Step By Step Instal Proxy Lusca Di Windows XP

PROXY LUSCA DI WINDOWS XP- malam sob klai ini saya akan membagi tips and trick dalam menginstal proxy luska di windows xp pasti sobat sekalian berfikir bayar apa gratais tenang sob semua ini dapat sobat coba dan download gratais tentunya dari pengenbangnya baik kalau begitu sudah ngak sabar ayo kita mulai saja tutorialnya ya sob hehehe......................???????!!!!!!!!!


sebagai contoh ya sob info ip jaringanku :

DNS speedy              : 202.134.0.155
ip mikrotik ke proxy : 192.168.2.1
Ip proxy                    : 192.168.2.2
Port proxy           : 8000


>>Langsung saja bahan-bahan yang dibutuhkan sebagai berikut :

  1. Straberry perl download di sini : http://strawberryperl.com/download/5.18.0.1/strawberry-perl-           5.18.0.1-32bit.msi

  2. Download file: Lusca for ComStuff V2.2b Rev1 

>>Cara pembuatan :

  1. Install lebih dahulu program perl yang sudah didownload tadi.
  2. Selanjutnya install program Lusca for ComStuff V2.2b Rev1

>>Cara config squid.conf lusca :

  1. Klik start > all program > Lusca proxy bla2.... > configuration > edit squid.conf

     -  beri tanda pagar pada baris config ADSBLOCKING sperti ini

##############################################
###            ADSBLOCKING                 ###
##############################################

#acl jshack url_regex -i "C:/squid/etc/jshack.block"
#deny_info http://adspit.net/lusca/hack.js jshack
#http_access deny jshack

#acl popads url_regex -i "C:/squid/etc/popads.block"
#deny_info http://adspit.net/popkiller.html popads
#http_access deny popads

#acl advertise url_regex -i "C:/squid/etc/ads.block" 
#deny_info http://adspit.net/fill.png advertise
#http_access deny advertise

#acl blockedsites dstdomain "C:/squid/etc/sites.block"
#http_access deny blockedsites

      - hilangkan tanda pagar pada baris dns_nameservers dan isi ip dns-nya contoh :

dns_nameservers 202.134.0.155 127.0.0.1 192.168.2.1

      - sesuaikan acl localNet src sesuai range ip client anda

      - Untuk TOS DSCP ZPH saya memakai config seperti ini

zph_mode tos
zph_local 0x38
zph_parent 0
zph_option 136

note : di mikrotik DSCP=14

      - Klik start > all program > Lusca proxy bla2.... > Apply SQUID LUSCA Configuration

>>Selanjutnya setting TOS / DSCP lusca windows xp

  1. Klik start > all program > run > open: regedit > ok
  2. Buka : HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters
  3. Klik Edit > New > DWORD Value
  4. Isikan     : DisableUserTOSSetting
     Value data : 0
     OK
  5. Keluar dari regedit dan restart komputer


>>Setting di mikrotik
  
  1. Buat NAT tambahan untuk proxy
     
chain=srcnat Src. Address=[range ip proxy] Out Interface=Modem Action=masquerade

chain=dstnat src. address=[ip client] protocol=tcp dst port=80 action=dst-nat to-address=192.168.2.2 to ports=8000

  2. Buat mangle HIT proxy taroh paling atas

chain=postrouting DSCP (TOS)=14 action=mark packet new packet mark=HIT PROXY

  2. Buat queue type & queue tree

add queue type name=HIT PROXY kind=pcq rate=20M clasifier=src.address & dsc. address ok

        add queue tree name=HIT PROXY parent=global-out packet mark=HIT PROXY queue type=HIT PROXY priority=8 max limit=20M


Selesai....


DNS UNBOUND

1. download programnya di sini : http://unbound.net/downloads/unbound_setup_1.4.20.exe
2. rubah isi service.conf letaknya di : c:\Program FIles\Unbound\service.conf

# Unbound configuration file on windows.
# See example.conf for more settings and syntax
server: auto-trust-anchor-file: "C:Program FilesUnboundroot.key"
         verbosity: 1
         statistics-interval: 120
         num-threads: 1
         interface: 0.0.0.0
         outgoing-range: 512
         num-queries-per-thread: 1024
         msg-cache-size: 16m
         rrset-cache-size: 32m
         msg-cache-slabs: 4
         rrset-cache-slabs: 4
         cache-max-ttl: 86400
         infra-host-ttl: 60
         infra-lame-ttl: 120
         infra-cache-numhosts: 10000
         infra-cache-lame-size: 10k
         do-ip4: yes
         do-ip6: no
         do-udp: yes
         do-tcp: yes
         do-daemonize: yes
         #access-control: 0.0.0.0/0 allow
         #access-control: 192.168.100.0/27 allow
         #access-control: 172.16.0.0/12 allow
         #access-control: 10.0.0.0/8 allow
         access-control: 127.0.0.0/8 allow
         #access-control: 0.0.0.0/0 refuse
         #use-syslog: yes
         logfile: ""
         use-syslog: no
        identity: "DNS"
        version: "1.4"
        hide-identity: yes
        hide-version: yes
        harden-glue: yes
        do-not-query-address: 127.0.0.1/8
        do-not-query-localhost: yes
        module-config: "iterator"
        #zone localhost
        local-zone: "localhost." static
        local-data: "localhost. 10800 IN NS localhost."
        local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800"
        local-data: "localhost. 10800 IN A 127.0.0.1"
        local-zone: "127.in-addr.arpa." static
        local-data: "127.in-addr.arpa. 10800 IN NS localhost."
        local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800"
        local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost."
 forward-zone:
        name: "."
        forward-addr: 180.131.144.144
        forward-addr: 180.131.145.145
        forward-addr: 202.134.0.155
        forward-addr: 203.130.196.155
        forward-addr: 125.160.4.82
        forward-addr: 202.134.0.61
        forward-addr: 203.130.196.5
        forward-addr: 222.124.198.150
        forward-addr: 222.124.249.115
        forward-addr: 8.8.8.8
        forward-addr: 8.8.4.4
remote-control:
        control-enable: yes
        control-interface: 127.0.0.1
        control-port: 953
        server-key-file: "C:Program FilesUnboundunbound_server.key"
        server-cert-file: "C:Program FilesUnboundunbound_server.pem"
        control-key-file: "C:Program FilesUnboundunbound_control.key"
        control-cert-file: "C:Program FilesUnboundunbound_control.pem"

3. Download file unbound_server.key, unbound_server.pem, unbound_control.key, dan unbound_control.pem letakkan di c:\Program FIles\Unbound\
   link : http://www.media_api.com/download/pxyuuu8dmx4ij26/unbound_server_key.tar.gz

4. Tambahkan ip dns 127.0.0.1 di squid.conf lusca dan LAN pada komputer proxy

5. Untuk pengecekan unbound pake program dig 
   download programnya dan taruh di c:\dig
   link download program dig : http://members.shaw.ca/nicholas.fong/dig/dig-files3.zip

   cara cek, masuk cmd > masuk folder c:\dig > dig google.com

oke silahkan sobat otak atik sendiri nanti lama kelamaan sobat pasti bisa sendiri hehehe sekian tutorial dari saya biala ada salah saya minta maaf bila sobat ingin berkomentar silahkan sobat berkomentar di bawah ini ya sob .........

0 Response to "Step By Step Instal Proxy Lusca Di Windows XP"

Post a Comment