Walnutz » Networking http://blog.walnutz.net Walnutz Wed, 10 Feb 2010 17:50:19 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 Install Squid di OpenBSD (proxy) http://blog.walnutz.net/install-squid-di-openbsd-proxy.html http://blog.walnutz.net/install-squid-di-openbsd-proxy.html#comments Tue, 11 Nov 2008 01:16:10 +0000 admin http://walnutz.net/blog/?p=56 sebaiknya buat dahulu direktori cache pada waktu instalasi

SETTING PROXY OpenBSD
Extract squid
# mkdir /usr/local/src
# tar zxvf squid-2.5.STABLE14.tar.gz -C /usr/local/src

# groupadd squid
# useradd -m -d /cache -g squid -s /dev/null squid

Edit squid
# cd /usr/local/src/squid-2.5.STABLE14
# ee icons/Makefile.in
Ganti dari icondir=$(datadir)/icons
Menjadi icondir=$(libexecdir)/icons

# ee src/Makefile.in
Ganti dari DEFAULT_LOG_PREFIX=$(localstatedir)/logs
Menjadi DEFAULT_LOG_PREFIX=$(localstatedir)/log/squid
Ganti dari DEFAULT_PID_FILE=$(DEFAULT_LOG_PREFIX)/squid.pid
Menjadi DEFAULT_PID_FILE=$(localstatedir)/run/squid.pid
Ganti dari DEFAULT_SWAP_DIR=$(localstatedir)/cache
Menjadi DEFAULT_SWAP_DIR=/cache
Ganti dari DEFAULT_ICON_DIR=$(datadir)/icons
Menjadi DEFAULT_ICON_DIR=$(libexecdir)/icons

Kompilasi Squid
# cd /usr/local/src/squid-2.5.STABLE14
# ./configure –prefix=/usr –exec-prefix=/usr –bindir=/usr/sbin –libexecdir=/usr/lib/squid
–localstatedir=/var –sysconfdir=/etc/squid –enable-pf-transparent –enable-snmp –enable-ssl –enable-removal-policies=heap –enable-default-languages=English
–enable-err-languages=English –enable-delay-pools –enable-cache-digests –enable-poll –disable-ident-lookups –disable-hostname-checks –enable-storeio=diskd,ufs

# make
# make install
# mkdir -p /var/log/squid
# chown squid:squid /var/log/squid
# chmod 750 /var/log/squid
# chmod 750 /cache

Edit /etc/squid/squid.conf
http_port 3128
icp_port 0
cache_mem 6 MB
cache_dir diskd /cache x y 256 Q1=72 Q2=64 x (MB)=max 80% free spc
y = x * 1024 / 13 / 256 / 256 * 2
!!! store_dir_algorithm round-robin !!! Bila multi partisi
cache_store_log none
negative_ttl 2 minutes
cache_effective_user squid
cache_effective_group squid
maximum_object_size 32 KB
minimum_object_size 0 KB
cache_replacement_policy heap LFUDA
memory_replacement_policy heap GDSF
ftp_user ampuh@yahoo.com
acl AMPUH src 192.168.0.0/255.255.255.0 –> asumsi ip local anda 192.168.0.0/24
http_access allow AMPUH
http_access deny all
cache_mgr ampuh@yahoo.com
visible_hostname ampuh.warnet.com
half_closed_clients off
cache_swap_high 100
cache_swap_low 80
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on

Buat direktori cache
# /usr/sbin/squid -z

Jalankan dengan
# /usr/sbin/squid -D untuk start
# /usr/sbin/squid -k shutdown untuk stop
# /usr/sbin/squid -k reconfigure untuk restart

Cek dengan
# tail -f /var/log/messages

Supaya autorun edit
# ee /etc/rc.local

if [ -x /usr/sbin/squid ]; then
echo -n ’squid’; /usr/sbin/squid -D
fi

# ee /etc/pf.conf
rdr on rl1 proto tcp from any to any port 80 -> 192.168.1.1 port 3128 —> rl1 ke local

#### untuk mendel /cache spt biasa
terus untuk delete log nya di
/var/log/squid/access.log

]]> http://blog.walnutz.net/install-squid-di-openbsd-proxy.html/feed 0 Install OpenBSD dan build kernel baru http://blog.walnutz.net/install-openbsd-dan-build-kernel-baru.html http://blog.walnutz.net/install-openbsd-dan-build-kernel-baru.html#comments Tue, 11 Nov 2008 01:15:25 +0000 admin http://walnutz.net/blog/?p=54 Ada beberapa cara boot dalam proses installation kernel ini:
- Floppy disk: Image floppy disk bisa digunakan untuk membuat disk installation pada system Unix-like, atau system DOS/Windows, file tersebut ada floppy35.fs
- CD-ROM: Pada beberapa platform CD-ROM image (cd35.iso) di dalamnya sudah terdapat bootable, dalam hal ini hanya berisi kernel instalasi saja, dan untuk files instalasi masih harus di ambil melalui FTP atau tempat lain.
- bsd.rd: RAM disk kernel,yg bertujuan untuk malakukan proses booting dari system OpenBSD yg sudah ada ataupun melalui network.
- Network: Untuk beberapa platform sudah mendukung untuk booting melalui network.
- Menaruhkan file image system ke disk: file system image bisa di masukan ke patisi yg ada dan untuk selanjutnya melakukan proses booting.
- Bootable Tape: Untuk beberapa platform sudah mendukung untuk proses booting melalui tape.Tidak semua platform mendukung semua proses booting diatas:
- alpha: Floppy, CD-ROM, Menaruhkan file image system ke disk
- amd64: Floppy, CD-ROM, network.
- cats: CD-ROM.
- hp300: CD-ROM, network.
- hppa: Network.
- i386: Floppy, CD, network.
- mac68k: Installed (and booted) using utilities running on Mac OS. See INSTALL.mac68k for details.
- macppc: CD-ROM, network.
- mvme68k: Network, bootable tape.
- mvme88k: Network, bootable tape.
- sparc: Floppy, CD-ROM, network, writing image to existing swap partition, bootable tape.
- sparc64: Floppy (U1/U2 only), CD-ROM, network, Menaruhkan file image system ke disk.
- vax: Floppy, network.
Dan seluruh platform kecuali mac68k bisa juga menggunakan bsd.rd untuk melakukan proses install atau upgrade.*Install OpenBSD*
1. Boot from CD
2. Installation process
rootdev=0×1100 rrootdev=0×2f00 rawdev=0×2f02
erase ^?, werase ^W, kill ^U, intr ^C, status ^T
(I)nstall, (U)pgrade or (S)hell? iWelcome to the OpenBSD/i386 3.5 install program.
This program will help you install OpenBSD in a simple and rational way. At
any prompt except password prompts you can run a shell command by typing
‘!foo’, or escape to a shell by typing ‘!’. Default answers are shown in []’s
and are selected by pressing RETURN. At any time you can exit this program by
pressing Control-C and then RETURN, but quitting during an install can leave
your system in an inconsistent state.
Specify terminal type: [vt220] Enter
Do you wish to select a keyboard encoding table? [no] EnterIS YOUR DATA BACKED UP? As with anything that modifies disk contents, this
program can cause SIGNIFICANT data loss.
It is often helpful to have the installation notes handy. For complex disk
configurations, relevant disk hardware manuals and a calculator are useful.
Proceed with install? [no] yCool! Let’s get to it…
You will now initialize the disk(s) that OpenBSD will use. To enable all
available security features you should configure the disk(s) to allow the
creation of separate filesystems for /, /tmp, /var, /usr, and /home.
Available disks are: wd0.
Which one is the root disk? (or done) [wd0] EnterDo you want to use *all* of wd0 for OpenBSD? [no] yes
sampai di sini ikuti petunjuk yang ada di dalam proses instalasinya. (mudah kan ^_^)Selanjutnya adalah melakukan compile system dengan kernel yg baru
*Build New Kernel*
3. ambil src file dari ftp.openbsd.org/pub/OpenBSD/3.5/
3. copykan file src.tar.gz ke directory /usr and sys.tar.gz ke directory /usr/src
#cp src.tar.gz /usr
#cp sys.tar.gz/usr/src
4. lakukan untar ;
#tar -zxvf /usr/src.tar.gz
#tar -zxvf /usr/src/sys.tar.gz
5. cd /usr/src; make obj && make depend && make && make install
6. cd ../sys/i386/conf
7. copy dan backup files GENERIC ke file lain;
#cp GENERIC SomeFile
8. lakukan prosess config , kemudian compile ;
#config SomeFile
#cd ../compile/SomeFile
#make clean && make depend && make
9. copy dan backup file bsd yang lama dengan file bsd yang baru
#cp /bsd /bsd.old
#cp bsd /bsd
#reboot
10.rebuild kembali system binaries
#cd /usr/src
#rm -r /usr/obj/*
#make obj && make build
11.uname -a
OpenBSD setan.fbsd-tech.net 3.5 SETAN#0 i386sumber:

http://www.openbsd.org/faq/faq4.html#Overview

]]> http://blog.walnutz.net/install-openbsd-dan-build-kernel-baru.html/feed 0