PROXY DGN UBUNTU 10.10 64 bit btrFS

PROXY DGN UBUNTU 10.10 64 bit btrFS
Tutorial ini hanya untuk Newbie …
DW squid.conf disini : http://untuk-kamu.googlecode.com/fil…HE%20VIDEO.rar
atau di sini : http://code.google.com/p/untuk-kamu/downloads/list
Quote:
Langkah demi langkah (CPU Proxy jgn di hubungan ke Internet dulu saat instalasi, agar prosesnya cepat)

1. MASUKKAN CD UBUNTU KE CDROM DAN REBOOT KOMPUTERNYA ” hehehe…..
2. Pilih language english (enter)
3. Pilih instal ubuntu server (enter)
4. Tekan enter pada choose langguage english
5. Pilih united states
6. Klik no pada detect keyboard layout?
7. Klik USA pada ubuntu installer main menu
8. Klik USA pada keyboard layout
9. Klik continue pada configure the network
10. Pilih configure network manually isi ip address dg 192.168.3.1 pilih continue enter
11. Netmask 255.255.255.0 pilih continue enter
12. Gateway 192.168.3.254 terus klik continue
13. Name server addresses 192.168.3.254 pilih continue enter
14. Hotsnama : isi dg proxyku terus pilih continue enter
15. Domain name: di kosongin saja, pilih continue enter
16. Pada configure the clok pilih select from worldwide list terus cari jakarta terus enter
17. Pada menu partition disk pilih manual
18. Kita hapus partisi lama dulu :
19. Pilih partisi nya terus enter pilih delete the partion (ulangi perintah ini untuk semua partisi yg tersisa)
20. Jika telah selesai pilih Guided partitioning, kemudian pilih manual arahkan pada FREE SPACE (enter),
21. Pilih Create new partition (enter)
22. New partition size isi 1 GB (pilih continue dan enter), pilih Primary (enter), pilih Beginning (enter), pada use as pilih EXT4 (enter) pada Mount point pilih /boot (enter), pd mount option pilih[*] noatime (pilih continue dan enter), pada Bootable Flag rubah menjadi on JIKA STATUS NYA TDK BERUBAH ABAIKAN SAJA kemudian pilih done setting up the partition

23. New partition size isi 12 GB (pilih continue dan enter), pilih Primary (enter), pilih Beginning (enter), pada use as pilih EXT4 (enter) pada Mount point pilih / (enter), pd mount option pilih[*] noatime (pilih continue dan enter), kemudian pilih done setting up the partition

24. Arahkan pada FREE SPACE (enter), pilih Create new partition (enter) new partition size isi 1 gb sesuai kan dg besaran RAM (pilih continue dan enter), pilih Primary (enter), pilih Beginning (enter), pada use as pilih swap area (enter), kemudian Pilih done setting up the partition
25. Arahkan pada FREE SPACE (enter),
pilih Create new partition (enter) new partition size isi sisa semua harddisk (pilih continue dan enter), pilih Primary (enter), pilih Beginning (enter), pada use as pilih btrFS (enter), pada Moun point enter manually buat menjadi /cache, pd mount option pilih[*] noatime kemudian Pilih continue dan done setting up the partition
26. Kemudian pilih finis partitioning and write changes to disk, write the changes to disk pilih yes
27. pada full name for the new user isi dg proxyku, terus continue & enter
28. pada Username for your account isi dg proxyku, terus continue & enter
29. pada a password for the new user isi dg proxyku, terus continue & enter
30. pada re-enter password to verify isi dg proxyku, terus continue & enter
31. pada use weak password pilih yes
32. pada encrypt your home directory pilih no
33. pada HTTP proxy information KOSONGIN SAJA
34. pada configurasi apt 43% tekan enter, juga pada 81% tekan enter
pilih no automatic update
35.pada choose software to install pilih OpenSSH server
pilih continus pd finis the installation dan restart
PENTING….!!! setelah restart
# login dg proxyku
# password proxyku
# ketik sudo su -
# isi proxyku
# ketik passwd
# enter new UNIX password isi dg proxyku
# retype new UNIX password isi proxyku

Install Paket yg di butuhkan ( CPU harap di hubungkan ke Internet)
# sudo apt-get update
# sudo apt-get install squid squidclient squid-cgi
# sudo apt-get install gcc
# sudo apt-get install build-essential
# sudo apt-get install sharutils
# sudo apt-get install ccze
# sudo apt-get install libzip-dev
# sudo apt-get install automake1.9
Download Squid 7 Stable 9 di sini :

 #'"wget http://untuk-kamu.googlecode.com/files/squid-2.7.STABLE9%2Bpatch.tar.gz"'

# tar xvf squid-2.7.STABLE9+patch.tar.gz
# cd squid-2.7.STABLE9
# tahap compile nya :

./configure --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid \
--localstatedir=/var/spool/squid --datadir=/usr/share/squid --enable-async-io=24 --with-aufs-threads=24 --with-pthreads --enable-storeio=aufs \
--enable-linux-netfilter --enable-arp-acl --enable-epoll --enable-removal-policies=heap --with-aio --with-dl --enable-snmp \
--enable-delay-pools --enable-htcp --enable-cache-digests --disable-unlinkd --enable-large-cache-files --with-large-files \
--enable-err-languages=English --enable-default-err-language=English --with-maxfd=65536

kemudian :
# make
# sudo make install
Edit squid.conf
agar perintah sudo /etc/init.d/squid stop jalan di ubuntu 10.10
#copy file squid yg di download tadi ke /etc/init.d/
jgn lupa di :
#sudo chmod +x /etc/init.d/squid
# stop dulu squidnya :
sudo /etc/init.d/squid stop
#paste file squid.conf, dan storeurl.pl yg di download tadi kedalam folder /etc/squid —-> edit sesuai network juragan
• # Memberikan permission pada folder cache
Code:
chown proxy:proxy /cache
chmod 777 /cache
chown proxy:proxy /etc/squid/storeurl.pl
chmod 777 /etc/squid/storeurl.pl
• # Membuat folder-folder swap/cache di dalam folder cache yang telah ditentukan dg perintah :
squid -f /etc/squid/squid.conf -z
• Restart squid.
/etc/init.d/squid restart
Sisi Mikrotik-nya :

SET ip address=192.168.3.254/24 interface=squid
/ip firewall nat
add action=dst-nat chain=dstnat comment="transparent proxy" disabled=no \
dst-port=80,8080,3128 protocol=tcp src-address=!192.168.3.1 \
to-addresses=192.168.3.1 to-ports=3128

Reboot CPU Ubuntu, TAMAT.
Referensi : forummikrotik.com spesial tanks to teukurizal
NB :
Disisi Mikrotik:
agar mendapatkan Performa HIT tambahkan rule ini pada firawal mangle dan quee

/ip fi ma
add action=mark-packet chain=forward  dscp=12 in-interface=proxy new-packet-mark=proxy-hit passthrough=no
protocol=tcp

link file pendukung silahkan di ambil disini :
http://untuk-kamu.googlecode.com/files/tunning%20squid-2.7%20stable%209.rar
Instal webmin (pendung GUI nya untuk mantau cache dan remote etc) referensi dari bang uburcumi dan adilesmana forummikrotik.com 1. Instal dulu beberapa paket yg di butuhkan :

aptitude -y install perl libnet-ssleay-perl openssl libauthen-pam-perl libpam-runtime libio-pty-perl libmd5-perl apt-show-versions libapt-pkg-perl

2. Download dulu source webmin :

wget hxxp://sourceforge.net/projects/webadmin/files/webmin/1.520/webmin_1.520_all.deb/download?use_mirror=biznetnetworks

3. Install source webmin :

dpkg -i download?use_mirror=biznetnetworks
kalo gak running, coba yg ini, atau lebih pastinya cek pake winscp nama file yg telah di download tadi
dpkg -i webmin_1.520_all.deb

4. Oke 3 langkah selesai
5. Sekarang bikin NAT di MikroTik biar webmin bisa di akses dari luar jaringan
Quote:

/ip firewall nat
add chain=dstnat protocol=tcp dst-port=804 action=dst-nat to-address=192.168.3.2 to-ports=10000

Credit by : tengkurizal, adilesmana, uburcumi

http://ab-intermedia.com

Read More

Mikrotik + Squid Optimal Game dan Poker

Halo... blogge.. numpang lewat mau posting soal squid dari pada gue lupa, gue posting aja di blog gue, makasih ya buat http://ab-intermedia.com dah ngasih pencerahan.

Seblumnya saya berterma kasih sekali kepada sodara teukurizal yang telah berbagai ilmunya dalam tutorial ini. Setting ini sudah diterapkan dan berjalan dengan cukup mengesankan… implementasi lebih mudah dan simpel.

berikut Kebutuhan perlengkapan yang saya gunakan :
Mikrotik RB750G
Ubuntu Server ver 10.10
2 Line Speedy Office 1Mb dan Exsekutif 2Mb

SISI MIKROTIK :

/ip adrress

- 192.168.1.1/24 interface lan
- 192.168.2.1/24  interface modem-1
- 192.168.3.1/24  interface modem-2
- 192.168.4.1/24 interface proxy

catatan : - dial lewat mikrotik dgn modem sbg brigde
           - ip mesin ubuntu 192.168.4.5

PROXY HIT

Code:

/ip firewall mangle

add action=mark-packet chain=prerouting comment=proxy-hit disabled=no dscp=12 \
 new-packet-mark=proxy-hit passthrough=yes

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 \
 max-limit=0 name=HIT packet-mark=proxy-hit parent=global-out priority=1 \
 queue=default

PCC RULE MARK ALL PPPoE CONN

Code:

/ip firewall mangle
add action=mark-connection chain=input comment=\
 "PCC RULE ---- MARK ALL PPPoE CONN" connection-state=new disabled=no \
 in-interface=pppoe_1 new-connection-mark=pppoe1_conn passthrough=yes

add action=mark-connection chain=input comment="" connection-state=new \
 disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \
 passthrough=yes

add action=mark-connection chain=prerouting comment="" connection-state=\
 established disabled=no in-interface=pppoe_1 new-connection-mark=\
 pppoe1_conn passthrough=yes

add action=mark-connection chain=prerouting comment="" connection-state=\
 established disabled=no in-interface=pppoe_2 new-connection-mark=\
 pppoe2_conn passthrough=yes

add action=mark-connection chain=prerouting comment="" connection-state=\
 related disabled=no in-interface=pppoe_1 new-connection-mark=pppoe1_conn \
 passthrough=yes

add action=mark-connection chain=prerouting comment="" connection-state=\
 related disabled=no in-interface=pppoe_2 new-connection-mark=pppoe2_conn \
 passthrough=yes

add action=mark-routing chain=output comment="" connection-mark=pppoe1_conn \
 disabled=no new-routing-mark=pppoe_1 passthrough=no

add action=mark-routing chain=output comment="" connection-mark=pppoe2_conn \
 disabled=no new-routing-mark=pppoe_2 passthrough=no

PCC RULE MARK HTTP CONN

Code:

/ip firewall mangle

add action=mark-connection chain=prerouting comment=\
 "PCC RULE MARK HTTP CONN" connection-state=established disabled=no \
 dst-address-type=!local dst-port=80 in-interface=proxy \
 new-connection-mark=http_pppoe_1 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp

add action=mark-connection chain=prerouting comment="" connection-state=\
 established disabled=no dst-address-type=!local dst-port=80 in-interface=\
 proxy new-connection-mark=http_pppoe_2 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp

add action=mark-connection chain=prerouting comment="" connection-state=\
 related disabled=no dst-address-type=!local dst-port=80 in-interface=\
 proxy new-connection-mark=http_pppoe_1 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp

add action=mark-connection chain=prerouting comment="" connection-state=\
 related disabled=no dst-address-type=!local dst-port=80 in-interface=\
 proxy new-connection-mark=http_pppoe_2 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp

PCC RULE MARK NON HTTP CONN

Code:

/ip firewall mangle

add action=mark-connection chain=prerouting comment=\
 "PCC RULE ---- MARK - NON -HTTP CONN" connection-state=established \
 disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
 new-connection-mark=non.http_pppoe_1 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp

add action=mark-connection chain=prerouting comment="" connection-state=\
 established disabled=no dst-address-type=!local dst-port=!80 \
 in-interface=lan new-connection-mark=non.http_pppoe_2 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp

add action=mark-connection chain=prerouting comment="" connection-state=\
 related disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
 new-connection-mark=non.http_pppoe_1 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/0 protocol=tcp

add action=mark-connection chain=prerouting comment="" connection-state=\
 related disabled=no dst-address-type=!local dst-port=!80 in-interface=lan \
 new-connection-mark=non.http_pppoe_2 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/1 protocol=tcp

add action=mark-connection chain=prerouting comment="" connection-state=\
 established disabled=no dst-address-type=!local in-interface=lan \
 new-connection-mark=non.http_pppoe_1 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/0 protocol=udp

add action=mark-connection chain=prerouting comment="" connection-state=\
 established disabled=no dst-address-type=!local in-interface=lan \
 new-connection-mark=non.http_pppoe_2 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/1 protocol=udp

add action=mark-connection chain=prerouting comment="" connection-state=\
 related disabled=no dst-address-type=!local in-interface=lan \
 new-connection-mark=non.http_pppoe_1 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/0 protocol=udp

add action=mark-connection chain=prerouting comment="" connection-state=\
 related disabled=no dst-address-type=!local in-interface=lan \
 new-connection-mark=non.http_pppoe_2 passthrough=yes \
 per-connection-classifier=both-addresses-and-ports:2/1 protocol=udp

PCC RULE MARK HTTP dan NON HTTP ROUTE

Code:

/ip firewall mangle

add action=mark-routing chain=prerouting comment=\
 "PCC RULE ---- MARK - HTTP ROUTE" connection-mark=http_pppoe_1 disabled=\
 no new-routing-mark=pppoe_1 passthrough=yes

add action=mark-routing chain=prerouting comment="" connection-mark=\
 http_pppoe_2 disabled=no new-routing-mark=pppoe_2 passthrough=yes

add action=mark-routing chain=prerouting comment=\
 "PCC RULE  MARK NON HTTP ROUTE" connection-mark=non.http_pppoe_1 \
 disabled=no new-routing-mark=pppoe_1 passthrough=yes

add action=mark-routing chain=prerouting comment="" connection-mark=\
 non.http_pppoe_2 disabled=no new-routing-mark=pppoe_2 passthrough=yes

NAT

Code:

/ip firewall nat
add action=masquerade chain=srcnat comment=MASQUERADE1 disabled=no \
 out-interface=pppoe_1

add action=masquerade chain=srcnat comment=MASQUERADE2 disabled=no \
 out-interface=pppoe_2

add action=masquerade chain=srcnat comment=MASQUERADE3 disabled=no \
 out-interface=proxy

add action=dst-nat chain=dstnat comment=TRANSPARENT-DNS disabled=no dst-port=\
 53 in-interface=lan protocol=udp to-ports=53

add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
 in-interface=lan protocol=tcp to-ports=53

add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
 in-interface=proxy protocol=udp to-ports=53

add action=dst-nat chain=dstnat comment="" disabled=no dst-port=53 \
 in-interface=proxy protocol=tcp to-ports=53

add action=dst-nat chain=dstnat comment=TRANSPARENT-proxy disabled=no \
 dst-address-list=!proxyNET dst-port=80,8080,3128 in-interface=lan \
 protocol=tcp to-addresses=192.168.4.5 to-ports=3128

add action=dst-nat chain=dstnat comment="REMOTE PROXY ssh" disabled=no \
 dst-address=118.96.132.xxx dst-port=22 protocol=tcp to-addresses=\
 192.168.4.5 to-ports=22
add action-dst-nat chain=dstnat comment="REMOTE WEBMIN" disabled=no \
 dst-address=118.96.132.xxx dst-port=21212 protocol=tcp to-addresses=\
 192.168.4.5 to-ports=10000

ADDRESS LIST

Code:

/ip firewall address-list
add address=192.168.1.0/24 comment="" disabled=no list=lanNET
add address=192.168.4.0/24 comment="" disabled=no list=proxyNET

ROUTE

Code:

/ip route
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
 pppoe_1 routing-mark=pppoe_1 scope=30 target-scope=10
add check-gateway=ping disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\
 pppoe_2 routing-mark=pppoe_2 scope=30 target-scope=10
add check-gateway=ping comment=Default-Route-pppoe1-Distance-1 disabled=no \
 distance=1 dst-address=0.0.0.0/0 gateway=pppoe_1 scope=30 target-scope=10
add check-gateway=ping comment=Default-Route-pppoe2-Distance-2 disabled=no \
 distance=2 dst-address=0.0.0.0/0 gateway=pppoe_2 scope=30 target-scope=10

Kita lanjut pada sisi proxy-nya
Partisi HDD

Code:

Dari harddisk 160Gb dibagi sebagai berikut:
/boot 1Gb ext4 Boot Flag Boot
/ 4Gb ext4 System
/usr 4Gb ext4 Static Variable
/var 4Gb ext4 Variable
swap 1Gb swap (1 x besaran RAM)
/home/proxy1 20 Gb /ReiserFS
/home/proxy2 20 Gb /ReiserFS
/home/proxy3 20 Gb /ReiserFS
/home/share (sisanya) ext4 Share Documents

Install Paket

Code:

- sudo apt-get update
- sudo apt-get install squid
- sudo apt-get install squid squidclient squid-cgi
- sudo apt-get install ccze

setelah selesai install paket lakukan edit squid.conf

dgn lokasi : /etc/squid/squid.conf

menjadi :

SQUID.CONF

Code:

#-----------------------------------#
# Proxy Server Versi 2.7.Stable7
# by ksh_boled@yahoo.com
# update 25 Juni 2010
#-----------------------------------#

#---------------------------------------------------------------#
# Port
#---------------------------------------------------------------#

http_port 3128 transparent
icp_port 3130
prefer_direct off

#---------------------------------------------------------------#
# Mengatasi Facebook Blank setelah login
#---------------------------------------------------------------#

server_http11 on

#---------------------------------------------------------------#
# Cache & Object
#---------------------------------------------------------------#

cache_mem 8 MB
cache_swap_low 98
cache_swap_high 99
max_filedesc 8192
maximum_object_size 128 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 128 KB

ipcache_size 10240
ipcache_low 98
ipcache_high 99
fqdncache_size 4096
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

#----------------------------------------------------------------#
# cache_dir    
#----------------------------------------------------------------#

cache_dir aufs /home/proxy1 16000 28 256
cache_dir aufs /home/proxy2 16000 28 256
cache_dir aufs /home/proxy3 16000 28 256

cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
pid_filename /var/run/squid.pid
cache_swap_log /var/log/squid/swap.state
dns_nameservers /etc/resolv.conf
emulate_httpd_log off
hosts_file /etc/hosts
half_closed_clients off
negative_ttl 1 minutes

#---------------------------------------------------------------#
# Rules: Safe Port
#---------------------------------------------------------------#

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 873 # https snews rsync
acl Safe_ports port 80 # http
acl Safe_ports port 20 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 631 # cups
acl Safe_ports port 10000 # webmin
acl Safe_ports port 901 # SWAT
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 873 # rsync
acl Safe_ports port 110 # POP3
acl Safe_ports port 25 # SMTP
acl Safe_ports port 2095 2096 # webmail from cpanel
acl Safe_ports port 2082 2083 # cpanel

acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports !SSL_ports
http_access deny CONNECT !SSL_ports !Safe_ports

#---------------------------------------------------------------#
# Refresh Pattern
#---------------------------------------------------------------#

# pictures & images
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private
refresh_pattern -i \.(xml|html|htm|js|txt|css|php)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth

#sound, video multimedia
refresh_pattern -i \.(flv|x-flv|mov|avi|qt|mpg|mpeg|swf)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache
refresh_pattern -i \.(wav|mp3|mp4|au|mid)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private

# files
refresh_pattern -i \.(iso|deb|rpm|zip|tar|tgz|ram|rar|bin|ppt|doc)$ 10080 90% 43200 ignore-no-cache ignore-auth
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth

# -- refresh pattern for specific sites -- #
refresh_pattern ^http://*.jobstreet.com.*/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache
refresh_pattern ^http://*.indowebster.com.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
refresh_pattern ^http://*.21cineplex.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
refresh_pattern ^http://*.atmajaya.*/.* 720 100% 10080 override-expire ignore-no-cache ignore-auth
refresh_pattern ^http://*.kompas.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.theinquirer.*/.* 720 100% 10080 override-expire ignore-no-cache ignore-auth
refresh_pattern ^http://*.blogspot.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.wordpress.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.photobucket.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.tinypic.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.imageshack.us/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.kaskus.*/.* 720 100% 28800 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://www.kaskus.com/.* 720 100% 28800 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detik.*/.* 720 50% 2880 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detiknews.*/*.* 720 50% 2880 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://video.liputan6.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static.liputan6.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.friendster.com/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache ignore-auth
refresh_pattern ^http://*.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://apps.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://profile.ak.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static.playspoon.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://cooking.game.playspoon.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern -i http://[^a-z\.]*onemanga\.com/? 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://media?.onemanga.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.yahoo.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.google.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.forummikrotik.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.linux.or.id/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

#default option
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

#---------------------------------------------------------------#
# ALLOWED ACCESS
#---------------------------------------------------------------#

acl proxyku src 192.168.4.0/24
http_access allow proxyku
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow proxyku
icp_access allow localhost
icp_access deny all
always_direct deny all

#---------------------------------------------------------------#
# Cache CGI & Administrative
#---------------------------------------------------------------#

cache_mgr webmaster@ab-intermedia.com
visible_hostname ab-intermedia.com
cache_effective_user proxy
cache_effective_group proxy
coredump_dir /var/spool/squid
shutdown_lifetime 10 seconds
logfile_rotate 14

#-----------------------------------------------------------------#
#tcp_outgoing_tos 0x30 localnet
#-----------------------------------------------------------------#

zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

Langkah berikut nya :

Code:

stop squid dgn perintah  "squid stop"

Memberikan permission pada folder cache
chown -R proxy.proxy /home/proxy1
chown -R proxy.proxy /home/proxy2
chown -R proxy.proxy /home/proxy3
chown proxy.proxy /var/log/squid/access.log

Membuat folder-folder swap/cache di dalam
folder cache yang telah ditentukan
squid -f /etc/squid/squid.conf -z

Restart squid.
squid restart

untuk setup webmin :

1. ketikan perintah “vi /etc/apt/sources.list“
2. setelah terbuka isikan baris berikut ini pada baris yang paling bawah : “deb http://download.webmin.com/download/repository sarge contrib”
3. Setelah itu tutup dan simpan dengan mengetikkan “:wq” (tanpa tanda kutip)
4. Lakukan update source dengan mengetikkan “apt-get update” (tanpa tanda kutip), Tunggu sampai selesai
5. lalu instal webmin dengan mengetikkan “apt-get install webmin” tekan Y/yes jika ada pertanyaan
6. Tunggu dan nikmati aplikasi bantu server anda

ok sampai disini semoga bisa membantu semua….
sukses jangan lupa komentarnya ya…
sumber : http://www.forummikrotik.com/

Read More