488 # gss-http
acl Safe_ports port 563 # snews
acl Safe_ports port 591 # filemaker
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # multiling http
acl Safe_ports port 808
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 2082
acl Safe_ports port 2083
acl Safe_ports port 2086
acl Safe_ports port 2087
acl Safe_ports port 2095
acl Safe_ports port 2096
acl Safe_ports port 5000-5200 # yahoomessenger
acl Safe_ports port 6666-6669 # mirc
acl Safe_ports port 8000
acl Safe_ports port 8082
acl Safe_ports port 8090
acl Safe_ports port 11999

acl BADPORTS port 7 9 11 19 22 23 25 110 119 513 514 445 213 137 138 32768
acl VIRUS urlpath_regex winnt/system32/cmd.exe?

acl hotmail dstdomain .hotmail.com .msn.com .passport.net .msn.co.id .passport.com .lycos.com .cbn.net.id .google.com
acl hotmail dstdomain .indosat.net.id .bii.com .yahoo.com .akadns.net .kalbe.co.id .tigobalaitour.com .syariahonline.com
acl hotmail dstdomain .plasa.com .telkom.net.id .telkom.co.id .boleh.com
acl hotmail dstdomain 202.77.136.17 202.147.193.116 202.97.238.132 221.130.184.27
acl gator1 dstdomain .riaa.com .gator.com .xxxtoolbar.com .hotbar.com ftpaol.news
acl gator2 dstdom_regex gator hot_indonesia.exe
acl blokir dstdomain .rankyou.com .x10.com .infostart.com .startgp.com .iwantnet.net
acl blokir dstdomain .goclick.com .00fun.com .xupiter.com .sexlist.com .pageseeker.con
acl blokir dstdomain .fastmetasearch.com .trendmicro.com .grab.nastydollars.com
acl blokir dstdomain .evidence-eliminator.com .supereva.it .tjaw.com
acl blokir dstdomain .180solutions.com .hrvg.tk .cerials.net .vesperexchange.com .pornaccess.com
acl blokir dstdomain .loverboysusa.com
acl blokir dstdomain .nude-celebs-top.com .aqonk.com .mtvxxx.com .kittens.plays.com .loliti.com
acl blokir dstdomain .sex-info.cjb.net .usa-download.nocreditcard.com .pusatvcd.com .footjobsluts.com
acl blokir dstdomain .dev-download.nocreditcard.com .wazzupnet.com .hamsah.net .amateurpages.com
acl blokir dstdomain .hackwars.com .vasile200.home.ro .mrazirnydasice.cz .XXXTOLBAR.com .purecfnm.com
acl blokir dstdomain .hitbox.com .geocities.com/pelacurpenang .adlogix.com .daddyswap.com
acl blokir dstdomain .internet-optimizer.com .offshoreclicks.com .animespy.com
acl blokir dstdomain .leader.linkexchange.com .animedc.com .paypopup.com .sugarporn.net
acl blokir dstdomain .kaza.com .nastyxpix.com .reliz.ru .fullmovies.net .net-voyeurs.com
acl blokir dstdomain .virtuagirl2.com .spybouncer.com .kerclink.com .xxxindonesia.com
acl blokir dstdomain .getright.com .volcom.com .internetdownloadmanager.com .kazaa.com .fastclick.net
acl blokir dstdomain .freshdevices.com .reget.com .playboy.com
acl blokir dstdomain .leechget.de .netants.com .speedbit.com .gadisbandung.com
acl blokir dstdomain .netvampire.com .downloadaccelerator.com .imagecash.net .doubleclick.com .doubleclick.net
acl blokir dstdomain .cometsystems.com .mtreexxx.net .ceritabokep.com .valencemedia.com .celeb-fakes.net
acl blokir dstdomain .jpteen.org .xeex.com .spnt.pl

#Banner Yahoo dari yahoo.http
acl blokir dstdomain .tribalfusion.com

acl blokir dstdomain .babecams.tv .creamasia.com .nudesonline.com .nudecelebsmagazine.com
acl blokir dstdomain .cyberagemodels.com .sex.com .amateurxxxmag.com .hottestgalleries.net .naughtylinks.net
acl blokir dstdomain .peterpaulxxx.com .datautama.net.id .xeex.net
acl blokir dstdomain 72.52.9.9 72.52.9.8 72.52.9.7 .prolocation.net .prolexic.com .uribl.com

# Update
acl blokir dstdomain .windowsupdate.com

# Mau Kejam silahkan…——————————————————————————————-
#acl file_terlarang url_regex -i .swf
#acl file_terlarang url_regex -i .mpeg
#acl file_terlarang url_regex -i .mov

#—————————————————————————————————————–
acl file_terlarang url_regex -i hot_indonesia.exe
acl file_terlarang url_regex -i hotsurprise_id.exe
acl file_terlarang url_regex -i best-mp3-download.exe
acl file_terlarang url_regex -i R32.exe
acl file_terlarang url_regex -i rb32.exe
acl file_terlarang url_regex -i mp3.exe
acl file_terlarang url_regex -i HOTSEX.exe
acl file_terlarang url_regex -i Browser_Plugin.exe
acl file_terlarang url_regex -i DDialer.exe
acl file_terlarang url_regex -i od-teen21
acl file_terlarang url_regex -i URLDownload.exe
acl file_terlarang url_regex -i od-stnd67.exe
acl file_terlarang url_regex -i Download_Plugin.exe
acl file_terlarang url_regex -i od-teen52.exe
acl file_terlarang url_regex -i malaysex
acl file_terlarang url_regex -i edita.html
acl file_terlarang url_regex -i info.exe
acl file_terlarang url_regex -i run.exe
acl file_terlarang url_regex -i Lovers2Go
acl file_terlarang url_regex -i GlobalDialer
acl file_terlarang url_regex -i WebDialer
acl file_terlarang url_regex -i britneynude
acl file_terlarang url_regex -i download.exe
acl file_terlarang url_regex -i backup.exe
acl file_terlarang url_regex -i GnoOS2003
acl file_terlarang url_regex -i wintrim.exe
acl file_terlarang url_regex -i MPREXE.EXE
acl file_terlarang url_regex -i exengd.EXE
acl file_terlarang url_regex -i xxxvideo.exe
acl file_terlarang url_regex -i Save.exe
acl file_terlarang url_regex -i ATLBROWSER.DLL
acl file_terlarang url_regex -i NawaL_rm
acl file_terlarang url_regex -i Socks32.dll
acl file_terlarang url_regex -i Sc32Lnch.exe
acl file_terlarang url_regex -i dat0.exe

#TIME dan FILTER DOWNLOAD
# =============================================================================

#acl download url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .tar .rpm .zip .rar .avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov .msi .mp4 .7z
#acl TIME SMTWHFA 06:00 – 21:00
#acl TIME time SMTWHFA 05:59-23:59
acl download url_regex -i ftp \.exe$ \.mp3$ \.mp4$ \.tar.gz$ \.gz$ \.tar.bz2$ \.rpm$ \.zip$ \.ra
acl download url_regex -i \.avi$ \.mpg$ \.mpeg$ \.rm$ \.iso$ \.wav$ \.mov$ \.dat$ \.mpe$ \.mid$
acl download url_regex -i \.midi$ \.rmi$ \.wma$ \.wmv$ \.ogg$ \.ogm$ \.m1v$ \.mp2$ \.mpa$ \.wax$
acl download url_regex -i \.m3u$ \.asx$ \.wpl$ \.wmx$ \.dvr-ms$ \.snd$ \.au$ \.aif$ \.asf$ \.m2v
acl download url_regex -i \.m2p$ \.ts$ \.tp$ \.trp$ \.div$ \.divx$ \.mod$ \.vob$ \.aob$ \.dts$
acl download url_regex -i \.ac3$ \.cda$ \.vro$ \.deb$ \.flv$ \.3gp$
#acl JAM_KANTOR time SMTWHFA 05:59-23:59

#acl snmppublic snmp_community public

acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny VIRUS
http_access deny BADPORTS
http_access deny gator1
http_access deny gator2
http_access deny blokir
http_access deny file_terlarang
http_access allow localnet
http_access allow localhost
http_access deny all
miss_access allow all

# NETWORK OPTIONS
# —————————————————————————–

http_port 8080 transparent

# SSL OPTIONS
# —————————————————————————–

ssl_unclean_shutdown off

# OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
# —————————————————————————–

hierarchy_stoplist cgi-bin ? .js .jsp .g .do .php .asp .cgi localhost 10.10.10.0/24 20.20.20.0/30 90.90.90/29 92.92.92.0/24 192.168.10.0/24

# MEMORY CACHE OPTIONS
# —————————————————————————–

cache_mem 16 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF

# DISK CACHE OPTIONS
# —————————————————————————–

cache_replacement_policy heap LFUDA
cache_dir aufs /cache 10000 10 256
store_dir_select_algorithm least-load
maximum_object_size 128 MB
cache_swap_low 98
cache_swap_high 99

# LOGFILE OPTIONS
# —————————————————————————–

access_log /var/log/squid/logs/access.log
cache_store_log none
mime_table /usr/local/squid/etc/mime.conf
pid_filename none
pid_filename /var/log/squid/logs/squid.pid
log_fqdn off

# OPTIONS FOR TROUBLESHOOTING
# —————————————————————————–

cache_log /var/log/squid/logs/cache.log
coredump_dir /cache

# OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
# —————————————————————————–

unlinkd_program /usr/local/squid/libexec/unlinkd

# OPTIONS FOR URL REWRITING
# —————————————————————————–

# OPTIONS FOR TUNING THE CACHE
# —————————————————————————–

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

##REFRESH PATTERN
refresh_pattern -i \.(class|css|js|gif|jpg)$ 10080 100% 43200
refresh_pattern -i \.(jpe|jpeg|png|bmp|tif)$ 10080 100% 43200
refresh_pattern -i \.(tiff|mov|avi|qt|mpeg)$ 10080 100% 43200
refresh_pattern -i \.(mpg|mpe|wav|au|mid)$ 10080 100% 43200
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200

refresh_pattern ^http://*.google.*/.* 720 100% 4320
refresh_pattern ^http://*.korea.*/.* 720 100% 4320
refresh_pattern ^http://*.akamai.*/.* 720 100% 4320
refresh_pattern ^http://*.windowsmedia.*/.* 720 100% 4320
refresh_pattern ^http://*.googlesyndication.*/.* 720 100% 4320
refresh_pattern ^http://*.plasa.*/.* 720 100% 4320
refresh_pattern ^http://*.telkom.*/.* 720 100% 4320
refresh_pattern ^http://*.friendster.com/.* 720 100% 4320
refresh_pattern ^http://mail.yahoo.com/.* 720 100% 4320
refresh_pattern ^http://*.yahoo.*/.* 720 100% 4320
refresh_pattern ^http://*.yimg.*/.* 720 100% 4320
refresh_pattern ^http://*.gmail.*/.* 720 100% 4320
refresh_pattern ^http://*.detik.*/.* 720 100% 4320
refresh_pattern ^http://*.padangekspres.*/.* 720 100% 4320
refresh_pattern ^http://*.padang-today.*/.* 720 100% 4320
refresh_pattern ^http://*.kompas.*/.* 720 100% 4320
refresh_pattern ^http://*.media-indonesia.*/.* 720 100% 4320
refresh_pattern ^http://*.okezone.*/.* 720 100% 4320
refresh_pattern ^http://*.liputan6.*/.* 720 100% 4320
refresh_pattern ^http://*.metrotvnews.*/.* 720 100% 4320
refresh_pattern ^http://*.cnn.*/.* 720 100% 4320
refresh_pattern ^http://*.kapanlagi.*/.* 720 100% 4320
#refresh_pattern ^http://*.facebook.*/.* 720 100% 4320
#refresh_pattern ^http://*.zynga.*/.* 720 100% 4320
#refresh_pattern ^http://*.fbcdn.*/.* 720 100% 4320

quick_abort_min 0
quick_abort_max 0
quick_abort_pct 98

# HTTP OPTIONS
# —————————————————————————–

ie_refresh off
vary_ignore_expire on

# TIMEOUTS
# —————————————————————————–

shutdown_lifetime 10 seconds

# ADMINISTRATIVE PARAMETERS
# —————————————————————————–

cache_mgr webmaster@goldennetbiaro.com-(0752-42678)
cachemgr_passwd squid-cache goldennet
cache_effective_user squid
cache_effective_group squid

# DELAY POOL PARAMETERS
# —————————————————————————–

# dibuat 2 aturan
delay_pools 2

# aturan 1, tidak ada pembatasan
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1

# aturan 2, setelah download 5048000 bytes mk download menjadi 15000 bytes/s
delay_class 2 2
delay_parameters 2 -1/5048000 15000/5049000

delay_access 1 deny download
delay_access 1 allow all
delay_access 2 allow download
delay_access 2 deny all

# ICP OPTIONS
# —————————————————————————–

icp_port 3130
log_icp_queries off
icp_hit_stale off
query_icmp off

# DNS OPTIONS
# —————————————————————————–

ipcache_size 8192
ipcache_low 90
ipcache_high 95
fqdncache_size 8192

# MISCELLANEOUS
# —————————————————————————–

memory_pools off
reload_into_ims on
pipeline_prefetch on

General Runtime Information

Squid Object Cache: Version 3.0.STABLE18-20090906

Start Time: Sat, 26 Sep 2009 02:24:14 GMT
Current Time: Sat, 26 Sep 2009 08:34:04 GMT

Connection information for squid:
Number of clients accessing cache: 69
Number of HTTP requests received: 226720
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Number of HTCP messages received: 0
Number of HTCP messages sent: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 613.0
Average ICP messages per minute since start: 0.0
Select loop called: 5112064 times, 4.341 ms avg
Cache information for squid:
Hits as % of all requests: 5min: 26.1%, 60min: 30.7%
Hits as % of bytes sent: 5min: 39.2%, 60min: 33.2%
Memory hits as % of hit requests: 5min: 6.2%, 60min: 5.5%
Disk hits as % of hit requests: 5min: 67.7%, 60min: 59.6%
Storage Swap size: 10035186 KB
Storage Swap capacity: 98.0% used, 2.0% free
Storage Mem size: 16352 KB
Storage Mem capacity: 99.8% used, 0.2% free
Mean Object Size: 18.85 KB
Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 1.46131 1.11539
Cache Misses: 2.37608 2.02066
Cache Hits: 0.01309 0.00865
Near Hits: 1.62803 1.17732
Not-Modified Replies: 0.00179 0.00179
DNS Lookups: 0.00372 0.00573
ICP Queries: 0.00000 0.00000
Resource usage for squid:
UP Time: 22190.419 seconds
CPU Time: 1820.943 seconds
CPU Usage: 8.21%
CPU Usage, 5 minute avg: 13.50%
CPU Usage, 60 minute avg: 10.74%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 113672 KB
Page faults with physical i/o: 13
Memory accounted for:
Total accounted: 74120 KB
memPoolAlloc calls: 84261944
memPoolFree calls: 83062784
File descriptor usage for squid:
Maximum number of file descriptors: 11072
Largest file desc currently in use: 812
Number of file desc currently in use: 800
Files queued for open: 0
Available number of file descriptors: 10272
Reserved number of file descriptors: 100
Store Disk files open: 61
Internal Data Structures:
532933 StoreEntries
3621 StoreEntries with MemObjects
3463 Hot Object Cache Items
532306 on-disk objects

Generated Sat, 26 Sep 2009 08:34:04 GMT, by cachemgr.cgi/3.HEAD-20090904@proxy.goldennetbiaro.com

GOODLUCK

aska

Trouble yang ku temukan saat ngoprek squid-3.HEAD
Continue reading Install FreeBSD 7.2 + Compile kernel + SQUID 3.x / squid-3.HEAD [ Troubleshooting ]…

[Kumpulan beberapa referensi, pengalaman dan source terbaru "ON TESTED"]

Jika Ada yang dah Hight Performance dan sukses, kasih info yah….

Setelah sebelumnya, 2 tahun lalu aku Install FreeBSD 6 dengan Squid 2.6, sekarang aku akan buat TUT untuk versi yang terbaru.

seperti biasanya :

[Seperti kata mas ogeb]

PERHATIAN:
1. Jangan pernah mencoba ini jika anda tidak tau apa yang anda lakukan.
2. Jangan pula mencoba ini jika anda tidak tau apa itu FreeBSD .
3. siapkan rokok + kopi secukup nya jika anda perokok berat , karena proses ini akan memakan waktu. ( bagi yang ngak puasa )
4. Tulisan ini di dedikasikan untuk kemajuan freebsd di indonesia.
5. Dipersilahkan mengcopy atau memeperbanyak tulisan ini tanpa seijin saya demi kemajuan freebsd di Indonesia.

Spec Intel Desktop Server, Proc PIV 2.8 Ghz HDD SATA 120GB, RAM 1GB
FreeBSD 7.2-RELEASE/i386
squid-3.HEAD
Perls5.10
Apache 2.2
Lightsquid

Bissmillahirohmannirrohim
Continue reading Install FreeBSD 7.2 + Compile kernel + SQUID 3.x / squid-3.HEAD…