RSS

Mudahnya configurasi Router Mikrotik hanya dengan 5 menit

08.21 | Label:

langkah petama untuk menconfigurasi router mikrotik agar bisa terkoneksi internet anda harus membutuhkan 

1.    IP public contoh 202.158.10.2/30 

2.    IP LAn contoh 192.168.1.1/24 (range ip 192.168.1.2-20 yang mau di sett)


3.    DNS contoh 202.158.3.7       ( ini dns isp)


4.    IP gateway public misal 202.158.10.1

5.   Setting Natnya 

6.   limit bandwidt 512 kbps local dan 256 kbps international

===============================================================================

mari kita mulai untuk terapkan langkah 1- 5 itu 

sebelumnya anda harus download program sing arane winbox buat config ke  mikrotik download disini ya ..

http://mikrotik.co.id/download.php

trus langkah buka winbox lalu scan mac address akan tampil mac address pilih mac address mikrotik anda lalu klik connect pastiin kabel utpnya dari rouer mikrotik ke pc anda terkoneksi baik gambarnya serperti ini :



ini adalah settingan dasar mikrotik sampe anda bisa konek ke internet.. untuk menyetting router mikrotik ini .. hehe



Pertama buat/set ip publik dulu ke ether 1 atau juga di sebut IP WAN dengan cara copy ini di new terminal yang berada di dalam Winbox

[sourcecode language="css"]
ip address add address=202.158.10.2/30 netmask=255.255.255.252 interface=ether1
[/sourcecode]

Lalu tinggal Set IP gateway LAN copy ini

[sourcecode language="css"]
ip address add address=192.168.1.1/24 netmask=255.255.255.0 interface=ether2
[/sourcecode]

lalu copy juga ini

[sourcecode language="css"]

/ system clock
set time-zone-name=Asia/Jakarta
/ system ntp client set primary-ntp=207.46.197.32 secondary-ntp=192.43.244.18 \ mode=unicast enabled=yes
/ ip dns set allow-remote-requests=yes primary-dns=202.158.3.7 secondary-dns=202.158.3.6
/ ip route add gateway=202.158.10.1
/ ip firewall mangle
add chain=prerouting in-interface=ether2 dst-address-list=nice action=mark-connection new-connection-mark=conn-iix passthrough=yes
add chain=prerouting in-interface=ether2 dst-address-list=!nice action=mark-connection new-connection-mark=conn-intl passthrough=yes
add chain=prerouting connection-mark=conn-iix action=mark-packet new-packet-mark=indonesia passthrough=no
add chain=output connection-mark=conn-iix action=mark-packet new-packet-mark=indonesia passthrough=no
add chain=prerouting connection-mark=conn-intl action=mark-packet new-packet-mark=overseas passthrough=no
add chain=output connection-mark=conn-intl action=mark-packet new-packet-mark=overseas passthrough=no
/ queue simple
add name="iix-2" target-addresses=192.168.1.2/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-2" target-addresses=192.168.1.2/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-3" target-addresses=192.168.1.3/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-3" target-addresses=192.168.1.3/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-4" target-addresses=192.168.1.4/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-4" target-addresses=192.168.1.4/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-5" target-addresses=192.168.1.5/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-5" target-addresses=192.168.1.5/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-6" target-addresses=192.168.1.6/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-6" target-addresses=192.168.1.6/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-7" target-addresses=192.168.1.7/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-7" target-addresses=192.168.1.7/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-8" target-addresses=192.168.1.8/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-8" target-addresses=192.168.1.8/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-9" target-addresses=192.168.1.9/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-9" target-addresses=192.168.1.9/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-10" target-addresses=192.168.1.10/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-10" target-addresses=192.168.1.10/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-11" target-addresses=192.168.1.11/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-11" target-addresses=192.168.1.11/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-12" target-addresses=192.168.1.12/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-12" target-addresses=192.168.1.12/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-13" target-addresses=192.168.1.13/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-13" target-addresses=192.168.1.13/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-14" target-addresses=192.168.1.14/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-14" target-addresses=192.168.1.14/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-15" target-addresses=192.168.1.15/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-15" target-addresses=192.168.1.15/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-16" target-addresses=192.168.1.16/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-16" target-addresses=192.168.1.16/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-17" target-addresses=192.168.1.17/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-17" target-addresses=192.168.1.17/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-18" target-addresses=192.168.1.18/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-18" target-addresses=192.168.1.18/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-19" target-addresses=192.168.1.19/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-19" target-addresses=192.168.1.19/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
add name="iix-20" target-addresses=192.168.1.20/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=indonesia \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=512000/512000 total-queue=default-small
add name="int-20" target-addresses=192.168.1.20/32 dst-address=0.0.0.0/0 interface=all parent=none packet-marks=overseas \
direction=both priority=8 queue=default/default limit-at=0/0 max-limit=256000/256000 total-queue=default-small
/ ip firewall filter
add chain=forward in-interface=ether2 src-address=192.168.1.2 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.3 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.4 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.5 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.6 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.7 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.8 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.9 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.10 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.11 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.12 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.13 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.14 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.15 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.16 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.17 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.18 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.19 action=accept
add chain=forward in-interface=ether2 src-address=192.168.1.20 action=accept
add chain=forward in-interface=ether2 action=drop
/ ip firewall nat
add chain=srcnat src-address=192.168.1.0/24 action=src-nat \
to-addresses=202.158.10.2 to-ports=0-65535 comment="" disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6110 \
action=dst-nat to-addresses=192.168.1.2 to-ports=6110 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6111 \
action=dst-nat to-addresses=192.168.1.3 to-ports=6111 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6112 \
action=dst-nat to-addresses=192.168.1.4 to-ports=6112 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6113 \
action=dst-nat to-addresses=192.168.1.5 to-ports=6113 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6114 \
action=dst-nat to-addresses=192.168.1.6 to-ports=6114 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6115 \
action=dst-nat to-addresses=192.168.1.7 to-ports=6115 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6116 \
action=dst-nat to-addresses=192.168.1.8 to-ports=6116 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6117 \
action=dst-nat to-addresses=192.168.1.9 to-ports=6117 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6118 \
action=dst-nat to-addresses=192.168.1.10 to-ports=6118 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6119 \
action=dst-nat to-addresses=192.168.1.11 to-ports=6119 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6120 \
action=dst-nat to-addresses=192.168.1.12 to-ports=6120 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6121 \
action=dst-nat to-addresses=192.168.1.13 to-ports=6121 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6122 \
action=dst-nat to-addresses=192.168.1.14 to-ports=6122 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6123 \
action=dst-nat to-addresses=192.168.1.15 to-ports=6123 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6124 \
action=dst-nat to-addresses=192.168.1.16 to-ports=6124 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6125 \
action=dst-nat to-addresses=192.168.1.17 to-ports=6125 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6126 \
action=dst-nat to-addresses=192.168.1.18 to-ports=6126 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6127 \
action=dst-nat to-addresses=192.168.1.19 to-ports=6127 comment="" \
disabled=no
add chain=dstnat dst-address=202.158.10.2 protocol=tcp dst-port=6128 \
action=dst-nat to-addresses=192.168.1.20 to-ports=6128 comment="" \
disabled=no

[/sourcecode]

agar port 3-5 berfungsi sebagai lan buat master port diarahkan ke ether2 copy ini

[sourcecode language="css"]
/ interface ethernet set ether3 master-port=ether2
/ interface ethernet set ether4 master-port=ether2
/ interface ethernet set ether5 master-port=ether2
[/sourcecode]

Note : copy semua yang ada di atas lalu masukin di notepad lalu find and replace dengan cara Ctrl+R paling cuma ganti IP public, IP gateway publik dan IP Dns server

http://ixp.mikrotik.co.id/download/nice.rsc Ctl + A aja biar ke blok semua lalu copy lalu paste in di terminal mikrotik lalu enter gampangkan  oh yaa buat yang masih bingung terminal bukan terminal bis ya heheh  penulis coba mengajarkan sampe tingkat tk sd juga ngerti heheh ini loh terminal 

WAH WAH DI JAMIN ANDA PASTI BISSSAAAAA.....JADI TUKANG IT SEMPROTT

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(1)
Diposting oleh Unknown

download software

07.01 | Label:

download

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Installing Centos 5.5 + asterisk and FreePBX.

09.51 | Label: ,

http://www.youtube.com/watch?v=j1i-eii3mac

cd /
cd opt/
wget http://www.phillip-cooper.co.uk/centos/asterisk-install.sh
chmod 777 asterisk-install.sh
./asterisk-install.sh


yum -y install freepbx

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

configure cctv

09.16 | Label:



hanya mengarahkan di ip >firewall > nat di port forwading di router

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

setting point to point ubnt

08.47 | Label:

SETTING UBNT SISI AP













SISI CLIENT

===========











  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Restore a configuration file from a TFTP server with Packet Tracer -Cisco CCNA

08.20 | Label: ,

http://www.youtube.com/watch?v=5TBUALTxrtI&feature=relmfu

cara back up file ke tftp server dan restore dari tftp server ke router

UNTUK MEMBACK UP KE TFTP SERVER

==============================

copy startup-config tftp
192.18.1.254                                    (ini IP komputer yang ada tftp servernya)
dans-config                                       (nama file)

sh version                    (untuk melihat versi ios)

 

==================

UNTUK NGOPI IOSNYA

===================

 

copy flash tftp
pt1000-mz.122--28.bin
192.168.1.254
dansIOS

 

COBA DIHAPUS CONFIGURE YANG LAMA DG

erase startup-config
reload

 

COPY FILE DARI FTTP SERVER KE ROUTER

copy tftp running-config
192.168.1.254
dans-config
enter aja

 

jangan lupa di routernya harus di kasih IP dulu yang satu network dengan tftp servernya contoh 192.168.1.1

 

 

 

 

 

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

SETTING PCQ

14.17 | Label:

langkah pertama ada harus buat mangle nya di ip >firewall>mangle



lalu setting di queue langkahnya seperti dibawah ini



setting pcq hanya cocok untuk user yang banyak tapi hanya sedikit yang sering di gunakan sehingga kalau hanya beberapa pc yang hidup limitan di router akan di bagi rata dan akan menerima bandwidth besar

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

bandwidth management hotel

13.59 | Label:

 

CONTOH   SETTINGAN      QUEUE TREE



 

 

CONTOH SETTINGAN HOTSPOT MANAGEMENT



 

 

 

CONTOH YOUTUBE DI KASIH BW SENDIRI

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

MRTG catching

21.46 | Label: ,

MRTG catching

belajar membuat mrtg

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Installing Cacti on CentOS 5.5 tutorial

21.32 | Label:

Installing Cacti on CentOS 5.5 tutorial

Published on November 19th, 2010

CentOS LogoCacti Logo In this tutorial we will be installing Cacti on CentOS 5.5 using the LCMP stack(Linux, Cherokee, MySQL and PHP).

What is Cacti? Cacti is a complete network, server and application graphing solution harnessing the power of RRDtool OpenSource industry standard, high performance data logging and graphing.

So before we start just some general house keeping. The base CentOS 5.5 server hostname and IP address that we’ll be using in this tutorial:

* centos01.how2centos.com (IP 10.0.0.3)

The Cacti server will eventually be available on http://cacti.how2centos.com

The assumption, for this Cacti and CentOS 5.5 tutorial, is that you are running as root and have a medium understanding of the software required or you’re Awesome.

# yum install yum-priorities

# rpm -Uhv http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
# rpm -Uvh http://download.fedora.redhat.com/pub/epel/5/i386/epel-release-5-4.noarch.rpm
# rpm -Uvh http://dl.iuscommunity.org/pub/ius/stable/Redhat/5/i386/ius-release-1.0-8.ius.el5.noarch.rpm

Install Cherokee web server

# yum install cherokee rrdtool

Install PHP 5.3

# yum install php53u-pear php53u php53u-cli php53u-common php53u-devel php53u-gd php53u-mbstring php53u-mcrypt php53u-mysql php53u-pdo php53u-soap php53u-xml php53u-xmlrpc php53u-bcmath php53u-pecl-apc php53u-pecl-memcache php53u-snmp

Install MySQL and MySQL Server

# yum install mysql mysql-server

Install SNMP

# yum install net-snmp net-snmp-utils

Install Cacti

# yum install cacti

Configure snmpd, move snmpd.conf and create a new one. The ‘snmpuser’ is what you’ll use later in the Cacti interface.

# mv /etc/snmp/snmpd.conf /etc/snmp/snmpd.conf.old
# echo "rocommunity snmpuser" > /etc/snmp/snmpd.conf

Let make sure that everything is added to runlevels 2, 3, 4 and start them up.

# chkconfig mysqld on
# chkconfig snmpd on
# chkconfig cherokee on

# service mysqld start
# service snmpd start
# service cherokee start

Create ‘cacti’ MySQL database and grant privileges to ‘cactiuser’ with password ‘cactipassword’

# mysql
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 14323
Server version: 5.0.77 Source distribution

Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the buffer.

mysql>create database cacti;
mysql>GRANT ALL ON cacti.* TO cactiuser@localhost IDENTIFIED BY 'cactipassword';
mysql>quit

Import the Cacti database schema

# mysql -ucactiuser -pcactipassword cacti < /var/www/cacti/cacti.sql

Configure Cacti with the details above.

# vi /var/www/cacti/include/config.php

1
2
3
4
5
6
7
/* make sure these values refect your actual database/host/user/password */
$database_type = "mysql";
$database_default = "cacti";
$database_hostname = "localhost";
$database_username = "cactiuser";
$database_password = "cactipassword";
$database_port = "3306";

Once all that has been done time to get PHP 5.3 working with Cherokee and then adding the Cacti virtual server.

Firstly lets get PHP 5.3 working with Cherokee

# cherokee-admin -b

Finally add the Cacti virtual server and browser to the URL and follow the onscreen instuctions.

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

blok script bokep

20.33 | Label:

Ringkasan ini tidak tersedia. Harap klik di sini untuk melihat postingan.

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

contoh setting Queue tree per client

16.04 | Label:

Image

Image

Image

 

yang harus di setting mangle, di queue treenya,

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Cara setting Queue tree

15.07 | Label:

Image

 

yang harus di setting mangle, di queue treenya,

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Mikrotik Script

11.04 | Label:

http://www.clovanzo.com/util/create_dota_mikrotik.php

Mikrotik Script Maker



Movzx ideas as the Leader of kocok jaya team he create Mikrotik script.Screenshot :















Download :
- IX
- IIX


Info :
Filename : MikrotikScriptMaker.exe
Version : 1.1.0.11
Filesize : 66.5 KB (68,096 bytes)
CRC32 : 39b3d082
MD5 : c05b4d007c495ca6cf661431b82423b9
SHA128 : 9ec6361089f19cf80d2ea830211f5f5af55dd5dc

KJTeam Partner Download

Info :
Filename : mikrotikscriptmaker.exe
Version : 1.1.0.12
Filesize : 66.5 KB (68,096 bytes)
CRC32 : 7ea7a8f6
MD5 : 8272366ae63f2bdec7e9098fada72656
SHA128 : 2914aa55f5610de4eff27b6fd34d10d50f68ff0f


  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Setting Zimbra di Ubuntu

10.51 | Label:








Membuat Server Email di Ubuntu menggunakan Zimbra


Posted on 11 October 2009 by aanxu

Post Pic

Pada 15 Jul 2009, di Seri Tutorial, oleh Cecep Mahbub



Membuat server email di Ubuntu sekarang menjadi lebih mudah dengan adanya zimbra. Zimbra sendiri sudah memiliki fitur yang sangat lengkap, mulai dari MTA (mail transfer agent) yang dilengkapi dengan fitur anti spam dan anti virus, IMAP/POP3, webmail dan fitur

kolaborasi lainnya. Di tulisan ini, kita akan belajar instalasi awal zimbra di Ubuntu.


Sebelum Anda melanjutkan membaca tulisan ini, ada baiknya Anda tidak melewatkan seri tutorial DNS Server dengan Bind9 (1, 2 dan 3). Karena dalam instalasi zimbra, Anda harus memahami bagaimana cara membuat sebuah hostname bisa di resolve dengan baik dan bagaimana membuat entri mx record.

Saat tulisan ini dibuat, rilis terbaru zimbra untuk versi 5, adalah 5.0.18, dan untuk versi ini zimbra hanya menyediakan installer untuk

distro RHEL 4/5, Fedora 7, Debian 4, MacOS 10.4/10.5, openSUSE 10.2, SLES 10, Ubuntu 6.06/8.04 LTS.

Dan untuk tutorial kali ini, kita akan menggunakan Ubuntu 8.04 (Hardy Heron). Instalasi ubuntu diasumsikan menggunakan instalasi default ubuntu 8.04 server edition.

Mengkonfigurasi berkas /etc/hosts


Zimbra mensyaratkan hostname bisa diresolve dengan baik, sekarang coba Anda sunting berkas/etc/hosts.

Dari asalnya,


127.0.0.1	localhost
127.0.1.1	zimbra

# The following lines are desirable for IPv6 capable hosts
::1     ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts



Menjadi


127.0.0.1	localhost
192.168.56.113  zimbra.perusahaan.com zimbra

# The following lines are desirable for IPv6 capable hosts
::1     ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts



Disini diasumsikan IP server adalah 192.168.56.113, dan hostnamenya adalah zimbra.perusahaan.com.

Paket-paket yang dibutuhkan untuk instalasi zimbra


Instal paket-paket berikut.
sudo apt-get install libidn11 libpcre3 libgmp3c2 libexpat1 libstdc++6 libstdc++5 libltdl3

Untuk memudahkan, kita akan uninstall apparmor (Anda boleh tidak setuju dengan cara ini, tapi ini demi memudahkan instalasi).
sudo dpkg --purge apparmor apparmor-utils

Anda juga harus memastikan tidak ada yg listen di port 25, 80, 110, 143. Untuk memeriksanya, jalankan perintah berikut. Lihat port yang listen di server Anda.
sudo lsof -i -n -P

Contoh konfigurasi DNS


Hostname & Alamat IP

  • hostname: zimbra.perusahaan.com

  • ip: 192.168.56.113


Kita akan buatkan alias, dibuatkan hostname yang mencerminkan fungsi dari service/layanan yang diberikan.

  • imap.perusahaan.com, untuk akses imap

  • pop.perusahaan.com, untuk akses pop3

  • smtp.perusahaan.com, untuk akses smtp (mengirim email)

  • webmail.perusahaan.com, untuk akses webmail




$TTL 7200       ; 2 hours
@       IN SOA  ns1.perusahaan.com. hostmaster.perusahaan.com. (
                                2009060708 ; serial
                                7200       ; refresh (2 hours)
                                3600       ; retry (1 hour)
                                604800     ; expire (1 week)
                                10800      ; minimum (3 hours)
                                )
                        NS      ns1.perusahaan.com.
                        MX  10  zimbra.perusahaan.com.

ns1                     A       192.168.56.113
zimbra                  A       192.168.56.113

imap                    CNAME   zimbra
pop                     CNAME   zimbra
smtp                    CNAME   zimbra
webmail                 CNAME   zimbra



Instalasi Zimbra


Pertama, ambil dulu berkas sumber dari halaman unduh zimbra. Ambil sesuai dengan arsitektur komputer Anda (32 bit atau 64 bit).

Contoh, untuk versi yang saya gunakan.
wget http://h.yimg.com/lo/downloads/5.0.18_GA/zcs-5.0.18_GA_3011.UBUNTU8.20090708092550.tgz

Ekstrak,
tar zxvf zcs-5.0.18_GA_3011.UBUNTU8.20090708092550.tgz

Lalu jalankan skrip instalasi.
cd zcs-5.0.18_GA_3011.UBUNTU8.20090708092550
sudo ./install.sh

Proses Instalasi


Harusnya Anda tinggal enter-enter saja, dan menjawab beberapa pertanyaan. Tapi jika penasasaran, Anda bisa lihat urutan proses instalasinya. Mudah-mudahan bisa membuat Anda lebih paham.


Operations logged to /tmp/install.log.12383
Checking for existing installation...
    zimbra-ldap...NOT FOUND
    zimbra-logger...NOT FOUND
    zimbra-mta...NOT FOUND
    zimbra-snmp...NOT FOUND
    zimbra-store...NOT FOUND
    zimbra-apache...NOT FOUND
    zimbra-spell...NOT FOUND
    zimbra-proxy...NOT FOUND
    zimbra-archiving...NOT FOUND
    zimbra-convertd...NOT FOUND
    zimbra-cluster...NOT FOUND
    zimbra-core...NOT FOUND

PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.
ZIMBRA, INC. ("ZIMBRA") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU
FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING
THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY
THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS
AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.

License Terms for the Zimbra Collaboration Suite:

http://www.zimbra.com/license/zimbra_public_eula_2.1.html

Press Return to continue



Silakan Anda tekan enter disitu.


Checking for prerequisites...
     FOUND: NPTL
     FOUND: sudo-1.6.9p10-1ubuntu3.4
     FOUND: libidn11-1.1-1
     FOUND: libpcre3-7.4-1ubuntu2.1
     FOUND: libgmp3c2-2:4.2.2+dfsg-1ubuntu2
     FOUND: libexpat1-2.0.1-0ubuntu1
     FOUND: libstdc++6-4.2.4-1ubuntu4
     FOUND: libstdc++5-1:3.3.6-15ubuntu6
     FOUND: libltdl3-1.5.26-1ubuntu1
Checking for suggested prerequisites...
    FOUND: perl-5.8.8
Prerequisite check complete.

Checking for installable packages

Found zimbra-core
Found zimbra-ldap
Found zimbra-logger
Found zimbra-mta
Found zimbra-snmp
Found zimbra-store
Found zimbra-apache
Found zimbra-spell
Found zimbra-proxy

Select the packages to install

Install zimbra-ldap [Y] --tekan enter--

Install zimbra-logger [Y] --tekan enter--

Install zimbra-mta [Y] --tekan enter--

Install zimbra-snmp [Y] --tekan enter--

Install zimbra-store [Y] --tekan enter--

Install zimbra-apache [Y] --tekan enter--

Install zimbra-spell [Y] --tekan enter--

Install zimbra-proxy [N] --tekan enter--
Checking required space for zimbra-core
checking space for zimbra-store

Installing:
    zimbra-core
    zimbra-ldap
    zimbra-logger
    zimbra-mta
    zimbra-snmp
    zimbra-store
    zimbra-apache
    zimbra-spell

The system will be modified.  Continue? [N] --ketik Y disini--

Lalu zimbra akan melanjutkan dengan menginstal paket-paket yang diperlukan.


Removing /opt/zimbra
Removing zimbra crontab entry...done.
done.
Cleaning up zimbra init scripts...done.
Cleaning up /etc/ld.so.conf...done.
Cleaning up /etc/security/limits.conf...done.

Finished removing Zimbra Collaboration Suite.

Finished removing Zimbra Collaboration Suite.

Installing packages

    zimbra-core......zimbra-core_5.0.18_GA_3011.UBUNTU8_i386.deb...done
    zimbra-ldap......zimbra-ldap_5.0.18_GA_3011.UBUNTU8_i386.deb...done
    zimbra-logger......zimbra-logger_5.0.18_GA_3011.UBUNTU8_i386.deb...done
    zimbra-mta......zimbra-mta_5.0.18_GA_3011.UBUNTU8_i386.deb...done
    zimbra-snmp......zimbra-snmp_5.0.18_GA_3011.UBUNTU8_i386.deb...done
    zimbra-store......zimbra-store_5.0.18_GA_3011.UBUNTU8_i386.deb...done
    zimbra-apache......zimbra-apache_5.0.18_GA_3011.UBUNTU8_i386.deb...done
    zimbra-spell......zimbra-spell_5.0.18_GA_3011.UBUNTU8_i386.deb...done
Operations logged to /tmp/zmsetup.07152009-091904.log
Setting defaults...



Setelah ini akan muncul pesan seperti di bawah. Kita menggunakan hostname zimbra.perusahaan.com, dan yang kita set record mx adalah domain perusahaan.com, karena kita memang inginnya zimbra menghosting domain perusahaan.com.


NS ERROR resolving MX for zimbra.perusahaan.com
It is suggested that the domain name have an MX record configured in DNS
Change domain name? [Yes] --tekan enter--
Create Domain: [zimbra.perusahaan.com] --ketik perusahaan.com disini---
	MX: zimbra.perusahaan.com (192.168.56.113)

	Interface: 10.0.2.15
	Interface: 192.168.56.113
	Interface: 127.0.0.1
done.
Checking for port conflicts
Port conflict detected: 80 (zimbra-store)
Port conflicts detected! - Any key to continue



Disini terlihat salah satu contoh error. Ada port conflict di port 80. Saya cek dengan perintah
sudo lsof -i -n -P

Ternyata ada thttpd yg listen di port 80 (padahal ini untuk tutorial berikutnya hehe). Setelah service thttpd saya matikan, instalasi jalan kembali.


Main menu

   1) Common Configuration:
   2) zimbra-ldap:                             Enabled
   3) zimbra-store:                            Enabled
        +Create Admin User:                    yes
        +Admin user to create:                 admin@perusahaan.com
******* +Admin Password                        UNSET
        +Enable automated spam training:       yes
        +Spam training user:                   spam.tdp4n_la5h@perusahaan.com
        +Non-spam(Ham) training user:          ham.owo5zfr2q@perusahaan.com
        +Global Documents Account:             wiki@perusahaan.com
        +SMTP host:                            zimbra.perusahaan.com
        +Web server HTTP port:                 80
        +Web server HTTPS port:                443
        +Web server mode:                      http
        +IMAP server port:                     143
        +IMAP server SSL port:                 993
        +POP server port:                      110
        +POP server SSL port:                  995
        +Use spell check server:               yes
        +Spell server URL:                     http://zimbra.perusahaan.com:7780/aspell.php
        +Configure store for use with reverse mail proxy: FALSE
        +Configure store for use with reverse web proxy: FALSE

   4) zimbra-mta:                              Enabled
   5) zimbra-snmp:                             Enabled
   6) zimbra-logger:                           Enabled
   7) zimbra-spell:                            Enabled
   8) Default Class of Service Configuration:
   r) Start servers after configuration        yes
   s) Save config to file
   x) Expand menu
   q) Quit

Address unconfigured (**) items  (? - help)



Sekarang Anda dihadapkan dengan menu di atas. Perhatikan di bagian yang diberi tanda bintang (*******) itu ada di menu nomor tiga. Jadi Anda pilih atau ketik 3, kemudian tekan enter.


Store configuration

   1) Status:                                  Enabled
   2) Create Admin User:                       yes
   3) Admin user to create:                    admin@perusahaan.com
** 4) Admin Password                           UNSET
   5) Enable automated spam training:          yes
   6) Spam training user:                      spam.tdp4n_la5h@perusahaan.com
   7) Non-spam(Ham) training user:             ham.owo5zfr2q@perusahaan.com
   8) Global Documents Account:                wiki@perusahaan.com
   9) SMTP host:                               zimbra.perusahaan.com
  10) Web server HTTP port:                    80
  11) Web server HTTPS port:                   443
  12) Web server mode:                         http
  13) IMAP server port:                        143
  14) IMAP server SSL port:                    993
  15) POP server port:                         110
  16) POP server SSL port:                     995
  17) Use spell check server:                  yes
  18) Spell server URL:                        http://zimbra.perusahaan.com:7780/aspell.php
  19) Configure store for use with reverse mail proxy: FALSE
  20) Configure store for use with reverse web proxy: FALSE

Select, or 'r' for previous menu [r]



Sekarang Anda dihadapkan dengan menu berikutnya. Sama seperti tadi, perhatikan bagian yang diberi tanda bintang (**), itu ada di menu nomor 4. Jadi Anda ketik 4, lalu tekan enter.


Password for admin@perusahaan.com (min 6 characters): [hINYHBUe5]



Sekarang Anda diminta menuliskan password untuk user Admin. Jika Anda tekan enter, default passwordnya adalah yang ada di dalam kurung kotak. Silakan Anda ketik password yang Anda ingin set.


Store configuration

   1) Status:                                  Enabled
   2) Create Admin User:                       yes
   3) Admin user to create:                    admin@perusahaan.com
   4) Admin Password                           set
   5) Enable automated spam training:          yes
   6) Spam training user:                      spam.tdp4n_la5h@perusahaan.com
   7) Non-spam(Ham) training user:             ham.owo5zfr2q@perusahaan.com
   8) Global Documents Account:                wiki@perusahaan.com
   9) SMTP host:                               zimbra.perusahaan.com
  10) Web server HTTP port:                    80
  11) Web server HTTPS port:                   443
  12) Web server mode:                         http
  13) IMAP server port:                        143
  14) IMAP server SSL port:                    993
  15) POP server port:                         110
  16) POP server SSL port:                     995
  17) Use spell check server:                  yes
  18) Spell server URL:                        http://zimbra.perusahaan.com:7780/aspell.php
  19) Configure store for use with reverse mail proxy: FALSE
  20) Configure store for use with reverse web proxy: FALSE

Select, or 'r' for previous menu [r]



Sekarang semua sudah diset dengan baik. Anda tikan tekan r,


Main menu

   1) Common Configuration:
   2) zimbra-ldap:                             Enabled
   3) zimbra-store:                            Enabled
   4) zimbra-mta:                              Enabled
   5) zimbra-snmp:                             Enabled
   6) zimbra-logger:                           Enabled
   7) zimbra-spell:                            Enabled
   8) Default Class of Service Configuration:
   r) Start servers after configuration        yes
   s) Save config to file
   x) Expand menu
   q) Quit

*** CONFIGURATION COMPLETE - press 'a' to apply
Select from menu, or press 'a' to apply config (? - help) --ketik a disini, lalu enter--
Save configuration data to a file? [Yes] --tekan enter--
Save config in file: [/opt/zimbra/config.17874]
Saving config in /opt/zimbra/config.17874...done.
The system will be modified - continue? [No] --ketik Yes disini, lalu enter--



Dan tunggu zimbra mengkonfigurasi sistem Anda sampai selesai. Agak lama prosesnya, jadi Anda harus sedikit bersabar.

Setelah semuanya selesai, Anda bisa mengakses halaman web adminnya di


https://zimbra.perusahaan.com:7071



Ingat, pakai https bukan http. Loginnya admin, password seperti yang sudah Anda set sebelumnya.

Dan untuk webmail (akses untuk membaca email dari web, untuk user).


http://webmail.perusahaan.com



Seperti yang sudah kita set di DNS sebelumnya.


  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Setting VPN

10.48 | Label:

ImageMem

http://wiki.mikrotik.com/wiki/PPtP_Server_/_VPN

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Setting Filter rule untuk Blok Facebook berdasarkan Waktu

10.46 | Label:

Image

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Setting Nat For proxy

10.43 | Label:

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

setting PPOE speedy

10.38 | Label:

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Membuat Squide Redirek (untuk memberikan not di browser ketika error)

10.35 | Label: 

Untuk memindahkan suatu situs yang ingin di akses
user sedang situs tersebut termasuk yang kita blok 
maka bisa kita alihkan dengan merubah file :
/etc/squid/errors/ERR_ACCESS_DENIED

cp /etc/squid/errors/ERR_ACCESS_DENIED /etc/squid/errors/ERR_ACCESS_DENIED.old

vi /etc/squid/errors/ERR_ACCESS_DENIED
(tukar isi file sebelumnya dengan seperti dibawah ini)

<html><head><script language="javascript">
window.location="http://eramuslim.com" </script>
</head><body></body></html>

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Membuat Webmail Server di Centos

10.33 | Label: 








rpm -qa |grep postfix
(konfigurasi dasar postfix)
vi /etc/postfix/main.cf

myhostname = mail.anton.com
mydomain = anton.com
myorigin = $mydomain
inet_interfaces = all
( local host dimatiin dgn # )
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mynetworks = 192.168.1.0/24, 127.0.0.0/8

#service postfix restart
#/etc/init.d/sendmail stop

#netstat -tanp |grep 25
   0:0:0:0:25

#vi /etc/dovecot.conf

protocols = imap imaps pop3 pop3s

#service dovecot restart

netstat -tanp |grep 110
netstat -tanp |grep 143

(tes email dengan terminal)
#telnet localhost 25

mail from: agus@anton.com
rcpt to: andika@anton.com

data
tes email
.

(cek email terkirim)
#tail /var/log/maillog

Jun  7 19:31:39 anton postfix/local[4084]:
 BD252188141: to=<andika@anton.com>, relay=local, delay=0.07, delays=0.05/0.01/0/0.01, dsn=2.0.0, status=sent (delivered to mailbox)

#tail /var/spool/mail

[root@anton ~]# tail /var/spool/mail/andika 
Content-Type: text/plain;charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Priority: 3 (Normal)
Importance: Normal
X-IMAPbase: 1307449938 0000000001
X-UID: 1                                       
Status: RO
 tes email

[root@anton ~]# 

(mengunakan squirrelmail)
#rpm -qa |grep squirrelmail

#service httpd restart

buka browser ketikan url : http://localhost/webmail

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Configurasi Squide for proxy di Centos

10.31 | Label: 








#rpm -qa |grep squid

#vi /etc/squid/squid.conf

http_port 3128

cache_dir ufs   100             16              256
             (besaran cache)  (jml direktori)  (sub.dir)

visible_hostname  localhost


CCESS CONTROLS
# -----------------------------------------------------------------------------

#  TAG: acl
#	Defining an Access List
#
#	acl aclname acltype string1 ...
#	acl aclname acltype "file" ...
#
#	when using "file", the file should contain one item per line
#
#	acltype is one of the types described below
#
#	By default, regular expressions are CASE-SENSITIVE.  To make
#	them case-insensitive, use the -i option.
#
#	acl aclname src      ip-address/netmask ... (clients IP address)
#	acl aclname src      addr1-addr2/netmask ... (range of addresses)
#	acl
 aclname dst      ip-address/netmask ... (URL host's IP address)
#	acl aclname myip     ip-address/netmask ... (local socket IP address)
#
#	acl aclname arp      mac-address ... (xx:xx:xx:xx:xx:xx notation)
#	  # The arp ACL requires the special configure option --enable-arp-acl.
#	  # Furthermore, the arp ACL code is not portable to all operating systems.
#	  # It works on Linux, Solaris, FreeBSD and some other *BSD variants.
#	  #
#	  # NOTE: Squid can only determine the MAC address for clients that are on
#	  # the same subnet. If the client is on a different subnet, then Squid cannot
#	  # find out its MAC address.
#
#	acl aclname srcdomain   .foo.com ...    # reverse lookup, client IP
#	acl aclname dstdomain   .foo.com ...    # Destination server from URL
#	acl aclname srcdom_regex [-i] xxx ...   # regex matching client name
#	acl aclname dstdom_regex [-i] xxx ...   # regex matching server
#	  # For
 dstdomain and dstdom_regex  a reverse lookup is tried if a IP
#	  # based URL is used and no match is found. The name "none" is used
#	  # if the reverse lookup fails.
#
#	acl aclname time     [day-abbrevs]  [h1:m1-h2:m2]
#	    day-abbrevs:
#		S - Sunday
#		M - Monday
#		T - Tuesday
#		W - Wednesday
#		H - Thursday
#		F - Friday
#		A - Saturday
#	    h1:m1 must be less than h2:m2
#	acl aclname url_regex [-i] ^http:// ...	# regex matching on whole URL
#	acl aclname urlpath_regex [-i] \.gif$ ...	# regex matching on URL path
#	acl aclname urllogin [-i] [^a-zA-Z0-9] ...	# regex matching on URL login field
#	acl aclname port     80 70 21 ...
#	acl aclname port     0-1024 ...		# ranges allowed
#	acl aclname myport   3128 ...		# (local socket TCP port)
#	acl aclname proto    HTTP FTP ...
#	acl aclname method   GET POST ...
#	acl aclname browser  [-i] regexp ...
#	  # pattern match on
 User-Agent header (see also req_header below)
#        acl aclname referer_regex  [-i] regexp ...
#          # pattern match on Referer header
#          # Referer is highly unreliable, so use with care
#	acl aclname ident    username ...
#	acl aclname ident_regex [-i] pattern ...
#	  # string match on ident output.
#	  # use REQUIRED to accept any non-null ident.
#	acl aclname src_as   number ...
#	acl aclname dst_as   number ...
#	  # Except for access control, AS numbers can be used for
#	  # routing of requests to specific caches. Here's an
#	  # example for routing all requests for AS#1241 and only
#	  # those to mycache.mydomain.net:
#	  # acl asexample dst_as 1241
#	  # cache_peer_access mycache.mydomain.net allow asexample
#	  # cache_peer_access mycache_mydomain.net deny all
#
#	acl aclname proxy_auth username ...
#	acl aclname proxy_auth_regex [-i] pattern ...
#	  # list of valid
 usernames
#	  # use REQUIRED to accept any valid username.
#	  #
#	  # NOTE: when a Proxy-Authentication header is sent but it is not
#	  # needed during ACL checking the username is NOT logged
#	  # in access.log.
#	  #
#	  # NOTE: proxy_auth requires a EXTERNAL authentication program
#	  # to check username/password combinations (see
#	  # auth_param directive).
#	  #
#	  # WARNING: proxy_auth can't be used in a transparent proxy. It
#	  # collides with any authentication done by origin servers. It may
#	  # seem like it works at first, but it doesn't.
#
#	acl aclname snmp_community string ...
#	  # A community string to limit access to your SNMP Agent
#	  # Example:
#	  #
#	  #	acl snmppublic snmp_community public
#
#	acl aclname maxconn number
#	  # This will be matched when the client's IP address has
#	  # more than <number> HTTP connections established.
#
#	acl
 aclname max_user_ip [-s] number
#	  # This will be matched when the user attempts to log in from more
#	  # than <number> different ip addresses. The authenticate_ip_ttl
#	  # parameter controls the timeout on the ip entries.
#	  # If -s is specified the limit is strict, denying browsing
#	  # from any further IP addresses until the ttl has expired. Without
#	  # -s Squid will just annoy the user by "randomly" denying requests.
#	  # (the counter is reset each time the limit is reached and a
#	  # request is denied)
#	  # NOTE: in acceleration mode or where there is mesh of child proxies,
#	  # clients may appear to come from multiple addresses if they are
#	  # going through proxy farms, so a limit of 1 may cause user problems.
#
#	acl aclname req_mime_type mime-type1 ...
#	  # regex match against the mime type of the request generated
#	  # by the client. Can be used to detect file upload or some
#
	  # types HTTP tunelling requests.
#	  # NOTE: This does NOT match the reply. You cannot use this
#	  # to match the returned file type.
#
#	acl aclname req_header header-name [-i] any\.regex\.here
#	  # regex match against any of the known request headers.  May be
#	  # thought of as a superset of "browser", "referer" and "mime-type"
#	  # acls.
#
#	acl aclname rep_mime_type mime-type1 ...
#	  # regex match against the mime type of the reply recieved by
#	  # squid. Can be used to detect file download or some
#	  # types HTTP tunelling requests.
#	  # NOTE: This has no effect in http_access rules. It only has
#	  # effect in rules that affect the reply data stream such as
#	  # http_reply_access.
#
#	acl aclname rep_header header-name [-i] any\.regex\.here
#	  # regex match against any of the known response headers.
#	  # Example:
#	  #
#	  # acl many_spaces rep_header Content-Disposition
 -i [[:space:]]{3,}
#
#	acl acl_name external class_name [arguments...]
#	  # external ACL lookup via a helper class defined by the
#	  # external_acl_type directive.

/INSERT

acl satu dstdomain  www.google.com
http_access deny satu

acl dua dstdomain "/etc/squid/domainx.txt"
http_access deny dua

acl tiga url_regex -i "/etc/squid/katax.txt"
http_access deny tiga

acl empat dst "/etc/squid/ipx.txt"
http_access deny empat

#squid -z
#service squid restart

buka browser=> edit=> preference=> advance=>network (masukan ip dan port)

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Membuat Samba dengan Group Client tertentu

10.29 | Label: 


================================================
2.
================================================
[global]
workgroup = NAUFAL-NT
netbios name = sambalado
samba server string = Samba Naufal-PDC server
security = user
hosts allow = 192.168.1. 127.

[dunia]
path = /var/share
comment = Ini share folder Data
public = no
valid users = ahmad
read only = no
browseable = yes
force user = ahmad
force group = ahmad



#mkdir /var/share
#useradd ahmad
#chown -R ahmad.ahmad /var/share
#smbpasswd -a ahmad
password:(masukan passowrd untuk ahmad)

##smbclient //sambalado/dunia -U ahmad

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Membuat Samba (konekin dari linux ke windows)

10.28 | Label: 








rpm -qa |grep samba
samba-xx
samba-common
samba-client


#vi /etc/samba/smb.conf

[global]
workgroup = NAUFAL-NT
netbios name = sambalado
samba server string = Samba Naufal-PDC server
security = share
hosts allow = 192.168.1. 127.


[share]
path = /var/data
comment = Ini share folder Data
public = yes
read only = yes
browseable = yes

:wq

#service smb restart
#tesparm
#smbclient -L localhost
#smbclient //sambalado/share

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Membuat Webserver dan Virtual Host

10.26 | Label: 

#rpm -qa |grep http (melihat apakah service http sudah ada/blm)
#yum install httpd  (install apache)

3 CARA MENEMPATKAN FILE DI WEB SERVER

	1. DocumentRoot/document utama biasanya/var/www/html
	2. UserDir /home/budi/html
	3. VirtualHost (bebas selain diatas misal /home/budi/web)

Konfigurasi cara 1:
   # vi /etc/httpd/conf/httpd.conf

      /DocumentRoot  (mencari letak documentRoot letak file html/php/)

      :wq
   #vi /var/www/html/index.html 
      <h1><marquee behavior=alternate loop=15>wellcome in NF Computer </marquee></h1>
      :wq

   #service httpd restart atau /etc/init.d/httpd restart   
 Cara panggil di browser:

 /var/www/html 	=> 	http://localhost
			http://192.168.1.23
                        http://nf.com 
 

==========================================================================================================
cara ke 2 UserDir:

Konfigurasi :
                 #vi /etc/httpd/conf/httpd.conf
                    
 		 /UserDir  (mencari UserDir)

			#userdir disable (dipagar #)
			userdir public_html

			<Ifmodule mod_userdir.c>
				UserDir Public_html
			</IfModule>
                   :wq
                   #useradd imi
                   #mkdir /home/imi/public_html
                   #vi /home/imi/public_html/index.html
                       <h1><marquee behavior=alternate loop=15>User Dir </marquee></h1>
                    :wq 
		   #chmod 755 /home/imi/public_html
		   kemudian restart aphacenya.

                   #/etc/init.d/httpd restart 
			
cara panggil di browser
/home/imi/public_html =>http://localhost/~imi
 			(
 User Webspace )
			http://192.168.1.23/~imi
			atau
			www.irfan.lpknf.or.id/~imi

ingat:
Kalau semua konfigurasi ok, tetapi tidak muncul coba cek firewall
#/etc/init.d/iptables stop   (untuk iptables)
#setenforce 0                 (selinux)

=============================================================================================================
VirtualHost:
konfigurasi:
#vi /etc/http/conf/httpd.conf

  :$  (pergi ke baris paling akhir)
      (kemudian tambahkan konfigurasi berikut ini)
       
            <VirtualHost 192.168.1.161:80 >
	    ServerAdmin admin@lpknf.or.id
	    DocumentRoot /home/irfan/html
	    ServerName  irfan.lpknf.or.id
	    ErrorLog /var/log/httpd/irfan-error_log
	   Custom /var/log/httpd/irfan-access_log common
           </VirtualHost>

	NameVirtualHost 192.168.1.161

	<VirtualHost 192.168.1.161>
        ServerAdmin
 admin@efrizal.biz 
	ServerName webmail.efrizal.biz
	DocumentRoot /usr/local/html
	</VirtualHost>



                        
note:
			    untuk virtual host lebih baik mengunakan /home
                            kalau yg tampil welcome.php dirubah saja namanya
 			    /etc/httpd/conf.d/welcome.php

		
Konfigurasi file /etc/httpd/conf/httpd.conf

ServerRoot "/etc/httpd"
#( direktory utama dimana file configurasi apache di letakan)

PidFile run/httpd.pid
#FILE YG DIGUNAKAN OLEH SERVER UNTUK MEREKAM NOMOR IDENTITAS PROSES (PID))

Timeout 300
#(LAMA WAKTU JEDA SEBELUM SERVER MEMBERI PESAN TIME-OUT )

KeepAlive Off
#(UNTUK MENENTUKAN APAKAH SERVER MENGIJINKAN LEBIH DARI SATU PERMINTAAN DALAM SATU KONEKSI)

MaxKeepAliveRequests 100
#JUMLAH MAXIMUM PERMINTAAN YG DIIJINKAN DALAM SATU KONEKSI/

KeepAliveTimeout 15
#JUMLAH DETIK U/ MENUNGGU PERMINTAAN BERIKUTNYA
 DARI KLIEN YG SAMA DN KONEKSI BERSAMAAN

StartServer 5
#JUMLAH SERVER YG BERJALAN SAAT DIAKTIFKAN

MaxRequestsPerChild 30
#JUMLAH PERMINTAAN MAKSIMAL U/ CHILD PROSES

port 80
#port yg digunakan oleh server

User nobody
Group nogroup
#NAMA USER DAN GROUP YG MENJALANKAN HTTPD

ServerAdmin admin@nurulfikri.com
#(MEMBERITAHU HALAMAN2 YG DIBUAT OTOMATIS OLEH SERVER SEPERTI PESAN KESALAHAN)
# ATAU ALAMAT EMAIL DARI ADMINISTRATOR.

ServerName domain.anda.com
#SETTING NAMA BISA JUGA DIGUNAKAN IP

DocumentRoot "/var/www/html"
#(LETAK FILE INDEX.HTML)

ErrorLog logs/error_log
#(LETAK FILE ERROR_LOG BIASANYA TERDAPAT PD DIREKTORY LOKAL)

LogLevel warn
#(JUMLAH PESAN KESALAHAN YG DI CATAT DLM FILE ERROR_LOG. NILAI YG DIMASUKAN
  ANTARA DEBUG, WARN,ALER,ERROR)

Melihat Modul apa yg sudah terkompilasi
#/usr/sbin/httpd -l

Melihat Modul alias
#ls
 /usr/lib/httpd/modules/ |grep alias

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Membuat Webserver di Centos

10.24 | Label: 








#rpm -qa |grep http (melihat apakah service http sudah ada/blm)
#yum install httpd  (install apache)

3 CARA MENEMPATKAN FILE DI WEB SERVER

	1. DocumentRoot/document utama biasanya/var/www/html
	2. UserDir /home/budi/html
	3. VirtualHost (bebas selain diatas misal /home/budi/web)

Konfigurasi cara 1:
   # vi /etc/httpd/conf/httpd.conf

      /DocumentRoot  (mencari letak documentRoot letak file html/php/)

      :wq
KETIK YANG BAWAH AJA
=================
   #vi /var/www/html/index.html 
      <h1><marquee behavior=alternate loop=15>wellcome in NF Computer </marquee></h1>
      :wq

   #service httpd restart atau /etc/init.d/httpd restart   
 Cara panggil di browser:

 /var/www/html 	=> 	http://localhost
			http://192.168.1.23
                       
 http://nf.com

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Perintah Perintah Dasar Linux centos

10.23 | Label: 








ls
ls  -l
ls -al
pwd (melihat dimana anda sedang berada)
cd (change direktori)
cd /home/ahmad/data/baru
cd ..  (mundur 1 direktori)
cd ../.. (mundur dua direktori)

cd /home (ingat kalau mau masuk ke sub direktori tidak boleh
          pakai / didepan contoh cd ahmad/data)
mkdir data (membuat direktori)
rmdir data/ (menghapus direktori data kosong)
touch coba.txt  (membuat file kosong)
cp coba.txt cobi.txt  (mengkopi file)
rm cobi.txt (menghapus file)
rm -rf /data (menghapus direktori)

mv-->move 
     #mv coba.txt /home/ahmad/data
  -->rename
     #mv coba.txt cobu.txt

	latihan
cd /root
                              home
                              |
     ------------------------------------------------------
    |                          |                       
   |
ahmad                       budi                       irfan
   |                         |                            |
datA                 --------------              --------------
 |                  |             |             |             |
baru             stu            data          merah         biru
                  (ciek)         (satu)        (wahid)       (one)
                  (duo)          (loro)        (isnin)       (two)



chmod (merubah hak akses)
r=read
w=write
x=execute 
#ls -l
rwxr-xr-x 2 efrizal hrd       4096 2011-01-04 12:08 Music
---------   ------  ------      ----  --------------  -----
hak akses    user    group     ukuran   tgl           nama file

rwx      r-x       r--
---      ---        ---
user(u)  group(g)  other(o)

#chmod g+w music
root@efrizal-laptop:~# touch coba.txt
root@efrizal-laptop:~# ls -l coba.txt 
-rw-r--r-- 1 root
 root 0 2011-03-17 13:58 coba.txt
root@efrizal-laptop:~# chmod u+x coba.txt 
root@efrizal-laptop:~# ls -l coba.txt 
-rwxr--r-- 1 root root 0 2011-03-17 13:58 coba.txt

#chmod u-x,g+r,o+w coba.txt
cara 2

r=4
w=2
x=1

#chmod 653  coba.txt
 rw- r-x -wx 

#chmod 777 coba.txt
  rwx rwx rwx
#chmod 700 coba.txt
#chmod 77 coba.txt
#chmod 7 coba.txt
#chmod 007 coba.txt
#chmod 07 coba.txt

chown (change ownership)
root@efrizal-laptop:~# ls -l coba.txt
-rwxr--r-- 1 efrizal hrd 0 2011-03-17 13:58 coba.txt

#chown fayyad coba.txt
-rwxr--r-- 1 fayyad hrd 0 2011-03-17 13:58 coba.txt

chgrp (change group)
#chgrp acct coba.txt
-rwxr--r-- 1 efrizal hrd 0 2011-03-17 13:58 coba.txt

root@efrizal-laptop:~# ls -l coba.txt 
-rwxr--rw- 1 root root 0 2011-03-17 13:58 coba.txt
root@efrizal-laptop:~# 

echo "hello dunia"
echo " apa kabar" > satu.txt
(membuat
 file)
cat > dua.txt
hello dunia
apa kabarmu
(ctrl-d)

cat satu.txt (melihat isi file)

tac dua.txt (menampilkan terbalik)

#less /etc/passwd
#more /etc/passwd

menampilkan file teratas
#head /etc/passwd (10 baris teratas)
#head -5 /etc/passwd  (5baris)

menampilkan file terbawah
#tail /etc/passwd (10 baris terbawah)
#tail -15 /etc/passwd (15 baris dari baris paling bawah)

System Resource
===============
#fdisk -l (mlihat partisi yg ada)
#df -l   (melihat partisi yg aktif)
#du /etc (melhat ukuran file yg ada pd /etc)
#du -sh /home  (melhat ukuran space yg digunakan /home)

#free
#ps
#ps -axf
  PID TTY      STAT   TIME COMMAND

#kill [pid]

Pencarian=>which (mencari perintah)
          #which cp
         =>whereis (mencari aplikasi)
         #whereis mozilla
       
         =>find
          #find / -name "*.txt" -print
 
  (mencari file dengan extemsi txtn pada seluruh direktori yg ada)
          #find /etc -name "*.sh" -print
(mencari file extensi sh pada direktori /etc)
          #find . -name "*.txt" -print
(mencari file ext. txt pada current direktori atau tempat anda berada)

         =>locate
          #locate *.odt (mencari pada seluruh direktori)
         #locate /home/*.txt 
(mencari pd direktri /home extensi txt)
 
mencari kata dlm file
#grep -i ahmad /etc/passwd

#sort  /etc/passwd (mengurut isi file aa,bb...zz)

#cut -f1 -d ":" /etc/passwd
(potong pd kolom pertama dg pembatas ":" pd file /etc/passwd)
#cut -f1,6 -d ":" /etc/passwd
(potong pd kolom pertama dan enam dg pembatas ":" pd file /etc/passwd)
#cut -f1-3 -d ":" /etc/passwd
(potong pd kolom pertama sampaitiga dg pembatas ":" pd file /etc/passwd)

 user01@mobile ~]$ cat tesaja
Aku seorang kapiten
mempunyai pedang
 panjang
kalau berjalan prok-prok-prok
Aku seorang kapiten
Hati  ku damai jiwa ku tentram
Aku seorang kapiten
Tak      pernah ragu

er01@mobile ~]$ fmt tesaja
Aku seorang kapiten mempunyai pedang panjang kalau berjalan prok-prok-prok
Aku seorang kapiten Hati  ku damai jiwa ku tentram Aku seorang kapiten
Tak      pernah ragu


[user01@mobile ~]$ fmt -w 40 tesaja
Aku seorang kapiten mempunyai pedang
panjang kalau berjalan prok-prok-prok
Aku seorang kapiten Hati  ku damai
jiwa ku tentram Aku seorang kapiten
Tak      pernah ragu

	
[user01@mobile ~]$ cat tes | tr Aku Iam
Iam seorang aapiten
Mempmnyai pedang panjang
Kalam berjalan proa-proa-proa
Iam seorang aapiten


[user01@mobile ~]$ sed -e "s/Aku/Saya/" tes
Saya seorang kapiten
Mempunyai pedang panjang
Kalau berjalan prok-prok-prok
Saya seorang kapiten


redirection dan
 pipe
========================
 >
>>   output redirection
<   input redirection
2> error redirection
#cat > coba.txt
hello apa kabar
baik-baik saja bukan?
(ctrl-d)
#echo "tess" > lat.txt
#cat >> coba.txt
alhmadulillah baik
(ctrl-d)
#cat > tiga.txt
4*5
(ctrl-d)
#bc < tiga.txt
20
#cat > empat.txt < coba.txt
#cat empat.txt < coba.txt
#ls /homi
no such file or direcktori
#ls /homi > error.txt

#ls /homi 2> error.txt
LATIHAN
==========
1. buat sebuah file bernama "baru.dat" isinya adalah
   keseluruhan nama user yg ada di sistem anda, ingat namanya saja
   #cut -f1 -d ":" /etc/passwd > baru.dat

2. buat sebuah file bernama "dua.dat" isinya file baru.dat yg
   terurut dari a-z dan dari z-a.
   #sort baru.dat > dua.dat
   #sort -r baru.dat >> dua.dat
3. Buat sebuah file bernama "tiga.dat" isinya
 gabungan dua file di    atas.
  # cat baru.dat dua.dat > tiga.dat
4. Buat sebuah file bernama "partisi.dat" isinya adalah tampilan
   keseluruhan partisi yg ada
  # fdisk -l > partisi.dat
5.buat sebuah file bernama "empat.dat" isinya nama user dan home
  direktorinya sebanyak 5 baris dari atas (/etc/paswd)
  #cut -f1,6 -d ":" /etc/passwd |head -5
6.Buat sebuah file bernama "lima.dat" isinya adalah 15 bari user
  terbawah yang ditampilan nama user dan idnya.
  #cut -f1,3 -d ":" /etc/passwd | tail -15
7.buat sebuah file bernama "enam.dat" isinya keseluruhan file
  yg ada pada direktori /etc beserta ukuranya.
#du /etc > enam.dat
 
ARCHIVE DAN KOMPRESS
=====================
#tar -cvf backup.tar  /home  (membakup /home dengan nama backup.tar) 
#ls -l
      backup.tar (merah)

#gzip backup.tar      (kompress file yang telah menjadi .tar)
#ls -l
      backup.tar.gz

kopikan ke
 direktori lain (usb/hardisk)

#cp backup.tar.gz /opt
#gunzip backup.tar.gz    (membuka zip file)
#ls -l
      backup.tar
#tar -tvf backup.tar (melihat isi file backup.tar)
#tar -xvf backup.tar  (mengextrak file backup)
#ls -l
     /home

Beberapa perintah kompress
zip<>unzip
gzip<>gunzip
bzip2<>bunzip2


#tar -czvf backup.tar.gz /home  (membuat dan komress)

#tar -xzvf backup.tar.gz     (unzip dan extrak)


#tar -cjvf backup.tar.bz2   /etc   (membuat backup bz2)

#tar -xjvf backup.tar.bz2          (extrak bz2)


Perintah jaringan
=================
ftp    
telnet
ssh

#service sshd restart
#/etc/init.d/sshd restart
#ifconfig (melihat ip)

#ssh 192.168.1.10
password:xxxxxx (login root)

#ssh -l udin 192.168.1.111
password: (masukan password udin)

#scp namafile ahmad@192.168.1.10:
passwor: (passeord ahmad
 default /home/ahmad)

#scp namafile root@192.168.1.11:/home/budi/data
password:xxxxxx

#scp -rp namadirekroti ahmad@192.168.1.12:  (kopi direktori)


#scp ahmad@192.168.1.14:/home/ahmad/test.txt    .
password:
#scp ahmad@192.168.1.14:/home/ahmad/test.txt    /home/budi
password:

cek
   -who
   -finger
   -w
   -last

Mengakses Media penyimpanan
==========================
mount
#mount /dev/fd0 /mnt/floppy
#mount /dev/sda1 /mnt/usb
fdisk -l 
#mount /dev/hda5 /media/data
#mount /dev/cdrom /media
#umount /media
#mount /dev/sda4 /media
#dmesg
#mount -t iso9660 /dev/cdrom /media/cdrom
#mount -t ntfs /dev/hda1 /media/windows


Editor VI
=============

#vi namafile


  modus ==>1. modus insert (i,a)
           2. Modus command (tekan escp )
#vi coba.txt
(yy)hello  (kopi satu baris)
p
apa kabar
(2yy)apa kabar (kopi dua
 baris)
(dd)baik-baik saja bukan (menghapus satu baris)
(3dd) menghapus 3 baris
:w (simpan tanpa keluar)
:wq (simpan dan keluar)
:x
:q keluar
:q! keluar paksa
#vi file1 file 2  (membuka beberapa file)
:n ke file berikutnya
:rew balik ke file semula
u = undo
:!date (mengexekusi perintah)
:!ls
/ahmad   (mencari kata dalam file)
:1,$ s/aku/saya/g
:set number (melihat baris file)
:100 (ke baris 100)
:$ (ke baris terakhir
:1 ke baris 1

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Membuat Sub DNS Server di Centos

10.21 | Label: 


subdomain
======
# vi nf.ok.zone
$TTL    86400
@               IN SOA  ns.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.nf.ok.
                IN MX  10       mail.nf.ok.
www             IN A            192.168.1.62
webmail         IN A            192.168.1.62
mail            IN A            192.168.1.62
nf.ok.          IN A            192.168.1.62
ftp             IN CNAME        nf.ok.

fery.nf.ok.  IN NS		ns.fery.nf.ok.

ns.fery.nf.ok.  IN A	
	192.168.1.63

###########################################
Kemudian buat juga domain fery.nf.ok
1. Tambahkan pada file  /etc/named.rfc1912.zones
zone "fery.nf.ok" IN {
        type master;
        file "fery.nf.ok.zone";
        allow-update { none; };
};

2. cd /var/named/chroot/var/named/
   cp localhost.zone fery.nf.ok.zone
   vi nf.ok.zone
$TTL    86400
@               IN SOA  ns.fery.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.fery.nf.ok.
                IN MX  10       mail.fery.nf.ok.
www             IN A            192.168.1.62
webmail   
      IN A            192.168.1.62
mail            IN A            192.168.1.62
fery.nf.ok.          IN A            192.168.1.62
ftp             IN CNAME        fery.nf.ok.



#chgrp named nf.ok.zone
#vi /etc/resolv.conf
nameserver 127.0.0.1
nameserver 192.168.1.62
#service named restart
#nslookup www.fery.nf.ok atau dig www.fery.nf.ok any atau host www.fery.nf.ok




buat kembali nama domain persis seperti langkah 1 dan 2
kemudian rubah file /etc/named.caching-nameserver.conf
yaitu merubah localhost menjadi any seperti berikut:

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";

        // Those options should be
 used carefully because they disable port
        // randomization
        // query-source    port 53;
        // query-source-v6 port 53;

        allow-query     { any; };
        allow-query-cache { any; };
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
view localhost_resolver {
        match-clients      { any; };
        match-destinations { any; };
        recursion yes;
        include "/etc/named.rfc1912.zones";
};

a==================================================================================================

subdomain dengan komputer berbeda

====================================
# vi nf.ok.zone
$TTL    86400
@               IN SOA  ns.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H 
             ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.nf.ok.
                IN MX  10       mail.nf.ok.
www             IN A            192.168.1.62
webmail         IN A            192.168.1.62
mail            IN A            192.168.1.62
nf.ok.          IN A            192.168.1.62
ftp             IN CNAME        nf.ok.

fery.nf.ok.  IN NS		ns.fery.nf.ok.
ns.fery.nf.ok.  IN A		192.168.1.16


Hidupkan komputer 192.168.1.16
buat kembali nama domain.

1. Tambahkan pada file  /etc/named.rfc1912.zones
zone "fery.nf.ok" IN {
        type master;
        file "fery.nf.ok.zone";
        allow-update { none; };
};

2. cd /var/named/chroot/var/named/
   cp localhost.zone
 fery.nf.ok.zone
   vi fery.nf.ok.zone
$TTL    86400
@               IN SOA  ns.fery.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.fery.nf.ok.
                IN MX  10       mail.fery.nf.ok.
www             IN A            192.168.1.16
webmail         IN A            192.168.1.16
mail            IN A            192.168.1.16
fery.nf.ok.          IN A            192.168.1.16
ftp             IN CNAME        fery.nf.ok.



#chgrp named fery.nf.ok.zone
#vi /etc/resolv.conf

nameserver 192.168.1.62
#service named restart
#nslookup www.fery.nf.ok atau
 dig www.fery.nf.ok any atau host www.fery.nf.ok


kemudian rubah file /etc/named.caching-nameserver.conf
yaitu merubah localhost menjadi any seperti berikut:

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";

        // Those options should be used carefully because they disable port
        // randomization
        // query-source    port 53;
        // query-source-v6 port 53;

        allow-query     { any; };
        allow-query-cache { any; };
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
view localhost_resolver {
       
 match-clients      { any; };
        match-destinations { any; };
        recursion yes;
        include "/etc/named.rfc1912.zones";
};

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

Membuat DNS server di centos

10.19 | Label: 








rpm -qa |grep bind
bind
bind-utils
bind-chroot
#rpm -qa |grep caching

#yum install caching-nameserver

1. Tambahkan pada file  /etc/named.rfc1912.zones
zone "nf.ok" IN {
        type master;
        file "nf.ok.zone";
        allow-update { none; };
};

2. cd /var/named/chroot/var/named/
   cp localhost.zone nf.ok.zone
   vi nf.ok.zone
$TTL    86400
@               IN SOA  ns.nf.ok.       root (
                                        42          ; serial (d. adams)
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum
                IN NS           ns.nf.ok.
               
 IN MX  10       mail.nf.ok.
www             IN A            192.168.1.62
webmail         IN A            192.168.1.62
mail            IN A            192.168.1.62
nf.ok.          IN A            192.168.1.62
ftp             IN CNAME        nf.ok.



#chgrp named nf.ok.zone
#vi /etc/resolv.conf
nameserver 127.0.0.1
nameserver 192.168.2.16
#service named restart
#nslookup www.nf.ok atau dig www.nf.ok any atau host www.nf.ok

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown

installasi squid pada centos 5.5

10.02 | Label:

installasi squid pada centos 5.5


Posted on April 16, 2011 by tirtavium





بسم الله الرحمن الرحيم

Squid adalah sebuah daemon yang digunakan sebagai proxy server dan web cache . Squid memiliki banyak jenis penggunaan, mulai dari mempercepat web server dengan melakukan caching permintaan yang berulang-ulang, caching DNS, caching situs web, dan caching pencarian komputer di dalam jaringan untuk sekelompok komputer yang menggunakan sumber daya jaringan yang sama, hingga pada membantu keamanan dengan cara melakukan penyaringan (filter) lalu lintas. Meskipun seringnya digunakan untuk protokol HTTP dan FTP, Squid juga menawarkan dukungan terbatas untuk beberapa protokol lainnya termasuk Transport Layer Security (TLS), Secure Socket Layer (SSL), Internet Gopher, dan HTTPS. Versi Squid 3.1 mencakup dukungan protokol IPv6 dan Internet Content Adaptation Protocol (ICAP).

tahap – tahap instalasi sebagai berikut :

$su – {you need to be a super user}
#rpm -ivh squid or #yum -y install squid {install squid}
#vi /etc/squid/squid.conf


 

==/etc/squid=====================================================


http_port 8080 transparent


visible_tirpeng.web.id


cache_mem 32 MB


cache_dir ufs /cache 1000 16 256


access_log /var/log/squid/access.log


#pemberian daftar acl


acl all src all


acl lan src 192.168.2.0/24


===pendaftaran ex. Untuk pembatasan besaran donwload========================


acl filegede url_regex -i \.exe


acl filegede url_regex -i \.mp3


acl filegede url_regex -i \.rar


acl filegede url_regex -i \.zip


acl filegede url_regex -i \.avi


acl filegede url_regex -i \.flv


acl filegede url_regex -i \.mp4


acl filegede url_regex -i \.wav


acl filegede url_regex -i \.7zip


acl filegede url_regex -i \.iso


acl filegede url_regex -i \.mpeg


acl filegede url_regex -i \.mpg


acl filegede url_regex -i \.vbm


acl filegede url_regex -i \.divx


#pemberian delay


delay_pools 2


delay_class 1 3


delay_parameters 1 32000/32000 8000/8000 250/250


delay_access 1 allow lan filegede


delay_access 1 deny all


delay_class 2 2


delay_parameters 2 32000/32000 8000/8000 250/250


delay_access 1 allow lan


delay_access 1 deny all


#banned domain


acl 3 url_regex -i “/etc/squid/banned.txt”


http_access deny 3


#membolehkan access untuk lan


http_access allow lan


cache_mgr tirtavium@gmail.com


=========akhir dari /etc/squid.conf==================================================


#mkdir /cache
#chmod 777 /cache
#chown squid /cache
#chgrp squid /cache
#vi /etc/squid/banned.txt {make a file that conntent you want to blocked}
example : porn


.facebook.com
adult





#squid -z
#/etc/init.d/squid start
#iptables –table nat -A PREROUTING -s 192.168.5.0/24 -p tcp -m tcp –dport 80 -j REDIRECT –to-ports 8080


 



HAVE FUN !!!



  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS
Read User's Comments(0)
Diposting oleh Unknown
Langganan: Postingan (Atom)