SHARE SQUID.CONF kamu disini

[lhypx]

waaah kebeneran banget nih, banyak suhu Squid  ;D

ane butuh bantuan banget nih dari senior2 semua. :-[

masalahnya kayak gini, ane itu mahasiswa (mungkin bisa dikategorikan semi abadi) semester akhir yang lagi nyusun proyek akhir, dan proyek akhir yang ane bikin itu berupa server buat sebuah sekolah di daerah ane.

ane sudah coba bangun server dengan komputer yang speknya:

• prosesor Core2Duo 2,93 GHz.
• mem 2 GB
• Harddisk 320 GB.
• 3 interface,
    ~eth0 nyambung ke modem,
    ~eth1 sbg gateway subnetwork A, dengan jumlah kompi 9 buah, dan network addressnya 10.10.1.0/27
    ~eth2 sbg gateway subnetwork B. jumlah kompi 42, dan network addressnya 10.10.2.0/26

konsep server nya kek gini: 
–> server yang ane bikin fungsi utamanya sebagai proxy server dan file server.
--> proxy-nya tipe transparent dan bisa buat ngeblok situs, web cache, dan bandwidth limiter.
--> layanan file server cuma buat subnetwork A

pada [i]rc.local ane gunakan konfig kek gini:
–----------------------------------------------------------------------------------------------------------------
#rc.local
iptables -t nat -A POSTROUTING -s 10.10.1.0/27 -o eth0 -j MASQUERADE
iptables -t nat -A POSTROUTING -s 10.10.2.0/26 -o eth0 -j MASQUERADE
iptables -t nat -A PREROUTING -i eth1 -p tcp --dport 80 -j REDIRECT --to-port 3128
iptables -t nat -A PREROUTING -i eth2 -p tcp --dport 80 -j REDIRECT --to-port 3128

dan pada squid.conf, baru bisa kek gini  :-[ :-[ :-[
–----------------------------------------------------------------------------------------------------------------
#squid.conf
http_port 3128 transparent
visible_hostname smaxyz
cache_mgr fikri.nz@gmail.com
cache_dir ufs /var/spool/squid3 500 16 256
coredump_dir /var/spool/squid3

hierarchy_stoplist cgi-bin ?
acl QUERY urlpath_regex cgi-bin ?
acl apache rep_header Server ^Apache
access_log /var/log/squid3/access.log squid
hosts_file /etc/hosts

refresh_pattern ^ftp: 1440 20% 10080
refresh_pattern ^gopher: 1440 0% 1440
refresh_pattern . 0 20% 4320

acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 563 # https, snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl bloksitus dstdomain "/etc/squid3/bloksitus.txt"
acl blokkwd url_regex -i "/etc/squid3/blokkwd.txt"
acl CONNECT method CONNECT
http_access allow manager localhost
http_access deny bloksitus
http_access deny blokkwd
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost
acl utama src 10.10.1.0/27
acl labor src 10.10.2.0/26
http_access allow localhost
http_access allow utama
http_access allow labor
http_access deny all
http_reply_access allow all
icp_access allow all
always_direct allow all

cache_effective_user kuerk
cache_effective_group kuerk

delay_pools 2

delay_class 1 1
delay_parameters 1 -1/-1
delay_access 1 allow utama
delay_access 1 deny all

delay_class 2 1
delay_parameters 2 64000/128000
delay_access 2 allow labor
delay_access 2 deny all

untuk browsing sih hasilnya lumayan, tapi masalah timbul pas mo ngupdate AVG, gagal mulu  :-[

jadi mohon bantuan dari para sepuh semua, gimana bagusnya konfigurasi squid, konfig rc.local,  dan saran bagi hal-hal lain yang mungkin dianggep kurang cocok.

daaan ... juga gimana dengan konfigurasi samba agar supaya hanya bisa digunakan oleh subnetwork A.
terakhir, mohon maaf banget deh, mungkin post an ane salah kamar ...  :-[ sory banget ya.
dan ... makasih banget deh atas bantuan dan saran dari para sepuh semua.  :)

[serangku]

untuk update avg lebih ke pattern dan apakah update avg berjalan di port http

[detrackmx]

@agismaniax:

UPDATE ini squid.conf ane:

Do not edit manually !

http_port 172.16.1.254:3128 transparent
http_port 127.0.0.1:80 transparent
icp_port 0

pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname firewall2.xxx.co.id
cache_mgr admin@xxx.co.id
access_log /var/squid/log/access.log
cache_log /var/squid/log/cache.log
cache_store_log none
logfile_rotate 30
shutdown_lifetime 0 seconds

Allow local network(s) on interface(s)

acl localnet src  172.16.0.0/255.255.0.0
forwarded_for transparent
httpd_suppress_version_string on
uri_whitespace strip
dns_nameservers 202.159.32.2 202.159.33.2 202.158.3.7 202.169.33.220

cache_mem 128 MB

dns_nameservers 202.159.32.2 202.159.33.2 202.158.3.7 202.169.33.220 –> banyak amat ya DNS nya???? ??? ??? ???
ukuran cache_mem 128 MB --> kegedean gan!!!! drop tu performa kalo banyak user yg akses........!!!!!  :'( :'( :'(

[queues]

Om Kambeeng, Om Serangku, Om Anto_DIGIT, Om grange95, Om KaptenHook serta Om-om Semua yg namnya tidak bisa saya sebutkan satu persatu, mohon om om semua terawang settingan squid lusca saya, Mohon masukan serta sarannya.

$ squidclient -p 80 mgr:info
HTTP/1.0 200 OK
Server: Lusca
Date: Sun, 10 Jul 2011 03:39:40 GMT
Content-Type: text/plain
Expires: Sun, 10 Jul 2011 03:39:40 GMT
X-Cache: MISS from QueueS
Connection: close

Squid Object Cache: Version LUSCA r14850 patched: chudy r14
Start Time: Sun, 10 Jul 2011 02:04:13 GMT
Current Time: Sun, 10 Jul 2011 03:39:40 GMT
Connection information for squid:
Number of clients accessing cache: 2
Number of HTTP requests received: 12237
Number of ICP messages received: 0
Number of ICP messages sent: 0
Number of queued ICP replies: 0
Request failure ratio: 0.00
Average HTTP requests per minute since start: 128.2
Average ICP messages per minute since start: 0.0
Select loop called: 525913 times, 10.889 ms avg
Cache information for squid:
Request Hit Ratios: 5min: 10.5%, 60min: 9.3%
Byte Hit Ratios: 5min: 0.4%, 60min: 44.2%
Request Memory Hit Ratios: 5min: 0.0%, 60min: 11.0%
Request Disk Hit Ratios: 5min: 11.2%, 60min: 41.5%
Storage Swap size: 177098 KB
Storage Mem size: 10436 KB
Mean Object Size: 60.05 KB
Requests given to unlinkd: 0
Median Service Times (seconds)  5 min    60 min:
HTTP Requests (All):   0.25890  0.25890
Cache Misses:          0.27332  0.25890
Cache Hits:            0.00815  0.00767
Near Hits:             0.01469  0.01469
Not-Modified Replies:  0.00286  0.00286
DNS Lookups:           2.34641  2.34641
ICP Queries:           0.00000  0.00000
Resource usage for squid:
UP Time: 5726.680 seconds
CPU Time: 97.324 seconds
CPU Usage: 1.70%
CPU Usage, 5 minute avg: 2.01%
CPU Usage, 60 minute avg: 1.82%
Process Data Segment Size via sbrk(): 0 KB
Maximum Resident Size: 35716 KB
Page faults with physical i/o: 0
Memory accounted for:
Total accounted:        12487 KB
memPoolAlloc calls: 2099480
memPoolFree calls: 2046627
File descriptor usage for squid:
Maximum number of file descriptors:   11095
Largest file desc currently in use:     81
Number of file desc currently in use:   35
Files queued for open:                   0
Available number of file descriptors: 11060
Reserved number of file descriptors:   100
Store Disk files open:                   1
IO loop method:                     kqueue
Internal Data Structures:
 3009 StoreEntries
 1783 StoreEntries with MemObjects
 1778 Hot Object Cache Items
 2949 on-disk objects

Squid.conf

Do not edit manually !

http_port 172.22.11.78:3128 transparent
http_port 127.0.0.1:80 transparent
icp_port 3131

pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/local/etc/squid/errors/English
icon_directory /usr/local/etc/squid/icons
visible_hostname QueueS
cache_mgr QueueS@live.com
access_log /var/squid/log/access.log
cache_log /var/squid/log/cache.log
cache_store_log none
logfile_rotate 2
shutdown_lifetime 30 seconds

Allow local network(s) on interface(s)

acl localnet src  172.22.11.0/255.255.255.0
via off
httpd_suppress_version_string on
uri_whitespace strip
dns_nameservers 127.0.0.1

cache_mem 8 MB
maximum_object_size_in_memory 8 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA

cache_dir aufs /var/squid/cache 9200 16 256
minimum_object_size 0 KB
maximum_object_size 256 MB
offline_mode off
cache_swap_low 90
cache_swap_high 95

No redirector configured

Setup some default acls

acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535
acl sslports port 443 563 81
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl mallware url_regex "/usr/local/etc/squid/mallware.url"
acl conficker url_regex "/usr/local/etc/squid/conficker.url"
acl partialcontent_req req_header Range .*
#acl dynamic urlpath_regex cgi-bin ?
include /usr/local/etc/squid/include.conf
acl allowed_subnets src 172.22.11.0/24
#cache deny dynamic
http_access allow manager localhost

http_access deny mallware
http_access deny conficker
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports

Always allow localhost connections

http_access allow localhost

quick_abort_min 32 KB
quick_abort_max 128 KB
quick_abort_pct 75
range_offset_limit 0 MB
request_body_max_size 0 allow all
reply_body_max_size 0 deny all

Custom options

zph_mode tos
zph_local 0x04
zph_parent 0
zph_option 136
redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
redirector_bypass on
redirect_children 3

Allow local network(s) on interface(s)

http_access allow localnet
http_access allow allowed_subnets

Default block all to be sure

http_access deny all

Spesifikasi Hardware

Mesin :Intel(R) Pentium(R) 4 CPU 2.26GHz
Tangki : HDD IDE MAXTOR 20G
Oli : DDR1 1024 M
Bensin : Speedy 512Kbps

[ragile]

@kaptenhook:

kalo udah menggunakan squid.conf.def perubahan dan penambahan setingan malah harus dilakukan disitu jadi jangan terbalik, kalo terbalik ya entar pas di restart akan hilang lagi

nb:proxy server akan membaca perintah dari squid.conf.def

Ditempat saya kok yang harus dioprek di squid.conf-nya ya?? kalo saya oprek yanng squid.conf.def malah gak pengaruh perubahannya setelah di reboot. Apa ada yang salah???

[kaptenhook]

@ragile:

@kaptenhook:

kalo udah menggunakan squid.conf.def perubahan dan penambahan setingan malah harus dilakukan disitu jadi jangan terbalik, kalo terbalik ya entar pas di restart akan hilang lagi

nb:proxy server akan membaca perintah dari squid.conf.def

Ditempat saya kok yang harus dioprek di squid.conf-nya ya?? kalo saya oprek yanng squid.conf.def malah gak pengaruh perubahannya setelah di reboot. Apa ada yang salah???

Begini om @ragile
Sebagai contoh ini aja
Di pfsense bagian cache managemen peletakan hardisk lebih dari dua misalkan kita mau menggunakan hardisk 3 ato 4 ato 5 buat cache itu tidak ada tempatnya bukan, naaa maka dari itu kita harus merubah peletakan hardisknya di squid.conf.def

Karena keterbatasan yang ada di pfsense, squid.confnya begini
Ex:

cache_dir coss /cache0/coss 10000 max-size=8192 block-size=1024
cache_dir aufs /cache1 /cache2 40960 16 256 min-size=8192

dan ini squid anda tidak akan berjalan alias stoped…. Atau misalkan mau jalan maka jalannya akan pincang karena cache2 pasti tidak akan terisi miss/hit

Naaaa bagaimana biar squidnya berjalan maka pengaturan peletakan hardisknya di buat di squid.conf dengan cara sbb

cache_dir coss /cache0/coss 10000 max-size=8192 block-size=1024
cache_dir aufs /cache1 40960 16 256 min-size=8192
cache_dir aufs /cache2 40960 16 256 min-size=8192

dengan adanya squid.conf.def maka perubahan yang dilakukan di squid.conf menjadi permanent dan walaupun di restart tidak akan hilang

jadi intinya antara squid.conf dan squid.conf.def adalah sama tapi tidak serupa

maaf mungkin bahasa saya kurang jelas, maklum saya bukan guru dan masih banyak belajar juga di sini,
lha wong saya ini angler man kok disuruh utak atik squid ya agak bingung juga kalo cumi cumi saya mah paham, enak dibuat lauk

[serangku]

kayak iklan aja …

dasar cumi ...
[cuma mimpi]
[cuma minjem]
[cuma2 makan]

OOT deh …  ;D
Ampun DJ ... ;)

[agismaniax]

@detrackmx:

dns_nameservers 202.159.32.2 202.159.33.2 202.158.3.7 202.169.33.220 –> banyak amat ya DNS nya???? ??? ??? ???
ukuran cache_mem 128 MB --> kegedean gan!!!! drop tu performa kalo banyak user yg akses........!!!!!  :'( :'( :'(

sejauh ini belum tuh gan… lagian memory pfsense ane 1GB... ntar dikecilin kalau memory usage-nya makin membesar.

UPDATE
Baca FAQ ini gan http://wiki.squid-cache.org/SquidFaq/SquidMemory#What_can_I_do_to_reduce_Squid.27s_memory_usage.3F

TOTALS
ICP : 0 Queries, 0 Hits (  0%)
HTTP: 209982 Requests, 61388 Hits ( 29%)

Squid Object Cache: Version LUSCA r14850 patched: chudy r14
Start Time:     Thu, 14 Jul 2011 02:04:20 GMT
Current Time:   Thu, 14 Jul 2011 08:17:14 GMT
Connection information for squid:
        Number of clients accessing cache:      103
        Number of HTTP requests received:       211481
        Number of ICP messages received:        0
        Number of ICP messages sent:    0
        Number of queued ICP replies:   0
        Request failure ratio:   0.00
        Average HTTP requests per minute since start:   567.1
        Average ICP messages per minute since start:    0.0
        Select loop called: 4268522 times, 5.242 ms avg

Median Service Times (seconds)  5 min    60 min:
        HTTP Requests (All):   0.04047  0.03427
        Cache Misses:          0.04277  0.06640
        Cache Hits:            0.00598  0.01469
        Near Hits:             0.04277  0.02899
        Not-Modified Replies:  0.00179  0.00767
        DNS Lookups:           0.01046  0.01852
        ICP Queries:           0.00000  0.00000
Resource usage for squid:
        UP Time:        22598.190 seconds
        CPU Time:       1639.421 seconds
        CPU Usage:      7.25%
        CPU Usage, 5 minute avg:        4.13%
        CPU Usage, 60 minute avg:       3.77%
        Process Data Segment Size via sbrk(): 0 KB
        Maximum Resident Size: 184628 KB
        Page faults with physical i/o: 0

# Custom options
refresh_pattern ([^.]+.|)(download|(windows|)update|).(microsoft.|)com/.*.(cab|exe|msi|msp) 4320 100% 43200 reload-into-ims
refresh_pattern ([^.]+.|)avg.com/.*.(bin) 4320 100% 43200 reload-into-ims
refresh_pattern ([^.]+.|)symantecliveupdate.com/.*.(zip|exe|jdb|xdb) 43200 100% 43200 reload-into-ims
refresh_pattern ([^.]+.|)avast.com/.*.(vpu|vpaa|vpx) 4320 100% 43200 reload-into-ims
refresh_pattern ([^.]+.|)avira.de/.*.(vdf|ivdf|zip) 4320 100% 43200 reload-into-ims
refresh_pattern ([^.]+.|)adobe.com/.*.(exe|msi) 4320 100% 43200 reload-into-ims

positive_dns_ttl 1 hours
negative_dns_ttl 5 minutes
memory_pools off
memory_pools_limit 64MB

redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf
redirector_bypass on
redirect_children 3

kmrn berkutat dengan masalah si lusca yg nyedot bw gara2 ada client yg abort windows update berulang kali, tapi si lusca malah tetep nyedot dari server asal.

btw, mau nanya dong…
gimana cara buat ACL di squid-nya pfsense?
kalau dari squid.conf-nya langsung apakah ada pengaruhnya ke webgui di paket proxy server pfsense?
rencananya mau menggunakan tcp_outgoing_address yg berbeda utk beberapa subnet.

[serangku]

begini om yang doyab cumi [om jg doyan] …  ;D

kalo mo setting macem2 squid conf nya di pfsense ada 2 versi

1. versi official
silakan oprek2 di squid.xml nya
atau buatkan file tersendiri utk settingan khusus, kemudian di dalam squid.xml dipanggil dengan menambahkan include

2. versi lusca chuddy
lebih mudah karena sudah dibuat file tersendiri tidak perlu masuk ke xml nya
berenang saja ke dalemannya pfsense dengan winscp
obrak-abrik deh ...

nah ... kalo diatas ada yg kudu masuk ke def atau lainnya
om belum tahu kl itu juga bisa, apa bisa yah ?
jangan rubah setting di squid.conf nya langsung
percuma, setiap reboot akan kembali ke default

semoga bisa membantu

[agismaniax]

mau memastikan… begitu pfsense start, config.xml akan create ulang squid.conf, lalu squid binary akan menggunakan squid.conf tersebut.
nah squid.conf.default itu dipakai setelah squid.conf dipanggil atau sebelumnya?  ???

[syedadi]

@kaptenhook:

list conflicker

^http://(.+@)?4thfirework.com/
^http://(.+@)?adorelyric.com/
^http://(.+@)?adorepoem.com/
^http://(.+@)?adoresong.com/
^http://(.+@)?adoresongs.com/
^http://(.+@)?againstfear.com/
^http://(.+@)?alldatanow.com/
^http://(.+@)?alldataworld.com/
^http://(.+@)?antiterroralliance.com/
^http://(.+@)?antiterroris.com/
^http://(.+@)?antiterrornetwork.com/
^http://(.+@)?aweleon.com/
^http://(.+@)?bakeloaf.com/
^http://(.+@)?bayhousehotel.com/
^http://(.+@)?beadcareer.com/
^http://(.+@)?beadworkdirect.com/
^http://(.+@)?bedioger.com/
^http://(.+@)?bestadore.com/
^http://(.+@)?bestbarack.com/
^http://(.+@)?bestbaracksite.com/
^http://(.+@)?bestblogdirect.com/
^http://(.+@)?bestbreakingfree.com/
^http://(.+@)?bestchristmascard.com/
^http://(.+@)?bestcouponfree.com/
^http://(.+@)?bestgoodnews.com/
^http://(.+@)?bestjournalguide.com/
^http://(.+@)?bestlifeblog.com/
^http://(.+@)?bestlovehelp.com/
^http://(.+@)?bestlovelong.com/
^http://(.+@)?bestmazdadealer.com/
^http://(.+@)?bestmirabella.com/
^http://(.+@)?bestobamadirect.com/
^http://(.+@)?bestusablog.com/
^http://(.+@)?bestyearcard.com/
^http://(.+@)?bicodehl.com/
^http://(.+@)?birdab.com/
^http://(.+@)?biumer.com/
^http://(.+@)?blackchristmascard.com/
^http://(.+@)?blogginhell.com/
^http://(.+@)?blogsitedirect.com/
^http://(.+@)?bluevalentineonline.com/
^http://(.+@)?boarddiary.com/
^http://(.+@)?breakingfreemichigan.com/
^http://(.+@)?breakinggoodnews.com/
^http://(.+@)?breakingkingnews.com/
^http://(.+@)?breakingnewsfm.com/
^http://(.+@)?breakingnewsltd.com/
^http://(.+@)?buymazdacars.com/
^http://(.+@)?cantlosedata.com/
^http://(.+@)?cardnewyear.com/
^http://(.+@)?chatloveonline.com/
^http://(.+@)?cheapdecember.com/
^http://(.+@)?cherishletter.com/
^http://(.+@)?cherishpoems.com/
^http://(.+@)?chinamobilesms.com/
^http://(.+@)?christmaslightsnow.com/
^http://(.+@)?cismosis.com/
^http://(.+@)?codecouponsite.com/
^http://(.+@)?coralarm.com/
^http://(.+@)?crucism.com/
^http://(.+@)?cycloro.com/
^http://(.+@)?deathtaxi.com/
^http://(.+@)?debtbgonesite.com/
^http://(.+@)?decemberchristmas.com/
^http://(.+@)?directchristmasgift.com/
^http://(.+@)?discountfreesms.com/
^http://(.+@)?downloadfreesms.com/
^http://(.+@)?easyworldnews.com/
^http://(.+@)?eccellentesms.com/
^http://(.+@)?encybest.com/
^http://(.+@)?entrank.com/
^http://(.+@)?eternalgreetingcard.com/
^http://(.+@)?expowale.com/
^http://(.+@)?extendedman.com/
^http://(.+@)?farboards.com/
^http://(.+@)?favolu.com/
^http://(.+@)?fearalert.com/
^http://(.+@)?fireholiday.com/
^http://(.+@)?fireworksholiday.com/
^http://(.+@)?fireworksnetwork.com/
^http://(.+@)?fireworkspoint.com/
^http://(.+@)?framtr.com/
^http://(.+@)?freechristmassite.com/
^http://(.+@)?freechristmasworld.com/
^http://(.+@)?freecolorsms.com/
^http://(.+@)?freedecember.com/
^http://(.+@)?freedoconline.com/
^http://(.+@)?freeindependence.com/
^http://(.+@)?freeservesms.com/
^http://(.+@)?freesmsorange.com/
^http://(.+@)?frostep.com/
^http://(.+@)?fryroll.com/
^http://(.+@)?funloveonline.com/
^http://(.+@)?funnychristmasguide.com/
^http://(.+@)?funnyvalentinessite.com/
^http://(.+@)?gemells.com/
^http://(.+@)?globalantiterror.com/
^http://(.+@)?goldfixonline.com/
^http://(.+@)?gonesite.com/
^http://(.+@)?goodnewsdigital.com/
^http://(.+@)?goodnewsreview.com/
^http://(.+@)?goog-analysis.com/
^http://(.+@)?googol-analisys.com/
^http://(.+@)?greatbarackguide.com/
^http://(.+@)?greatcouponclub.com/
^http://(.+@)?greatmazdacars.com/
^http://(.+@)?greatmirabellasite.com/
^http://(.+@)?greatobamaguide.com/
^http://(.+@)?greatobamaonline.com/
^http://(.+@)?greatsalesavailable.com/
^http://(.+@)?greatsalesgroup.com/
^http://(.+@)?greatsalestax.com/
^http://(.+@)?greatsvalentine.com/
^http://(.+@)?greatvalentinepoems.com/
^http://(.+@)?greetingcardcalendar.com/
^http://(.+@)?greetingcardgarb.com/
^http://(.+@)?greetingguide.com/
^http://(.+@)?greetingsupersite.com/
^http://(.+@)?gumentha.com/
^http://(.+@)?handyphoneworld.com/
^http://(.+@)?happyindependence.com/
^http://(.+@)?hindger.com/
^http://(.+@)?holidayfirework.com/
^http://(.+@)?holidaysfirework.com/
^http://(.+@)?holidayxmas.com/
^http://(.+@)?holifireworks.com/
^http://(.+@)?hornalfa.com/
^http://(.+@)?interactiveindependence.com/
^http://(.+@)?ipersmstext.com/
^http://(.+@)?itsfatherchristmas.com/
^http://(.+@)?jobarack.com/
^http://(.+@)?justchristmasgift.com/
^http://(.+@)?lastlabel.com/
^http://(.+@)?lifegreetingcard.com/
^http://(.+@)?linkworldnews.com/
^http://(.+@)?livechristmascard.com/
^http://(.+@)?livechristmasgift.com/
^http://(.+@)?longballonline.com/
^http://(.+@)?losenowfast.com/
^http://(.+@)?lovecentralonline.com/
^http://(.+@)?lovelifeportal.com/
^http://(.+@)?macride.com/
^http://(.+@)?mazdaautomotiveparts.com/
^http://(.+@)?mazdacarclub.com/
^http://(.+@)?mazdaspeedzone.com/
^http://(.+@)?mingwater.com/
^http://(.+@)?miosmschat.com/
^http://(.+@)?miosmsclub.com/
^http://(.+@)?mirabellaclub.com/
^http://(.+@)?mirabellamotors.com/
^http://(.+@)?mirabellanews.com/
^http://(.+@)?mirabellaonline.com/
^http://(.+@)?mobilephotoblog.com/
^http://(.+@)?moneymedal.com/
^http://(.+@)?morefreesms.com/
^http://(.+@)?movie4thjuly.com/
^http://(.+@)?moviefireworks.com/
^http://(.+@)?movieindependence.com/
^http://(.+@)?movies4thjuly.com/
^http://(.+@)?moviesfireworks.com/
^http://(.+@)?moviesindependence.com/
^http://(.+@)?netcitycab.com/
^http://(.+@)?newlifeyearsite.com/
^http://(.+@)?newmediayearguide.com/
^http://(.+@)?newyearcardcompany.com/
^http://(.+@)?newyearcardfree.com/
^http://(.+@)?newyearcardonline.com/
^http://(.+@)?newyearcardservice.com/
^http://(.+@)?noloid.com/
^http://(.+@)?nonprobs.com/
^http://(.+@)?nuovosms.com/
^http://(.+@)?nuovosmsclub.com/
^http://(.+@)?orldlovelife.com/
^http://(.+@)?oughwa.com/
^http://(.+@)?outdoorindependence.com/
^http://(.+@)?painkee.com/
^http://(.+@)?pantali.com/
^http://(.+@)?pathoph.com/
^http://(.+@)?petcabtaxi.com/
^http://(.+@)?photoblogsite.com/
^http://(.+@)?prerre.com/
^http://(.+@)?primosmsfree.com/
^http://(.+@)?purgand.com/
^http://(.+@)?rascop.com/
^http://(.+@)?reportradio.com/
^http://(.+@)?residencehunter.com/
^http://(.+@)?romanticsloving.com/
^http://(.+@)?screenalias.com/
^http://(.+@)?seocom.mobi/
^http://(.+@)?seocom.name/
^http://(.+@)?seofon.net/
^http://(.+@)?smartcardgreeting.com/
^http://(.+@)?smartsalesgroup.com/
^http://(.+@)?smophi.com/
^http://(.+@)?smsclubnet.com/
^http://(.+@)?smsdiretto.com/
^http://(.+@)?smsinlinea.com/
^http://(.+@)?smsluogo.com/
^http://(.+@)?smspianeta.com/
^http://(.+@)?sodanthu.com/
^http://(.+@)?spacemynews.com/
^http://(.+@)?specipa.com/
^http://(.+@)?superchristmasday.com/
^http://(.+@)?superchristmaslights.com/
^http://(.+@)?superhandycap.com/
^http://(.+@)?superioresms.com/
^http://(.+@)?superobamadirect.com/
^http://(.+@)?superobamaonline.com/
^http://(.+@)?superpartycab.com/
^http://(.+@)?supersalesonline.com/
^http://(.+@)?superyearcard.com/
^http://(.+@)?tabatti.com/
^http://(.+@)?tagdebt.com/
^http://(.+@)?tatumen.com/
^http://(.+@)?terroralertstatus.com/
^http://(.+@)?terrorfear.com/
^http://(.+@)?terrorismfree.com/
^http://(.+@)?thebaracksite.com/
^http://(.+@)?thecoupondiscount.com/
^http://(.+@)?thehandygal.com/
^http://(.+@)?themazdacar.com/
^http://(.+@)?themazdaspeed.com/
^http://(.+@)?themirabelladirect.com/
^http://(.+@)?themirabellaguide.com/
^http://(.+@)?themirabellahome.com/
^http://(.+@)?themostrateblog.com/
^http://(.+@)?thevalentinelovers.com/
^http://(.+@)?thevalentineparty.com/
^http://(.+@)?theworldpool.com/
^http://(.+@)?thingre.com/
^http://(.+@)?tntbreakingnews.com/
^http://(.+@)?tobeyew.com/
^http://(.+@)?topgreetingsite.com/
^http://(.+@)?topwale.com/
^http://(.+@)?urbanfear.com/
^http://(.+@)?usabreakingnews.com/
^http://(.+@)?video4thjuly.com/
^http://(.+@)?videoindependence.com/
^http://(.+@)?virtualesms.com/
^http://(.+@)?wagerpond.com/
^http://(.+@)?waledirekt.com/
^http://(.+@)?waleonline.com/
^http://(.+@)?waleprojekt.com/
^http://(.+@)?wapcitynews.com/
^http://(.+@)?wealthleaf.com/
^http://(.+@)?whitewhitechristmas.com/
^http://(.+@)?whocherish.com/
^http://(.+@)?wirelessvalentineday.com/
^http://(.+@)?workcaredirect.com/
^http://(.+@)?workhomegold.com/
^http://(.+@)?worklifedata.com/
^http://(.+@)?worldgreetingcard.com/
^http://(.+@)?worldlovelife.com/
^http://(.+@)?worldnewsdot.com/
^http://(.+@)?worldnewseye.com/
^http://(.+@)?worldtracknews.com/
^http://(.+@)?worshiplove.com/
^http://(.+@)?youradore.com/
^http://(.+@)?yourbarrier.com/
^http://(.+@)?yourbreakingnew.com/
^http://(.+@)?yourchristmaslights.com/
^http://(.+@)?yourcountycoupon.com/
^http://(.+@)?yourdatabank.com/
^http://(.+@)?yourdecember.com/
^http://(.+@)?yourgreatlove.com/
^http://(.+@)?yourhandyhome.com/
^http://(.+@)?yourlength.com/
^http://(.+@)?yourlol.com/
^http://(.+@)?yourmazdacar.com/
^http://(.+@)?yourmazdatribute.com/
^http://(.+@)?yourmirabelladirect.com/
^http://(.+@)?yourregards.com/
^http://(.+@)?yourteamdoc.com/
^http://(.+@)?yourvalentineday.com/
^http://(.+@)?yourvalentinepoems.com/
^http://(.+@)?yourwent.com/
^http://(.+@)?youryearcard.com/
^http://(.+@)?yusitymp.com/

OM, dimana aku mau letak list ini dalam proxy setting aku?

[kaptenhook]

@syedadi:

@kaptenhook:

list conflicker

^http://(.+@)?4thfirework.com/
^http://(.+@)?adorelyric.com/
^http://(.+@)?adorepoem.com/
^http://(.+@)?adoresong.com/
^http://(.+@)?adoresongs.com/
^http://(.+@)?againstfear.com/
^http://(.+@)?alldatanow.com/
^http://(.+@)?alldataworld.com/
^http://(.+@)?antiterroralliance.com/
^http://(.+@)?antiterroris.com/
^http://(.+@)?antiterrornetwork.com/
^http://(.+@)?aweleon.com/
^http://(.+@)?bakeloaf.com/
^http://(.+@)?bayhousehotel.com/
^http://(.+@)?beadcareer.com/
^http://(.+@)?beadworkdirect.com/
^http://(.+@)?bedioger.com/
^http://(.+@)?bestadore.com/
^http://(.+@)?bestbarack.com/
^http://(.+@)?bestbaracksite.com/
^http://(.+@)?bestblogdirect.com/
^http://(.+@)?bestbreakingfree.com/
^http://(.+@)?bestchristmascard.com/
^http://(.+@)?bestcouponfree.com/
^http://(.+@)?bestgoodnews.com/
^http://(.+@)?bestjournalguide.com/
^http://(.+@)?bestlifeblog.com/
^http://(.+@)?bestlovehelp.com/
^http://(.+@)?bestlovelong.com/
^http://(.+@)?bestmazdadealer.com/
^http://(.+@)?bestmirabella.com/
^http://(.+@)?bestobamadirect.com/
^http://(.+@)?bestusablog.com/
^http://(.+@)?bestyearcard.com/
^http://(.+@)?bicodehl.com/
^http://(.+@)?birdab.com/
^http://(.+@)?biumer.com/
^http://(.+@)?blackchristmascard.com/
^http://(.+@)?blogginhell.com/
^http://(.+@)?blogsitedirect.com/
^http://(.+@)?bluevalentineonline.com/
^http://(.+@)?boarddiary.com/
^http://(.+@)?breakingfreemichigan.com/
^http://(.+@)?breakinggoodnews.com/
^http://(.+@)?breakingkingnews.com/
^http://(.+@)?breakingnewsfm.com/
^http://(.+@)?breakingnewsltd.com/
^http://(.+@)?buymazdacars.com/
^http://(.+@)?cantlosedata.com/
^http://(.+@)?cardnewyear.com/
^http://(.+@)?chatloveonline.com/
^http://(.+@)?cheapdecember.com/
^http://(.+@)?cherishletter.com/
^http://(.+@)?cherishpoems.com/
^http://(.+@)?chinamobilesms.com/
^http://(.+@)?christmaslightsnow.com/
^http://(.+@)?cismosis.com/
^http://(.+@)?codecouponsite.com/
^http://(.+@)?coralarm.com/
^http://(.+@)?crucism.com/
^http://(.+@)?cycloro.com/
^http://(.+@)?deathtaxi.com/
^http://(.+@)?debtbgonesite.com/
^http://(.+@)?decemberchristmas.com/
^http://(.+@)?directchristmasgift.com/
^http://(.+@)?discountfreesms.com/
^http://(.+@)?downloadfreesms.com/
^http://(.+@)?easyworldnews.com/
^http://(.+@)?eccellentesms.com/
^http://(.+@)?encybest.com/
^http://(.+@)?entrank.com/
^http://(.+@)?eternalgreetingcard.com/
^http://(.+@)?expowale.com/
^http://(.+@)?extendedman.com/
^http://(.+@)?farboards.com/
^http://(.+@)?favolu.com/
^http://(.+@)?fearalert.com/
^http://(.+@)?fireholiday.com/
^http://(.+@)?fireworksholiday.com/
^http://(.+@)?fireworksnetwork.com/
^http://(.+@)?fireworkspoint.com/
^http://(.+@)?framtr.com/
^http://(.+@)?freechristmassite.com/
^http://(.+@)?freechristmasworld.com/
^http://(.+@)?freecolorsms.com/
^http://(.+@)?freedecember.com/
^http://(.+@)?freedoconline.com/
^http://(.+@)?freeindependence.com/
^http://(.+@)?freeservesms.com/
^http://(.+@)?freesmsorange.com/
^http://(.+@)?frostep.com/
^http://(.+@)?fryroll.com/
^http://(.+@)?funloveonline.com/
^http://(.+@)?funnychristmasguide.com/
^http://(.+@)?funnyvalentinessite.com/
^http://(.+@)?gemells.com/
^http://(.+@)?globalantiterror.com/
^http://(.+@)?goldfixonline.com/
^http://(.+@)?gonesite.com/
^http://(.+@)?goodnewsdigital.com/
^http://(.+@)?goodnewsreview.com/
^http://(.+@)?goog-analysis.com/
^http://(.+@)?googol-analisys.com/
^http://(.+@)?greatbarackguide.com/
^http://(.+@)?greatcouponclub.com/
^http://(.+@)?greatmazdacars.com/
^http://(.+@)?greatmirabellasite.com/
^http://(.+@)?greatobamaguide.com/
^http://(.+@)?greatobamaonline.com/
^http://(.+@)?greatsalesavailable.com/
^http://(.+@)?greatsalesgroup.com/
^http://(.+@)?greatsalestax.com/
^http://(.+@)?greatsvalentine.com/
^http://(.+@)?greatvalentinepoems.com/
^http://(.+@)?greetingcardcalendar.com/
^http://(.+@)?greetingcardgarb.com/
^http://(.+@)?greetingguide.com/
^http://(.+@)?greetingsupersite.com/
^http://(.+@)?gumentha.com/
^http://(.+@)?handyphoneworld.com/
^http://(.+@)?happyindependence.com/
^http://(.+@)?hindger.com/
^http://(.+@)?holidayfirework.com/
^http://(.+@)?holidaysfirework.com/
^http://(.+@)?holidayxmas.com/
^http://(.+@)?holifireworks.com/
^http://(.+@)?hornalfa.com/
^http://(.+@)?interactiveindependence.com/
^http://(.+@)?ipersmstext.com/
^http://(.+@)?itsfatherchristmas.com/
^http://(.+@)?jobarack.com/
^http://(.+@)?justchristmasgift.com/
^http://(.+@)?lastlabel.com/
^http://(.+@)?lifegreetingcard.com/
^http://(.+@)?linkworldnews.com/
^http://(.+@)?livechristmascard.com/
^http://(.+@)?livechristmasgift.com/
^http://(.+@)?longballonline.com/
^http://(.+@)?losenowfast.com/
^http://(.+@)?lovecentralonline.com/
^http://(.+@)?lovelifeportal.com/
^http://(.+@)?macride.com/
^http://(.+@)?mazdaautomotiveparts.com/
^http://(.+@)?mazdacarclub.com/
^http://(.+@)?mazdaspeedzone.com/
^http://(.+@)?mingwater.com/
^http://(.+@)?miosmschat.com/
^http://(.+@)?miosmsclub.com/
^http://(.+@)?mirabellaclub.com/
^http://(.+@)?mirabellamotors.com/
^http://(.+@)?mirabellanews.com/
^http://(.+@)?mirabellaonline.com/
^http://(.+@)?mobilephotoblog.com/
^http://(.+@)?moneymedal.com/
^http://(.+@)?morefreesms.com/
^http://(.+@)?movie4thjuly.com/
^http://(.+@)?moviefireworks.com/
^http://(.+@)?movieindependence.com/
^http://(.+@)?movies4thjuly.com/
^http://(.+@)?moviesfireworks.com/
^http://(.+@)?moviesindependence.com/
^http://(.+@)?netcitycab.com/
^http://(.+@)?newlifeyearsite.com/
^http://(.+@)?newmediayearguide.com/
^http://(.+@)?newyearcardcompany.com/
^http://(.+@)?newyearcardfree.com/
^http://(.+@)?newyearcardonline.com/
^http://(.+@)?newyearcardservice.com/
^http://(.+@)?noloid.com/
^http://(.+@)?nonprobs.com/
^http://(.+@)?nuovosms.com/
^http://(.+@)?nuovosmsclub.com/
^http://(.+@)?orldlovelife.com/
^http://(.+@)?oughwa.com/
^http://(.+@)?outdoorindependence.com/
^http://(.+@)?painkee.com/
^http://(.+@)?pantali.com/
^http://(.+@)?pathoph.com/
^http://(.+@)?petcabtaxi.com/
^http://(.+@)?photoblogsite.com/
^http://(.+@)?prerre.com/
^http://(.+@)?primosmsfree.com/
^http://(.+@)?purgand.com/
^http://(.+@)?rascop.com/
^http://(.+@)?reportradio.com/
^http://(.+@)?residencehunter.com/
^http://(.+@)?romanticsloving.com/
^http://(.+@)?screenalias.com/
^http://(.+@)?seocom.mobi/
^http://(.+@)?seocom.name/
^http://(.+@)?seofon.net/
^http://(.+@)?smartcardgreeting.com/
^http://(.+@)?smartsalesgroup.com/
^http://(.+@)?smophi.com/
^http://(.+@)?smsclubnet.com/
^http://(.+@)?smsdiretto.com/
^http://(.+@)?smsinlinea.com/
^http://(.+@)?smsluogo.com/
^http://(.+@)?smspianeta.com/
^http://(.+@)?sodanthu.com/
^http://(.+@)?spacemynews.com/
^http://(.+@)?specipa.com/
^http://(.+@)?superchristmasday.com/
^http://(.+@)?superchristmaslights.com/
^http://(.+@)?superhandycap.com/
^http://(.+@)?superioresms.com/
^http://(.+@)?superobamadirect.com/
^http://(.+@)?superobamaonline.com/
^http://(.+@)?superpartycab.com/
^http://(.+@)?supersalesonline.com/
^http://(.+@)?superyearcard.com/
^http://(.+@)?tabatti.com/
^http://(.+@)?tagdebt.com/
^http://(.+@)?tatumen.com/
^http://(.+@)?terroralertstatus.com/
^http://(.+@)?terrorfear.com/
^http://(.+@)?terrorismfree.com/
^http://(.+@)?thebaracksite.com/
^http://(.+@)?thecoupondiscount.com/
^http://(.+@)?thehandygal.com/
^http://(.+@)?themazdacar.com/
^http://(.+@)?themazdaspeed.com/
^http://(.+@)?themirabelladirect.com/
^http://(.+@)?themirabellaguide.com/
^http://(.+@)?themirabellahome.com/
^http://(.+@)?themostrateblog.com/
^http://(.+@)?thevalentinelovers.com/
^http://(.+@)?thevalentineparty.com/
^http://(.+@)?theworldpool.com/
^http://(.+@)?thingre.com/
^http://(.+@)?tntbreakingnews.com/
^http://(.+@)?tobeyew.com/
^http://(.+@)?topgreetingsite.com/
^http://(.+@)?topwale.com/
^http://(.+@)?urbanfear.com/
^http://(.+@)?usabreakingnews.com/
^http://(.+@)?video4thjuly.com/
^http://(.+@)?videoindependence.com/
^http://(.+@)?virtualesms.com/
^http://(.+@)?wagerpond.com/
^http://(.+@)?waledirekt.com/
^http://(.+@)?waleonline.com/
^http://(.+@)?waleprojekt.com/
^http://(.+@)?wapcitynews.com/
^http://(.+@)?wealthleaf.com/
^http://(.+@)?whitewhitechristmas.com/
^http://(.+@)?whocherish.com/
^http://(.+@)?wirelessvalentineday.com/
^http://(.+@)?workcaredirect.com/
^http://(.+@)?workhomegold.com/
^http://(.+@)?worklifedata.com/
^http://(.+@)?worldgreetingcard.com/
^http://(.+@)?worldlovelife.com/
^http://(.+@)?worldnewsdot.com/
^http://(.+@)?worldnewseye.com/
^http://(.+@)?worldtracknews.com/
^http://(.+@)?worshiplove.com/
^http://(.+@)?youradore.com/
^http://(.+@)?yourbarrier.com/
^http://(.+@)?yourbreakingnew.com/
^http://(.+@)?yourchristmaslights.com/
^http://(.+@)?yourcountycoupon.com/
^http://(.+@)?yourdatabank.com/
^http://(.+@)?yourdecember.com/
^http://(.+@)?yourgreatlove.com/
^http://(.+@)?yourhandyhome.com/
^http://(.+@)?yourlength.com/
^http://(.+@)?yourlol.com/
^http://(.+@)?yourmazdacar.com/
^http://(.+@)?yourmazdatribute.com/
^http://(.+@)?yourmirabelladirect.com/
^http://(.+@)?yourregards.com/
^http://(.+@)?yourteamdoc.com/
^http://(.+@)?yourvalentineday.com/
^http://(.+@)?yourvalentinepoems.com/
^http://(.+@)?yourwent.com/
^http://(.+@)?youryearcard.com/
^http://(.+@)?yusitymp.com/

OM, dimana aku mau letak list ini dalam proxy setting aku?

Setup some default acls

acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901  3128 1025-65535
acl sslports port 443 563
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl mallware url_regex '/usr/local/etc/squid/mallware.url'
acl conficker url_regex '/usr/local/etc/squid/conficker.url'
acl partialcontent_req req_header Range .*
#acl dynamic urlpath_regex cgi-bin ?
include /usr/local/etc/squid/include.conf
acl allowed_subnets src 192.168.x.x/27
#cache deny dynamic
http_access allow manager localhost

[syedadi]

OK, aku cuba ni… =)

Thanks

[pfz]

apapun yg berkaitan dengan Mallware pake SquidGuard dijamin deh…. ;D

[serangku]

kalau Mall kayak Matahari, SOGO, Hero, Hypermart dll …
itu gimana yah om pak de ...  ;D ;D ;D

OOT deh ..

[queues]

@serangku:

kalau Mall kayak Matahari, SOGO, Hero, Hypermart dll …
itu gimana yah om pak de ...  ;D ;D ;D

OOT deh ..

Tambahin OOTnya ya om :D

bahas tentang SRG dong om yang ada disini http://code.google.com/p/pfsense-cacheboy/

cara Installnya gmana ya? udh coba dr td tp gak bs akses.

[syedadi]

Mau tanya ni OM,  ???

gimana mau limit user apabila die download file yg lebih besar dari 50MB kelajuan bandwidth nya jadi 20kbp/s sahaja? aku sukar mau limit kerana ada user yg download movie dari mediafire….aku engak mau block, aku mau die fad-up download movie kerana kecepatanya rendah...

Boleh konsi caranya x OM?

delay_class 2 2;
delay_parameters 2 300000/300000 20971520/20971520;
delay_access 2 allow local_user;
delay_access 2 deny all;

Betul engak configurasi sebegini? Bila user download lebih 20MB, kelajuan jadi 30kbps? or aku salah disini? tolong om

[poscom]

@syedadi:

Mau tanya ni OM,  ???

gimana mau limit user apabila die download file yg lebih besar dari 50MB kelajuan bandwidth nya jadi 20kbp/s sahaja? aku sukar mau limit kerana ada user yg download movie dari mediafire….aku engak mau block, aku mau die fad-up download movie kerana kecepatanya rendah...

Boleh konsi caranya x OM?

delay_class 2 2;
delay_parameters 2 300000/300000 20971520/20971520;
delay_access 2 allow local_user;
delay_access 2 deny all;

Betul engak configurasi sebegini? Bila user download lebih 20MB, kelajuan jadi 30kbps? or aku salah disini? tolong om

pake CP jangan pake deley p

[syedadi]

aku engak pakai CP OM….connection biase saja...transparent proxy.

[serangku]

lanjut deh gan oprekan conf nya ….
biar enak tuh cumi buat menu buka puasa nanti ...  :)