SETTING MIKROTIK UNTUK MEMAKSA MENGGUNAKAN PENELUSURAN AMAN DARI GOOGLE

Posted on 02.15 | By si huma internet dan jaringan | In

SETTING MIKROTIK UNTUK MEMAKSA MENGGUNAKAN PENELUSURAN AMAN DARI GOOGLE

Jadi ketika mencari dengan kata2 fulgar, dengan mensetting penulusuran aman dari google (safesearch for google) yang kita atur melalui mikrotik, maka gambar/web yang muncul akan menampilkan gambar web yang tidak begitu fulgar.

Bagi pemilik layanan RT RW net ataupun Warnet, metode ini cukup membantu. Yahh... lumayan lah.... dari pada tidak :v

Baiklah lansung saja,

Sebelumnya kita harus mikrotik kita harus udah menerapkan settingan yang memaksa user menggunakan DNS dari mikrotik itu sendiri. Ini contoh settingannya, sesuaikan dengan jaringan anda.
 
ip fi nat add action=dst-nat chain=dstnat comment="memaksa ke DNS LOCAL" disabled=no dst-port=53 protocol=udp to-addresses=IP-MIKROTIKANDA to-ports=53

Kemudian ikuti gambar berikut :

Samakan dengan gambar tersebut.
Untuk langkah no 6, klik flush cache.

selesai

silahkan reboot mikrotik dan clear history firefox anda...(untuk uji coba sy menggunakan firefox)
Jangan lupa pencariannya tentu menggunakan search engine GOOGLE..


 

0 komentar

Menangani login page Mikrotik tidak muncul setelah mati lampu mendadak

Posted on 05.43 | By si huma internet dan jaringan | In

Menangani login page Mikrotik tidak muncul setelah mati lampu mendadak

Baru saja , saya sempet mengalami problem yang cukup unik, yaitu login page hotspot mikrotik   tidak otomatis muncul walaupun sudah mengetik DNS Name di browser , kasus ini di karenakan mati lampu mendadak.
setelah puter-puter di google , tanya-tanya forum masih belum menemukan solusi, akhirnya coba - coba lihat di NAT , ketika kita mengaktifkan hotspot server mikrotik secara otomatis mikrotik akan membuat beberapa rule NAT  (saya menggunan Mikrotik v 6.18) , rule NAT mikrotik sangat sensitif terhadap perubahan posisi rule (urutan rule) dan  mikrotik akan membaca dan mengeksekusi rule dari urutan pertama dan terus kebawah, dan setelah di coba di naikan urutan rule unused-hs-chain , alhamdulillah login page kembali bisa muncul.
CARANYA SEPERTI INI ,  disable smenetara server hotspot(IP-Hospot-Server)—>
masuk ke firewall– > NAT –> naikan  urutan rule unused-hs-chain —>   hidupkan kembali server hotspot di  /ip hotspot servers   . kemudian reboot mikrotik


kemudian test , semoga membantu

1 komentar

Mengijinkan IP tertentu untuk mengakses Mikrotik.

Posted on 02.07 | By si huma internet dan jaringan | In

 Mengijinkan IP tertentu untuk mengakses/meremot Mikrotik.
Di masa perkembangan teknologi informasi tidak bisa dipisahkan oleh perkembangan teknologi dan infrastruktur jaringan komputer. Teknologi informasi semakin berkembang dengan pesat berkat dukungan jaringan komputer yang mumpuni. Sebagai contoh Mikrotik
Mikrotik didalamnya banyak sekali fitur yang disediakan.

Misalnya pembatasan bandwith, pemblokiran aksesweb , pengalihan jalur alamat internet dan lain-lain.

Seharusnya mikrotik bisa diakses pada ip yang didaftarkan pada paket interface. Jadi semua ip yang terdaftar pada interface dapat mengakses mikrotik ini. Bagaimana jika hanya ip tertentu saja yang bisa mengaksesnya demi keamanan?
Caranya sangat mudah. Masuk pada fitur IP masuk SERVICE




Setelah itu, muncul jendela  IP SERVICE LIST


Disana terdapat menu WINBOX, doble klik menu tersebut, lalu bagian AVAILABLE FORM nya isikan alamat IP yang digunakan untuk mengakses winbox tersebut.

Selamat mencoba.


0 komentar

Cara install office 2010 di win xp under sp3 atau keluar pesan error windows 7 kita tidak suport

Posted on 04.38 | By si huma internet dan jaringan | In

Cara install office 2010 di win xp under sp3 atau keluar pesan error windows 7 kita tidak suport

pakek bhs inggris biar keren..... :v

The latest version of Office suite, Microsoft Office 2010, is undoubtedly the best productivity suite out there for Windows. Office 2010 is available in four editions and is compatible with Windows XP, Vista, Windows 7, Windows Server 2003 and Windows Server 2008 operating systems.
Though it is compatible with the good old Windows XP, users must be running a 32-bit version XP with Service Pack 3 installed to be able to install and run Office 2010. In simple words, Office 2010 can’t be installed on Windows XP SP1 or SP2.
Install Office 2010 on Windows XP SP2
When you try to run the Office 2010 setup on Windows XP SP1 or SP2, you get “Setup is unable to proceed due to the following error: To install and use this product, you must be running one of the following operating systems: Windows 7, Vista SP1, XP SP3, Server 2003 SP2, Windows 7 (x64), Vista SP1 (x64), Server 2008 x(x64). Correct the issue(s) listed above and re-run the setup” message.
While downloading and installing Service Pack 3 is not a difficult task, many Windows XP users still running SP2 for various reasons. Windows XP users who can’t upgrade to SP3 and still want to install Office 2010 will be glad to know that Office 2010 can be installed on XP SP2 as well with a small workaround. The only condition is that you must be running x86 version of XP.
Follow the instructions given below to install your favorite Office 2010 on Windows XP SP2:
Step 1: Open Registry Editor. To do this, go to Start menu, click on Run, type regedit.exe in Run dialog box and then press enter key.
Install Office 2010 on Windows XP SP2 Step2
Step 2: In the Registry editor, navigate to the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Windows
Step 3: On the right-side, double-click on CSDVersion and change its value from 200 to 300.
Install Office 2010 on Windows XP SP2 Step
Step 4: Close the Registry editor. Reboot the machine and then run Office setup to begin installing Office 2010. You should now be able to install without any issues. Once installed, navigate to the same registry key and then change the value back to 200.
Step 5: Enjoy Office 2010 and its features.
You might also like to know how to extend Office 2010 trial period with the help of Office 2010 Trial Extender tool. Don’t forget to check out our how to disable Office 2010 splash screen to speed the start.

sumber : http://www.intowindows.com/how-to-install-office-2010-on-windows-xp-sp2/

4 komentar

Cara Install Windows 7 di Laptop Lenovo G40-30

Posted on 05.08 | By si huma internet dan jaringan | In

Cara Install Windows 7 di Laptop Lenovo G40-30


Kali ini saya akan share tentang bagaimana cara setting bios laptop lenovo G40-30 supaya bisa di install windows 7. Laptop Lenovo G40-30 ini defaultnya menggunakan windows 8. Baik yang kosongan, dos atau yang sudah ada windows ori,nya. Untuk menginstal windows 7 di laptop ini perlu settingan bios tersendiri, karena kalau jika tidak diatur, maka saat instal windows 7 pasti akan terjadi bluescreen dan muncul kode seperti gambar di bawah ini


Untuk itu, saya akan share settingan bios supaya bisa instal laptop lenovo G40-30 bisa lancar jaya... ikuti petunjuk di bawah ini !


  1. Masuk ke bios dengan tombol f2
  2. Pilih menu exit di sebelah kanan
  3. Pada OS Optimized Defaults pilih "win7 OS", Jika tidak ada pilih "Other OS"
  4. Kemudian pilih "load Default Settings" dan tekan Enter lalu pilih "yes"
  5. Lalu Lihat ke sebelah kiri, Pilih menu "Configuration"
  6. Pada USB Mode pilih "USB 2.0"
  7. Lalu pilih menu "boot mode"
  8. Atur booting awal ke DVD-RW (Jika Anda instal mwnggunakan DVD)
  9. Simpan pengaturan bios dengan tekan f10
  10. Windows 7 sudah bisa di instal seperti biasa
Selamat mencoba dan semoga bermanfaat
 
sumber : http://blogitmuslim.blogspot.com/2015/01/cara-install-windows-7-di-laptop-lenovo.html


2 komentar

Memaksa client untuk menggunakan server DNS pusat

Posted on 23.11 | By si huma internet dan jaringan | In

Akhir ini setelah apa yang di lakukan oleh spiidi yaitu mulai melarang penggunaan Google Public DNS oleh para pelanggannya sebagai bagian dari kesepakatan dengan program Trust+ dari Kementrian Komunikasi dan Informatika. Google Public DNS adalah sebuah layanan resolusi DNS yang disediakan oleh Google sebagai alternatif dari layanan DNS yang biasa disediakan oleh ISP.

Alkasih PC kita yang sudah terlanjut menggunakan DNS google harus menggantinya 1 per 1. Kalau PC kita cuman beberapa gak masalah,, yang jadi masalah sekarang jika kita punya banyak client banyak ( RT RW Net) capek juga kalo mau dateng 1 1 kerumah client kita... Untuk Mengatasi hal tersebut, kita bisa membuat NAT dengan memaksa client untuk menggunakan DNS Server mikrotik kita :

untuk langkahnya sebagai berikut :
Ini hanya sederhana aturan firewall yang akan memaksa semua pengguna Anda di belakang RB untuk menggunakan server DNS yang Anda akan menentukan.


Masuk / ip nat firewall

add chain = dstnat action = dst-nat to-address = 192.168.8.1 to-port = 53 protocol = tcp dst-port = 53


add chain = dstnat tindakan = dst-nat to-address = 192.168.8.1 to-port = 53 protocol = udp dst-port = 53


Aturan ini akan memaksa semua pengguna dengan aturan ditetapkan DNS server untuk menggunakan 192.168.8.1 sebagai server DNS mereka, aturan ini hanya akan mengarahkan semua permintaan yang dikirim ke APAPUN-IP: 53 sampai 192.168.8.1:53

dari temen groub nih ada lagi yang lain...:
Rata2 teknik pemblokiran dan redirect dilakukan dengan membelokkan paksa semua request port 53 (dns). jadi mau kita ganti dns atau melakukan redirect dns seperti apapun di mikrotik, selama tujuannya masih sama2 port 53, dipastikan akan tetap terhalang oleh dns ISP
Jadi bagaimana? Cari public dns yg reliable dan sudah memiliki fitur DNSCRYPT, karena port default dns yg semula 53 sudah diubah oleh dnscrypt lewa protokol SSL encrypted dengan port2 lain seperti 443 yg biasa digunakan oleh https
OpenDNS dan nawala sudah memiliki fitur ini, dan menggunakan port 443 dan 5353 sebagai port dnscrypt.

atau
bisa juga memakai aturan di bawah ini ( dari teman forum di alamat : http://imxpert.co/Blog?id=6 )
/ip firewall nat
add action=dst-nat chain=dstnat comment="REDIRECT DNS to IMXpert.co" \
    dst-port=53 protocol=udp random=50 to-addresses=103.31.225.117 to-ports=\
    443
add action=dst-nat chain=dstnat dst-port=53 protocol=udp random=50 \
    to-addresses=103.11.143.205 to-ports=443

selamat mencoba : 

0 komentar

Share User Hotspot Dengan Limid Bw Jadi 1

Posted on 18.45 | By si huma internet dan jaringan | In



Share User Hotspot Dengan Limid Bw Jadi 1
Id hotspot yang di shared 2 atau lebih biasanya bw akan mendapat kecepatan yang sama kedudukan masing, bukan id sama dengan bw yang rebutan bersama
Untuk mengatasi hal tersebut bisa dengan cara menggunakan ip pool yang berbeda sebagai berikut.
  1. Buat ip address baru pada ether hotspot (untuk digunakan pada share user profile).
    Contoh,

  2. Buat ip pool untuk ip address tersebut.
  3. Buat profile hotspot baru dengan ip pool yang baru dibuat dan tentukan jumlah share nya dan jangan melakukan limitasi pada rate limit-nya.

  4. Buat user hotspot menggunakan profile tersebut.

  5. Buatlah simple queuee untuk range ip tersebut dan tentukan limit bandwidthnya. Kemudian drag dan posisikan queuee yg baru dibuat ini diatas queuee hs

  6. Pada NAT, Ijinkan ip tersebut connect ke internet (masquerade)
met mencoba

0 komentar

Mengatasi USBC di SD CARD dan Mengubah file *.CHK ke *.Jpeg

Posted on 23.24 | By si huma internet dan jaringan | In

mengatasi USBC di SD CARD

Pernah tidak mengalami nasib seperti ini
data didalam MAKRO SD atau MIKRO SD hilang ketika Udah terhubung Ke salah Satu komputer, yang tinggal cuma 2 data bertipe .file, tidak jelas salah satunya USBC.file.
menjengkelkan bukan, data - data kita hilang semua tanpa terkecuali, padahal dalam SD CARD tersebut banyak foto, video, mp3 dll.
untuk hilangin kejengkelan kalian, saya akan mengajar tehnik atau cara mengatasi masalah ini. :)
pertama - tama saya akan menjelaskan penyebabnya terlebih dahulu :
peyebab dari kerusakan file dalam MAKRO or MIKRO SD itu ketika makro or mikro sd itu di hubungkan ke komputer berulang kali, belum sempat di baca komputer, makro or mikro sdx langsung di cabut, trus dipasang lagi, trus dicabut lagi.
kerusakan ini juga dipengaruhi oleh cardreader yang kurang bagus.
penyelesaianya :
masuk ke windows run, caranya klik windows di pojok kanan bawah pada desktop trus pilih run
didalamnya ketiklah ini : "cmd" tanpa kutik
akan muncul tab baru
ketikkan ini : chkdsk (device sd cardmw): /f
contoh : chkdsk i: /f
terus tekan enter pada keyboard
trus anda akan diberi dua pilihan
tekan Y untuk mengcek dan tekan N jika tidak
tekan Y
anda akan menerima pesan yang diingikan untuk mengrestart kembali komputer anda.
restart komputer anda
tunggu beberapa menit sebelum masuk windows, komputer akan secara otomatis mengecek / memperbaiki data yang ada dalam sd card, tunggu beberapa menit.
masuk ke device sd card
di dalam file sd card akan terselip folder, folder aneh tersembunyi
cara memunculkannya dengan cara : masuk ke menu tools - folder option - pilih tab view - centangkan show hidden file and folder, apply and ok
masuk kembali ke device sd card. cari dan buka folder aneh itu
dalam folder itu ada banyak file, file bertipe aneh, file bertipe aneh itulah file kamu yang hilang, sekarang kamu ganti semua tipe file tersebut dengan cara, masuk kembali ke tools - folder option - tab view - hilangkan centangan hide extencion for known file types, Apply & ok
masuk kembali ke device - folder aneh tadi
lihat file tersebut semua berakhirkan .*** misalnya 001020.***
ganti (.***) dengan (.JPG) untuk gambar (.MP3) untuk music (.Mp4) untuk video. dan lain lain.
ribet, tapi data kita kembali. sekian, terima kasih. 

kemudian cek kembali flashdik atau memory card, jika terdapat file dengen ekstensi .CHK, semisal file001.CHK maka rubahlah CHK dengan Jpeg , (file001.jpeg) untuk file gambar,mp3 untuk file musik , exe untuk file program 


jika file nya banyak , tidak mungkin kalo merubah satu persatu , maka ikuti cara berikut :
Buka notepad
Contoh anda ingin mengganti semua ekstensi CHK menjadi jpeg
Ketikkan ren *.CHK *.jpeg
Simpan file anda dengan nama rename.bat
Tempatkan pada folder yang akan diganti ekstensi filenya
Setelah itu anda eksekusi file rename.bat tersebut
Selamat mencoba..... 
sumber :  http://ik13.blogspot.com/2012/08/mengatasi-usbc-di-sd-card.html
               http://indrawaliyuda.blogspot.com/2013/04/mengubah-chk-menjadi-jpg.html

1 komentar

Cara Masalah Edit Windows Load Bot Option Pada Windows 7

Posted on 16.51 | By si huma internet dan jaringan | In

Cara Masalah Edit Windows Load Bot Option Pada Windows 7


Assalamu’alaikum…

Pada artikel kali ini Admin akan coba berbagi trik pada windows atau permasalahan yang terjadi pada operasi system, terutama pada windows 7.

Trik ini diambil dari pengalaman Admin sendiri beberapa hari yang lalu saat melakukan install ulang Windows 7 pada Notebook Asus Eee PC Sheashell series. Masalahnya setiap kali notebook dinyalakan tampil layar bertuliskan:

Windows setup edit
Windows boot options for:
Windows 7 patch: \windows\system32\winload.exe
Partition 2
Hard disk: 6a295e72
[ \neoxecute=optin ]
Enter = submit ecs = cancel
Kurang lebih seperti itu.
Dari tampilan tersebut menunjukkan bahwa patch boot windows load tidak tepat atau belum di setting, sehingga tampil layar tersebut.

Walau dalam keadaan window sudah terinstall, tetapi pesan ini selalu muncul dan sangat mengganggu.

Cara untuk masalah tampilnya pesan tersebut dan memperbaiki patch winload pada Windows 7 caranya sebagai berikut:
  1. Buka Command prompt sebagai Administrator
  2. Ketik perintah berikut: bcdedit /set optionsedit no kemudian tekan ENTER
  3. Jika berhasil, maka seperti gambar berikut.
Sekarang, coba restart atau shut down laptop, notebook, atau PC Anda, maka masalah di atas akan teratasi.

Semoga artikel dan pengalaman ini bisa dapat bermanfaat buat kita semua.

Wassalamualaikum

sumber : http://randi-isk.blogspot.com/2013/01/cara-masalah-edit-windows-load-bot.html#.Uy4hJs4ltZg

0 komentar

Mengatasi Windows 8.1 Cannot be Installed to the Disk. The Selected Disk is of the GPT Partition Style

Posted on 01.36 | By si huma internet dan jaringan | In

Baru saja mengalami


"Windows Cannot be Installed to the Disk. The Selected Disk is of the GPT Partition Styl" saat ingin mengintall win 8.1... untuk solusinya seperti dibawah ini ( pakek bahasa Inggris biar keren) dan tentunya seluruh HD partisi di hapus,, jadi ngan lupa di backup terlebih dahulu..

  1. Turn off the PC, and put in the Windows installation DVD or USB key.
  2. Boot the PC to the DVD or USB key in UEFI mode. For more info, see Boot a PC in UEFI Mode or Legacy BIOS-compatibility mode.
  3. From inside Windows Setup, press Shift+F10 to open a command prompt window.
  4. Open the diskpart tool:
    diskpart
  5. Identify the drive to reformat:
    list disk
  6. Select the drive, and reformat it:
    select disk  --->> contone : select disk 1 ( angka sesuai drive)
clean
convert gpt
exit
  7. Close the command prompt window.
  8. Continue the Windows Setup installation.
    When choosing an installation type, select Custom. The drive will appear as a single area of unallocated space.
    Select the unallocated space and click Next. Windows begins the installation.
itu saja trimakasih....
selamat mencoba :v

3 komentar

Tutorial Cara Setting Queue Tree (Mikrotik)

Posted on 00.32 | By si huma internet dan jaringan | In


Tutorial Cara Setting Queue Tree (Mikrotik)

Sebelum nya saya berterima kasih kepada admin yang telah memberikan izin.
Tulisan ini saya buat dengan tujuan PEMBELAJARAN kita bersama.
Bagi yang belum tau apa itu Queue Tree Silahkan Browsing dulu!
Saya anggap teman2 udah sedikit paham tentang setting awal mikrotik.
Agar lebih mudah mempelajarinya saya akan menggunakan Winbox untuk setting nya.Tanpa memperpanjang basa basi, saya langsung aja..
Contoh Topologi :
IP Modem = 192.168.1.1
IP Mikrotik ke Modem = 192.168.1.2
IP Mikrotik Ke Client = 192.168.2.1 
IP Client = 192.168.2.10 s/d 192.168.2.14 (4 client aja dolo)
I. Membuat Mangle
Buka IP > Firewall > Mangle
Sebelum nya perhatikan gambar di bawah

1 = untuk membuat rule mangle
2 = untuk membuat comment ( Untuk Menandai )
A. Membuat Mark Connection ( Keseluruhan Koneksi )
    1.  Untuk Upload > 
    
2.  Untuk Download > 

      Beri Comment dengan nama = All-CN
B. Membuat Mark Packet
    1.  Upload > 
   
2.  Download > 

Beri Comment dengan nama = All-Packet
C. Membuat Mark Packet untuk masing2 Client
    1. Upload > 

    2. Download > 
     
Beri Comment dengan nama Client-1 Ulangi Langkah C ( sesuai jumlah client teman2 )
Mangle Yang Berhasil Kita Buat

II. Membagi Bandwidth Menggunakan Queue Tree
Untuk masalah pembagian ini saya yakin semua orang pasti berbeda2 (sesuai kebutuhan masing2)
Disini saya cman memberi contoh.
Misalnya, Jatah BW kita sbb:
Download : 1 Mbps = 1024 Kbps
Upload : 256 Kbps
Kalau menurut saya pembagian untuk 4 client adalah :
Download Limit At = 200 Kbps
Download Max Limit = 300 Kbps
Upload Limit At = 64 Kbps
Upload Max Limit = 70 Kbps
Caranya :
1. Membuat Rule Untuk semua Download

2. Membuat Rule Download Masing2 Client
Ulangi sesuai jumlah Client
3. Membuat Rule Upload Keseluruhan

4. Membuat Rule Upload Masing2 Client
Ulangi sesuai jumlah Client

Contoh Queue Tree Yang Telah Jadi

Karna berhubung hari udah malem, tangan udah mulai capek,
(tambah besok mau kuliah pagi :hammer)
Tulisan ini saya akhiri sampai disini.Mohon maaf apabila ada kesalahan, Bagi yang udah ahli mohon koreksinya. ^_^
(Maklum ane cman belajar Otodidak)
Yahh,, namanya ilmu ane dapet gratis
 dari internet,, ane cman mau sharing apa yang udah ane dapet aja. Karna kata guru ngaji ane,, Ilmu yang bermanfaat amalannya tidak akan pernah putus.
Aamiin.
sumber : http://wirelessinterface.blogspot.com/2013/03/tutorial-cara-setting-queue-tree.html

0 komentar

Cara Mengcopy Blog yang tidak bisa di copy

Posted on 02.54 | By si huma internet dan jaringan | In

 Cara Mengcopy Blog yang tidak bisa di copy
*khusus pengguna Mozilla Firefox langkahnya adalah sebagai berikut :
1. buka blog yang mau di Copy paste
2. lalu klik tools dan klik option
3. klik content
4. hilangkan tanda centang pada pilihan "Enable Javascript"


setelah itu tinggal copy deh artikel yang di inginkan.
jangan lupa kalau sudah selesai mengcopy, aktifkan lagi javascriptnya dengan cara :
1. klik tools
2. lalu klik option
3. pilih menu content (klik)
4. Beri centang pada pilihan "Enable Javascript"

Selamat Mencoba...
100% WORK...!!!

* Untuk yang menggunakan IE (Internet Explorer), langkahnya adalah sebagai berikut:
1. Buka IE nya lalu kunjungi blog yang mau di copy
2. Klik tools lalu pilih Internet Option

3. lalu pilih Security dan klik Custom level
4. Muncul tampilan Security settings, geser scrol ke bawah
5. cari pilihan Scripting
6. klik disable pada Active Scripting, Allow Paste operations via script dan scripting of java applets
7. lalu klik ok, klik yes dan klik ok lagi.
8. Silahkan Copy artikel yang anda inginkan
9. Jika masih tidak bisa, silahkan anda tutup IE nya lalu buka lagi dan kunjungi blog yang mau di copy.
kalau sudah selesai jangan Lupa di Enable lagi ya? caranya sama seperti di atas... tinggal klik Enable

Selamat Mencoba

* Untuk yang menggunakan Opera silahkan ikuti langkah di bawah ini :
1. buka Opera lalu kunjungi blog yang mau di Copy
2. di sebelah kiri atas ada pilihan Menu (berwarna merah), klik Pilihan tersebut.

3. klik settings lalu pilih Quick preference
4. hilangkan tanda centang pada pilihan Enable JavaScript
5. Silahkan anda Copy sesuka hati...

kalau Sudah selesai jangan lupa di Beri centang lagi ya di Enable JavaScriptnya.

ini hanya tips untuk bisa mengcopy post .....
Selamat Mencoba...!!!


sumber : http://ironehtc.blogspot.com/2011/08/cara-mengcopy-blog-yang-tidak-bisa-di.html

0 komentar

Mengatasi Pesan Error ” Microsoft Office Enterprise 2007 encountered an error during setup “

Posted on 16.40 | By si huma internet dan jaringan | In

Mengatasi Pesan Error ” Microsoft Office Enterprise 2007 encountered an error during setup “

Ini kejadian pas kemarin, install Office 2007, trus tiba-tiba listrik mati. Nah, setelah listrik hidup, coba install ulang, tapi ndak dinyana-nyana dapat error ” Microsoft Office Enterprise 2007 encountered an error during setup “, pikir punya pikir ini pasti karena installnya gak komplit neh, kebayang mesti hapus registry key yang dibuat oleh installernya Office 2007, daripada pusing, mending goongling saja biar cepet kelar.
Dari hasil pencarian ditemukan beberapa langkah :
1. Suruh ngasih file ” fp4autl.dll ” di Program Files/Common Files/Microsoft Shared/Web Server Extension/40/bin ——-> GAGAL, di situ sudah ada filenya.
2. Suruh restart trus install ulang —–> GAGAL
Nah, kemudian dapat petunjuk dari salah satu respon blog, ternyata sukses. Gini caranya :
1. Waktu install Office 2007, dia akan menambahkan file ” rgstrtn.lck ” ke komp kita, karena proses installnya tidak berjalan mulus, maka file tersebut hanya berukuran 0 byte, maka file inilah yang mesti kita hapus, supaya Office 2007 tidak detek adanya file ini terus.
2. Gunakan fasilitas Search for Files or Folders  pada Windows, jangan lupa aktifkan ” Search hidden Files or Folder ” di More Advanced Option. Ini penting banget, karena file rgstrtn.lck dalam posisi tersembunyi.
3. Setelah ketemu, delete file tersebut, dan cobalah untuk install ulang Office 2007′nya.
Diambil dari banyak sumber dan pengalaman sendiri (



sumber : http://introducedme.wordpress.com/2011/10/11/mengatasi-pesan-error-microsoft-office-enterprise-2007-encountered-an-error-during-setup/

0 komentar

Pengamanan dari Gangguan Brute Force pada Jaringan Mikrotik

Posted on 22.03 | By si huma internet dan jaringan | In

Pengamanan dari Gangguan Brute Force pada Jaringan Mikrotik


Berikut ini salah satu pencegahan dari aktivitas Brute Force, di mana aktivitas ini merupakan salah satu cara hacker masuk ke dalam server. Yaitu dengan berulang-ulang mencoba berbagai kombinasi password untuk menjebol login kita. Tutorial kali ini, kita akan mencoba setting dengan terminal pada winbox.
1. Mengijinkan login salah hanya 10 kali dalam semenit
  • Kita perlu setting filter rule dulu pada firewall. Silakan masuk ke direktori Filter Rule, kemudian ketik /ip firewall filter
  • Melakukan drop FTP pada IP yang telah di blacklist. Ketik add chain=input protocol=tcp dst-port=21 src-address-list=ftp_blacklist action=drop \ comment=”drop ftp brute forcers”. Hasilnya bisa dicek pada menu IP > FIREWALL > FILTER RULE


  • Menangkap IP yang melakukan login salah dalam 1 menit. Ketik: add chain=output action=accept protocol=tcp content=”530 Login incorrect” dst-limit=1/1m,9,dst-address/1m
  • Membuat listing terhadap IP – IP pelaku Brute Force. Ketik: add chain=output action=add-dst-to-address-list protocol=tcp content=”530 Login incorrect” \ address-list=ftp_blacklist address-list-timeout=3h

2. Banned 10 hari pada pelaku Brute Force melalui SSH mikrotik
  • Silakan langsung copy paste setting di bawah ini ke terminal anda:
add chain=input protocol=tcp dst-port=22 src-address-list=ssh_blacklist action=drop \
comment=”drop ssh brute forcers” disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new \
src-address-list=ssh_stage3 action=add-src-to-address-list address-list=ssh_blacklist \
address-list-timeout=10d comment=”" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new \
src-address-list=ssh_stage2 action=add-src-to-address-list address-list=ssh_stage3 \
address-list-timeout=1m comment=”" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new src-address-list=ssh_stage1 \
action=add-src-to-address-list address-list=ssh_stage2 address-list-timeout=1m comment=”" disabled=no
add chain=input protocol=tcp dst-port=22 connection-state=new action=add-src-to-address-list \
address-list=ssh_stage1 address-list-timeout=1m comment=”" disabled=no
  • Hasilnya bisa dicek pada menu: IP > FIREWALL > FILTER RULE, di bagian paling bawah.
  • Anda bisa setting secara lebih spesifik lagi untuk SSH dan FTP ke IP mana dalam jaringan anda dengan mengisikan Dst Address List pada setting Action Drop:

  • Selamat mencoba


sumber : http://blog.jagoanhosting.com/pengamanan-dari-gangguan-brute-force-pada-jaringan-mikrotik/

0 komentar

Remove WAT Software Untuk Menghilangkan Windows Activation Windows 7

Posted on 00.35 | By si huma internet dan jaringan | In

Remove WAT Software Untuk Menghilangkan Genuine Security Windows 7
adalah sebuah software kecil namun sangat bermanfaat khususnya untuk anda para pengguna windows 7 bajakan.
Sebagai informasi, bahwa windows akan selalu memantau para pengguna system operasi windows baik yang original maupun yang Baajakan.
semula saya mengunakan aplikasi Windows7 Loader tapi ada yang bandel tidak bisa..
Bagi anda pengguna windows 7 bajakan dan sering terhubung Ke internet,
hati-hat saja kalau sewaktu-waktu windows anda menjadi seperti gambar di bawah ini.
windows-7-genuine-wat.jpg
Remove WAT berfungsi untuk menghapus WAT (Windows Aktivasi Technologies) logo windows bajakan / wga di windows vista dan windows7 seperti gambar di atas.
Layar menjadi hitam dan muncul tulisan " Windows7 Build 7600 This copy of Windows is not genuine".
Untuk menghilangkannya sangat mudah silakan gunakan software Remove WAT
removewat225.jpg
10.gif
Setelah Kalian Instal Dan Kalo Pc/Laptop Anda Otomatis Restar Sendiri Biarin Aja Dan Hasil Nya Pun Memuaskan

kalo tidak berhasil coba pakai ini

Trik ini berlaku untuk semua versi Windows 7 :
1. Pertama-tama download software Chew-WGA (di klik aja linknya itu)
2. Setelah selesai mendownload, langsung jalankan programnya
3. Pilih ‘Apply’
4. Kemudian akan ada perintah untuk reboot. Kita ikuti saja, jangan jadi “Frontal Man”. Hehe.. :p
5. Setelah reboot, Windows kita bersih dari sisa-sisa kotoran “Not Genuine”. ^_^

Semoga Bermanfaat

0 komentar

Tahapan install ClearOS 5.2+Lusca+configurasi lengkap

Posted on 19.03 | By si huma internet dan jaringan | In

setting proxy mikrotik yang saya pelajari dari temen-temn forum dan dari berbagai sumber

Thank to : arief akbar, bayankentuk, m latif dsb..

saya memakai P4 2,8 RAM 1GB HD: 40GB

Cara Install ClearOs Enterprise 5.2 Server


ClearOs ini bagus di jadikan router ,proxy squid …karena clearos ini simple dan mudah digunakan,ok sekarang saya post Cara Install ClearOs Enterprise 5.2 Server
    • Download dulu ClearOs Enterprise 5.2 Server ((DISINI))
      Kemudian di burning …
    • boot CD
  • Halaman utama instalasi…Tekan ENTER seperti gambar di bawah ini:

  • Pilih “English” untuk bahasa kemudian ,seperti gambar di bawah ini:

  • Pilih “us” untuk tupe keyboard,seperti gambar di bawah ini:

  • Pilih “Local CDROM” ,seperti gambar di bawah ini:

  • Pilih “Install” ,seperti gambar di bawah ini:

  • Ketik ClearOS untuk install,seperti gambar di bawah ini:

  • Untuk Install secara offline pilih “Standalone Mode” ,seperti gambar di bawah ini:

  • Pilih “Manual Configuration” seperti gambar di bawah ini:

  • Masukkan ip address,gateway,name server(DNS) yang mengarah ke internet,seperti gambar di bawah ini:


kalau konfigurasi saya
* ip mikrotik - proxy : 192.168.1.1 /24
* ip proxy - mikrotik 192.168.1.2 / 255.255.255.0
   maka settingan gambar di atas menjadi :
IP Address : 192.168.1.2/255.255.255.0
Gateway     : 192.168.1.1 (ip mikrotik)
Name Server : 203.130.208.18 / 8.8.8.8 (DNS)
  • Masukkan password untuk login root,seperti gambar di bawah ini:

  • Untuk partisi gunakan saja “Use Default “,seperti gambar di bawah ini:

  • Untuk aplikasi aplikasi centang saja semua dengan menggunakn SPACE di keyboard,seperti gambar di bawah ini:
  •  Untuk settingan saya , hanya web server  karena saya akan menggantinya dengan Lusca


  • Pilih “Done” seperti gambar di bawah ini:

  • Proses,seperti gambar di bawah ini:



  • Instalasi sudah selesai pilih “Reboot” untuk restart seperti gambar di bawah ini:

  • mulai lah kita bisa remot CreasOS dari WEB
  • sambungkan  LAN proxy ke Port Mikrotik yang sudah di set 192.168.1.1
  • kemudian buka web firefox , ketik IP proxy:81
    dalam contoh saya : 192.168.1.2:81 (enter)
  • Masukkan “login:root” dan “password:password_yang_anda_buat” seperti gambar di bawah ini:

  • Pilih bahasa “English” kemudian “Next” seperti gambar di bawah ini:

  • Periksa ip address interface external yang mengarah ke internet…apakah udah benar atau belum…kalu udah benar silahkan colokan lan ke modem,seperti gambar di bawah ini:

  • Periksa ip address untuk local LAN (untuk client) ,seperti gambar di bawah ini:

  • Jika sudah pasti konek ke internet lan nya silahkan pilih “Gateway Mode” jika secara offline pilih “Standalone Mode” nanti jika udah konek diganti lagi ke “Gateway Mode”,seperti gambar di bawah ini:

  • Pilih Zona waktu untuk WIB “Asia/Jakarta”,seperti gambar di bawah,jika WIT ata WITA,silahkan sesuaikan:

  • Isi domain seperti gambar di bawah,jikan tidak punya domain,isi saja sembarangan:

  • Isi table “Organizations” seperti gambar di bawah:







  •  buka menggunakan Putty dan WinSCP
  • setelah putty tersambung mulai dengan menginstal LUSCA

Lusca di ClearOS 5.2


Lusca apaan tuh… setau saya Lucia.. :D untuk jelasnya cari aja digoogle, saya hanya mencatat apa yang saya lakukan perlangkah dan mengamati perubahannya. Setelah dirasakan, internet saya serasa lebih kenceng. Youtube, youp***, yutingting semuanya tercache, :D. intinya kerja cache proxy saya lebih agresif.

Tuts ini saya peroleh dari segala penjuru sumber,,, mulai grup FB, google, penerawangan, dan sekali-kali ngawur2 dikit lah.. namanya juga oprek.. :D
Gak pake lama,.. berikut urutan perintahnya.. dikerjakaan berurutan, klo copas juga harus hati-hati, jangan sampe kurang.. (maaf, gak sempet bikin screenshoot).

Saya asumsikan anda semua udah bisa mengoperasikan putty dan winscp (klo blm bisa, belajar dulu sana..). 
Tuts ini udah diuji di server Clearos 5.2, mode : gateway
Perlu diingat, simpan/backup squid.conf anda sebelum melakukan praktek, karena mungkin masih diperlukan untuk setingan delaypool.
Langkah-langkahnya :
Jalankan putty dan winscp (maklum saya gak ngerti perintah2 di cli). Masuk ke PUTTY (copas perintah dibawah ini perbaris lalu enter, kalau gak ngerti cara  copas tanya sama anak sd,……. :D , blok satu baris , ctrl C , masuk putty, klik kanan, enter):
yum install squid

yum remove squid          (jawab :  y)

yum remove squid          (sengaja… untuk memastikan gak ada yg tersisa)

yum install automake gcc glibc-devel e2fsprogs-devel sharutils                 (jawab : y)

(catatan : apabila perintah yum gak jalan coba install ini dl
wget http://download.clearfoundation.com/clearos/enterprise/5.1/System/RPMS/yum-3.2.8-9.v5.2.noarch.rpm

rpm -ivh yum-3.2.8-9.v5.2.noarch.rpm
kemudian ulangi perintah yum diatas)

wget http://lusca-cache.googlecode.com/files/LUSCA_HEAD-r14809.tar.gz

tar -zxvf LUSCA_HEAD-r14809.tar.gz

cd LUSCA_HEAD-r14809

ulimit -n 8192

./configure --prefix=/usr/local/squid --exec-prefix=/usr/local/squid --enable-delay-pools --enable-cache-digests --enable-poll --enable-linux-netfilter --enable-removal-policies --with-maxfd=8192 --enable-storeio=aufs --disable-wccp --enable-x-accelerator-vary --enable-kill-parent-hack --enable-async-io=30 --disable-ident-lookups

make all && make install

cd /usr/local/squid/etc/

wget http://v1.tiberias.or.id/downloads/squid.conf

wget http://v1.tiberias.or.id/downloads/storeurl.pl.conf

wget http://www.hendraarif.web.id/wp-content/uploads/2011/02/tunning.conf
(cat. jika tunning.conf gagal didonlot, bisa copy semua isi dari ini, lalu paste ke notepad, simpan dengan nama : tunning.conf, lalu copykan ke /usr/local/squid/etc/ , gunakan winscp)
----------------------------------------
buka winscp :
--------------------------------------
  • masuk ke folder/directory : /usr/local/squid/etc/
  • ganti nama file :  storeurl.pl.conf  menjadi storeurl.pl   (klik kanan rename)
  • hapus file : squid.conf (atau ganti dg nama lain)
  • ganti nama file :  squid.conf.1 menjadi squid.conf
  • buka file squid.conf, untuk melakukan pengeditan. diedit.
  • tambahkan tanda # didepan baris offline_mode on (hasilnya : #offline_mode on)
  • menyesuaikan IP, cari baris perintah berikut :
  •      acl localnet src 10.0.2.0/24 # RFC1918 possible internal network
  •      ganti dg ip LAN kita, contoh : 10.0.2.0/24 ganti dengan 192.168.2.0/24)
  •      ganti juga ip 10.0.2.0/24 yg berada dikelompok delaypool (digulung/scroll kebawah sampai mentok) ganti dengan IP LAN kita tadi.

kembali lagi ke…… PUTTY : 
cd /usr/local/squid/etc/

rm -rf /cache1/

mkdir /cache1

chown squid:squid /cache1

chmod 777 squid.conf tunning.conf storeurl.pl

/usr/local/squid/sbin/squid -k parse

/usr/local/squid/sbin/squid -z

/usr/local/squid/sbin/squid -NDd1 &

jika tampil tulisan : Finished rebuilding storage from disk.
bla.. bla.. bla
bla.. bla.. bla
                 storeLateRelease: released 0 objects.

artinya lusca berhasil ditanamkan di server anda..
tekan ctrl + C untuk kembali ke prompt (taulah apa namanya... yg tanda # itu lo :D)

kembali lagi ke… WINSCP :
  • masuk ke direktori  /etc/rc.d
  • buka file : rc.local
  • hapus semua dan gantikan dengan script dibawah ini:
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don't
# want to do the full Sys V style init stuff.
touch /var/lock/subsys/local
/usr/local/squid/sbin/squid -NDd1 &
# This file is executed by the firewall on stop/start/restart.
  •  Simpan, tutup.
  •  Masuk ke folder : /etc
  • Buka file : firewall
  • Cari baris berikut :
# Squid configuration
#--------------------------
SQUID_TRANSPARENT="" ( ganti menjadi ) SQUID_TRANSPARENT="on"
SQUID_FILTER_PORT="" ( ganti menjadi ) SQUID_FILTER_PORT="3128"
  • Simpan, tutup.

Saatnya uji coba..
tes dari sembarang client buka youtube, youp*** suka2 deh.... play sampai habis.
lalu tutup browser trus buka lagi alamat yang tadi udah pernah dibuka (buka-bukaan :D)
atau bisa juga dicoba dg client yang lain untuk lihat efeknya

klo udah wuss wuss ……. Selamat lusca anda sudah bekerja..
kemudian restart server anda, untuk memastikan lusca anda aktif...

untuk pengaturan delaypool, anda bisa menggunakan setingan lama, silahkan oprek atau referensi squid,,, silahkan tuning squid.conf anda sampai juling.. :D

Tuts ini berhasil dibuat karena termotivasi dan dibantu oleh rekan-rekan grup ClearOS Indonesia,
terima kasih kepada : Kadal Ijo,  Adi Riadi, Supriyadi Supet dan Ryan Boas Patriandika.
 

untuk senjata tambahan : anda juga perlu ini dan ini
coba buka link ini untuk caching speedtest... tapi harus sabar, luamaaaa, biar hasil jarum speedometernya patah.. kwkwkwkwk


untuk squid.confiq saya sepeerti ini:
  ########################################
# WELCOME TO SQUID LUSCA_HEAD-r14733   #
########################################
#offline_mode on
visible_hostname Sihuma@net
#============================================================================================================================#
#=========================================================#  AWAL  #=========================================================#
#============================================================================================================================#
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.5.50.0/24 # RFC1918 possible internal network
acl localnet src 192.168.0.0/24 # RFC1918 possible internal network

acl SSL_ports port 443
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access deny all
icp_access allow localnet
icp_access deny all
http_port 3128 transparent
#cache_dir aufs /cache1/ 10000 16 256
cache_dir aufs /cache1/ 9000 32 256
cache_mem 6 MB
maximum_object_size_in_memory 32 KB
minimum_object_size 1 bytes
maximum_object_size 128 MB
cache_swap_low 98
cache_swap_high 99
access_log /cache1/access.log
cache_log /cache1/cache.log
cache_store_log /cache1/store.log
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_effective_user squid
cache_effective_group squid

#=================================================================================================================================#
#=========================================================#  REGEX URL  #=========================================================#
#=================================================================================================================================#
coredump_dir /cache1/
###############################################################################
#acl PHP77 url_regex forum.php forumdisplay.php showthread.php showthreads.php
#acl PHP77 url_regex download.php downloads.php classifieds.php classified.php
#acl PHP77 url_regex forum
#no_cache deny PHP77

#hierarchy_stoplist cgi-bin ? localhost
#acl QUERY22 urlpath_regex cgi-bin \? localhost
#no_cache deny QUERY22
################################################################################
emulate_httpd_log off
server_http11 on
redirector_bypass on

acl video urlpath_regex                   \/(get_video|videoplayback\?id|videoplayback.*id) \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|swf|txt)\?
acl speedtest urlpath_regex               \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|txt|swf|xml)\?
acl angka1 url_regex                      ^http:\/\/([a-zA-Z-]+[0-9-]+)\.[A-Za-z]*\.[A-Za-z]*
acl angka2 url_regex                      (([a-z]{1,2}[0-9]{1,3})|([0-9]{1,3}[a-z]{1,2}))\.[a-z]*[0-9]?\.[a-z]{3}
acl gambar urlpath_regex                  \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|avc|zip|mp3|3gp|rar|on2|mar|exe)$
acl rapidshare url_regex                  \.rapidshare\.com.*\/[0-9]*\/.*\/[^\/]* ^http:\/\/(www\.ziddu\.com.*\.[^\/]{3,4})\/(.*) \.doubleclick\.net.*
acl photobucket url_regex                 ^http:\/\/[.a-z0-9]*\.photobucket\.com.*\.[a-z]{3}$ quantserve\.com
acl google url_regex                      ^http:\/\/[a-z]+[0-9]\.google\.co(m|\.id)
acl indowebster url_regex                 ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(rar|zip|flv|wm(a|v)|3gp|mp(4|3)|exe|msi|avi|(mp(e?g|a|e|1|2|3|4))|cab|exe)
acl dontrewrite url_regex yimg.com redbot\.org (get_video|videoplayback\?id|videoplayback.*id).*begin\=[1-9][0-9]* \.php\?
acl getmethod method GET

storeurl_access deny dontrewrite
storeurl_access deny !getmethod
storeurl_access allow video
storeurl_access allow speedtest
storeurl_access allow gambar
storeurl_access allow rapidshare
storeurl_access allow photobucket
storeurl_access allow indowebster
storeurl_access deny all

storeurl_rewrite_program /usr/local/squid/etc/storeurl.pl
storeurl_rewrite_children 1
storeurl_rewrite_concurrency 75
storeurl_bypass on

#=======================================================================================================================================#
#=========================================================#  REFRESH PATTERN  #=========================================================#
#=======================================================================================================================================#
# VIDEO CACHE
refresh_pattern ^http://(.*?)/get_video\? 10080 90% 432000 override-expire ignore-no-cache ignore-private
refresh_pattern ^http://(.*?)/videoplayback\? 10080 90% 432000 override-expire ignore-no-cache ignore-private
refresh_pattern -i (get_video\?|videoplayback\?id|videoplayback.*id) 161280 50000% 525948 override-expire ignore-reload

#ads
refresh_pattern ^.*(utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\.cubics\.com|ad\.xtendmedia\.com|\.googlesyndication\.com|advertising\.com|yieldmanager|game-advertising\.com|pixel\.quantserve\.com|adperium\.com|doubleclick\.net|adserving\.cpxinteractive\.com|syndication\.com|media.fastclick.net).* 129600 20% 129600 ignore-no-cache ignore-no-store ignore-private override-expire ignore-reload ignore-auth store-stale negative-ttl=40320 max-stale=1440
#specific sites
refresh_pattern ^.*safebrowsing.*google 129600 100% 129600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth negative-ttl=10080 store-stale
refresh_pattern (get_video\?|videoplayback\?|videodownload\?|\.flv?) 129600 99100% 129600 override-expire ignore-reload store-stale
refresh_pattern \.(ico|video-stats) 129600 100% 129600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod negative-ttl=10080 store-stale

# pictures & images
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico|swf)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private store-stale
refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico|swf)\? 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private store-stale

# website
#refresh_pattern -i \.(xml|html|htm|js|jsp|txt|css|php|asp)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(xml|js|jsp|txt|css)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(xml|js|jsp|txt|css)\? 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth store-stale

#sound, video multimedia
refresh_pattern -i \.(flv|x-flv|mov|avi|qt|mpg|mpeg|wmv)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache store-stale
refresh_pattern -i \.(wav|mp3|mp4|au|mid)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private store-stale

# files
refresh_pattern -i \.(iso|deb|rpm|zip|tar|tgz|ram|rar|bin|ppt|doc)$ 10080 90% 43200 ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth ignore-reload ignore-no-cache store-stale
refresh_pattern -i \.(hqx|pdf|rtf|doc)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth store-stale
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth store-stale

#IIX DOWNLOAD
refresh_pattern ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(mp3|rar|zip|flv|wmv|3gp|mp(4|3)|exe|msi|zip) 43200 99999% 129600 reload-into-ims ignore-reload override-expire ignore-no-cache ignore-no-store store-stale ignore-auth

#default option
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern -i (/cgi-bin/|\?) 1    0%    2
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320 store-stale


#=============================================================================================================================#
#=========================================================#  TOOLS  #=========================================================#
#=============================================================================================================================#
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
negative_ttl 2 minutes
half_closed_clients off

connect_timeout 1 minute
read_timeout 15 minutes
request_timeout 5 minutes
persistent_request_timeout 2 minutes
half_closed_clients on
shutdown_lifetime 30 seconds


icp_port 0
prefer_direct off

ipcache_size 2048
ipcache_low 98
ipcache_high 99

fqdncache_size 5120

memory_pools off
log_icp_queries off
icp_hit_stale on
query_icmp on
reload_into_ims on
pipeline_prefetch on
vary_ignore_expire on




header_access X-Forwarded-For deny all
client_persistent_connections on
server_persistent_connections off
half_closed_clients off
strip_query_terms off
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 98
vary_ignore_expire on
reload_into_ims on
pipeline_prefetch on
negative_ttl 30 seconds
positive_dns_ttl 6 hours
negative_dns_ttl 60 seconds
pconn_timeout 15 seconds
request_timeout 1 minute
log_icp_queries off
ipcache_size 8192
ipcache_low 98
ipcache_high 99
log_fqdn off
fqdncache_size 8192
memory_pools off
forwarded_for on
prefer_direct on
persistent_connection_after_error on
balance_on_multiple_ip on
store_avg_object_size 50 KB

n_aiops_threads 24
load_check_stopen on
load_check_stcreate on
download_fastest_client_speed on
#=============================================================================================================================#
#===================================================#     DELAY POOLS     #===================================================#
#=============================================================================================================================#
#acl bypas url_regex -i 192.168.0.0
acl  magic_words1 url_regex -i 10.5.50.0/24
acl  magic_words1 url_regex -i 192.168.0.0/24


acl  file-file url_regex -i ftp \.ppt \.tar.gz \.tar.bz \.tar.bz2 \.gz \.rpm \.zip \.gzip \.bin \.rar \.qt \.iso \.raw \.tar \.doc \.z \.arj \.lzh \.vqf \.exe
acl  audio-audio url_regex -i \.mp3 \.mp2 \.aac \.wav \.mid \.wmv \.wma \.ogg
acl  striming url_regex -i \.mov \.avi \.mpeg \.mpe \.mpg \.ram \.rm \.flv \.flv-x \.mp4 \.3gp \.mkv
acl  striming url_regex -i get_video? video_id? videodownload? videoplayback? .c.youtube.com
#acl  speedtt url_regex -i  \.jpg?


delay_pools 4

delay_class 1 2
delay_access 1 allow magic_words1
delay_parameters 1 -1/-1 -1/-1
#delay_access 1 deny bypas

delay_class 2 1
delay_access 2 allow file-file
delay_parameters 2 51200/51200

delay_class 3 1
delay_access 3 allow audio-audio
delay_parameters 3 51200/51200

delay_class 4 1
delay_access 4 allow striming
delay_parameters 4 51200/51200

#delay_class 5 2
#delay_access 5 allow speedtt
#delay_parameters 5 -1/-1 32785/3278500



atau

visible_hostname Sihuma@net
acl all src all
acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8
acl localnet src 10.5.50.0/24 # RFC1918 possible internal network
acl localnet src 192.168.0.0/24 # RFC1918 possible internal network

acl SSL_ports port 443
acl Safe_ports port 21 70 80 81 210 280 443 488 563 591 631 667 777 901 3128 1025-65535

acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localnet
http_access deny all
icp_access allow localnet
icp_access deny all
http_port 3128 transparent
#cache_dir aufs /cache1/ 10000 16 256
cache_dir aufs /cache1/ 9000 32 256
cache_mem 6 MB
maximum_object_size_in_memory 32 KB
minimum_object_size 1 bytes
maximum_object_size 128 MB
cache_swap_low 98
cache_swap_high 99
access_log /cache1/access.log
cache_log /cache1/cache.log
cache_store_log /cache1/store.log
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
upgrade_http0.9 deny shoutcast
acl apache rep_header Server ^Apache
broken_vary_encoding allow apache
cache_effective_user squid
cache_effective_group squid

#=================================================================================================================================#
#=========================================================#  REGEX URL  #=========================================================#
#=================================================================================================================================#
coredump_dir /cache1/
###############################################################################
#acl PHP77 url_regex forum.php forumdisplay.php showthread.php showthreads.php
#acl PHP77 url_regex download.php downloads.php classifieds.php classified.php
#acl PHP77 url_regex forum
#no_cache deny PHP77

#hierarchy_stoplist cgi-bin ? localhost
#acl QUERY22 urlpath_regex cgi-bin \? localhost
#no_cache deny QUERY22
################################################################################
emulate_httpd_log off
server_http11 on
redirector_bypass on

acl video urlpath_regex                   \/(get_video|videoplayback\?id|videoplayback.*id) \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|swf|txt)\?
acl speedtest urlpath_regex               \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|txt|swf|xml)\?
acl angka1 url_regex                      ^http:\/\/([a-zA-Z-]+[0-9-]+)\.[A-Za-z]*\.[A-Za-z]*
acl angka2 url_regex                      (([a-z]{1,2}[0-9]{1,3})|([0-9]{1,3}[a-z]{1,2}))\.[a-z]*[0-9]?\.[a-z]{3}
acl gambar urlpath_regex                  \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|avc|zip|mp3|3gp|rar|on2|mar|exe)$
acl rapidshare url_regex                  \.rapidshare\.com.*\/[0-9]*\/.*\/[^\/]* ^http:\/\/(www\.ziddu\.com.*\.[^\/]{3,4})\/(.*) \.doubleclick\.net.*
acl photobucket url_regex                 ^http:\/\/[.a-z0-9]*\.photobucket\.com.*\.[a-z]{3}$ quantserve\.com
acl google url_regex                      ^http:\/\/[a-z]+[0-9]\.google\.co(m|\.id)
acl indowebster url_regex                 ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(rar|zip|flv|wm(a|v)|3gp|mp(4|3)|exe|msi|avi|(mp(e?g|a|e|1|2|3|4))|cab|exe)
acl dontrewrite url_regex yimg.com redbot\.org (get_video|videoplayback\?id|videoplayback.*id).*begin\=[1-9][0-9]* \.php\?
acl getmethod method GET

storeurl_access deny dontrewrite
storeurl_access deny !getmethod
storeurl_access allow video
storeurl_access allow speedtest
storeurl_access allow gambar
storeurl_access allow rapidshare
storeurl_access allow photobucket
storeurl_access allow indowebster
storeurl_access deny all

storeurl_rewrite_program /usr/local/squid/etc/storeurl.pl
storeurl_rewrite_children 1
storeurl_rewrite_concurrency 75
storeurl_bypass on

refresh_pattern -i \.(htm|exe|html|asp|xml|class|css|js|swf|ico|cur|ani|jpg|jpeg|bmp|png|cdr|txt|gif|dll)$ 129600 100% 129600  override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache  ignore-private ignore-auth

refresh_pattern ^http://patch.crossfire.web.id/.* 86400 100% 86400 ignore-reload   ignore-no-cache
refresh_pattern ^http://*.crossfire.*.*/.* 86400 100% 86400 ignore-reload   ignore-no-cache
refresh_pattern (get_video\?|videoplayback\?|videodownload\?|\.flv?)    129600 100% 129600 ignore-no-cache  ignore-private override-expire override-lastmod reload-into-ims
refresh_pattern (get_video\?|videoplayback\?id|videoplayback.*id|videodownload\?|\.flv?)    129600 100% 129600 ignore-no-cache  ignore-private override-expire override-lastmod reload-into-ims
refresh_pattern \.(ico|video-stats) 129600 100% 129600 override-expire ignore-reload ignore-no-cache  ignore-private ignore-auth override-lastmod  negative-ttl=10080
refresh_pattern \.etology\?                                     129600 100% 129600 override-expire ignore-reload ignore-no-cache
refresh_pattern galleries\.video(\?|sz)                         129600 100% 129600 override-expire ignore-reload ignore-no-cache
refresh_pattern brazzers\?                                      129600 100% 129600 override-expire ignore-reload ignore-no-cache
refresh_pattern \.adtology\?                                    129600 100% 129600 override-expire ignore-reload ignore-no-cache
refresh_pattern ^.*(utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\.cubics\.com|ad\.xtendmedia\.com|\.googlesyndication\.com|advertising\.com|yieldmanager|game-advertising\.com|pixel\.quantserve\.com|adperium\.com|doubleclick\.net|adserving\.cpxinteractive\.com|syndication\.com|media.fastclick.net).* 10080 20% 10080 ignore-no-cache  ignore-private override-expire ignore-reload ignore-auth   negative-ttl=40320 max-stale=10
refresh_pattern ^.*safebrowsing.*google  129600 100% 129600 override-expire ignore-reload ignore-no-cache ignore-private ignore-auth  negative-ttl=10080
refresh_pattern ^http://((cbk|mt|khm|mlt)[0-9]?)\.google\.co(m|\.uk)    129600 100% 129600 override-expire ignore-reload ignore-private  negative-ttl=10080
refresh_pattern ytimg\.com.*\.jpg                                       129600 100% 129600 override-expire ignore-reload
refresh_pattern images\.friendster\.com.*\.(png|gif)                    129600 100% 129600 override-expire ignore-reload
refresh_pattern garena\.com                                             129600 100% 129600 override-expire reload-into-ims
refresh_pattern photobucket.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png)          129600 100% 129600 override-expire ignore-reload
refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\?                     129600 100% 129600 ignore-no-cache override-expire override-lastmod
refresh_pattern mediafire.com\/images.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png)    129600 100% 129600 reload-into-ims override-expire ignore-private
refresh_pattern ^http:\/\/images|pics|thumbs[0-9]\.                     129600 100% 129600 reload-into-ims ignore-no-cache  ignore-reload override-expire
refresh_pattern ^http:\/\/www.onemanga.com.*\/                          129600 100% 129600 reload-into-ims ignore-no-cache  ignore-reload override-expire
refresh_pattern -i \.facebook.com.*\.(jpg|png|gif|jpeg|js)                      129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern -i \.fbcdn.net.*\.(jpg|gif|png|swf|mp3)                 129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern  static\.ak\.fbcdn\.net*\.(jpg|gif|png|jpeg|js)                 129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern  avatars.com*\.(jpg|gif|png|js)                 129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern  opi.yahoo.com.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png)                 129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern  static.4shared.com.*\/                     129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern  demuvia.com.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png)                     129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern  girlsgogames.com.*\/                     129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern  gamatar.org.*\/                     129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern  -i \.photoshop.com*\.(jpg|gif|png|jpeg|js)                     129600 100% 129600 ignore-reload override-expire ignore-no-cache
refresh_pattern -i (main.exe|notice.html|Loader.xml|Loader.xml.zip|update.exe|grandchase.exe|FSLaun.cher.exe|FreeStyle_Setup.exe|rohanclient__exe.rp)$ 180 50% 43800
refresh_pattern -i (UpdaterModifier.exe|FreeStyle.exe|PBLauncher.exe|update.exe|NewLauncher.exe|New.Avalon.exe|hon.exe.zip|cabal.exe|filelist.zip|AvaClient.exe)$ 180 50% 43800
refresh_pattern -i (wks_avira-win32-en-pecl.info.gz|wks_avira10-win32-en-pecl.info.gz|update.exe.gz|setup.exe.gz|avscan.exe.gz|avguard.exe.g)$ 180 50% 180
refresh_pattern (PointBlank.exe.zip|HSUpdate.exe.zip|PBConfig.exe.zip) 180 60% 131400
refresh_pattern -i (livescore.com|goal.com) 0 50% 60
refresh_pattern .gemscool.com.*\(zip|sc) 43800 100% 43800 ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern .edgecastcdn.net.*\swf\? 43800 999999% 43800 ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern ^http:\/\/*.lscache[0-9]youtube*\.*                   86400 100% 86400     ignore-reload  
refresh_pattern ^http:\/\/*.lscache[0-9][0-9].youtube*\.*                   86400 100% 86400     ignore-reload  
refresh_pattern ^http:\/\/*.lscache[0-9][0-9][0-9].youtube*\.*                   86400 100% 86400     ignore-reload  
refresh_pattern ^http:\/\/\.[a-z0-9].youtube\.com\/(.*) 86400 100% 86400     ignore-reload  


# 1 year = 525600 mins, 1 month = 43800 mins
refresh_pattern imeem.*\.flv  0 0% 0      
refresh_pattern \.rapidshare.*\/[0-9]*\/.*\/[^\/]*   161280    90%    161280 ignore-reload 

refresh_pattern windowsupdate.com/.*\.(cab|exe)             43200  999999%  129600 ignore-no-cache  ignore-reload  reload-into-ims
refresh_pattern update.microsoft.com/.*\.(cab|exe)             43200  999999%  129600 ignore-no-cache  ignore-reload  reload-into-ims
refresh_pattern download.microsoft.com/.*\.(cab|exe)             43200  999999%  129600 ignore-no-cache  ignore-reload  reload-into-ims

refresh_pattern ^http://*.devilzc0de.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.jobstreet.com.*/.* 86400 100% 86400 override-expire override-lastmod ignore-no-cache
refresh_pattern ^http://*.indowebster.com.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern ^http://*.21cineplex.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern ^http://*.atmajaya.*/.* 86400 100% 86400 override-expire ignore-no-cache ignore-auth
refresh_pattern ^http://*.kompas.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.theinquirer.*/.* 86400 100% 86400 override-expire ignore-no-cache ignore-auth
refresh_pattern ^http://*.blogspot.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.wordpress.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.tsm00.eset.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.stmik-amik-riau.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.photobucket.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.tinypic.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.4shared.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.imageshack.us/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.kaskus.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://www.kaskus.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detik.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.detiknews.*/*.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://video.liputan6.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://static.liputan6.com/.* 86400 100% 86400 override-expire  override-lastmod reload-into-ims ignore-no-cache   ignore-auth
refresh_pattern ^http://*.friendster.com/.* 86400 100% 86400 override-expire override-lastmod ignore-no-cache ignore-auth
refresh_pattern ^http://*.fbcdn.net/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.yahoo.com/.* 86400 100% 86400 override-expire override-lastmod  reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.google.com/.* 86400 100% 86400 override-expire override-lastmod  reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.linux.or.id/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.games.co.id/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.game.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache
refresh_pattern ^http://*.forummikrotik.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth

refresh_pattern ^http://*.facebook.com*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.apps.facebook.com*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.profile.ak.fbcdn.net/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.creative.ak.fbcdn.net/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.static.ak.fbcdn.net/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.facebook.poker.zynga.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.statics.poker.static.zynga.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims  ignore-no-cache ignore-auth
refresh_pattern ^http://*.zynga.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.texas_holdem.*/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
refresh_pattern ^http://*.static.facebook.mafiawar.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.static.farmville.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.nav3.zynga.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.ninjasaga.com/.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth
refresh_pattern ^http://*.farmville.net./.* 86400 100% 86400 override-expire override-lastmod reload-into-ims ignore-no-cache  ignore-auth

refresh_pattern guru.avg.com/.*\.(bin)                   86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern avast.com.*\.vpx                          86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern (avgate|avira).*\.(idx|gz)$               86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern kaspersky.*\.avc$                         86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern kaspersky                                 86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern liveupdate.symantecliveupdate.com.*\.zip        86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern .update.nai.com/.*\.(gem|zip|mcs)         86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern .symantec.com.*\(exe|zip)                 86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern mbamupdates.com.*\.ref                       86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale

refresh_pattern windowsupdate.com/.*\.(cab|exe)                                   86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern update.microsoft.com/.*\.(cab|exe)                                86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern download.microsoft.com/.*\.(cab|exe)                              86400 100% 86400 ignore-no-cache ignore-no-store ignore-reload  reload-into-ims store-stale
refresh_pattern ((facebook.com)|(85.131.151.39)).*\.(jpg|png|js|gif)                 86400 100% 86400 ignore-reload  override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern -i \.fbcdn.net.*\.(jpg|gif|png|swf|mp3)                           86400 100% 86400 ignore-reload  override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern  static\.ak\.fbcdn\.net*\.(jpg|gif|png)                           86400 100% 86400 ignore-reload  override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern ^http:\/\/profile\.ak\.fbcdn.net*\.(jpg|gif|png|jpeg|js)      86400 100% 86400 ignore-reload  override-expire ignore-no-cache ignore-no-store store-stale

refresh_pattern ^http:\/\/openx.*\.(jp(e?g|e|2)|gif|pn[pg]|swf|ico|css|tiff?)     129600 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/ads(1|2|3).kompas.com.*\/                             43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/img.ads.kompas.com.*\/                             43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern .kompasimages.com.*\.(jpg|gif|png|swf)                         43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/openx.kompas.com.*\/                             43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern kaskus.\us.*\.(jp(e?g|e|2)|gif|png|swf)                          43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/img.kaskus.co.id.*\.(jpg|gif|png|swf)                     43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/img.gemscool.com.*\.(jpg|gif|png|swf)                   43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/img.pb.gemscool.com.*\.(jpg|gif|png|swf)                     43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/img.atlantica.gemscool.com.*\.(jpg|gif|png|swf)         43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/img.fs.gemscool.com.*\.(jpg|gif|png|swf)                     43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern ^http:\/\/img.vivanews.com.*\.(jpg|gif|png|swf)                     43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale

refresh_pattern -i \.(htm|html|asp|xml|class|css|js|swf|ico|cur|ani|jpg|jpeg|bmp|png|cdr|txt|gif|dll)       129600 100% 129600 ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern \.(3gp|7z|ace|asx|bin|deb|divx|dvr-ms|ram|rpm|exe|inc|cab|qt)       129600 100% 129600 ignore-no-cache   ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern -i \.(rar|jar|gz|tgz|bz2|m1v|m2(v|p)|mo(d|v)|arj|lha|lzh|zip|tar)  129600 100% 129600 ignore-no-cache   ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern -i \.(jp(e?g|e|2)|gif|pn[pg]|bm?|tiff?|ico|swf|dat|ad|txt|dll)         129600 100% 129600 ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern -i \.(ac4|mp(e?g|a|e|1|2|3|4)|mk(a|v)|ms(i|u|p)|og(x|v|a|g)|rm|r(a|p)m|snd|vob) 129600 100% 129600 ignore-no-cache   override-expire override-lastmod reload-into-ims
refresh_pattern -i \.(pp(t?x)|s|t)|pdf|rtf|wax|wm(a|v)|wmx|wpl|cb(r|z|t)|xl(s?x)|do(c?x)) 129600 100% 129600 ignore-no-cache   override-expire override-lastmod reload-into-ims
refresh_pattern -i \.(iso|deb|rpm|zip|tar|tgz|ram|rar|bin|ppt|doc)$ 10080 90% 43200 ignore-no-cache ignore-auth
refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
refresh_pattern -i \.(js|psf|html|htm|css|swf|xml|gif|jpg|png|jpeg|bmp|psd|ad|m4p|mpa)$ 10080 90% 999999 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern -i \.js 129600 100% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  store-stale
refresh_pattern -i \.css 129600 100% 129600 ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern -i \.ashx 129600 100% 129600 ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern -i \.js\?$ 129600 100% 129600 ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern -i \.css\?$ 129600 100% 129600 ignore-no-cache override-expire ignore-private override-lastmod
refresh_pattern -i \.gif\?$ 129600 100% 129600 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern -i \.jpg\?$ 129600 100% 129600 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern -i \.png\?$ 129600 100% 129600 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern -i \.jpeg\?$ 129600 100% 129600 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern -i \.psd\?$ 129600 100% 129600 override-expire override-lastmod reload-into-ims ignore-reload
refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern -i (/cgi-bin/|\?) 1    0%    2
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320 store-stale

memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
negative_ttl 2 minutes
half_closed_clients off

connect_timeout 1 minute
read_timeout 15 minutes
request_timeout 5 minutes
persistent_request_timeout 2 minutes
half_closed_clients on
shutdown_lifetime 30 seconds


icp_port 0
prefer_direct off

ipcache_size 2048
ipcache_low 98
ipcache_high 99

fqdncache_size 5120

memory_pools off
log_icp_queries off
icp_hit_stale on
query_icmp on
reload_into_ims on
pipeline_prefetch on
vary_ignore_expire on




header_access X-Forwarded-For deny all
client_persistent_connections on
server_persistent_connections off
half_closed_clients off
strip_query_terms off
quick_abort_min 0 KB
quick_abort_max 0 KB
quick_abort_pct 98
vary_ignore_expire on
reload_into_ims on
pipeline_prefetch on
negative_ttl 30 seconds
positive_dns_ttl 6 hours
negative_dns_ttl 60 seconds
pconn_timeout 15 seconds
request_timeout 1 minute
log_icp_queries off
ipcache_size 8192
ipcache_low 98
ipcache_high 99
log_fqdn off
fqdncache_size 8192
memory_pools off
forwarded_for on
prefer_direct on
persistent_connection_after_error on
balance_on_multiple_ip on
store_avg_object_size 50 KB

n_aiops_threads 24
load_check_stopen on
load_check_stcreate on
download_fastest_client_speed on



catatan :
warna pink adalah ip local yang akan kita gunakan , sesuaikan dengan ip settingan anda di mikrotik.

untuk storeurl.pl milik saya ini:

 #!/usr/bin/perl
# $Rev$
# Youtube updates at http://wiki.squid-cache.org/ConfigExamples/DynamicContent/YouTube/Discussion
$|=1;
while (<>) {
@X = split;
# $X[1] =~ s/&sig=.*//;
$x = $X[0] . " ";
$_ = $X[1];
$u = $X[1];

#photos-X.ak.fbcdn.net where X a-z
if (m/^http:\/\/photos-[a-z]?(.ak.fbcdn.net.*)/) {
print $x . "http://photos" . $1 . "\n";

#http://hphotos-ash2.fbcdn.net/290503_1735121757952_1835833812_1146280_4168472_o.jpg
} elsif (m/^http:\/\/photos-ash[1-5]?(.fbcdn.net.*)/) {
print $x . "http://ash.photos" . $1 . "\n";

#http://a6.sphotos.ak.fbcdn.net/hphotos-ak-ash4/319568_206164829444513_152217858172544_542308_1727268_n.jpg
#a5.sphotos.ak.fbcdn.ne

} elsif (m/^http:\/\/[a-z][0-9]?(.sphotos.ak.fbcdn.net.*)/) {
print $x . "http://cdn.photos" . $1 . "\n";

#http://cityvillefb0.static.zgncdn.com/hashed/43897e86db37ffda95e0d015de72e2a4.png
} elsif (m/^http:\/\/cityvillefb[0-3]?(.static.zgncdn.com.*)/) {
print $x . "http://cityvillefb" . $1 . "\n";

#http://playerstatics1.poker.static.zynga.com/poker/image_proxy.php/aHR0cDovL3Byb2ZpbGUuYWsuZmJjZG4ubmV0L2hwcm9maWxlLWFrLXNuYzQvMjc0ODM2XzEwMDAwMjkwMTU1MTE3MV8xMDAwNTE0MjM3X24uanBn
} elsif (m/^http:\/\/playerstatics[1-9]?(.poker.static.zynga.com.*)/) {
print $x . "http://playerstatics.poker-zynga." . $1 . "\n";

#http://zynga4-a.akamaihd.net/zbar/game-icons/adventureworld-banner-Adventureadventuredame09162011-13161891413359.png
} elsif (m/^http:\/\/zynga[1-9]?-a(.akamaihd.net.*)/) {
print $x . "http://zynga-akamaihd.net." . $1 . "\n";

#http://s2.ninja.game321.com/source/bitmap/icon/debris/icon_debris134.s110.png
} elsif (m/^http:\/\/s[1-9]?(.ninja.game321.com.*)/) {
print $x . "http://ninja-game321." . $1 . "\n";

#http://i616.photobucket.com/albums/uu90/the_martian_cat/ATT00001-1.gif
} elsif (m/^http:\/\/i[1-9]{3}(.photobucket.com.*)/) {
print $x . "http://photobucket3." . $1 . "\n";

# http://i1221.photobucket.com/albums/dd462/semprotcom/File/tri7bet-s.gif
} elsif (m/^http:\/\/i[1-9]{4}(.photobucket.com.*)/) {
print $x . "http://photobucket." . $1 . "\n";

#BLOGSPOT
} elsif (m/^http:\/\/[1-4]?(bp.blogspot.com.*)/) {
print $x . "http://blog-cdn." . $1 . "\n";

#https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMnx1vj7j8NBFX99jlyWDFyKH9RpNSRLoTNrNk0nH0ftQBXGvrj1e-ikvUCUGHOJYzCcRBceu2Q166x-jQmmq6K-uPY-ECHkxHxSJPeTbNlRtns6lDFW0zKLKn6E_UmzPKT6xSmgqSPw6k/
} elsif (m/^http:\/\/lh[3-6]?(.ggpht.com.*)/) {
print $x . "http://ggpht." . $1 . "\n";

#http://a2.twimg.com/profile_images/1213095644/CBS-eye-white-bg_normal.jpg
} elsif (m/^http:\/\/a[0-5]?(.twimg.com.*)/) {
print $x . "http://cdn-twimg.com." . $1 . "\n";

#AVAST
} elsif (m/^http:\/\/download[0-9]{3}.(avast.com.*)/) {
print $x . "http://avast-cdn." . $1 . "\n";

#KAV
} elsif (m/^http:\/\/dnl-[0-9]{2}.(geo.kaspersky.com.*)/) {
print $x . "http://kav-cdn." . $1 . "\n";

#AVG
} elsif (m/^http:\/\/(update.avg.com.*)/) {
print $x . "http://avg-cdn." . $1 . "\n";

#static3.spilcdn.com/
} elsif (m/^http:\/\/static[1-9]?(.speelcdn.com.*)/) {
print $x . "http://speelcdn." . $1 . "\n";

#http://t1.gstatic.com
} elsif (m/^http:\/\/t[1-9]?(.gstatic.com.*)/) {
print $x . "http://cdn-gstatic.com." . $1 . "\n";

# http://0.gravatar.com
} elsif (m/^http:\/\/[0-3]?(.gravatar.com.*)/) {
print $x . "http://cdn-gravatar." . $1 . "\n";

#http://s5.scribdassets.com/images/attribution_noncommercial.png
} elsif (m/^http:\/\/s[1-8]?(.scribdassets.com.*)/) {
print $x . "http://cdn-scribdassets." . $1 . "\n";

# http://tc2.easythumbhost.com/
} elsif (m/^http:\/\/tc[0-9]?(.easythumbhost.com.*)/) {
print $x . "http://cdn-easythumbhost." . $1 . "\n";

#http://static7.spilcdn.com/tw/img/_/profile/dummy_small.png
} elsif (m/^http:\/\/static[1-7]?(.spilcdn.com.*)/) {
print $x . "http://spilcdn." . $1 . "\n";

#http://media5.picsearch.com/is
} elsif (m/^http:\/\/media[1-8]?(.picsearch.com.*)/) {
print $x . "http://cdn-picsearch." . $1 . "\n";

#http://lh3.googleusercontent.com/-z2ZV9VfLsc0/TmetBcUiRBI/AAAAAAAAC_k/-wvptlnDXuQ/03.png
} elsif (m/^http:\/\/lh[3-6]?(.googleusercontent.com.*)/) {
print $x . "http://googleusercontent." . $1 . "\n";

#http://i54.tinypic.com/2crkryu.jpg
} elsif (m/^http:\/\/i[0-9]{2}(.tinypic.com.*)/) {
print $x . "http://tinypic." . $1 . "\n";

#maps.google.com
} elsif (m/^http:\/\/(cbk|mt|khm|mlt|tbn)[0-9]?(.google\.co(m|\.uk|\.id).*)/) {
print $x . "http://" . $1 . $2 . "\n";

#gstatic and/or wikimapia
} elsif (m/^http:\/\/([a-z])[0-9]?(\.gstatic\.com.*|\.wikimapia\.org.*)/) {
print $x . "http://" . $1 . $2 . "\n";

# youtube fix
} elsif (m/^http:\/\/([0-9.]{4}|.*\.youtube\.com|.*\.googlevideo\.com|.*\.video\.google\.com)\/videoplayback\?(.*)/) {
$p_str = $2;
$tag = "";
$alg = "";
$id = "";
$range = "";
if ($p_str =~ m/(itag=[0-9]*)/){$tag = "&".$1}
if ($p_str =~ m/(algorithm=[a-z]*\-[a-z]*)/){$alg = "&".$1}
if ($p_str =~ m/(id=[a-zA-Z0-9]*)/){$id = "&".$1}
if ($p_str =~ m/(range=[0-9\-]*)/){$range = "&".$1; $range =~ s/-//; $range =~ s/range=//; }
print $x . "http://video-srv.youtube.com.SQUIDINTERNAL/" . $tag . "&" . $alg . "&" . $id . "&" . $range . "\n";

} elsif (m/^http:\/\/www\.google-analytics\.com\/__utm\.gif\?.*/) {
print $x . "http://www.google-analytics.com/__utm.gif\n";

#Cache High Latency Ads
} elsif (m/^http:\/\/([a-z0-9.]*)(\.doubleclick\.net|\.quantserve\.com|\.googlesyndication\.com|yieldmanager|cpxinteractive)(.*)/) {
$y = $3;$z = $2;
for ($y) {
s/pixel;.*/pixel/;
s/activity;.*/activity/;
s/(imgad[^&]*).*/\1/;
s/;ord=[?0-9]*//;
s/;&timestamp=[0-9]*//;
s/[&?]correlator=[0-9]*//;
s/&cookie=[^&]*//;
s/&ga_hid=[^&]*//;
s/&ga_vid=[^&]*//;
s/&ga_sid=[^&]*//;
# s/&prev_slotnames=[^&]*//
# s/&u_his=[^&]*//;
s/&dt=[^&]*//;
s/&dtd=[^&]*//;
s/&lmt=[^&]*//;
s/(&alternate_ad_url=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
s/(&url=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
s/(&ref=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
s/(&cookie=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
s/[;&?]ord=[?0-9]*//;
s/[;&]mpvid=[^&;]*//;
s/&xpc=[^&]*//;
# yieldmanager
s/\?clickTag=[^&]*//;
s/&u=[^&]*//;
s/&slotname=[^&]*//;
s/&page_slots=[^&]*//;
}
print $x . "http://" . $1 . $2 . $y . "\n";

#cache high latency ads
} elsif (m/^http:\/\/(.*?)\/(ads)\?(.*?)/) {
print $x . "http://" . $1 . "/" . $2 . "\n";

#cdn, varialble 1st path
} elsif (($u =~ /filehippo|mediafire/) && (m/^http:\/\/(.*?)\.(.*?)\/(.*?)\/(.*)\.([a-zA-Z0-9]{2,3})(\?.*)?/)) {
@y = ($1,$2,$4,$5);
$y[0] =~ s/[a-z]+([0-9]+)?/cdn./;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

} elsif (($u =~ /maxporn/) && (m/^http:\/\/([^\/]*?)\/(.*?)\/([^\/]*?)(\?.*)?$/)) {
print $x . "http://" . $1 . "/SQUIDINTERNAL/" . $3 . "\n";

#domain/path/.*/path/filename
} elsif (($u =~ /fucktube/) && (m/^http:\/\/(.*?)(\.[^\.\-]*?[^\/]*\/[^\/]*)\/(.*)\/([^\/]*)\/([^\/\?\&]*)\.([^\/\?\&]{3,4})(\?.*?)$/)) {
@y = ($1,$2,$4,$5,$6);
$y[0] =~ s/(([a-zA-Z]+[0-9]+(-[a-zA-Z])?$)|([^\.]*cdn[^\.]*)|([^\.]*cache[^\.]*))/cdn/;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "/" . $y[3] . "." . $y[4] . "\n";

# #4shared audio/video preview
} elsif (($u =~ /4shared/) && (m/^http:\/\/(.*?)\.(.*?)\/(.*?)\/(dlink__2Fdownload_2F([^\/-]+))([a-zA-Z0-9-]+)\/([^\/\?\&]*\.[^\/\?\&]{2,3})(\?.*)?$/)) {
@y = ($1,$2,$3,$4,$7);
$y[0] =~ s/[a-z]+([0-9]+)?/cdn./;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "/" . $y[3] . "/" . $y[4] . "\n";

#indowebster
} elsif (m/^http:\/\/(.*?)(\.jkt\.3d\.x\.indowebster.com)\/(.*?)\/([^\/\?\&]*)\.([^\/\?\&]{2,4})(\?.*?)$/) {
@y = ($1,$2,$4,$5);
$y[0] =~ s/([a-z][0-9][a-z]dlod[\d]{3})|((cache|cdn)[-\d]*)|([a-zA-Z]+-?[0-9]+(-[a-zA-Z]*)?)/cdn/;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

#like porn hub variables url and center part of the path, filename etention 3 or 4 with or without ? at the end
} elsif (($u =~ /tube8|pornhub|xvideos/) && (m/^http:\/\/(([A-Za-z]+[0-9-.]+)*?(\.[a-z]*)?)\.([a-z]*[0-9]?\.[^\/]{3}\/[a-z]*)(.*?)((\/[a-z]*)?(\/[^\/]*){4}\.[^\/\?]{3,4})(\?.*)?$/)) {
print $x . "http://cdn." . $4 . $6 . "\n";

#for yimg.com video
} elsif (m/^http:\/\/(.*yimg.com)\/\/(.*)\/([^\/\?\&]*\/[^\/\?\&]*\.[^\/\?\&]{3,4})(\?.*)?$/) {
print $x . "http://cdn.yimg.com//" . $3 . "\n";

#for yimg.com doubled
} elsif (m/^http:\/\/(.*?)\.yimg\.com\/(.*?)\.yimg\.com\/(.*?)\?(.*)/) {
print $x . "http://cdn.yimg.com/" . $3 . "\n";

#for yimg.com with &sig=
} elsif (m/^http:\/\/([^\.]*)\.yimg\.com\/(.*)/) {
@y = ($1,$2);
$y[0] =~ s/[a-z]+([0-9]+)?/cdn/;
$y[1] =~ s/&sig=.*//;
print $x . "http://" . $y[0] . ".yimg.com/" . $y[1] . "\n";

#youjizz. We use only domain and filename
} elsif (($u =~ /media[0-9]{1,5}\.youjizz/) && (m/^http:\/\/(.*?)(\.[^\.\-]*?\.[^\/]*)\/(.*)\/([^\/\?\&]*)\.([^\/\?\&]{3,4})(\?.*?)$/)) {
@y = ($1,$2,$4,$5);
$y[0] =~ s/(([a-zA-Z]+[0-9]+(-[a-zA-Z])?$)|([^\.]*cdn[^\.]*)|([^\.]*cache[^\.]*))/cdn/;
print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

#general purpose for cdn servers. add above your specific servers.
} elsif (m/^http:\/\/([0-9.]*?)\/\/(.*?)\.(.*)\?(.*?)/) {
print $x . "http://squid-cdn-url//" . $2 . "." . $3 . "\n";

#generic http://variable.domain.com/path/filename."ex", "ext" or "exte"
} elsif (m/^http:\/\/(.*?)(\.[^\.\-]*?\..*?)\/([^\?\&\=]*)\.([\w\d]{2,4})\??.*$/) {
@y = ($1,$2,$3,$4);
$y[0] =~ s/([a-z][0-9][a-z]dlod[\d]{3})|((cache|cdn)[-\d]*)|([a-zA-Z]+-?[0-9]+(-[a-zA-Z]*)?)/cdn/;
print $x . "storeurl://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

# all that ends with ;
} elsif (m/^http:\/\/(.*?)\/(.*?)\;(.*)/) {
print $x . "http://" . $1 . "/" . $2 . "\n";

} else {
print $x . $_ . "\n";
}
}
Gimana sudah mulai pusing, mual dan kembung? wkkwk... LANJUT...............


untuk firewall( \etc\firewall) yang saya pakek adalah seperti ini :

###############################################################################
#
# Use the web-based administration tool to change the firewall configuration.
#
###############################################################################

# Firewall mode
#--------------
# Possible configurations:
# gateway trustedgateway standalone trustedstandalone dmz

MODE="trustedstandalone"


# Interface roles
#----------------

EXTIF="eth0"
LANIF=""
DMZIF=""
WIFIF=""
HOTIF=""
DNSIF=""

# Bandwidth management (QoS)
#---------------------------

BANDWIDTH_QOS="on"
BANDWIDTH_UPSTREAM=""
BANDWIDTH_DOWNSTREAM=""

# Multipath
#----------

MULTIPATH="off"
MULTIPATH_WEIGHTS=""

# Squid configuration
#--------------------

SQUID_TRANSPARENT="on"
SQUID_FILTER_PORT=""

# VPN configuration
#------------------

IPSEC_SERVER="off"
PPTP_SERVER="off"

## One-to-one NAT mode
#---------------------

ONE_TO_ONE_NAT_MODE="type2"

# VPN LAN override
#-----------------

LANNET=""

# Protocol filtering (l7-filter)
# When set to 'on', all forwarded traffic will pass through the l7-filter
# daemon. l7-filter must be running or the firewall will ignore this setting.
#----------------------------------------------------------------------------

PROTOCOL_FILTERING="off"

# Webconfig rules
#----------------
# WARNING:
# The firewall script will not perform further validation on the rules below.
# Use the web-based administration tool to change the firewall configuration.
#
# Name|Group|Flags|Protocol|Address|Port|Parameter
#
# -Name and Group are symbolic names which only have meaning within the
#  web-based administration tool (webconfig).
# -Flags are OR combined to produce a 4-byte bitmask.  This needs to be
#  explained in full detail somewhere.  Reading the source to IsValidFlags()
#  within the firewallrule.class file is the best documentation about this
#  at the moment.
# -Protocol is an integer ID listed in /etc/protocols.
# -Address is an IPv4, IPv6, or MAC/HW address depending on the rule's flags.
# -Port is a TCP/UDP service address depending on the rule's flags and
#  protocol.
# -Parameter can contain additional rule criteria depending on the rule's
#  flags and/or protocol.
#
# NOTE: If editing these by hand, do not add spaces between fields.
RULES="\
    webservice||0x10000001|6||1875| \
"

# vim: ts=4 syntax=sh



  • sekarang membuat NAT di mikrotik :/ip firewall nat add chain=dstnat src-address=!192.168.1.2 protocol=tcp dst-port=80 action=dst-nat to-addresses=192.168.1.2 to-ports=3128 comment=”TransParent PROXY” disabled=no

    catatan :
  • warna pink adalah ip proxy , di src-addrres di kasih tanda pentunng(!) gunanya adalah selain ip itu akan di belokkan ke proxy

    atau anda bisa gunakan addrres list isi dengan ip local ( 192.168.0.0/24) artinya hanya ring ip itu proxy bekerja

  • untuk ROXY HIT LOSS
    /ip firewall mangle

add action=mark-connection chain=forward comment=Proxy_HIT \
disabled=no in-interface=Proxy new-connection-mark=Hit\
out-interface=Lokal passthrough=yes protocol=tcp

add action=mark-packet chain=forward comment="" connection-mark=Hit\
disabled=no in-interface=Proxy new-packet-mark=Proxy Hit\
out-interface=Lokal passthrough=no protocol=tcp

/queue tree

add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no\
limit-at=0 max-limit=0 name=.:Proxy Hit:. packet-mark=Proxy Hit\
parent=global-out priority=1 queue=default

    SELESAI..........
  • untuk melihat aktifitas acces.log nya bisa pakai putty kemudian masukkan :
    # tail -f /cache1/access.log (enter)    untuk bisa berwarna kita intall dulu dengan perintah (menggunakan putty) :
    # rpm -Uvh http://mirror.fraunhofer.de/download.fedora.redhat.com/epel/5Client/i386/ccze-0.2.1-6.el5.i386.rpm
  • kemudian kembali ketik perintahnya dengan mengambah |ccze
    tail -f /cache1/access.log |ccze (enter)

    taraaaaa...... jadilah berwarna.......

  • dan untuk perintah yang sering di pakai:
    tail -f /var/log/squid/access.log |ccze (melihat log)

    /usr/local/squid/sbin/squid -NDd1 & (menghidupkan squid)

    /usr/local/squid/sbin/squid -k parse (mengecek kesalahan)

    /usr/local/squid/sbin/squid -k reconfigure 
  • mematikan cos :shutdown -h now

    nah itu lah tadi seluruh tahapan yang coba saya sajikan, disini saya masih belajar dan
    terus belajar karena masih newbe, masih perlu untuk cari sana sini biar pass


    terimakasih semoga bermanfaat



    sumber :
  • http://www.wirelessrouterproxy.com
  • http://beldin-best.blogspot.com/2011/10/lusca-di-clearos-52.html
  • dan masih banyak lagi sampe lupa .......

1 komentar

Langganan: Postingan (Atom)