i LoVE bLuE

Bikin Lagi Ah…..

aska — Wed, 18 Jan 2012 14:55:36 +0000

Part 1
INSTAL FREEBSD 8.2
ftp://ftp.freebsd.org/pub/FreeBSD/releases/i386/ISO-IMAGES/8.2/FreeBSD-8.2-RELEASE-i386-disc1.iso
burning….
———
booting
us keyboard
ad1
D all
C slice
S set bootable
Q
Standart MBR

ad2
D all
C slice
Q
Standart MBR

Create
2048M swap
5G /
5G /usr
25G /var
80G /cache
Q Finish

Distribution [5] Kernel-Developer
[ Yes ]
[ OK ]

Media CD/DVD

[ Yes ]

Congratulations!
[ OK ]

configure any Ethernet
[ Yes ]

Gateway
[ No ]

IPv6
[ No ]

DHCP
[ No ]

Host, Domain, IPv4 Gateway, Nameserver, IPv4, Netmask
[ OK ]

interface up
[ Yes ]

inetd
[ No ]

SSH login
[ No ]

FTP
[ No ]

NFS server
[ No ]

console
[ No ]

time zone
[ Yes ]

Asia, Indonesia

binary
[ No ]

mouse
[ No ]

browse the collection
[ No ]

User Confirmation Requested
[suka suka]

New password:
Retype new password :

Visit the general configuration
[ No ]

reboot
[ Yes ]

keluarin CD

# ee /etc/ssh/sshd_config
PermitRootLogin yes
save

# pkg_add -r cvsup-without-gui
# cp /usr/share/examples/cvsup/ports-supfile /root/
# ee ports-supfile
*default host=ftp.tw.FreeBSD.org
save
reboot

# cvsup -L 2 /root/ports-supfile
tunggu 10 jam….. HAHAHAHAHA dah ah… xixixixixixi Part 1 End

Part 2
COMPILE KERNEL

# cd /usr/src/sys/i386/conf/
# cp GENERIC KERNELBARU
# ee KERNELBARU

# untuk PF #
device pf
device pflog
device pfsync

# untuk optimasi squid #
options SYSVMSG
options MSGMNB=32768
options MSGMNI=164
options MSGSEG=8196
options MSGSSZ=512
options MSGTQL=2048
matiian wireless, usb, printer, spek selain PC kita ( HATI- HATI LOH… )
[ Save ]

# config KERNELBARU
# cd ../compile/KERNELBARU/
# make cleandepend && make depend
# make && make install
REBOOT

Install Perl5.10

# cd /usr/ports/lang/perl5.14/
# make install clean

Install Apache2.2

# cd /usr/ports/www/apache22
# make install clean

# ee /etc/rc.conf
apache22_enable=”YES”

Install Squid

# pw group add squid -g 100
# pw user add squid -u 100 -g squid -s /usr/sbin/nologin -d /usr/local/squid
# chown -Rv squid:squid /cache
# cd /usr/local/
# fetch http://www.squid-cache.org/Versions/v3/3.1/squid-3.1.18.tar.bz2
# tar -zxvf
# cd squid-3.0.STABLE18

./configure -prefix=/usr/local/squid -enable-gnuregex -enable-async-io=24 -with-pthreads -with-aio -with-dl -with-aufs-threads=24 -with-pthreads -enable-pf-transparent -enable-ipfw-transparent -enable-storeio=aufs -enable-removal-policies=heap -enable-delay-pools -enable-underscores -enable-http-violations -enable-unlinkd -enable-snmp -enable-useragent-log -enable-htcp -enable-ssl -enable-icmp -enable-poll -enable-arp-acl -enable-cache-digests -enable-kill-parent-hack -enable-large-cache-files -enable-follow-x-forwarded-for -enable-default-err-languages=English -enable-err-languages=English -disable-ident-lookups -disable-hostname-checks -disable-wccpv2 -disable-wccp

# make && make install
# ee /usr/local/squid/etc/squid.conf
# squid -z
# /usr/local/squid/sbin/squid -k parse
# /usr/local/squid/sbin/squid -NCd1
# /usr/local/squid/sbin/squid
# ee /etc/rc.conf
squid_enable=”YES”
pf_enable=”YES

# /usr/local/etc/rc.d/apache22 restart
# /usr/local/etc/rc.d/squid restart

-= E N D =-

Suka Suka

aska — Wed, 18 Jan 2012 05:11:57 +0000

Lama ngak nulis nulis apa yah…. xixixixixixi

oh iya mo pesan aja, TOLONG DI INGAT, hasil tutorial ini murni atas bantuan, saran dan juga oprekan harian, jika ingin mengambil secuil walau se incrit tut nya tolong di kasih source nya yah…. semoga amal ibadah kita di balas oleh yang maha kuasa…. Amin… HAHAHAHAHHA

Thx berat buat All-Team dan Mas Ogeb……

Jangan Lupa kunjungi www.indofreebsd.or.id untuk hal-hal baru, dan di facebook grubnya indofreebsd

cimiiw

squid.conf+squid-2.7.STABLE9+FreeBSD 8.1-RELEASE

aska — Sat, 14 Aug 2010 04:50:21 +0000

Spek PROXY

P.IV 3Ghz Intel Server
RAM 4 Gb
HDD 40 Gb –> /
HDD 80 Gb –> /cache

cekidot

##############################################################################
# WELCOME TO SQUID 2.7.STABLE9
# —————————-
##############################################################################

# OPTIONS FOR AUTHENTICATION
# —————————————————————————–

auth_param basic children 5
auth_param basic realm Squid proxy-caching web server
auth_param basic credentialsttl 2 hours
auth_param basic casesensitive off

# ACCESS CONTROLS
# —————————————————————————–

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localnet src 192.168.0.0/24
acl warnet src 192.168.0.10
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl local-domain dstdomain localhost
acl snmpcommunity snmp_community public
acl porn url_regex “/etc/squid/porn.block.txt”

#TIME dan FILTER DOWNLOAD
# —————————————————————————–

acl download url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .tar .rpm .zip .rar .avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov .msi .mp4 .7z
#acl TIME SMTWHFA 06:00 – 21:00

# —————————————————————————–

acl IIX dst_as 7713 4622 4795 7597 4787 4795 4800
acl hotmail dstdomain .hotmail.com .msn.com .passport.net .msn.co.id .passport.com .lycos.com .cbn.net.id .google.com
acl hotmail dstdomain .indosat.net.id .bii.com .yahoo.com .akadns.net .kalbe.co.id .tigobalaitour.com .syariahonline.com
acl hotmail dstdomain .plasa.com .telkom.net.id .telkom.co.id .boleh.com
acl hotmail dstdomain 202.77.136.17 202.147.193.116 202.97.238.132 221.130.184.27
acl gator1 dstdomain .riaa.com .gator.com .xxxtoolbar.com .hotbar.com ftpaol.news
acl gator2 dstdom_regex gator hot_indonesia.exe
acl blokir dstdomain .rankyou.com .x10.com .infostart.com .startgp.com .iwantnet.net
acl blokir dstdomain .goclick.com .00fun.com .xupiter.com .sexlist.com .pageseeker.con
acl blokir dstdomain .fastmetasearch.com .trendmicro.com .grab.nastydollars.com
acl blokir dstdomain .evidence-eliminator.com .supereva.it .tjaw.com
acl blokir dstdomain .180solutions.com .hrvg.tk .cerials.net .vesperexchange.com .pornaccess.com
acl blokir dstdomain .loverboysusa.com
acl blokir dstdomain .nude-celebs-top.com .aqonk.com .mtvxxx.com .kittens.plays.com .loliti.com
acl blokir dstdomain .sex-info.cjb.net .usa-download.nocreditcard.com .pusatvcd.com .footjobsluts.com
acl blokir dstdomain .dev-download.nocreditcard.com .wazzupnet.com .hamsah.net .amateurpages.com
acl blokir dstdomain .hackwars.com .vasile200.home.ro .mrazirnydasice.cz .XXXTOLBAR.com .purecfnm.com
acl blokir dstdomain .hitbox.com .geocities.com/pelacurpenang .adlogix.com .daddyswap.com
acl blokir dstdomain .internet-optimizer.com .offshoreclicks.com .animespy.com
acl blokir dstdomain .leader.linkexchange.com .animedc.com .paypopup.com .sugarporn.net
acl blokir dstdomain .kaza.com .nastyxpix.com .reliz.ru .fullmovies.net .net-voyeurs.com
acl blokir dstdomain .virtuagirl2.com .spybouncer.com .kerclink.com .xxxindonesia.com
acl blokir dstdomain .getright.com .volcom.com .internetdownloadmanager.com .kazaa.com .fastclick.net
acl blokir dstdomain .freshdevices.com .reget.com .playboy.com
acl blokir dstdomain .leechget.de .netants.com .speedbit.com .gadisbandung.com
acl blokir dstdomain .netvampire.com .downloadaccelerator.com .imagecash.net .doubleclick.com .doubleclick.net
acl blokir dstdomain .cometsystems.com .mtreexxx.net .ceritabokep.com .valencemedia.com .celeb-fakes.net
acl blokir dstdomain .jpteen.org .xeex.com .spnt.pl

acl file_terlarang url_regex -i hot_indonesia.exe
acl file_terlarang url_regex -i hotsurprise_id.exe
acl file_terlarang url_regex -i best-mp3-download.exe
acl file_terlarang url_regex -i R32.exe
acl file_terlarang url_regex -i rb32.exe
acl file_terlarang url_regex -i mp3.exe
acl file_terlarang url_regex -i HOTSEX.exe
acl file_terlarang url_regex -i Browser_Plugin.exe
acl file_terlarang url_regex -i DDialer.exe
acl file_terlarang url_regex -i od-teen21
acl file_terlarang url_regex -i URLDownload.exe
acl file_terlarang url_regex -i od-stnd67.exe
acl file_terlarang url_regex -i Download_Plugin.exe
acl file_terlarang url_regex -i od-teen52.exe
acl file_terlarang url_regex -i malaysex
acl file_terlarang url_regex -i edita.html
acl file_terlarang url_regex -i info.exe
acl file_terlarang url_regex -i run.exe
acl file_terlarang url_regex -i Lovers2Go
acl file_terlarang url_regex -i GlobalDialer
acl file_terlarang url_regex -i WebDialer
acl file_terlarang url_regex -i britneynude
acl file_terlarang url_regex -i download.exe
acl file_terlarang url_regex -i backup.exe
acl file_terlarang url_regex -i GnoOS2003
acl file_terlarang url_regex -i wintrim.exe
acl file_terlarang url_regex -i MPREXE.EXE
acl file_terlarang url_regex -i exengd.EXE
acl file_terlarang url_regex -i xxxvideo.exe
acl file_terlarang url_regex -i Save.exe
acl file_terlarang url_regex -i ATLBROWSER.DLL
acl file_terlarang url_regex -i NawaL_rm
acl file_terlarang url_regex -i Socks32.dll
acl file_terlarang url_regex -i Sc32Lnch.exe
acl file_terlarang url_regex -i dat0.exe
acl file_terlarang url_regex -i loadadv.exe
acl file_terlarang url_regex -i loadadv.exe

acl SSL_ports port 443 # https,snews
acl SSL_ports port 563
acl SSL_ports port 2082
acl SSL_ports port 2083
acl SSL_ports port 2086
acl SSL_ports port 2087
acl SSL_ports port 2093
acl SSL_ports port 2095
acl SSL_ports port 2096

acl Safe_ports port 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 80 # http
acl Safe_ports port 210 # wais
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 443 # https
acl Safe_ports port 448
acl Safe_ports port 488 # gss-http
acl Safe_ports port 563 # snews
acl Safe_ports port 591 # filemaker
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # multiling http
acl Safe_ports port 808
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 2082
acl Safe_ports port 2083
acl Safe_ports port 2086
acl Safe_ports port 2087
acl Safe_ports port 2095
acl Safe_ports port 2096
acl Safe_ports port 5000-5200 # yahoomessenger
acl Safe_ports port 6666-6669 # mirc
acl Safe_ports port 8000
acl Safe_ports port 8082
acl Safe_ports port 8090
acl Safe_ports port 11999
acl CONNECT method CONNECT

acl BADPORTS port 7 9 11 19 22 23 25 110 119 513 514 32768
acl CONFICKER port 135 136 137 138 139 445
acl VIRUS urlpath_regex winnt/system32/cmd.exe?
acl limit maxconn 20

http_access deny warnet porn
http_access allow manager localhost
http_access allow manager IIX Safe_ports
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny gator1
http_access deny gator2
http_access deny blokir
http_access deny file_terlarang
http_access deny VIRUS
http_access deny BADPORTS
http_access deny CONFICKER
http_access allow localnet
http_access allow localhost
http_access deny all
icp_access allow localnet
icp_access deny all
miss_access allow localnet
miss_access allow localhost
miss_access deny all

# NETWORK OPTIONS
# —————————————————————————–

http_port 8080 transparent

zph_mode tos
zph_local 0×30
# zph_sibling 0
zph_parent 0
zph_option 136

# OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
# —————————————————————————–

dead_peer_timeout 10 seconds
hierarchy_stoplist cgi-bin ?

# MEMORY CACHE OPTIONS
# —————————————————————————–

cache_mem 32 MB
maximum_object_size_in_memory 6 KB
memory_replacement_policy heap GDSF

# DISK CACHE OPTIONS
# —————————————————————————–

cache_replacement_policy heap LFUDA
cache_dir aufs /cache 50000 96 256
store_dir_select_algorithm round-robin
# store_dir_select_algorithm least-load
max_open_disk_fds 100
maximum_object_size 16 MB
cache_swap_low 98
cache_swap_high 99
# update_headers on

# LOGFILE OPTIONS
# —————————————————————————–

access_log /var/log/squid/logs/access.log squid
cache_log /dev/null
cache_store_log /dev/null
logfile_rotate 3
mime_table /usr/local/squid/etc/mime.conf
log_mime_hdrs off
pid_filename /var/run/squid.pid
debug_options ALL,1 98,2
log_fqdn off
buffered_logs on

# OPTIONS FOR FTP GATEWAYING
# —————————————————————————–

ftp_user anonymous@
ftp_list_width 32
ftp_passive on
ftp_sanitycheck on
ftp_telnet_protocol on

# OPTIONS FOR URL REWRITING
# —————————————————————————–

redirector_bypass off

# OPTIONS FOR TUNING THE CACHE
# —————————————————————————–

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

# —————————————————————————–
# Content-Type
# —————————————————————————–
# Content_Compressed_File
acl archive_content urlpath_regex -i \.(.gz|.rar.|.zip|.tgz|.npk|.vdf)$
# —————————————————————————–
# Content_Executable_File
acl archive_content urlpath_regex -i \.exe$
# —————————————————————————–
# Content_image_File
acl archive_content urlpath_regex -i \.(.bmp|.tiff|.gif|.gif|.jpeg|.jpg|.ico|.png|.pdf|.swf)$
acl archive_content urlpath_regex -i ^http://
# —————————————————————————–
# Refresh Archive Content
# —————————————————————————–
# Content_Compressed_File
refresh_pattern -i \.(.gz|.rar.|.zip|.tgz|.npk|.vdf)$ 43200 95% 86400 override-expire ignore-no-cache ignore-private
# —————————————————————————–
# Content_Executable_File
refresh_pattern -i \.exe$ 43200 95% 86400 override-expire ignore-no-cache ignore-private
# —————————————————————————–
# Content_image_File
refresh_pattern -i \.(.bmp|.tiff|.gif|.gif|.jpeg|.jpg|.ico|.png|.pdf|.swf)$ 43200 95% 86400 override-expire ignore-no-cache ignore-private
# —————————————————————————–
# REFRESH PATTERN
# —————————————————————————–
refresh_pattern -i \.(.class|.css|.js|.gif|.jpg)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(.jpe|.jpeg|.png|.bmp|.tif)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(.tiff|.mov|.avi|qt|mpeg)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(.mpg|.mpe|.wav|.au|.mid)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(.zip|.gz|.arj|.lha|.lzh)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(.rar|.tgz|.tar|.exe|.bin)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(.hqx|.pdf|.rtf|.doc|.swf)$ 10080 100% 43200 override-expire
refresh_pattern -i \.(.inc|.cab|.ad|.txt|.dll|.vdf)$ 10080 100% 43200 override-expire

refresh_pattern ^http://*.google.*/.* refresh_pattern ^http://*korea.*/.* refresh_pattern ^http://*.akamai.*/.* refresh_pattern ^http://*.windowsmedia.*/.* refresh_pattern ^http://*.googlesyndication.*/.* refresh_pattern ^http://*.plasa.*/.* refresh_pattern ^http://*.telkom.*/.* refresh_pattern ^http://www.friendster.com/.* refresh_pattern ^http://mail.yahoo.com/.* refresh_pattern ^http://*.yahoo.*/.* refresh_pattern ^http://*.yimg.*/.* refresh_pattern ^http://*.gmail.*/.* refresh_pattern ^http://*.detik.*/.* refresh_pattern ^http://*.kompas.*/.* refresh_pattern ^http://*.media-indonesia.*/.* refresh_pattern ^http://*.okezone.*/.* refresh_pattern ^http://*.liputan6.*/.* refresh_pattern ^http://*.metrotvnews.*/.* refresh_pattern ^http://*.cnn.*/.* #refresh_pattern ^http://*.facebook.*/.* #refresh_pattern ^http://*.zynga.*/.* #refresh_pattern ^http://*.holdem_poker.*/.* refresh_pattern ^http://*.kapanlagi.*/.* 720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod
720 100% 4320 reload-into-ims override-lastmod

quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 98

negative_ttl 3 minutes
positive_dns_ttl 53 seconds
negative_dns_ttl 29 seconds
store_avg_object_size 13 KB
store_objects_per_bucket 15

# HTTP OPTIONS
# —————————————————————————–

request_header_max_size 20 KB
reply_header_max_size 20 KB
request_body_max_size 0 KB
ie_refresh off
vary_ignore_expire on
header_access Accept-Encoding deny hotmail

## BLANK BLANK
# server_http11 off

# TIMEOUTS
# —————————————————————————–

forward_timeout 4 minutes
connect_timeout 1 minute
peer_connect_timeout 1 minute
read_timeout 15 minutes
request_timeout 5 minutes
persistent_request_timeout 1 minutes
client_lifetime 60 minutes
half_closed_clients off
pconn_timeout 120 seconds
# ident_timeout 10 seconds
shutdown_lifetime 10 seconds

# ADMINISTRATIVE PARAMETERS
# —————————————————————————–

cache_mgr aska@green/trouble-call:0752-
cache_effective_user squid
cache_effective_group squid
visible_hostname squid.aska@green.net
cachemgr_passwd squid-cache aska

# DELAY POOL PARAMETERS
# —————————————————————————–

## dibuat 2 aturan
#delay_pools 2

## aturan 1, tidak ada pembatasan
#delay_class 1 2
#delay_parameters 1 -1/-1 -1/-1

## aturan 2, setelah download 2048000 bytes mk download menjadi 10000 bytes/s
#delay_class 2 2
##delay_parameters 2 -1/1008800 15000/1009800
#delay_parameters 2 -1/5048000 15000/5049000
##delay_parameters 2 10000/2049000

#delay_access 1 deny download
#delay_access 1 allow all
#delay_access 2 allow download
#delay_access 2 deny all

# delay_initial_bucket_level 50

# SNMP OPTIONS
# —————————————————————————–

snmp_port 3401
snmp_access allow snmpcommunity localhost
snmp_access deny all

# ICP OPTIONS
# —————————————————————————–

icp_port 3130
icp_hit_stale on
query_icmp on
icp_query_timeout 0

# MULTICAST ICP OPTIONS
# —————————————————————————–

mcast_icp_query_timeout 2000

# OPTIONS INFLUENCING REQUEST FORWARDING
# —————————————————————————–

always_direct allow localnet

# DNS OPTIONS
# —————————————————————————–

dns_nameservers 202.134.0.155
dns_nameservers 203.130.193.74
dns_nameservers 202.134.2.5
dns_nameservers 208.67.222.222
dns_nameservers 208.67.220.220

# hosts_file /etc/hosts
ignore_unknown_nameservers on
ipcache_size 8192
ipcache_low 98
ipcache_high 99
fqdncache_size 8192

# MISCELLANEOUS
# —————————————————————————–

forwarded_for off
client_db on
reload_into_ims on
coredump_dir /usr/local/squid
pipeline_prefetch on

# —————————————————————————–
# —————————A—–S—-K—-A———————————
# —————————————————————————–

DNS Alternative

aska — Thu, 17 Jun 2010 09:55:27 +0000

from : http://ariefew.com/dns-alternative/

Indosat


202.155.0.10	ns3.indosat.net.id

202.155.0.15	ns2.indosat.net.id

202.155.0.20	ns1.indosat.net.id
Telkom
202.134.2.5	nsbdg1.telkom.net.id

203.130.196.5	nsjkt3.telkom.net.id

203.130.196.155 nsjkt2.telkom.net.id

202.134.0.155	nsjkt1.telkom.net.id

202.134.1.10	nssby1.telkom.net.id

203.130.196.6	ns1.telkom.net.id

222.124.204.34	ns2.telkom.net.id

202.134.0.62	dns1.telkom.net.id

202.159.32.2	ns1.indo.net.id

202.159.33.2	ns2.indo.net.id

202.155.30.227	ns1.id
222.124.22.18	18.subnet222-124-22.astinet.telkom.net.id
Sat.net.id
202.149.82.25	buaya.sat.net.id

202.149.82.29	kodok.sat.net.id
cbn.net.id
202.158.40.1	ns2.cbn.net.id

202.158.20.1	ns1.cbn.net.id

202.158.3.7	fox.cbn.net.id

202.158.3.6	willamette.cbn.net.id
indo.net.id
202.159.32.2	ns1.indo.net.id

202.159.33.2	ns2.indo.net.id
itb.ac.id
202.249.24.65	ns1.itb.ac.id

167.205.23.1	ns1.itb.ac.id

167.205.22.123	ns2.itb.ac.id

167.205.30.114	ns3.itb.ac.id
Lintas Artha
202.152.0.2	rajawali.idola.net.id

202.152.5.36	ns.idola.net.id
Singnet
165.21.83.88	dnscache1.singnet.com.sg

165.21.100.88	dnscache2.singnet.com.sg
Daftar DNS Luar indonesia :
ScrubIt
67.138.54.100

207.225.209.66
DNSadvantage
156.154.70.1

156.154.71.1
vnsc-pri.sys.gtei.net
4.2.2.1

4.2.2.2

4.2.2.3

4.2.2.4

4.2.2.5

4.2.2.6
Verizon (Reston, VA, US)
151.197.0.38

151.197.0.39

151.202.0.84

151.202.0.85

151.202.0.85

151.203.0.84

151.203.0.85

199.45.32.37

199.45.32.38

199.45.32.40

199.45.32.43
GTE (Irving, TX, US)
192.76.85.133

206.124.64.1

One Connect IP (Albuquerque, NM, US)
67.138.54.100
OpenDNS (San Francisco, CA, US)
208.67.222.222

208.67.220.220
Exetel (Sydney, AU)
220.233.167.31
VRx Network Services (New York, NY, US)
199.166.31.3
SpeakEasy (Seattle, WA, US)
66.93.87.2

216.231.41.2

216.254.95.2

64.81.45.2

64.81.111.2

64.81.127.2

64.81.79.2

64.81.159.2

66.92.64.2

66.92.224.2

66.92.159.2

64.81.79.2

64.81.159.2

64.81.127.2

64.81.45.2

216.27.175.2
Sprintlink (Overland Park, KS, US)
199.2.252.10

204.97.212.10

204.117.214.10
Cisco (San Jose, CA, US)

64.102.255.44 128.107.241.185

Performa Load Balance 7 Line Akses

aska — Thu, 27 May 2010 03:27:56 +0000

Semua dah ada ulasan lengkap di forum mikrotik :

forum mikrotik

Di peruntukan untuk all of u

thans for :
Forum Mikrotik
akangage
mikrotiker
my boss
my office yang udah nyediain bahan oprekan

Typo nya :

hasil ne :

P.S : Performa squid terkini nyusul

Upgrade squid v3 3.0 squid-3.0.STABLE21

aska — Mon, 04 Jan 2010 06:19:41 +0000

squid-3.0.STABLE21

Diproteksi: Secure

aska — Mon, 04 Jan 2010 05:06:49 +0000

Tulisan ini terlindungi oleh kata sandi. Anda harus mengunjungi situs tersebut dan memasukkan kata sandinya untuk melanjutkan membaca.

Install Squid 3.0.STABLE18

aska — Sun, 06 Sep 2009 04:32:41 +0000

Downgrade ah…………… puyenk……. ama squid 3.HEAD

langkah sama, conf lebih kurang sama, dan….. CIIMIIW

SQUID CONFIG

#
# WELCOME TO SQUID 3
# —————————-

# ACCESS CONTROLS
# —————————————————————————–

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 20.20.20.0/30 90.90.90.0/29 91.91.91.0/29
acl localnet src 92.92.92.0/28 92.92.92.16/28 92.92.92.32/28 92.92.92.48/28 92.92.92.64/28 92.92.92.80/28 92.92.92.96/28 92.92.92.128/27
acl localnet src 192.168.10.0/27

acl SSL_ports port 443 # https,snews
acl SSL_ports port 563
acl SSL_ports port 2082
acl SSL_ports port 2083
acl SSL_ports port 2086
acl SSL_ports port 2087
acl SSL_ports port 2093
acl SSL_ports port 2095
acl SSL_ports port 2096

acl Safe_ports port 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 80 # http
acl Safe_ports port 210 # wais
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 443 # https
acl Safe_ports port 448
acl Safe_ports port 488 # gss-http
acl Safe_ports port 563 # snews
acl Safe_ports port 591 # filemaker
acl Safe_ports port 631 # CUPS
acl Safe_ports port 777 # multiling http
acl Safe_ports port 808
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 2082
acl Safe_ports port 2083
acl Safe_ports port 2086
acl Safe_ports port 2087
acl Safe_ports port 2095
acl Safe_ports port 2096
acl Safe_ports port 5000-5200 # yahoomessenger
acl Safe_ports port 6666-6669 # mirc
acl Safe_ports port 8000
acl Safe_ports port 8082
acl Safe_ports port 8090
acl Safe_ports port 11999

acl BADPORTS port 7 9 11 19 22 23 25 110 119 513 514 445 213 137 138 32768
acl VIRUS urlpath_regex winnt/system32/cmd.exe?

acl hotmail dstdomain .hotmail.com .msn.com .passport.net .msn.co.id .passport.com .lycos.com .cbn.net.id .google.com
acl hotmail dstdomain .indosat.net.id .bii.com .yahoo.com .akadns.net .kalbe.co.id .tigobalaitour.com .syariahonline.com
acl hotmail dstdomain .plasa.com .telkom.net.id .telkom.co.id .boleh.com
acl hotmail dstdomain 202.77.136.17 202.147.193.116 202.97.238.132 221.130.184.27
acl gator1 dstdomain .riaa.com .gator.com .xxxtoolbar.com .hotbar.com ftpaol.news
acl gator2 dstdom_regex gator hot_indonesia.exe
acl blokir dstdomain .rankyou.com .x10.com .infostart.com .startgp.com .iwantnet.net
acl blokir dstdomain .goclick.com .00fun.com .xupiter.com .sexlist.com .pageseeker.con
acl blokir dstdomain .fastmetasearch.com .trendmicro.com .grab.nastydollars.com
acl blokir dstdomain .evidence-eliminator.com .supereva.it .tjaw.com
acl blokir dstdomain .180solutions.com .hrvg.tk .cerials.net .vesperexchange.com .pornaccess.com
acl blokir dstdomain .loverboysusa.com
acl blokir dstdomain .nude-celebs-top.com .aqonk.com .mtvxxx.com .kittens.plays.com .loliti.com
acl blokir dstdomain .sex-info.cjb.net .usa-download.nocreditcard.com .pusatvcd.com .footjobsluts.com
acl blokir dstdomain .dev-download.nocreditcard.com .wazzupnet.com .hamsah.net .amateurpages.com
acl blokir dstdomain .hackwars.com .vasile200.home.ro .mrazirnydasice.cz .XXXTOLBAR.com .purecfnm.com
acl blokir dstdomain .hitbox.com .geocities.com/pelacurpenang .adlogix.com .daddyswap.com
acl blokir dstdomain .internet-optimizer.com .offshoreclicks.com .animespy.com
acl blokir dstdomain .leader.linkexchange.com .animedc.com .paypopup.com .sugarporn.net
acl blokir dstdomain .kaza.com .nastyxpix.com .reliz.ru .fullmovies.net .net-voyeurs.com
acl blokir dstdomain .virtuagirl2.com .spybouncer.com .kerclink.com .xxxindonesia.com
acl blokir dstdomain .getright.com .volcom.com .internetdownloadmanager.com .kazaa.com .fastclick.net
acl blokir dstdomain .freshdevices.com .reget.com .playboy.com
acl blokir dstdomain .leechget.de .netants.com .speedbit.com .gadisbandung.com
acl blokir dstdomain .netvampire.com .downloadaccelerator.com .imagecash.net .doubleclick.com .doubleclick.net
acl blokir dstdomain .cometsystems.com .mtreexxx.net .ceritabokep.com .valencemedia.com .celeb-fakes.net
acl blokir dstdomain .jpteen.org .xeex.com .spnt.pl

#Banner Yahoo dari yahoo.http
acl blokir dstdomain .tribalfusion.com

acl blokir dstdomain .babecams.tv .creamasia.com .nudesonline.com .nudecelebsmagazine.com
acl blokir dstdomain .cyberagemodels.com .sex.com .amateurxxxmag.com .hottestgalleries.net .naughtylinks.net
acl blokir dstdomain .peterpaulxxx.com .datautama.net.id .xeex.net
acl blokir dstdomain 72.52.9.9 72.52.9.8 72.52.9.7 .prolocation.net .prolexic.com .uribl.com

# Update
acl blokir dstdomain .windowsupdate.com

# Mau Kejam silahkan…——————————————————————————————-
#acl file_terlarang url_regex -i .swf
#acl file_terlarang url_regex -i .mpeg
#acl file_terlarang url_regex -i .mov

#—————————————————————————————————————–
acl file_terlarang url_regex -i hot_indonesia.exe
acl file_terlarang url_regex -i hotsurprise_id.exe
acl file_terlarang url_regex -i best-mp3-download.exe
acl file_terlarang url_regex -i R32.exe
acl file_terlarang url_regex -i rb32.exe
acl file_terlarang url_regex -i mp3.exe
acl file_terlarang url_regex -i HOTSEX.exe
acl file_terlarang url_regex -i Browser_Plugin.exe
acl file_terlarang url_regex -i DDialer.exe
acl file_terlarang url_regex -i od-teen21
acl file_terlarang url_regex -i URLDownload.exe
acl file_terlarang url_regex -i od-stnd67.exe
acl file_terlarang url_regex -i Download_Plugin.exe
acl file_terlarang url_regex -i od-teen52.exe
acl file_terlarang url_regex -i malaysex
acl file_terlarang url_regex -i edita.html
acl file_terlarang url_regex -i info.exe
acl file_terlarang url_regex -i run.exe
acl file_terlarang url_regex -i Lovers2Go
acl file_terlarang url_regex -i GlobalDialer
acl file_terlarang url_regex -i WebDialer
acl file_terlarang url_regex -i britneynude
acl file_terlarang url_regex -i download.exe
acl file_terlarang url_regex -i backup.exe
acl file_terlarang url_regex -i GnoOS2003
acl file_terlarang url_regex -i wintrim.exe
acl file_terlarang url_regex -i MPREXE.EXE
acl file_terlarang url_regex -i exengd.EXE
acl file_terlarang url_regex -i xxxvideo.exe
acl file_terlarang url_regex -i Save.exe
acl file_terlarang url_regex -i ATLBROWSER.DLL
acl file_terlarang url_regex -i NawaL_rm
acl file_terlarang url_regex -i Socks32.dll
acl file_terlarang url_regex -i Sc32Lnch.exe
acl file_terlarang url_regex -i dat0.exe

#TIME dan FILTER DOWNLOAD
# =============================================================================

#acl download url_regex -i ftp .exe .mp3 .vqf .tar.gz .gz .tar .rpm .zip .rar .avi .mpeg .mpe .mpg .qt .ram .rm .iso .raw .wav .mov .msi .mp4 .7z
#acl TIME SMTWHFA 06:00 – 21:00
#acl TIME time SMTWHFA 05:59-23:59
acl download url_regex -i ftp \.exe$ \.mp3$ \.mp4$ \.tar.gz$ \.gz$ \.tar.bz2$ \.rpm$ \.zip$ \.ra
acl download url_regex -i \.avi$ \.mpg$ \.mpeg$ \.rm$ \.iso$ \.wav$ \.mov$ \.dat$ \.mpe$ \.mid$
acl download url_regex -i \.midi$ \.rmi$ \.wma$ \.wmv$ \.ogg$ \.ogm$ \.m1v$ \.mp2$ \.mpa$ \.wax$
acl download url_regex -i \.m3u$ \.asx$ \.wpl$ \.wmx$ \.dvr-ms$ \.snd$ \.au$ \.aif$ \.asf$ \.m2v
acl download url_regex -i \.m2p$ \.ts$ \.tp$ \.trp$ \.div$ \.divx$ \.mod$ \.vob$ \.aob$ \.dts$
acl download url_regex -i \.ac3$ \.cda$ \.vro$ \.deb$ \.flv$ \.3gp$
#acl JAM_KANTOR time SMTWHFA 05:59-23:59

#acl snmppublic snmp_community public

acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny VIRUS
http_access deny BADPORTS
http_access deny gator1
http_access deny gator2
http_access deny blokir
http_access deny file_terlarang
http_access allow localnet
http_access allow localhost
http_access deny all
miss_access allow all

# NETWORK OPTIONS
# —————————————————————————–

http_port 8080 transparent

# SSL OPTIONS
# —————————————————————————–

ssl_unclean_shutdown off

# OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
# —————————————————————————–

hierarchy_stoplist cgi-bin ? .js .jsp .g .do .php .asp .cgi localhost 10.10.10.0/24 20.20.20.0/30 90.90.90/29 92.92.92.0/24 192.168.10.0/24

# MEMORY CACHE OPTIONS
# —————————————————————————–

cache_mem 16 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF

# DISK CACHE OPTIONS
# —————————————————————————–

cache_replacement_policy heap LFUDA
cache_dir aufs /cache 10000 10 256
store_dir_select_algorithm least-load
maximum_object_size 128 MB
cache_swap_low 98
cache_swap_high 99

# LOGFILE OPTIONS
# —————————————————————————–

access_log /var/log/squid/logs/access.log
cache_store_log none
mime_table /usr/local/squid/etc/mime.conf
pid_filename none
pid_filename /var/log/squid/logs/squid.pid
log_fqdn off

# OPTIONS FOR TROUBLESHOOTING
# —————————————————————————–

cache_log /var/log/squid/logs/cache.log
coredump_dir /cache

# OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
# —————————————————————————–

unlinkd_program /usr/local/squid/libexec/unlinkd

# OPTIONS FOR URL REWRITING
# —————————————————————————–

# OPTIONS FOR TUNING THE CACHE
# —————————————————————————–

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

##REFRESH PATTERN
refresh_pattern -i \.(class|css|js|gif|jpg)$ 10080 100% 43200
refresh_pattern -i \.(jpe|jpeg|png|bmp|tif)$ 10080 100% 43200
refresh_pattern -i \.(tiff|mov|avi|qt|mpeg)$ 10080 100% 43200
refresh_pattern -i \.(mpg|mpe|wav|au|mid)$ 10080 100% 43200
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200

refresh_pattern ^http://*.google.*/.* 720 100% 4320
refresh_pattern ^http://*.korea.*/.* 720 100% 4320
refresh_pattern ^http://*.akamai.*/.* 720 100% 4320
refresh_pattern ^http://*.windowsmedia.*/.* 720 100% 4320
refresh_pattern ^http://*.googlesyndication.*/.* 720 100% 4320
refresh_pattern ^http://*.plasa.*/.* 720 100% 4320
refresh_pattern ^http://*.telkom.*/.* 720 100% 4320
refresh_pattern ^http://*.friendster.com/.* 720 100% 4320
refresh_pattern ^http://mail.yahoo.com/.* 720 100% 4320
refresh_pattern ^http://*.yahoo.*/.* 720 100% 4320
refresh_pattern ^http://*.yimg.*/.* 720 100% 4320
refresh_pattern ^http://*.gmail.*/.* 720 100% 4320
refresh_pattern ^http://*.detik.*/.* 720 100% 4320
refresh_pattern ^http://*.padangekspres.*/.* 720 100% 4320
refresh_pattern ^http://*.padang-today.*/.* 720 100% 4320
refresh_pattern ^http://*.kompas.*/.* 720 100% 4320
refresh_pattern ^http://*.media-indonesia.*/.* 720 100% 4320
refresh_pattern ^http://*.okezone.*/.* 720 100% 4320
refresh_pattern ^http://*.liputan6.*/.* 720 100% 4320
refresh_pattern ^http://*.metrotvnews.*/.* 720 100% 4320
refresh_pattern ^http://*.cnn.*/.* 720 100% 4320
refresh_pattern ^http://*.kapanlagi.*/.* 720 100% 4320
#refresh_pattern ^http://*.facebook.*/.* 720 100% 4320
#refresh_pattern ^http://*.zynga.*/.* 720 100% 4320
#refresh_pattern ^http://*.fbcdn.*/.* 720 100% 4320

quick_abort_min 0
quick_abort_max 0
quick_abort_pct 98

# HTTP OPTIONS
# —————————————————————————–

ie_refresh off
vary_ignore_expire on

# TIMEOUTS
# —————————————————————————–

shutdown_lifetime 10 seconds

# ADMINISTRATIVE PARAMETERS
# —————————————————————————–

cache_mgr webmaster@goldennetbiaro.com-(0752-42678)
cachemgr_passwd squid-cache goldennet
cache_effective_user squid
cache_effective_group squid

# DELAY POOL PARAMETERS
# —————————————————————————–

# dibuat 2 aturan
delay_pools 2

# aturan 1, tidak ada pembatasan
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1

# aturan 2, setelah download 5048000 bytes mk download menjadi 15000 bytes/s
delay_class 2 2
delay_parameters 2 -1/5048000 15000/5049000

delay_access 1 deny download
delay_access 1 allow all
delay_access 2 allow download
delay_access 2 deny all

# ICP OPTIONS
# —————————————————————————–

icp_port 3130
log_icp_queries off
icp_hit_stale off
query_icmp off

# DNS OPTIONS
# —————————————————————————–

ipcache_size 8192
ipcache_low 90
ipcache_high 95
fqdncache_size 8192

# MISCELLANEOUS
# —————————————————————————–

memory_pools off
reload_into_ims on
pipeline_prefetch on

General Runtime Information

Squid Object Cache: Version 3.0.STABLE18-20090906

Start Time: Sat, 26 Sep 2009 02:24:14 GMT
Current Time: Sat, 26 Sep 2009 08:34:04 GMT

Connection information for squid:
Number of clients accessing cache: 69
Number of HTTP requests received: 226720
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Number of HTCP messages received: 0
Number of HTCP messages sent: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 613.0
Average ICP messages per minute since start: 0.0
Select loop called: 5112064 times, 4.341 ms avg
Cache information for squid:
Hits as % of all requests: 5min: 26.1%, 60min: 30.7%
Hits as % of bytes sent: 5min: 39.2%, 60min: 33.2%
Memory hits as % of hit requests: 5min: 6.2%, 60min: 5.5%
Disk hits as % of hit requests: 5min: 67.7%, 60min: 59.6%
Storage Swap size: 10035186 KB
Storage Swap capacity: 98.0% used, 2.0% free
Storage Mem size: 16352 KB
Storage Mem capacity: 99.8% used, 0.2% free
Mean Object Size: 18.85 KB
Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 1.46131 1.11539
Cache Misses: 2.37608 2.02066
Cache Hits: 0.01309 0.00865
Near Hits: 1.62803 1.17732
Not-Modified Replies: 0.00179 0.00179
DNS Lookups: 0.00372 0.00573
ICP Queries: 0.00000 0.00000
Resource usage for squid:
UP Time: 22190.419 seconds
CPU Time: 1820.943 seconds
CPU Usage: 8.21%
CPU Usage, 5 minute avg: 13.50%
CPU Usage, 60 minute avg: 10.74%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 113672 KB
Page faults with physical i/o: 13
Memory accounted for:
Total accounted: 74120 KB
memPoolAlloc calls: 84261944
memPoolFree calls: 83062784
File descriptor usage for squid:
Maximum number of file descriptors: 11072
Largest file desc currently in use: 812
Number of file desc currently in use: 800
Files queued for open: 0
Available number of file descriptors: 10272
Reserved number of file descriptors: 100
Store Disk files open: 61
Internal Data Structures:
532933 StoreEntries
3621 StoreEntries with MemObjects
3463 Hot Object Cache Items
532306 on-disk objects

Generated Sat, 26 Sep 2009 08:34:04 GMT, by cachemgr.cgi/3.HEAD-20090904@proxy.goldennetbiaro.com

GOODLUCK

aska

Install FreeBSD 7.2 + Compile kernel + SQUID 3.x / squid-3.HEAD [ Troubleshooting ]

aska — Sat, 05 Sep 2009 12:22:39 +0000

Trouble yang ku temukan saat ngoprek squid-3.HEAD

-1

2009/09/05 19:49:50| assertion failed: store_swapin.cc:47: “e->mem_status == NOT_IN_MEMORY”
2009/09/05 19:49:53| Starting Squid Cache version 3.HEAD-20090904 for i386-unknown-freebsd7.2…
2009/09/05 19:49:53| Process ID 1872
2009/09/05 19:49:53| With 11072 file descriptors available
2009/09/05 19:49:53| Initializing IP Cache…
2009/09/05 19:49:53| DNS Socket created at 0.0.0.0, FD 6
2009/09/05 19:49:53| Adding domain goldennetbiaro.com from /etc/resolv.conf
2009/09/05 19:49:53| Adding nameserver 90.90.90.1 from /etc/resolv.conf
2009/09/05 19:49:54| Unlinkd pipe opened on FD 11
2009/09/05 19:49:54| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2009/09/05 19:49:54| Store logging disabled
2009/09/05 19:49:54| Swap maxSize 10240000 + 65536 KB, estimated 792733 objects
2009/09/05 19:49:54| Target number of buckets: 39636
2009/09/05 19:49:54| Using 65536 Store buckets
2009/09/05 19:49:54| Max Mem size: 65536 KB
2009/09/05 19:49:54| Max Swap size: 10240000 KB
2009/09/05 19:49:54| Version 1 of swap file with LFS support detected…
2009/09/05 19:49:54| Rebuilding storage in /cache (DIRTY)
2009/09/05 19:49:54| Using Least Load store dir selection
2009/09/05 19:49:54| Set Current Directory to /cache
2009/09/05 19:49:54| Loaded Icons.
2009/09/05 19:49:54| Accepting intercepted HTTP connections at 0.0.0.0:8080, FD 14.
2009/09/05 19:49:54| HTCP Disabled.
2009/09/05 19:49:54| IcmpSquid.cc(253) Open: Pinger socket opened on FD 16
2009/09/05 19:49:54| Squid modules loaded: 0
2009/09/05 19:49:54| pinger: Initialising ICMP pinger …
2009/09/05 19:49:54| Ready to serve requests.
2009/09/05 19:49:54| cc(82) Open: icmp_sock: (1) Operation not permitted
2009/09/05 19:49:54| pinger: Unable to start ICMP pinger.
2009/09/05 19:49:54| Store rebuilding is 48.23% complete
2009/09/05 19:49:54| FATAL: pinger: Unable to open any ICMP sockets.
2009/09/05 19:49:54| Done reading /cache swaplog (8492 entries)
2009/09/05 19:49:54| Finished rebuilding storage from disk.
2009/09/05 19:49:54| 8050 Entries scanned
2009/09/05 19:49:54| 0 Invalid entries.
2009/09/05 19:49:54| 0 With invalid flags.
2009/09/05 19:49:54| 7608 Objects loaded.
2009/09/05 19:49:54| 0 Objects expired.
2009/09/05 19:49:54| 442 Objects cancelled.
2009/09/05 19:49:54| 0 Duplicate URLs purged.
2009/09/05 19:49:54| 0 Swapfile clashes avoided.
2009/09/05 19:49:54| Took 0.08 seconds (92368.21 objects/sec).
2009/09/05 19:49:54| Beginning Validation Procedure
2009/09/05 19:49:54| Completed Validation Procedure
2009/09/05 19:49:54| Validated 15241 Entries
2009/09/05 19:49:54| store_swap_size = 63710
2009/09/05 19:49:54| IcmpSquid.cc(154) Recv: recv: (61) Connection refused
2009/09/05 19:49:54| IcmpSquid.cc(281) Close: Closing Pinger socket on FD 16
2009/09/05 19:49:55| storeLateRelease: released 0 objects

-2

2009/09/05 21:31:01| Starting Squid Cache version 3.HEAD-20090904 for i386-unknown-freebsd7.2…
2009/09/05 21:31:01| Process ID 2483
2009/09/05 21:31:01| With 11072 file descriptors available
2009/09/05 21:31:01| Initializing IP Cache…
2009/09/05 21:31:01| DNS Socket created at 0.0.0.0, FD 6
2009/09/05 21:31:01| Adding domain goldennetbiaro.com from /etc/resolv.conf
2009/09/05 21:31:01| Adding nameserver 90.90.90.1 from /etc/resolv.conf
2009/09/05 21:31:01| Unlinkd pipe opened on FD 11
2009/09/05 21:31:01| Local cache digest enabled; rebuild/rewrite every 3600/3600 sec
2009/09/05 21:31:01| Store logging disabled
2009/09/05 21:31:01| Swap maxSize 10240000 + 524288 KB, estimated 828022 objects
2009/09/05 21:31:01| Target number of buckets: 41401
2009/09/05 21:31:01| Using 65536 Store buckets
2009/09/05 21:31:01| Max Mem size: 524288 KB
2009/09/05 21:31:01| Max Swap size: 10240000 KB
2009/09/05 21:31:01| Version 1 of swap file with LFS support detected…
2009/09/05 21:31:01| Rebuilding storage in /cache (CLEAN)
2009/09/05 21:31:01| Using Least Load store dir selection
2009/09/05 21:31:01| Current Directory is /root
2009/09/05 21:31:01| Loaded Icons.
2009/09/05 21:31:01| Accepting intercepted HTTP connections at 0.0.0.0:8080, FD 14.
2009/09/05 21:31:01| Accepting ICP messages at 0.0.0.0:3130, FD 15.
2009/09/05 21:31:01| HTCP Disabled.
2009/09/05 21:31:01| IcmpSquid.cc(253) Open: Pinger socket opened on FD 17
2009/09/05 21:31:01| Squid modules loaded: 0
2009/09/05 21:31:01| pinger: Initialising ICMP pinger …
2009/09/05 21:31:01| Ready to serve requests.
2009/09/05 21:31:01| cc(82) Open: icmp_sock: (1) Operation not permitted
2009/09/05 21:31:02| pinger: Unable to start ICMP pinger.
2009/09/05 21:31:02| Store rebuilding is 34.67% complete
2009/09/05 21:31:02| FATAL: pinger: Unable to open any ICMP sockets.
2009/09/05 21:31:02| Done reading /cache swaplog (11814 entries)
2009/09/05 21:31:02| Finished rebuilding storage from disk.
2009/09/05 21:31:02| 11814 Entries scanned
2009/09/05 21:31:02| 0 Invalid entries.
2009/09/05 21:31:02| 0 With invalid flags.
2009/09/05 21:31:02| 11814 Objects loaded.
2009/09/05 21:31:02| 0 Objects expired.
2009/09/05 21:31:02| 0 Objects cancelled.
2009/09/05 21:31:02| 0 Duplicate URLs purged.
2009/09/05 21:31:02| 0 Swapfile clashes avoided.
2009/09/05 21:31:02| Took 0.11 seconds (112182.01 objects/sec).
2009/09/05 21:31:02| Beginning Validation Procedure
2009/09/05 21:31:02| Completed Validation Procedure
2009/09/05 21:31:02| Validated 23653 Entries
2009/09/05 21:31:02| store_swap_size = 106628
2009/09/05 21:31:02| storeLateRelease: released 0 objects
2009/09/05 21:31:05| IcmpSquid.cc(154) Recv: recv: (61) Connection refused
2009/09/05 21:31:05| IcmpSquid.cc(281) Close: Closing Pinger socket on FD 17
2009/09/05 21:32:39| CacheManager: @127.0.0.1 requesting ‘info’

-3

Conf sekarang :

#
# WELCOME TO SQUID 3.HEAD-20090903
# —————————-

# ACCESS CONTROLS
# —————————————————————————–
#acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 192.168.10.0/27

acl SSL_ports port 443 563 # https,snews
acl Safe_ports port 448
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 5000-5200 # yahoomessenger
acl Safe_ports port 6666-6669 # mirc
acl Safe_ports port 563 # snews
acl Safe_ports port 808
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl Safe_ports port 631 # CUPS

acl BADPORTS port 7 9 11 19 22 23 25 110 119 513 514 445 213 137 138 32768
acl VIRUS urlpath_regex winnt/system32/cmd.exe?

acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny VIRUS
http_access deny BADPORTS
http_access allow localnet
http_access allow localhost
http_access deny all
miss_access allow all
icp_access allow all
icp_access allow localhost
icp_access allow localnet
icp_access deny all

# NETWORK OPTIONS
# —————————————————————————–

http_port 8080 transparent

# SSL OPTIONS
# —————————————————————————–

ssl_unclean_shutdown off

# OPTIONS WHICH AFFECT THE NEIGHBOR SELECTION ALGORITHM
# —————————————————————————–

hierarchy_stoplist cgi-bin ? .js .jsp .g .do .php .asp .cgi localhost

# MEMORY CACHE OPTIONS
# —————————————————————————–

cache_mem 16 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF

# DISK CACHE OPTIONS
# —————————————————————————–

cache_replacement_policy heap LFUDA
cache_dir aufs /cache 10000 10 256
store_dir_select_algorithm least-load
maximum_object_size 128 MB
cache_swap_low 90
cache_swap_high 95

# LOGFILE OPTIONS
# —————————————————————————–

access_log /var/log/squid/logs/access.log
mime_table /usr/local/squid/etc/mime.conf
#pid_filename /dev/null
pid_filename /var/log/squid/logs/squid.pid
log_fqdn off

# OPTIONS FOR TROUBLESHOOTING
# —————————————————————————–

cache_log /var/log/squid/logs/cache.log
coredump_dir /cache

# OPTIONS FOR EXTERNAL SUPPORT PROGRAMS
# —————————————————————————–

unlinkd_program /usr/local/squid/libexec/unlinkd
pinger_program /usr/local/squid/libexec/pinger

# OPTIONS FOR URL REWRITING
# —————————————————————————–

# OPTIONS FOR TUNING THE CACHE
# —————————————————————————–

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

quick_abort_min 0
quick_abort_max 0
quick_abort_pct 98

# HTTP OPTIONS
# —————————————————————————–

ie_refresh on
vary_ignore_expire off

# TIMEOUTS
# —————————————————————————–

shutdown_lifetime 10 seconds

# ADMINISTRATIVE PARAMETERS
# —————————————————————————–

cache_mgr webmaster@goldennetbiaro.com-(0752-xxxxxx)
cache_effective_user squid
cache_effective_group squid

# ICP OPTIONS
# —————————————————————————–

icp_port 3130
log_icp_queries off
icp_hit_stale off
query_icmp on

# DNS OPTIONS
# —————————————————————————–

ipcache_size 8192
ipcache_low 90
ipcache_high 95
fqdncache_size 8192

# MISCELLANEOUS
# —————————————————————————–

memory_pools off
reload_into_ims on
pipeline_prefetch on

-4

cachemgr terbaik nya, lalu drop

Squid Object Cache: Version 3.HEAD-20090904

Start Time: Sun, 06 Sep 2009 03:38:43 GMT
Current Time: Sun, 06 Sep 2009 04:01:15 GMT

Connection information for squid:
Number of clients accessing cache: 13
Number of HTTP requests received: 4369
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Number of HTCP messages received: 0
Number of HTCP messages sent: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 194.0
Average ICP messages per minute since start: 0.0
Select loop called: 145365 times, 9.297 ms avg
Cache information for squid:
Hits as % of all requests: 5min: 14.5%, 60min: 16.6%
Hits as % of bytes sent: 5min: 3.0%, 60min: 4.7%
Memory hits as % of hit requests: 5min: 49.6%, 60min: 26.7%
Disk hits as % of hit requests: 5min: 35.3%, 60min: 53.7%
Storage Swap size: 420890 KB
Storage Swap capacity: 4.1% used, 95.9% free
Storage Mem size: 13340 KB
Storage Mem capacity: 5.1% used, 94.9% free
Mean Object Size: 10.70 KB
Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 1.00114 0.68577
Cache Misses: 1.17732 0.76407
Cache Hits: 0.00000 0.00091
Near Hits: 0.80651 0.80651
Not-Modified Replies: 0.00000 0.00000
DNS Lookups: 0.04433 0.26619
ICP Queries: 0.00000 0.00000
Resource usage for squid:
UP Time: 1351.481 seconds
CPU Time: 20.314 seconds
CPU Usage: 1.50%
CPU Usage, 5 minute avg: 2.66%
CPU Usage, 60 minute avg: 1.48%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 36036 KB
Page faults with physical i/o: 0
Memory accounted for:
Total accounted: 23807 KB
memPoolAlloc calls: 1375393
memPoolFree calls: 1219763
File descriptor usage for squid:
Maximum number of file descriptors: 11072
Largest file desc currently in use: 244
Number of file desc currently in use: 137
Files queued for open: 0
Available number of file descriptors: 10935
Reserved number of file descriptors: 100
Store Disk files open: 13
Internal Data Structures:
39378 StoreEntries
2197 StoreEntries with MemObjects
2180 Hot Object Cache Items
39335 on-disk objects

Lom ada

Install FreeBSD 7.2 + Compile kernel + SQUID 3.x / squid-3.HEAD

aska — Thu, 03 Sep 2009 04:49:36 +0000

[Kumpulan beberapa referensi, pengalaman dan source terbaru "ON TESTED"]

Jika Ada yang dah Hight Performance dan sukses, kasih info yah….

Setelah sebelumnya, 2 tahun lalu aku Install FreeBSD 6 dengan Squid 2.6, sekarang aku akan buat TUT untuk versi yang terbaru.

seperti biasanya :

[Seperti kata mas ogeb]

PERHATIAN:
1. Jangan pernah mencoba ini jika anda tidak tau apa yang anda lakukan.
2. Jangan pula mencoba ini jika anda tidak tau apa itu FreeBSD .
3. siapkan rokok + kopi secukup nya jika anda perokok berat , karena proses ini akan memakan waktu. ( bagi yang ngak puasa )
4. Tulisan ini di dedikasikan untuk kemajuan freebsd di indonesia.
5. Dipersilahkan mengcopy atau memeperbanyak tulisan ini tanpa seijin saya demi kemajuan freebsd di Indonesia.

Spec Intel Desktop Server, Proc PIV 2.8 Ghz HDD SATA 120GB, RAM 1GB
FreeBSD 7.2-RELEASE/i386
squid-3.HEAD
Perls5.10
Apache 2.2
Lightsquid

Bissmillahirohmannirrohim

Install FreeBSD

Masukin CD Iso, buat slace HDD dan set Bootable Flag ( kalo lupa, ulang lagi lo )
mount partisi dan hasil nya :

Filesystem Size Used Avail Capacity Mounted on
/dev/ad4s1a 9.7G 143M 8.8G 2% /
devfs 1.0K 1.0K 0B 100% /dev
/dev/ad4s1d 15G 4.0K 14G 0% /cache
/dev/ad4s1g 3.7G 12K 3.4G 0% /tmp
/dev/ad4s1e 34G 1.1G 30G 4% /usr
/dev/ad4s1f 44G 12M 40G 0% /var

Lalu pilih Standart Installasi, Distribution [X] 6 Kern-Developer Full binaries and doc, kernel source only

lalu ikuti saja permintaan nya seperti :
IP, ssh_login, Time, PS/2, Browser Collection “no” lalu restart… SELESAI

edit file /etc/ssh/sshd_config
line :
#PermitRootLogin no
dirubah :
PermitRootLogin yes

Nah… saat nya FreeBSD di kawinin ma Ports nya pakai CVSUP

proxy# pkg_add -r cvsup-without-gui

Installation DONE.

proxy# cp /usr/share/examples/cvsup/ports-supfile /root/

proxy# ee ports-supfile
*default host=CHANGE_THIS.FreeBSD.org
ganti menjadi :
*default host=ftp.sg.FreeBSD.org

ganti CHANGE_THIS.FreeBSD.org dengan mirror yang kita inginkan, lihat di :
http://www.freebsd.org/doc/en/books/handbook/mirrors-ftp.html

proxy# cvsup -g -L 2 /root/ports-supfile

silahkan tunggu, di aku sekitar 30 menit

SELESAI deh, kita masuk tahap selanjut nya.

Compile Kernel

proxy# cd /usr/src/sys/i386/conf/

backup dulu file konfigurasi kernel nya :

proxy# cp GENERIC KERNELBARU

Kemudian Edit file konfigurasi KERNELBARU sesuai kebutuhan, Jangan lupa mengganti baris “ident” dari GENERIC menjadi KERNELBARU (sesuaikan dengan nama file konfigurasinya).
Untuk Hardware, bijaksana ajah yah, sesuaikan dengan kebutuhan
OPTION yang di tambah kan untuk menjalankan squid :

# untuk PF #
device pf
device pflog
device pfsync

# untuk optimasi squid #
options SYSVMSG
options MSGMNB=32768
options MSGMNI=164
options MSGSEG=8196
options MSGSSZ=512
options MSGTQL=2048

setelah itu :

proxy# config KERNELBARU
proxy# cd ../../compile/KERNELBARU
proxy# make cleandepend && make depend
proxy# make && make install

CELECEI…… REBUT…..

Install Perl5.10

proxy# cd /usr/ports/lang/perl5.10/
proxy# make install clean

Install Apache2.2

proxy# cd /usr/ports/www/apache22
proxy# make install clean

biar jalan setiap kali restart masukan parameter ke /etc/rc.conf
apache22_enable=”YES”

Install Squid

Buat group dan user yang akan di gunakan untuk menjalankan squid :

proxy# pw group add squid -g 100
proxy# pw user add squid -u 100 -g squid -s /usr/sbin/nologin -d /usr/local/squid
proxy# chown -Rv squid:squid /cache
proxy# cd /usr/local/
proxy# fetch http://www.squid-cache.org/Versions/v3/3.0/squid-3.0.STABLE18.tar.bz2
proxy# tar -zxvf ssquid-3.HEAD.tar.bz2
proxy# cd squid-3.0.STABLE18

proxy# ./configure -prefix=/usr/local/squid \
–enable-gnuregex \
–enable-async-io=24 –with-pthreads –with-aio –with-dl –with-aufs-threads=24 –with-pthreads \
-enable-pf-transparent \
–enable-ipfw-transparent \
-enable-storeio=aufs \
-enable-removal-policies=heap \
-enable-delay-pools \
-enable-underscores \
–enable-http-violations \
–enable-unlinkd \
-enable-snmp \
-enable-useragent-log \
-enable-htcp \
-enable-ssl \
-enable-icmp \
–enable-poll \
-enable-arp-acl \
-enable-cache-digests \
-enable-kill-parent-hack \
-enable-large-cache-files \
-enable-follow-x-forwarded-for \
-enable-default-err-languages=English \
-enable-err-languages=English \
-disable-ident-lookups \
-disable-hostname-checks \
-disable-wccpv2 \
-disable-wccp

proxy# make && make install

Setelah itu edit lah squid.conf sesuai dengan kebutuhan

proxy# ee /usr/local/squid/etc/squid.conf

ctt: squid conf aku pakai yang minimalis dulu, karena trial dan error, karena aku lihat masih ada permasalahan di sana sini, jadi kembangin ajah, kalo nemu yang ok, aku publish… atau kawan~ dah nemu kasih info yah, thx

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl localnet src 192.168.10.0/27
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access allow localhost
http_access deny all
http_port 8080 transparent
hierarchy_stoplist cgi-bin ?

cache_mem 6 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap LFUDA

cache_replacement_policy heap GDSF
cache_dir aufs /cache 10000 24 256
maximum_object_size 128 MB
cache_swap_low 90
cache_swap_high 95

access_log /var/log/squid/logs/access.log
cache_log /var/log/squid/logs/cache.log

coredump_dir /cache
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

cache_mgr webmaster@domainku.com-(0752-xxxxxx)
cachemgr_passwd squid-cache password
cache_effective_user squid
cache_effective_group squid

proxy# squid -z
2009/05/10 16:38:37| Creating Swap Directories

cek terlebih dahulu konfigurasi nya dengan perintah :

proxy# /usr/local/squid/sbin/squid -k parse
proxy# /usr/local/squid/sbin/squid -NCd1

setelah dirasa cukup, jalan kan squid :

proxy# /usr/local/squid/sbin/squid

dan untuk menjalankan perubahan config, dapat dengan perintah

proxy# /usr/local/squid/sbin/squid -k reconfigure

biar jalan setiap kali restart masukan parameter ke /etc/rc.conf

squid_enable=”YES”
pf_enable=”YES”

atau masukkan perintah /usr/local/squid/sbin/squid ke /etc/rc.local

lalu tambahkan di /etc/rc.local

chgrp squid /dev/pf && chmod g+rw /dev/pf

Cache Manager

CACHE MANAGER

If you want to use the WWW interface to the Cache Manager, copy
the cachemgr.cgi program into your httpd server’s cgi-bin
directory.

lalu tambahkan di httpd.conf :

AllowOverride None
Options None
Order allow,deny
Allow from all

Restart Semua service terkait

proxy# /usr/local/etc/rc.d/apache22 restart
proxy# /usr/local/etc/rc.d/squid restart

CIMIIW….

Install Lightsquid

Di kawinin ama ports nya ajah untuk lightsquid, gampang kok

==========================================================================================
Kesimpulan :

dari langkah di atas di dapat :

Connection information for squid:
Number of clients accessing cache: 11
Number of HTTP requests received: 733
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Number of HTCP messages received: 0
Number of HTCP messages sent: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 617.5
Average ICP messages per minute since start: 0.0
Select loop called: 1184 times, 9.109 ms avg
Cache information for squid:
Hits as % of all requests: 5min: 18.7%, 60min: 18.7%
Hits as % of bytes sent: 5min: 4.4%, 60min: 4.4%
Memory hits as % of hit requests: 5min: 0.0%, 60min: 0.0%
Disk hits as % of hit requests: 5min: 9.0%, 60min: 9.0%
Storage Swap size: 68374 KB
Storage Swap capacity: 0.7% used, 99.3% free
Storage Mem size: 4320 KB
Storage Mem capacity: 70.3% used, 29.7% free
Mean Object Size: 10.45 KB
Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 1.05672 1.05672
Cache Misses: 1.17732 1.17732
Cache Hits: 0.00000 0.00000
Near Hits: 0.80651 0.80651
Not-Modified Replies: 0.00000 0.00000
DNS Lookups: 0.00394 0.00394
ICP Queries: 0.00000 0.00000
Resource usage for squid:
UP Time: 101.662 seconds
CPU Time: 2.160 seconds
CPU Usage: 2.12%
CPU Usage, 5 minute avg: 1.89%
CPU Usage, 60 minute avg: 1.89%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 20872 KB
Page faults with physical i/o: 0
Memory accounted for:
Total accounted: 9917 KB
memPoolAlloc calls: 227328
memPoolFree calls: 194354
File descriptor usage for squid:
Maximum number of file descriptors: 11072
Largest file desc currently in use: 266
Number of file desc currently in use: 249
Files queued for open: 0
Available number of file descriptors: 10823
Reserved number of file descriptors: 100
Store Disk files open: 22
Internal Data Structures:
6617 StoreEntries
513 StoreEntries with MemObjects
467 Hot Object Cache Items
6546 on-disk objects

GOOD LUCK