[TUT] Squid 2.7STABLE9 with patch untuk dinamic dan youtube

Hmmm gien mau coba share cara instalasi Squid 2.7STABLE9 with patch. Squid 2.7 ini bisa nge cache conten-conten dinamic terutama di tujukan untuk cache youtube...  ...

Yang masih penasaran pengen nge cache youtube boleh di coba dan resiko tanggung sendiri.
kita mulai dari persiapan tool2 yang mungkin tidak aneh bagi rekan-rekan yang sudah tingkat lanjut dalam seting proxy..

squid calculator = untuk menghitung jumlah partisi / folder cache yang di alokasikan bedasarkan jumlah ram

Code: [Select]

http://stai-alazhary-cianjur.ac.id/download/squidcalc.rar

roko dan kopi untuk menemani agar tidak terlalu tegang 

1. Persiapkan CFLAGS untuk tiap jenis prosesor yang di butuhkan saat proses compile

Code: [Select]

Intel : http://en.gentoo-wiki.com/wiki/Safe_Cflags/Intel
AMD   : http:http://en.gentoo-wiki.com/wiki/Safe_Cflags/AMD 

untuk mengetahui jenis prosesor apa yang kita pakai bisa mengetikan perintah

Code: [Select]

# cat /proc/cpuinfo

2. Update ClearOS untuk mendapatkan update terbaru ( bila sudah di lakukan skip )

Code: [Select]

# yum update

setelah proses download dan instalasi update selesai reboot ClearOS

Code: [Select]

# shutdown -r now

3. Import repo Timb burges

Code: [Select]

# rpm --import ftp://timburgess.net/RPM-GPG-KEY-TimB.txt
# wget ftp://timburgess.net/repo/clearos/5.2/os/timb-release-1-0.noarch.rpm
# rpm -Kv timb-release-1-0.noarch.rpm
# rpm -Uvh timb-release-1-0.noarch.rpm

4. Install paket-paket Compiler yang di butuhkan

Code: [Select]

# yum install automake gcc glibc-devel e2fsprogs-devel sharutils
# yum groupinstall "Development Tools"
# yum install patch

5. Download squid 2.7Stable9 dan patchnya

Code: [Select]

# wget http://stai-alazhary-cianjur.ac.id/download/squid-2.7.STABLE9.tar.gz
# wget http://stai-alazhary-cianjur.ac.id/download/patch-stable9.tar.gz

6. Remove dan install squid yang telah terinstall

Code: [Select]

# yum remove squid
# yum install squid
# service squid stop

7. Extract berkas squid dan patchnya

Code: [Select]

# tar -zxvf squid-2.7.STABLE9.tar.gz
# tar -xzvf patch-stable9.tar.gz

8. Masuk ke directory squid dan lakukan patch atas squid-2.7Stable9 nya.

Code: [Select]

# cd squid-2.7.STABLE9
# patch -p0 < ../patch/aggressive.patch && patch -p0 < ../patch/loop.patch && patch -p0 < ../patch/ignore_must_revalidate.patch && patch -p0 < ../patch/ignore-no-store_new.patch

9. Lakukan proses Compile

Code: [Select]

# CHOST="i686-pc-linux-gnu" CFLAGS="-march=prescott -O2 -pipe -fomit-frame-pointer" ./configure --prefix=/usr --exec_prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --libexecdir=/usr/libexec --sysconfdir=/etc/squid --localstatedir=/cache --enable-async-io --with-pthreads --enable-storeio=aufs,coss,null --enable-linux-netfilter --enable-arp-acl --enable-epoll --enable-removal-policies=lru,heap --enable-snmp --enable-delay-pools --enable-htcp --enable-cache-digests --enable-referer-log --enable-useragent-log --enable-follow-x-forwarded-for --with-large-files --enable-large-cache-files --enable-truncate --disable-ident-lookups --with-maxfd=65536

Dalam contoh saya memakai prosesor intel core 2 duo untuk 32bit : CHOST="i686-pc-linux-gnu" CFLAGS="-march=prescott -O2 -pipe -fomit-frame-pointer"

Next

Code: [Select]

# make && umask 022 && make install && make clean

Setelah proses compile dan install selesai coba cek squid kita dengan mengetikan perintah

Code: [Select]

# squid -v

10. Berikan hak akses dan perubahan owner untuk partisi/directory /cache

Code: [Select]

# chown squid:squid /cache && chmod 777 /cache

Dalam contoh gien hanya memakai satu partisi/directory untuk penyimpanan file cache ( /cache )

11. Delet file squid.conf yang ada dan download dengan yang telah di siapkan

Code: [Select]

# rm /etc/squid/squid.conf
# cd /etc/squid
# wget http://stai-alazhary-cianjur.ac.id/download/squid.conf
# wget http://stai-alazhary-cianjur.ac.id/download/storeurl.pl
# chmod 777 /etc/squid/storeurl.pl

12. Edit dan sesuaikan dengan kebutuhan squid.conf nya terutama di bagian acl, directory cache, delay pools dll. Setelah di rasa sudah cukup editing squid.conf nya kita lanjut

13. Test apakah rule squid.conf yang telah di edit ada masalah

Code: [Select]

# squid -k parse

Rebuild cache nya

Code: [Select]

# squid -z

bisa juga dengan mengetikan perintah di bawah :

Code: [Select]

# squid -f /etc/squid/squid.conf -z

14 . Edit firewall

Code: [Select]

# nano /etc/firewal

Rubah configurasi

Code: [Select]

# Squid configuration
#--------------------

SQUID_TRANSPARENT="off"
SQUID_FILTER_PORT=""

Menjadi

Code: [Select]

# Squid configuration
#--------------------

SQUID_TRANSPARENT="on"
SQUID_FILTER_PORT="3128"

Setelah di edit keluar dan simpan

15. Restart Firewall dan jalankan service squid nya

Code: [Select]

# service firewall restart
# /usr/sbin/squid -NDd1 &

16. Agar squid bisa jalan secara otomatis saat proses booting

Code: [Select]

# nano /etc/rc.local/

tambahkan baris berikut di bawah

Code: [Select]

/usr/sbin/squid -NDd1 &

tambahan dari bang odon bila ingin lebih lengkap :

Code: [Select]

echo 1024 65535 > /proc/sys/net/ipv4/ip_local_port_range
ulimit -HSn 65535
/usr/sbin/squid -NDd1 &

 

Ok semua proses telah beres...Semoga bisa bermanfaat untuk rekan-rekan sekalian..

dan ta lupa terima kasih kepada rekan-rekan yang telah membantu untuk oprex squid ini... 

Read more »

CHEAT GHOST+AMMO

Fitur :
[-] Ghost
[-] Ammo
[-] Magnet

Hotkey :
[-] Panah Kanan + Kiri
[-] Ghost On : Home
[-] Ghost OFF : End
[-] Magnet On : Insert
[-] Magnet OFF : Delet
[-] Ammo On : F1

Read more »

Hack Topeng , Hack Helmet ,DLL

Cheat

Password 

Fitur:
[*]Hack Karakter
[*]Hack Weapon
[*]Hack Helmet
[*]Hack Topeng
[*]Magnet
[*]Ghost
[*]WH
[*]Anti Vote (Harus RM)
[*]Auto DC

Hotkey:
[*]Hack Karakter:(auto on)
[*]Hack Weapon:(Kriss batik F1)
(Famas Launcher F2)
(Ak47-FC.SI F3)
[*]Hack Helmet Def+++:(F5)
[*]Hack Topeng 3 Warna:(F6-F8)
[*]Magnet:(F9)
[*]Ghost:(F4)
[*]WH:(F11)
[*]Anti Vote:(F10)
[*]Auto DC:(F12)

Read more »

Bikin Terminal di ClearOS Lebih Berwarna dengan CCZE

Bikin Terminal di ClearOS Lebih Berwarna dengan CCZE

Mau bikin terminal ClearOS Anda lebih berwarna seperti di atas?

ikuti langkahnya seperti ini

1. siapkan Putty.

2. masuk dengan user dan password anda.

3. masukkan command di bawah ini (copy paste saja)


rpm -Uvh http://mirror.fraunhofer.de/download.fedora.redhat.com/epel/5Client/i386/ccze-0.2.1-6.el5.i386.rpm

4. sudah selesai. contoh kalau mau lihat log history client atau Hit squid tinggal di tambah command "| ccze". misalnya

# tail -f /var/log/squid/access.log | ccze

Read more »

Lusca di ClearOS 5.2

Lusca apaan tuh… setau saya Lucia.. :D untuk jelasnya cari aja digoogle, saya hanya mencatat apa yang saya lakukan perlangkah dan mengamati perubahannya. Setelah dirasakan, internet saya serasa lebih kenceng. Youtube, youp***, yutingting semuanya tercache, :D. intinya kerja cache proxy saya lebih agresif.

Tuts ini saya peroleh dari segala penjuru sumber,,, mulai grup FB, google, penerawangan, dan sekali-kali ngawur2 dikit lah.. namanya juga oprek.. :D

Gak pake lama,.. berikut urutan perintahnya.. dikerjakaan berurutan, klo copas juga harus hati-hati, jangan sampe kurang.. (maaf, gak sempet bikin screenshoot).

Saya asumsikan anda semua udah bisa mengoperasikan putty dan winscp (klo blm bisa, belajar dulu sana..). 
Tuts ini udah diuji di server Clearos 5.2, mode : gateway
Perlu diingat, simpan/backup squid.conf anda sebelum melakukan praktek, karena mungkin masih diperlukan untuk setingan delaypool.

Langkah-langkahnya :

Jalankan putty dan winscp (maklum saya gak ngerti perintah2 di cli). Masuk ke PUTTY (copas perintah dibawah ini perbaris lalu enter, kalau gak ngerti cara  copas tanya sama anak sd,……. :D , blok satu baris , ctrl C , masuk putty, klik kanan, enter):

yum install squid

yum remove squid          (jawab :  y)

yum remove squid          (sengaja… untuk memastikan gak ada yg tersisa)

yum install automake gcc glibc-devel e2fsprogs-devel sharutils                 (jawab : y)

wget http://lusca-cache.googlecode.com/files/LUSCA_HEAD-r14809.tar.gz

tar -zxvf LUSCA_HEAD-r14809.tar.gz

cd LUSCA_HEAD-r14809

ulimit -n 8192

./configure --prefix=/usr/local/squid --exec-prefix=/usr/local/squid --enable-delay-pools --enable-cache-digests --enable-poll --enable-linux-netfilter --enable-removal-policies --with-maxfd=8192 --enable-storeio=aufs --disable-wccp --enable-x-accelerator-vary --enable-kill-parent-hack --enable-async-io=30 --disable-ident-lookups

make all && make install

cd /usr/local/squid/etc/

wget http://v1.tiberias.or.id/downloads/squid.conf

wget http://v1.tiberias.or.id/downloads/storeurl.pl.conf

wget http://www.hendraarif.web.id/wp-content/uploads/2011/02/tunning.conf

(cat. jika tunning.conf gagal didonlot, bisa copy semua isi dari ini, lalu paste ke notepad, simpan dengan nama : tunning.conf, lalu copykan ke /usr/local/squid/etc/ , gunakan winscp)
----------------------------------------

buka winscp :

--------------------------------------

• masuk ke folder/directory : /usr/local/squid/etc/
• ganti nama file :  storeurl.pl.conf  menjadi storeurl.pl   (klik kanan rename)
• hapus file : squid.conf (atau ganti dg nama lain)
• ganti nama file :  squid.conf.1 menjadi squid.conf
• buka file squid.conf, untuk melakukan pengeditan. diedit.
• tambahkan tanda # didepan baris offline_mode on (hasilnya : #offline_mode on)
• menyesuaikan IP, cari baris perintah berikut :
•      acl localnet src 10.0.2.0/24 # RFC1918 possible internal network
•      ganti dg ip LAN kita, contoh : 10.0.2.0/24 ganti dengan 192.168.2.0/24)
•      ganti juga ip 10.0.2.0/24 yg berada dikelompok delaypool (digulung/scroll kebawah sampai mentok) ganti dengan IP LAN kita tadi.

kembali lagi ke…… PUTTY : 

cd /usr/local/squid/etc/

rm -rf /cache1/

mkdir /cache1

chown squid:squid /cache1

chmod 777 squid.conf tunning.conf storeurl.pl

/usr/local/squid/sbin/squid -k parse

/usr/local/squid/sbin/squid -z

/usr/local/squid/sbin/squid -NDd1 &

jika tampil tulisan : Finished rebuilding storage from disk.

bla.. bla.. bla

bla.. bla.. bla

                 storeLateRelease: released 0 objects.

artinya lusca berhasil ditanamkan di server anda..

tekan ctrl + C untuk kembali ke prompt (taulah apa namanya... yg tanda # itu lo :D)

kembali lagi ke… WINSCP :

• masuk ke direktori  /etc/rc.d
• buka file : rc.local
• hapus semua dan gantikan dengan script dibawah ini:

#!/bin/sh

#

# This script will be executed *after* all the other init scripts.

# You can put your own initialization stuff in here if you don't

# want to do the full Sys V style init stuff.

touch /var/lock/subsys/local

/usr/local/squid/sbin/squid -NDd1 &

# This file is executed by the firewall on stop/start/restart.

•  Simpan, tutup.

•  Masuk ke folder : /etc

• Buka file : firewall
• Cari baris berikut :

# Squid configuration

#--------------------------

SQUID_TRANSPARENT="" ( ganti menjadi ) SQUID_TRANSPARENT="on"

SQUID_FILTER_PORT="" ( ganti menjadi ) SQUID_FILTER_PORT="3128"

• Simpan, tutup.

Saatnya uji coba..

tes dari sembarang client buka youtube, youp*** suka2 deh.... play sampai habis.

lalu tutup browser trus buka lagi alamat yang tadi udah pernah dibuka (buka-bukaan :D)

atau bisa juga dicoba dg client yang lain untuk lihat efeknya

klo udah wuss wuss ……. Selamat lusca anda sudah bekerja..

kemudian restart server anda, untuk memastikan lusca anda aktif...

untuk pengaturan delaypool, anda bisa menggunakan setingan lama, silahkan oprek atau referensi squid,,, silahkan tuning squid.conf anda sampai juling.. :D

Tuts ini berhasil dibuat karena termotivasi dan dibantu oleh rekan-rekan grup ClearOS Indonesia,

terima kasih kepada : Kadal Ijo,  Adi Riadi, Supriyadi Supet dan Ryan Boas Patriandika.

 

untuk senjata tambahan : anda juga perlu ini dan ini

coba buka link ini untuk caching speedtest... tapi harus sabar, luamaaaa, biar hasil jarum speedometernya patah.. kwkwkwkwk

Read more »

SQUID Kadal Ijo

Ini cuma copas, untuk menyelamatkan catatan.. jika sewaktu-waktu Kadal Ijo ngambek :D piss....
squid ini pasangannya lusca yang sudah saya install, bagi anda yang sudah mengerti mohon dikoreksikan sekalian, karena saya juga gak tau jika Kadal Ijo ngadalin saya.. :v
berikut penampakannya :


=========================================================
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 192.168.1.0/24
acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access deny all
icp_access allow localnet
icp_access deny all
http_port 3128 transparent
cache_dir aufs /cache1/ 40000 16 256
cache_mem 128 MB
maximum_object_size_in_memory 128 MB
minimum_object_size 1 bytes
maximum_object_size 903216 KB
cache_swap_low 98
cache_swap_high 99
access_log /cache1/access.log
cache_log /cache1/cache.log
cache_store_log /cache1/store.log
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_effective_user squid
cache_effective_group squid

coredump_dir /cache1/
###############################################################################
#acl PHP77 url_regex forum.php forumdisplay.php showthread.php showthreads.php
#acl PHP77 url_regex download.php downloads.php classifieds.php classified.php
#acl PHP77 url_regex forum
#no_cache deny PHP77

#hierarchy_stoplist cgi-bin ? localhost
#acl QUERY22 urlpath_regex cgi-bin \? localhost
#no_cache deny QUERY22
################################################################################
#acl store_rewrite_list urlpath_regex \/(get_video|videoplayback\?id|videoplayback.*id) \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|swf)
#acl store_rewrite_list_domain url_regex ^http:\/\/([a-zA-Z-]+[0-9-]+)\.[A-Za-z]*\.[A-Za-z]*
#acl store_rewrite_list_domain url_regex (([a-z]{1,2}[0-9]{1,3})|([0-9]{1,3}[a-z]{1,2}))\.[a-z]*[0-9]?\.[a-z]{3}
#acl store_rewrite_list_path urlpath_regex \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|avc|zip|mp3|3gp|rar|on2|mar|exe)$
#acl store_rewrite_list_domain_CDN url_regex \.rapidshare\.com.*\/[0-9]*\/.*\/[^\/]* ^http:\/\/(www\.ziddu\.com.*\.[^\/]{3,4})\/(.*) \.doubleclick\.net.* yieldmanager cpxinteractive ^http:\/\/[.a-z0-9]*\.photobucket\.com.*\.[a-z]{3}$ quantserve\.com

emulate_httpd_log off
server_http11 on
redirector_bypass on

acl video urlpath_regex                   \/(get_video|videoplayback\?id|videoplayback.*id)
acl speedtest urlpath_regex               \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|txt)\
acl angka1 url_regex                      ^http:\/\/([a-zA-Z-]+[0-9-]+)\.[A-Za-z]*\.[A-Za-z]*
acl angka2 url_regex                      (([a-z]{1,2}[0-9]{1,3})|([0-9]{1,3}[a-z]{1,2}))\.[a-z]*[0-9]?\.[a-z]{3}
acl gambar urlpath_regex                  \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|avc|zip|mp3|3gp|rar|on2|mar|exe)$
acl rapidshare url_regex                  \.rapidshare\.com.*\/[0-9]*\/.*\/[^\/]* ^http:\/\/(www\.ziddu\.com.*\.[^\/]{3,4})\/(.*) \.doubleclick\.net.*
acl photobucket url_regex                 ^http:\/\/[.a-z0-9]*\.photobucket\.com.*\.[a-z]{3}$ quantserve\.com
acl google url_regex                      ^http:\/\/[a-z]+[0-9]\.google\.co(m|\.id)
acl indowebster url_regex                 ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(rar|zip|flv|wm(a|v)|3gp|mp(4|3)|exe|msi|avi|(mp(e?g|a|e|1|2|3|4))|cab|exe)
acl getmethod method GET

storeurl_access allow video
storeurl_access allow speedtest
storeurl_access allow gambar
storeurl_access allow rapidshare
storeurl_access allow photobucket
storeurl_access allow google
storeurl_access allow indowebster
storeurl_access deny all

storeurl_rewrite_program /usr/local/squid/etc/storeurl.pl
storeurl_rewrite_children 1
storeurl_rewrite_concurrency 100
#storeurl_rewrite_children 15 #7
#storeurl_rewrite_concurrency 10 #60


# VIDEO CACHE
refresh_pattern ^http://(.*?)/get_video\? 21600 90% 21600 override-expire ignore-no-cache ignore-private
refresh_pattern ^http://(.*?)/videoplayback\? 21600 90% 21600 override-expire ignore-no-cache ignore-private
refresh_pattern -i (get_video\?|videoplayback\?id|videoplayback.*id) 21600 90% 21600 override-expire ignore-reload

# facebook
refresh_pattern ((facebook.com)|(85.131.151.39)).*\.(jpg|png|gif) 21600 100% 21600 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern ((tagged.com)|(96.17.109.27)).*\.(jpg|png|gif) 21600 100% 21600 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern static\.ak\.fbcdn\.net*\.(jpg|gif|png) 21600 100% 21600 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern ^http:\/\/profile\.ak\.fbcdn.net*\.(jpg|gif|png) 21600 100% 21600 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern edgecastcdn.\net.*\.swf? 21600 100% 21600 override-expire ignore-reload store-stale
refresh_pattern \.(jp(e?g|e|2)|tiff?|bmp|gif|png)($|&) 21600 100% 21600 ignore-no-cache ignore-no-store reload-into-ims override-expire store-stale
refresh_pattern .zynga.net.*\.(jpg|gif|png|swf|mp3)($|&) 21600 100% 21600 store-stale
refresh_pattern .zynga.com.*\.(jpg|gif|png|swf|mp3)($|&) 21600 100% 21600 store-stale
refresh_pattern .farmville.net.*\.(jpg|gif|png|swf|mp3)($|&) 21600 100% 21600 store-stale
refresh_pattern .farmville.com.*\.(jpg|gif|png|swf|mp3)($|&) 21600 100% 21600 store-stale
refresh_pattern .ninjasaga.com.*\.(jpg|gif|png|swf|mp3)($|&) 21600 100% 21600 store-stale
refresh_pattern .apps.facebook.com.*\.(jpg|gif|png|swf|mp3)($|&) 21600 100% 21600 store-stale
refresh_pattern .frontierville.*\.(jpg|gif|png|swf|mp3)($|&) 21600 100% 21600 store-stale
refresh_pattern .tagged.*\.(jpg|gif|png|swf|mp3)($|&) 21600 100% 21600 store-stale

#ads
refresh_pattern ^.*(utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\.cubics\.com|ad\.xtendmedia\.com|\.googlesyndication\.com|advertising\.com|yieldmanager|game-advertising\.com|pixel\.quantserve\.com|adperium\.com|doubleclick\.net|adserving\.cpxinteractive\.com|syndication\.com|media.fastclick.net).* 21600 20% 21600 ignore-no-cache ignore-no-store ignore-private override-expire ignore-reload ignore-auth store-stale negative-ttl=40320 max-stale=1440
#specific sites
refresh_pattern ^.*safebrowsing.*google 21600 100% 21600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth negative-ttl=10080 store-stale
refresh_pattern (get_video\?|videoplayback\?|videodownload\?|\.flv?) 21600 100% 21600 override-expire ignore-reload store-stale
refresh_pattern \.(ico|video-stats) 21600 100% 21600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod negative-ttl=10080 store-stale

# pictures & images
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico|swf)$ 21600 50% 21600 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private store-stale
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico|swf)\? 21600 50% 21600 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private store-stale

# website
#refresh_pattern -i \.(xml|html|htm|js|jsp|txt|css|php|asp)$ 21600 50% 21600 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(xml|js|jsp|txt|css)$ 21600 50% 21600 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(xml|js|jsp|txt|css)\? 21600 50% 21600 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth store-stale

#sound, video multimedia
refresh_pattern -i \.(flv|x-flv|mov|avi|qt|mpg|mpeg|wmv)$ 21600 50% 21600 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache store-stale
refresh_pattern -i \.(wav|mp3|mp4|au|mid)$ 21600 50% 21600 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private store-stale

# files
refresh_pattern -i \.(iso|deb|rpm|zip|tar|tgz|ram|rar|bin|ppt|doc)$ 21600 90% 21600 ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 21600 100% 21600 override-expire ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 21600 100% 21600 override-expire ignore-no-cache ignore-auth ignore-reload ignore-no-cache store-stale
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 21600 100% 21600 override-expire ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 21600 100% 21600 override-expire ignore-no-cache ignore-auth store-stale

#IIX DOWNLOAD
refresh_pattern ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(mp3|rar|zip|flv|wmv|3gp|mp(4|3)|exe|msi|zip) 21600 99% 21600 reload-into-ims ignore-reload override-expire ignore-no-cache ignore-no-store store-stale ignore-auth

#default option
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern -i (/cgi-bin/|\?) 1    0%    2
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320 store-stale


memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
negative_ttl 2 minutes
half_closed_clients off

connect_timeout 1 minute
read_timeout 15 minutes
request_timeout 5 minutes
persistent_request_timeout 2 minutes
half_closed_clients on
shutdown_lifetime 30 seconds


icp_port 0
prefer_direct off

ipcache_size 5120
ipcache_low 98
ipcache_high 99

fqdncache_size 5120

memory_pools off
log_icp_queries off
icp_hit_stale on
query_icmp on
reload_into_ims on
pipeline_prefetch on
vary_ignore_expire on


acl user1 src 192.168.1.1
acl user2 src 192.168.1.2
acl user3 src 192.168.1.3
acl user4 src 192.168.1.4
acl user5 src 192.168.1.5
acl user6 src 192.168.1.6
acl user7 src 192.168.1.7
acl user8 src 192.168.1.8
acl user9 src 192.168.1.9
acl user10 src 192.168.1.10
acl user11 src 192.168.1.11
acl user12 src 192.168.1.12
acl user13 src 192.168.1.13
acl user14 src 192.168.1.14
acl user15 src 192.168.1.15
acl user16 src 192.168.1.16
acl user17 src 192.168.1.17
acl user18 src 192.168.1.18
acl user19 src 192.168.1.19
acl user20 src 192.168.1.20
acl user21 src 192.168.1.21
acl user22 src 192.168.1.22
acl user23 src 192.168.1.23
acl user24 src 192.168.1.24
acl user25 src 192.168.1.25
acl ekstensiblok url_regex -i \.aif \.rmi \.snd \.wav \.aifc \.aiff \.au \.mid \.midi \.mp3 \.wma \.aaf \.ogg \.rm
acl ekstensiblok url_regex -i \.asf \x-flv \.mpe \.mpeg \.mpg \.mpv2 \.avi \.m1v \.mp2v \.mpa \.flv \.wmv \.dat \ipf
acl ekstensiblok url_regex -i \.mkv \.div \.divx \.div \.ac3 \.dts \.vob \.dvr-ms \.mp4 \.m2v \.m4v \.m2ts \.bup \.rmvb
acl ekstensiblok url_regex -i \.3gpp \.3gp2 \.3gp \.3g2 \.vro \.rm \.ram \.raw \.qt \.mov \.svcd \.xdiv \.3mm \.aep \.des
acl ekstensiblok url_regex -i \.ajp \.amv \.avs \.d2v \.d3v \.dmb \.dxr \.amx \.arf \.asf \.dvx \.f4v \.dv \.bsf \.rv \.msi
acl ekstensiblok url_regex -i \.srf \.hdf \.wbmp \.x3f \.xbm \.cr2 \.crw \.dcr \.tga \.djvu \.emf \.fpx \.icl \.icn \.plp \.vdf
acl ekstensiblok url_regex -i \.ppm \.raf \.ras \.raw \.mrw \.nef \.orf \.pbm \.pcd \.pef \.pgm \.rs \.pdf \.utx \.nzp \.pak \.cdiff
acl ekstensiblok url_regex -i \.rpm \.bin \.dmg \.exe \.msi \.cab \.swf \.wsf \.pdf \.m4v \.000 \.001 \.002 \.003 \.004 \.005 \.006 \.007 \.008 \.009
acl ekstensiblok url_regex -i \.ace \.arj \.bzip2 \.gz \.jar \.tgz \.uue \.iso \.7-zip \.rar \.alz \.nrg \.zip \.cab \.gzip \.vpx
acl ekstensiblok url_regex -i \.lzw \.lzh \.tar \.tbz \.tar.tbz \.tar.tgz \.tar.tgz2 \.torrent \.FLV \.7z \.mp4 \.aac \.ogg \.pck
acl streamregex url_regex -i watch\? get_video\?video_id videodownload\? videoplayback\? videoplay\? dailymotion video\.[a-z]\.fbcdn\.net video\flv video\mpg video\quicktime video\x-flv video\mp4 video\x-avi video\x-mpeg video\x-wmv video\flash video\qt video\wmv


delay_pools 25

delay_class 1 3
delay_parameters 1 32000/32000 16000/16000 24000/24000
delay_access 1 allow ekstensiblok user1
delay_access 1 allow streamregex user1
delay_access 1 deny all

delay_class 2 3
delay_parameters 2 32000/32000 16000/16000 24000/24000
delay_access 2 allow ekstensiblok user2
delay_access 2 allow streamregex user2
delay_access 2 deny all

delay_class 3 3
delay_parameters 3 32000/32000 16000/16000 24000/24000
delay_access 3 allow ekstensiblok user3
delay_access 3 allow streamregex user3
delay_access 3 deny all

delay_class 4 3
delay_parameters 4 32000/32000 16000/16000 24000/24000
delay_access 4 allow ekstensiblok user4
delay_access 4 allow streamregex user4
delay_access 4 deny all

delay_class 5 3
delay_parameters 5 32000/32000 16000/16000 24000/24000
delay_access 5 allow ekstensiblok user5
delay_access 5 allow streamregex user5
delay_access 5 deny all

delay_class 6 3
delay_parameters 6 32000/32000 16000/16000 24000/24000
delay_access 6 allow ekstensiblok user6
delay_access 6 allow streamregex user6
delay_access 6 deny all

delay_class 7 3
delay_parameters 7 32000/32000 16000/16000 24000/24000
delay_access 7 allow ekstensiblok user7
delay_access 7 allow streamregex user7
delay_access 7 deny all

delay_class 8 3
delay_parameters 8 32000/32000 16000/16000 24000/24000
delay_access 8 allow ekstensiblok user8
delay_access 8 allow streamregex user8
delay_access 8 deny all

delay_class 9 3
delay_parameters 9 32000/32000 16000/16000 24000/24000
delay_access 9 allow ekstensiblok user9
delay_access 9 allow streamregex user9
delay_access 9 deny all

delay_class 10 3
delay_parameters 10 32000/32000 16000/16000 24000/24000
delay_access 10 allow ekstensiblok user10
delay_access 10 allow streamregex user10
delay_access 10 deny all

delay_class 11 3
delay_parameters 11 32000/32000 16000/16000 24000/24000
delay_access 11 allow ekstensiblok user11
delay_access 11 allow streamregex user11
delay_access 11 deny all

delay_class 12 3
delay_parameters 12 32000/32000 16000/16000 24000/24000
delay_access 12 allow ekstensiblok user12
delay_access 12 allow streamregex user12
delay_access 12 deny all

delay_class 13 3
delay_parameters 13 32000/32000 16000/16000 24000/24000
delay_access 13 allow ekstensiblok user13
delay_access 13 allow streamregex user13
delay_access 13 deny all

delay_class 14 3
delay_parameters 14 32000/32000 16000/16000 24000/24000
delay_access 14 allow ekstensiblok user14
delay_access 14 allow streamregex user14
delay_access 14 deny all

delay_class 15 3
delay_parameters 15 32000/32000 16000/16000 24000/24000
delay_access 15 allow ekstensiblok user15
delay_access 15 allow streamregex user15
delay_access 15 deny all

delay_class 16 3
delay_parameters 16 32000/32000 16000/16000 24000/24000
delay_access 16 allow ekstensiblok user16
delay_access 16 allow streamregex user16
delay_access 16 deny all

delay_class 17 3
delay_parameters 17 32000/32000 16000/16000 24000/24000
delay_access 17 allow ekstensiblok user17
delay_access 17 allow streamregex user17
delay_access 17 deny all

delay_class 18 3
delay_parameters 18 32000/32000 16000/16000 24000/24000
delay_access 18 allow ekstensiblok user18
delay_access 18 allow streamregex user18
delay_access 18 deny all

delay_class 19 1
delay_parameters 19 128000/128000
delay_access 19 allow ekstensiblok user19
delay_access 19 allow streamregex user19
delay_access 19 deny all

delay_class 20 3
delay_parameters 20 32000/32000 16000/16000 24000/24000
delay_access 20 allow ekstensiblok user20
delay_access 20 allow streamregex user20
delay_access 20 deny all

delay_class 21 3
delay_parameters 21 32000/32000 16000/16000 24000/24000
delay_access 21 allow ekstensiblok user21
delay_access 21 allow streamregex user21
delay_access 21 deny all

delay_class 22 3
delay_parameters 22 32000/32000 16000/16000 24000/24000
delay_access 22 allow ekstensiblok user22
delay_access 22 allow streamregex user22
delay_access 22 deny all

delay_class 23 3
delay_parameters 23 32000/32000 16000/16000 24000/24000
delay_access 23 allow ekstensiblok user23
delay_access 23 allow streamregex user23
delay_access 23 deny all

delay_class 24 3
delay_parameters 24 32000/32000 16000/16000 24000/24000
delay_access 24 allow ekstensiblok user24
delay_access 24 allow streamregex user24
delay_access 24 deny all

delay_class 25 3
delay_parameters 25 32000/32000 12000/12000 24000/24000
delay_access 25 allow ekstensiblok user25
delay_access 25 allow streamregex user25
delay_access 25 deny all
=============================================================
saya sekolah cuma sampe kelas 12.. lah ini kelas aja sampe 25... :v
jika anda berminat silahkan copas, tapi untuk IPnya silahkan sesuaikan sendiri.

Read more »

Seputar Perintah Lusca

nah berikut peralatan perang cadangan, mungkin anda memerlukan.:

1.) Untuk Startup Squid Manual:     

/usr/local/squid/sbin/squid -NDd1 &

2.) Untuk meng reconfigurasi squid, apabila habis di edit squid.conf nya:

/usr/local/squid/sbin/squid -k reconfigure

3.) Melihat aktifitas user:

tail -f /cache1/access.log

4.) Melihat persentase HIT Ratio:

/usr/local/squid/bin/squidclient -p 3128 mgr:info|grep Hit

5.) Untuk matiin squid:

/usr/local/squid/sbin/squid -k shutdown

6.) Untuk mengoreksi configurasi squid.conf:

/usr/local/squid/sbin/squid -k parse

7.) Untuk mengaktifkan kembali content filter:
yum install adzapper app-dansguardian-av app-squid app-squid-acl dansguardian-av

Read more »