Ga bisa ping …

poscom

mohon maaf mengganggu, ko kenapa dah berjalan beberapa hari jadi ga bisa ping yah…(remote/user) ke dns sendiri jg ga bisa. apa dari luscanya ....? tp browsing msh ok dan disk usage naek 5% ---> yg ini jg udah /* run dnsmasq */

squid_inc
+++++++++

Setup some default acls

acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 $webgui_port $port 1025-65535
acl sslports port 443 563 $webgui_port
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl mallware url_regex "/usr/local/etc/squid/mallware"
acl conficker url_regex "/usr/local/etc/squid/conficker"
acl partialcontent_req req_header Range .*
#acl dynamic urlpath_regex cgi-bin ?
include /usr/local/etc/squid/include.conf

EOD;

squid_conf
+++++++++++

Do not edit manually !

http_port 10.1.xx.x:3128 http11 transparent
http_port 127.0.0.1:80 http11 transparent
icp_port 0

pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname localhost
cache_mgr admin@localhost
access_log /var/squid/log/access.log
cache_log /var/squid/log/cache.log
cache_store_log none
shutdown_lifetime 0 seconds

Allow local network(s) on interface(s)

acl localnet src 10.1.xx.x/255.255.255.224
server_http11 on
uri_whitespace allow
dns_nameservers 127.0.0.1

cache_mem 64 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA

cache_dir aufs /var/squid/cache 20000 16 256
minimum_object_size 0 KB
maximum_object_size 64 MB
offline_mode off
cache_swap_low 98
cache_swap_high 99

No redirector configured

Setup some default acls

acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 90 3128 1025-65535
acl sslports port 443 563 90
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl mallware url_regex "/usr/local/etc/squid/mallware"
acl conficker url_regex "/usr/local/etc/squid/conficker"
acl partialcontent_req req_header Range .*
#acl dynamic urlpath_regex cgi-bin ?
include /usr/local/etc/squid/include.conf
acl allowed_subnets src 10.1.xx.x/27
#cache deny dynamic
http_access allow manager localhost

http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports
http_access deny mallware
http_access deny conficker

Always allow localhost connections

http_access allow localhost

quick_abort_min 0 KB
quick_abort_max 0 KB
range_offset_limit 0 MB
request_body_max_size 0 allow all
reply_body_max_size 0 deny all

delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100
delay_access 1 allow all

Custom options

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
redirector_bypass on
redirect_children 3

Allow local network(s) on interface(s)

http_access allow localnet
http_access allow allowed_subnets

Default block all to be sure

http_access deny all

anto_DIGIT

ini hanya masalah rule utk protocol icmp yg belum dibuka ..

poscom

@anto_DIGIT:

ini hanya masalah rule utk protocol icmp yg belum dibuka ..

thks pak anto yah bener

poscom

@anto_DIGIT:

ini hanya masalah rule utk protocol icmp yg belum dibuka ..

pak anto toloong… banget, gmana oprek/seting loader config, file apa saja yg dipakai..? sy pake yg punya chudy, kayaknya lambat banget browsing. tp cache lumayan, trimakasih banyak.

loader config
++++++++++
autoboot_delay="3"
vm.kmem_size="435544320"
vm.kmem_size_max="535544320"
#kern.ipc.nmbclusters=0

dir config
+++++++

$Rev$

#I'll try hack squid's webgui later for now use this
#default
cache_dir aufs /var/squid/cache
#my personal configuration
#cache_dir coss /cache1/coss 8000 max-size=32768
#cache_dir coss /cache2/coss 8000 max-size=32768
#cache_dir aufs /cache3 100000 16 256 min-size=32768 <–-
#cache_dir aufs /cache4 100000 16 256 min-size=32768

–-> apakah yg autoboot_delay="3" dibuka pagernya terus hd sy 80gb

squid config
+++++++++
quick_abort_min 32 KB
quick_abort_max 128 KB
quick_abort_pct 75
range_offset_limit 0 MB
request_body_max_size 0 allow all
reply_body_max_size 51200000 deny all

delay_pools 1
delay_class 1 2
delay_parameters 1 -1/-1 -1/-1
delay_initial_bucket_level 100

Throttle extensions matched in the url

acl throttle_exts urlpath_regex -i "/var/squid/acl/throttle_exts.acl"
delay_access 1 allow throttle_exts
delay_access 1 deny all

mgr:info
++++++
HTTP/1.1 200 OK
Server: Lusca/LUSCA r14809 patched: chudy r12.13
Date: Sat, 30 Oct 2010 22:24:08 GMT
Content-Type: text/plain
Expires: Sat, 30 Oct 2010 22:24:08 GMT
X-Cache: MISS from localhost
Transfer-Encoding: chunked
Via: 1.0 localhost:3128 (Lusca/LUSCA r14809 patched: chudy r12.13)
Connection: close

84b
Squid Object Cache: Version LUSCA r14809 patched: chudy r12.13
Start Time: Sat, 30 Oct 2010 22:15:23 GMT
Current Time: Sat, 30 Oct 2010 22:24:08 GMT
Connection information for squid:
Number of clients accessing cache: 7
Number of HTTP requests received: 802
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 91.7
Average ICP messages per minute since start: 0.0
Select loop called: 81004 times, 6.479 ms avg
Cache information for squid:
Request Hit Ratios: 5min: 36.5%, 60min: 29.5%
Byte Hit Ratios: 5min: 52.2%, 60min: 47.2%
Request Memory Hit Ratios: 5min: 1.8%, 60min: 0.9%
Request Disk Hit Ratios: 5min: 93.8%, 60min: 97.0%
Storage Swap size: 138860 KB
Storage Mem size: 1948 KB
Mean Object Size: 43.90 KB
Requests given to unlinkd: 0
Median Service Times (seconds) 5 min 60 min:
HTTP Requests (All): 1.00114 0.52331
Cache Misses: 0.80651 0.52331
Cache Hits: 2.37608 0.44492
Near Hits: 0.05331 0.05331
Not-Modified Replies: 0.00091 0.00091
DNS Lookups: 0.00000 0.00000
ICP Queries: 0.00000 0.00000
Resource usage for squid:
UP Time: 524.801 seconds
CPU Time: 4.353 seconds
CPU Usage: 0.83%
CPU Usage, 5 minute avg: 0.75%
CPU Usage, 60 minute avg: 0.86%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 12852 KB
Page faults with physical i/o: 7
Memory accounted for:
Total accounted: 2619 KB
memPoolAlloc calls: 198782
memPoolFree calls: 184201
File descriptor usage for squid:
Maximum number of file descriptors: 11095
Largest file desc currently in use: 185
Number of file desc currently in use: 54
Files queued for open: 0
Available number of file descriptors: 11041
Reserved number of file descriptors: 100
Store Disk files open: 1
IO loop method: kqueue
Internal Data Structures:
3206 StoreEntries
372 StoreEntries with MemObjects
364 Hot Object Cache Items
3163 on-disk objects

anto_DIGIT

–> cache_dir aufs /var/squid/cache
Utk proxy agresif, cache_dir jangan dicampur dng system.
lambat ...

serangku

salah satu cirinya adalah …

Cache Hits: 2.37608 0.44492

semua point2 diatas ketika sedang running jangan sampai menyentuh angka 1, kalau bisa max 0,5
pake pf berapa, 123 atau 20

saya perhatikan kl pake yg ver20, edun ... abis memori sama tuh lusca
jadi jgn terlalu paksakan pake lusca kl memori cuma 1 gb atau kurang ...
dan betul, baiknya di pisahkan cache di hadisk tersendiri ...

ada yg pernah nanya gak ke dev pf ataupun lusca ttg pengalokasian memory supaya lbh efisien ...

poscom

@serangku:

salah satu cirinya adalah …

Cache Hits: 2.37608 0.44492

semua point2 diatas ketika sedang running jangan sampai menyentuh angka 1, kalau bisa max 0,5
pake pf berapa, 123 atau 20

saya perhatikan kl pake yg ver20, edun ... abis memori sama tuh lusca
jadi jgn terlalu paksakan pake lusca kl memori cuma 1 gb atau kurang ...
dan betul, baiknya di pisahkan cache di hadisk tersendiri ...

ada yg pernah nanya gak ke dev pf ataupun lusca ttg pengalokasian memory supaya lbh efisien ...

siiip trimakasih bpk anto dan bpk Desen seranku… spek yg diatas pke dualcore ram 2gb pake pf yg 123.

poscom

@anto_DIGIT:

–> cache_dir aufs /var/squid/cache
Utk proxy agresif, cache_dir jangan dicampur dng system.
lambat ...

yah.. itu raba2 saya asal kena. sekarang dah top om…. cuepet.....n agresif (hidup lusca !!!)
trimakasih juga post yg game online om..