Thursday, February 25, 2010

WEb HTB for Bandwith Manager

Web HTB

Doewnload Demo :
http://webhtb.sourceforge.net/video_demo.html

Download HTB :
http://downloads.sourceforge.net/project/webhtb/WebHTB%20V2.xx/WebHTB_v2.7/WebHTB_v2.7.bz2?use_mirror=internode

Manual Ringkas :
http://opensource.telkomspeedy.com/forum/viewtopic.php?id=5530

Nice tut...

Monday, February 22, 2010

Support NAWALA Project untuk Internet Sehat dan Bersih

Here is the DNS Server Name for NAWALA PROJECT, Internet Bersih sehat..
PRIMARY DNS : 180.131.144.144
PRIMARY DNS : 180.131.145.145

Go Awari !
Go telkom..
Go Biznet...

Thursday, February 18, 2010

SNMPD for CACTI In ubuntu

Install paket snmpd :
nama@localhost# sudo apt-get install snmpd

Cari dan Edit Konfigurasi nya :

#-------------------- Setting di /etc/snmp/snmpd.conf-------------
# sec.name source community
com2sec readonly 192.168.0.100 publiksaja # ini ip-nya server cacti
com2sec readonly localhost publiksaja

# sec.model sec.name
group MyROGroup v1 readonly
group MyROGroup v2c readonly
group MyROGroup usm readonly
group MyRWGroup v1 readwrite
group MyRWGroup v2c readwrite
group MyRWGroup usm readwrite

# incl/excl subtree mask
view all included .1 80


# context sec.model sec.level match read write notif
access MyROGroup "" any noauth exact all none none
access MyRWGroup "" any noauth exact all all none

syslocation Server Room
syscontact mail@domainku.com

#disk /
#disk /boot
#disk /usr
#disk /var

#---------------------akhir dari isi snmpd.conf---------------

Cari dan Ganti line berikut di /etc/default/snmpd
SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid 127.0.0.1'

dengan option berikut
SNMPDOPTS='-Lsd -Lf /dev/null -u snmp -I -smux -p /var/run/snmpd.pid'



Mau ngetesnya Ini >>>

sebelumnya restart dulu snmpd daemonnya dengan cara :
nama@localhost# sudo /etc/init.d/snmpd restart

Standarnya perintahnya :
nama@localhost# snmpwalk -v1 -c

nama@localhost# snmpwalk -v1 -c publiksaja 192.168.0.100


Segitu jo....

CENTOS >> Transparent Proxy

Berawal dari 2 System yang di adopsi di kantor, maka lahirlah Petunjuk ini.. heheheh enjoy it

Just 2 Simple Configuration setelah, konfigurasi 2 Network card
- eth0 yg menghubungkan jaringan ke LAN (Mesin SQUID) (dengan ip 192.168.0.100)
- eth1 yg menghubungkan jaringan ke WAN (denga ip 192.168.1.20)
- Modem ADSL dengan ip (192.168.1.10)
(routing, gateway, ip address, hostname, hosts) yang telah jadi


Simple Ajah..
-----------

tambahkan baris berikut di kolom BARIS "NAT" di iptables pada /etc/sysconfig/iptables

====

-A PREROUTING -i {Kartu Network Jaringahn lokal} -s ! {IP Komputer SQUID} -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

ato sederhananya
-A PREROUTING -i eth0 -s! 192.168.0.100 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 3128

====
Ato cara sederhana kedua selain contoh diatas tambhakan IPtables rules di rc.local yg lokasinya di /etc/rc.local , yaitu :

iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j DNAT --to 192.168.0.100:3128
=====




Setelah itu restart iptablesnya

root@localhost # /etc/init.d/iptables restart

## Script di Squid.conf lokasi /etc/squid/squid.conf , sisanya biarkan default
##

http_port 3128 transparent
acl localnet src 192.168.0.0/24
http_access allow localnet
http_reply_access allow localnet
icp_access allow localnet


Setelah itu restart squidnya..
root@localhost # /etc/init.d/squid restart


Segitu dah, asumsi squid dan setup kartu jaringan dan routingnya dah jalan, sebelum melakukan konfigurasi Transparent ini

Tuesday, February 16, 2010

Simple - Squid Configuration "ubuntu"

acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl localnet src 192.168.0.0/24

acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT

http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports

http_access allow localnet
http_access allow localhost
http_access deny all

http_reply_access allow localnet
http_reply_access deny all

icp_access allow localnet
icp_access deny all

http_port 3128 transparent

hierarchy_stoplist cgi-bin ?

cache_mem 1024 MB
cache_dir ufs /var/spool/squid 60000 64 256
cache_mgr admin@domainanda.com
cache_effective_user proxy
cache_effective_group proxy

access_log /var/log/squid/access.log squid

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern (cgi-bin|\?) 0 0% 0
refresh_pattern . 0 20% 4320

visible_hostname domainanda.com

icp_port 3130

always_direct allow all

forwarded_for off

coredump_dir /var/spool/squid

Simple - Firewall Script "ubuntu"

#!/bin/sh
# ------------------------------------------------------------------------------------
# See URL: http://www.cyberciti.biz/tips/linux-setup-transparent-proxy-squid-howto.html
# (c) 2006, nixCraft under GNU/GPL v2.0+
# -------------------------------------------------------------------------------------
# squid server IP
SQUID_SERVER="192.168.0.80"
# Interface connected to Internet
INTERNET="eth0"
# Interface connected to LAN
LAN_IN="eth1"
# Squid port
SQUID_PORT="3128"

# DO NOT MODIFY BELOW
# Clean old firewall
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
# Load IPTABLES modules for NAT and IP conntrack support
modprobe ip_conntrack
modprobe ip_conntrack_ftp
# For win xp ftp client
#modprobe ip_nat_ftp
echo 1 > /proc/sys/net/ipv4/ip_forward
# Setting default filter policy
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
# Unlimited access to loop back
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
# Allow UDP, DNS and Passive FTP
iptables -A INPUT -i $INTERNET -m state --state ESTABLISHED,RELATED -j ACCEPT
# set this system as a router for Rest of LAN
iptables --table nat --append POSTROUTING --out-interface $INTERNET -j MASQUERADE
iptables --append FORWARD --in-interface $LAN_IN -j ACCEPT
# unlimited access to LAN
iptables -A INPUT -i $LAN_IN -j ACCEPT
iptables -A OUTPUT -o $LAN_IN -j ACCEPT
# DNAT port 80 request comming from LAN systems to squid 3128 ($SQUID_PORT) aka transparent proxy
iptables -t nat -A PREROUTING -i $LAN_IN -p tcp --dport 80 -j DNAT --to $SQUID_SERVER:$SQUID_PORT
# if it is same system
iptables -t nat -A PREROUTING -i $INTERNET -p tcp --dport 80 -j REDIRECT --to-port $SQUID_PORT
# DROP everything and Log it
iptables -A INPUT -j LOG
iptables -A INPUT -j DROP

Sed and Grep for lookup your squid.conf

Little Tricks For uncomment your SQUID.CONF

How to Look ur Squid.conf without Mark & Comment
# grep -v "^#" /etc/squid/squid.conf | sed -e '/^$/d'

or combine try using "sed" command
# cat /etc/squid/squid.conf | sed '/ *#/d; /^ *$/d'

How to Look ur Squid.conf without Mark & Comment and Generate As New Squid.conf
# grep -v "^#" /etc/squid/squid.conf | sed -e '/^$/d' > squid.conf-uncomment

or combine try using "sed" command
# cat /etc/squid/squid.conf | sed '/ *#/d; /^ *$/d' > squid.conf-uncommnent

Download "Buku Salahkah George Berantas Korupsi"

Download "Buku Salahkah George Berantas Korupsi"
Buku ini akan terbit, tunggu saja di Blog ini.....

Cheers

Sunday, February 7, 2010

Ingin Download Buku Gurita Cikeas / Gurita Cikeas Book

Dear all..

Yang ingin Download Buku Gurita Cikeas Full Verson Ada disini nih, lihat link di bawah
Banyak yg fake, insya allah link ini masih jalan... Happy Reading...!!
Ukuran file sekitar 6.5 MB, 183 Halaman

.----
For people who want to download this Full vesion of Gurita Cikeas Book, please refer to this link below...
Is about 6.5 MB , 183 Pages

http://www.ziddu.com/download/7984457/MembongkarGuritaCikeasFull.pdf.html