Metoda Instalasi Mikrotik dengan Groovia Modem + STB

Topologi:

INTERNET----BRAS----MIDLEWARE
    |
    |
    |
MODEM GROOVIA+SPEEDY-------------------- STB (Set Top Box) -------TV
   |
   |
   |
MIKROTIK--------HUB------Client


Circuit & Port:
Speedy PVC/PVI ----> 8/81
Groovia PVC/PVI---> 8/88 atau 8/89

Tips & Trik:
1. Jika modem PPPoE, maka mikrotik harusnya difungsikan sebagai DHCP client.
Pilihan ini dipakai jika anda bermaksud ingin mengaktifkan fungsi wireless pada modem. Dengan cara ini, fungsi wireless akan tetap bisa dipakai tanpa koalisi tetapi tanpa managemen mikrotik, yang ter-manage mikrotik adalah client yang terkoneksi via mikrotik saja.

2. Jika modem bridge, maka mikrotik melakukan dialup ke Speedy.
Pilihan ini dipakai jika anda ingin mikrotik sepenuhnya memanagemen client, akan tetapi fungsi wireless pada modem harus dimatikan agar tidak terjadi koalisi koneksitas internet apabila ada client yang terhubung via wireless, terkecuali koneksi dengan username-password speedy yang berbeda.

3. Jika modem groovia diganti dengan modem yang lain, dijamin STB Grovia anda tidak bisa aktif karena sistem Telkom bekerja sesuai TSN modem dan TSN STB groovia.

Pengalaman saya, trik di atas adalah cara yang mudah bagi pemula.

Demikian semoga membantu.

Cara Install Squid Proxy Server di Ubuntu Server 10.10 dan 10.04

Saya anggap anda sudah paham cara install ubuntu server 10.10 atau 10.04.

Berikut konfigurasi partisi harddisk di ubuntu server dengan ukuran HDD 80GB:

1. /boot -----> 1Gb ext4 Boot Flag on
2. / ------> 3Gb ext4
3. /usr -----> 5Gb ext4
4. /var -----> 5Gb ext4
5. swap -----> 2Gb (2 x RAM di PC)
6. /cache -----> 50Gb ReiserFS (intel) atau BTRFS (AMD)
7. /home ------> sisanya jika ada

Langka-langkah:
1. Login ubuntu dengan putty
2. Jika belum membuat user root, ketik "sudo su", masukkan password ubuntu kamu, kemudian ketik "passwd" dan isikan password baru untuk root.
3. Silahkan copas sintak di bawah melalui putty:

sudo apt-get update
sudo apt-get install squid
sudo apt-get install squid squidclient squid-cgi
sudo apt-get install ccze

4. Stop squid-nya dengan perintah:

"squid stop" atau "/etc/init.d/squid stop" atau "service squid stop" jika tidak mau restart dulu PC-nya.

5. Edit squid.conf memakai winscp atau dengan perintah:

nano /etc/squid/squid.conf

Kemudian Copy-Paste isi squid.conf di bawah ini (sebelumnya backup dulu squid.conf yang asli:

# Port
http_port 3128 transparent
icp_port 3130
prefer_direct off

server_http11 on

# Cache

cache_mem 8 MB
cache_swap_low 98
cache_swap_high 99
max_filedesc 8192
maximum_object_size 128 MB
minimum_object_size 0 KB
maximum_object_size_in_memory 128 KB

ipcache_size 10240
ipcache_low 98
ipcache_high 99
fqdncache_size 4096
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF

cache_dir aufs /cache 30000 16 256 # untuk partisi /cache 50GB

cache_access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
pid_filename /var/run/squid.pid
cache_swap_log /var/log/squid/swap.state
dns_nameservers /etc/resolv.conf
emulate_httpd_log off
hosts_file /etc/hosts
half_closed_clients off
negative_ttl 1 minutes

acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 873 # https snews rsync
acl Safe_ports port 80 # http
acl Safe_ports port 20 21 # ftp
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 631 # cups
acl Safe_ports port 10000 # webmin
acl Safe_ports port 901 # SWAT
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 873 # rsync
acl Safe_ports port 110 # POP3
acl Safe_ports port 25 # SMTP
acl Safe_ports port 2095 2096 # webmail from cpanel
acl Safe_ports port 2082 2083 # cpanel

acl purge method PURGE
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports !SSL_ports
http_access deny CONNECT !SSL_ports !Safe_ports

# pictures & images
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private
refresh_pattern -i \.(xml|html|htm|js|txt|css|php)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth

#sound & video
refresh_pattern -i \.(flv|x-flv|mov|avi|qt|mpg|mpeg|swf)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache
refresh_pattern -i \.(wav|mp3|mp4|au|mid)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private

# files
refresh_pattern -i \.(iso|deb|rpm|zip|tar|tgz|ram|rar|bin|ppt|doc)$ 10080 90% 43200 ignore-no-cache ignore-auth
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth

# -- refresh pattern for specific sites -- #
refresh_pattern ^http://*.jobstreet.com.*/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache
refresh_pattern ^http://*.indowebster.com.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
refresh_pattern ^http://*.21cineplex.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
refresh_pattern ^http://*.atmajaya.*/.* 720 100% 10080 override-expire ignore-no-cache ignore-auth
refresh_pattern ^http://*.kompas.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.theinquirer.*/.* 720 100% 10080 override-expire ignore-no-cache ignore-auth
refresh_pattern ^http://*.blogspot.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.wordpress.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.photobucket.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.tinypic.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.imageshack.us/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.kaskus.*/.* 720 100% 28800 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://www.kaskus.com/.* 720 100% 28800 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detik.*/.* 720 50% 2880 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detiknews.*/*.* 720 50% 2880 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://video.liputan6.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static.liputan6.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.friendster.com/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache ignore-auth
refresh_pattern ^http://*.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://apps.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://profile.ak.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static.playspoon.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://cooking.game.playspoon.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern -i http://[^a-z\.]*onemanga\.com/? 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://media?.onemanga.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.yahoo.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.google.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.forummikrotik.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.linux.or.id/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth

#default option
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
refresh_pattern . 0 20% 4320

# ALLOWED ACCESS
acl localnet src 192.168.1.0/24 #IP lokal kamu
http_access allow localnet
http_access allow localhost
http_access deny all
http_reply_access allow all
icp_access allow localnet
icp_access allow localhost
icp_access deny all
always_direct deny all


cache_mgr admin@telkom.net.id
visible_hostname inilah-proxy-ku
cache_effective_user proxy
cache_effective_group proxy
coredump_dir /var/spool/squid
shutdown_lifetime 10 seconds
logfile_rotate 14

#-----------------------------------------------------------------#
#tcp_outgoing_tos 0x30 localnet
#-----------------------------------------------------------------#

zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

 Kode di atas lebih baik copy dulu ke notepad.

6. Stop lagi squid-nya dengan perintah:

"squid stop" atau "/etc/init.d/squid stop" atau "service squid stop" jika tidak mau restart dulu PC-nya.

7. Memberikan permission, ketik pada putty:

chown -R proxy.proxy /cache
chown proxy.proxy /var/log/squid/access.log 

8. Membuat swap, ketik pada putty:

squid -f /etc/squid/squid.conf -z
atau
squid -z

 9. Restart squid-nya:

"squid restart" atau "service squid restart" atau "/etc/init.d/squid restart", jika tidak bisa restart PC-nya.

10. Buka www.whatismyip.com, jika berhasil akan tertera keterangan IP public dengan proxy detected squid 2.7 stable.

Semoga anda bisa dan berhasil. Selamat mencoba.

CARA INSTALL UBUNTU SERVER UNTUK PROXY

Siapkan CD Linux Ubuntu 10.10 atau 10.04 untuk Intel atau untuk AMD
Jika mau pakai flashdisk lebih baik bootable-nya pakai universal usb installer atau pakai LiLi.
Contoh tutorial di bawah adalah untuk harddisk 80GB.

OKE, kita langsung saja pada tahap install:
1. Pilih language english
2. Pilih install ubuntu server
3. Choose langguage english
4. United states
5. "No" pada detect keyboard layout?
6. Pilih USA pada ubuntu installer main menu
7. Pilih USA pada keyboard layout
8. Continue pada configure the network
9. Configure network manually (isi misalnya: 192.168.7.2)
10. Netmask 255.255.255.0
11. Gateway 192.168.7.1
12. DNS name server addresses 192.168.7.1 203.130.193.74 8.8.8.8
13. Hotsname : myproxy
14. Domain name: kosongkan
15. Configure the clok pilih select from worldwide, pilih Jakarta
16. Menu partition disk pilih manual
17. Hapus dulu partisi yang lama
18. Guided partitioning-->manual
19. Create new partition pada free space
Ketik 1gb-->Primary-->Begining->use as = Ext4--> Mount point = /boot-> Mount options = noatime-->Bootable flag = on (jika tidak berubah menjadi on biarkan saja-->Done setting up the partition.
20. Create new partition lagi pada free space
ketik 17gb-->Logical-->Begining-->use as = Ext4-->Mount point = / -->Mount options = noatime-->Done setting up the partition
21. Pilih Create new partition lagi pada free space
ketik 2gb (2x ukuran ram di PC)-->Logcal-->Begining-->use as = swap area-->Done setting up the partition
22. Pilih Create new partition pada free space
ketik 5gb-->Logical-->Begining-->use as = Ext4-->Mount point = /var -->Mount options = noatime-->Done setting up the partition
23. Pilih Create new partition pada free space
ketik 5gb-->Logical-->Begining-->use as = Ext4-->Mount point = /usr -->Mount options = noatime-->Done setting up the partition
24. Pilih Create new partition pada free space

ketik 50gb-->Logical-->Begining-->use as = reseiferFS (intel) btrfs (AMD)-->Mount point = /cache -->Mount options = noatime dan no tail-->Done setting up the partition
25. Pilih Create new partition pada free space (sisanya)

ketik 5gb-->Logical-->Begining-->use as = Ext4-->Mount point = /home -->Mount options = noatime-->Done setting up the partition
26. Finis partitioning and write changes to disk, write the changes to disk, pilih yes
27. pada full name for the new user isi  myproxy, continue
28. pada Username for your account isi  myproxy, continue
29. pada a password for the new user isi 12345, continue
30. pada re-enter password to verify isi 12345, continue
31. pada use weak password pilih yes
32. pada encrypt your home directory pilih no
33. pada HTTP proxy information biarkan kosong, enter saja
34. pada configurasi apt 43% bila berhenti tekan enter, pada bila berhenti 81% tekan enter dan pilih no automatic update
35. pada choose software to install pilih OpenSSH server pilih continus pd finis the installation and
restart akan dimulai

SELESAI SUDAH.
Instalasi Ubuntu server untuk proxy server dengan Harddisk 80GB