Install dan konfigurasi squid3 di ubuntu 9.10 sebagai transparent

Biasanya para pemakai distro linux ubuntu pada saat menginstall squid proxy server dengan menggunakkan apt-get nya maka secara default akan mendapat squid versi 2.7 ke bawah lain hal jika pengguna linux fedora jika dengan paket manager yum nya maka akan mendapat squid versi 3, dengan demikian dalam kesempatan ini saya akan berbagi dengan kalian cara install dan konfigurasinya squid v3 di ubuntu dan di set sebagai transparent. Transparent sendiri kasarnya ialah membelokan request ke port 80 (internet) ke port proxy jadi dengan begitu anda tidak perlu manual men-set proxy pada tiap browser di klien lokal.

Skema jaringan :
Internet--------Ubuntu Server 9.10-----------Klien (Os Windows)

• Sebelum memulai konfigurasinya, lakukan installasi squid 3 dahulu
  
  sudo apt-get install squid3

• Cek Ip dari masing-masing kartu jaringan pada Ubuntu dengan perintah ifconfig :
  
  ncuptea@router:~$ ifconfig
  eth2 Link encap:Ethernet HWaddr XX:XX:XX:XX:XX:XX
  inet addr:192.168.1.2 Bcast:192.168.1.255 Mask:255.255.255.0
  inet6 addr: XXXX::XXX:XXXX:XXXX:XXX/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  RX packets:241405 errors:0 dropped:0 overruns:0 frame:0
  TX packets:242431 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000
  RX bytes:235254755 (235.2 MB) TX bytes:45248141 (45.2 MB)
  Interrupt:26 Base address:0x6000
  
  eth3 Link encap:Ethernet HWaddr XX:XX:XX:XX:XX:XX
  inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
  inet6 addr: XXXX::XXX:XXXX:XXXX:XXX/64 Scope:Link
  UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
  RX packets:196986 errors:0 dropped:0 overruns:0 frame:0
  TX packets:334215 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:1000
  RX bytes:45479246 (45.4 MB) TX bytes:322864820 (322.8 MB)
  Interrupt:23 Base address:0xe800
  
  lo Link encap:Local Loopback
  inet addr:127.0.0.1 Mask:255.0.0.0
  inet6 addr: ::1/128 Scope:Host
  UP LOOPBACK RUNNING MTU:16436 Metric:1
  RX packets:2 errors:0 dropped:0 overruns:0 frame:0
  TX packets:2 errors:0 dropped:0 overruns:0 carrier:0
  collisions:0 txqueuelen:0
  RX bytes:676 (676.0 B) TX bytes:676 (676.0 B)
  
  Dari keterangan diatas diketahui eth2 mengarah ke Internet dan eth3 ke LAN, hal ini di peruntukan untuk nantinya mengkonfigurasi iptables nya supaya permintaan ke port 80 (internet) di belokan paksa ke squid (proxy) di port 3130
  

• Buka file konfigurasi squid3 di direktori /etc/squid3 dengan editor nano :
  
  nano /etc/squid3/squid.conf

• Setelah terbuka samakan isi-nya atau buat atau seperti file konfigurasi jadi squid3 saya di bawah ini :
  
  # WELCOME TO SQUID 3.0.STABLE18
  # powered by citeureup foundation
  # -------------------------------
  acl manager proto cache_object
  acl localhost src 127.0.0.1/32
  acl to_localhost dst 127.0.0.0/8
  acl lokal src 192.168.0.0/24
  #
  acl SSL_ports port 443 # https
  acl SSL_ports port 563 # snews
  acl SSL_ports port 873 # rsync
  acl Safe_ports port 80 # http
  acl Safe_ports port 21 # ftp
  acl Safe_ports port 443 # https
  acl Safe_ports port 70 # gopher
  acl Safe_ports port 210 # wais
  acl Safe_ports port 1025-65535 # unregistered ports
  acl Safe_ports port 280 # http-mgmt
  acl Safe_ports port 488 # gss-http
  acl Safe_ports port 591 # filemaker
  acl Safe_ports port 777 # multiling http
  acl Safe_ports port 631 # cups
  acl Safe_ports port 873 # rsync
  acl Safe_ports port 901 # SWAT
  acl purge method PURGE
  acl CONNECT method CONNECT
  #
  http_access allow manager localhost
  http_access deny manager
  http_access allow purge localhost
  http_access deny purge
  http_access deny !Safe_ports
  http_access deny CONNECT !SSL_ports
  http_access allow lokal
  http_access allow localhost
  http_access deny all
  #
  http_reply_access allow all
  icp_access allow lokal
  icp_access deny all
  #
  http_port 3128 transparent
  #
  dead_peer_timeout 10 seconds
  hierarchy_stoplist cgi-bin ?
  #
  cache_mem 64 MB
  maximum_object_size_in_memory 512 KB
  memory_replacement_policy lru
  #
  cache_replacement_policy lru
  cache_dir aufs /home/proxy 25000 72 256
  maximum_object_size 20000 KB
  #
  cache_swap_low 80
  cache_swap_high 85
  #
  access_log /var/log/squid3/access.log squid
  cache_log /var/log/squid3/cache.log
  #
  refresh_pattern ^ftp: 1440 20% 10080
  refresh_pattern ^gopher: 1440 0% 1440
  refresh_pattern -i (/cgi-bin/|\?) 0 0% 0
  refresh_pattern (Release|Package(.gz)*)$ 0 20% 2880
  refresh_pattern . 0 20% 4320
  refresh_pattern /.gif 4320 50% 43200
  refresh_pattern /.jpg 4320 50% 43200
  refresh_pattern /.jpeg 4320 50% 43200
  refresh_pattern /.png 4320 50% 43200
  refresh_pattern ^http://www.kaskus.us/.* 720 100% 10080
  refresh_pattern ^http://www.indowebmaster.com/.* 720 100% 10080
  refresh_pattern ^http://www.twitter.com/.* 720 100% 10080
  refresh_pattern ^http://www.friendster.com/.* 720 100% 10080
  refresh_pattern ^http://mail.yahoo.com/.* 720 100% 10080
  refresh_pattern ^http://*.yahoo.*/.* 720 100% 7200
  refresh_pattern ^http://*.google.com/.* 720 100% 10080
  refresh_pattern ^http://www.telkomspeedy.com/.* 720 100% 28800
  refresh_pattern ^http://*.blogsome.com/.* 720 80% 10080
  refresh_pattern ^http://*.wordpress.com/.* 720 80% 10080
  refresh_pattern ^http://detik.com/.* 720 90% 2880
  #
  quick_abort_min 16 KB
  quick_abort_max 16 KB
  quick_abort_pct 95
  #
  read_ahead_gap 16 KB
  negative_ttl 2 minutes
  negative_dns_ttl 1 minute
  minimum_expiry_time 30 seconds
  store_avg_object_size 13 KB
  #
  acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
  ie_refresh on
  extension_methods REPORT MERGE MKACTIVITY CHECKOUT
  #
  forward_timeout 1 minutes
  connect_timeout 1 minute
  peer_connect_timeout 30 seconds
  read_timeout 1 minutes
  request_timeout 1 minutes
  persistent_request_timeout 2 minutes
  client_lifetime 1 day
  half_closed_clients on
  shutdown_lifetime 30 seconds
  #
  cache_mgr citeureupfoundation
  #
  error_directory /usr/share/squid3/errors/templates
  hosts_file /etc/hosts
  #
  coredump_dir /var/spool/squid
  
  

- Save (Ctrl+O) dan keluar dari nano (Ctrl+X) - lakukan reload/reconfigurasi

/etc/init.d/squid3 reload

- Check terlebih dahulu apakah benar-tidaknya konfigurasi di squid

squid3 -k parse

- Buat swap cache untuk menerapkan direktory cache dari squid

squid3 -z

- Restart squid3

/etc/init.d/squid3 restart

• Menerapkan aturan iptables
  
  iptables -t nat -A PREROUTING -i eth3 -p tcp --dport 80 -j REDIRECT --to-port 3128
  
  Copykan juga ke /etc/rc.local hingga terlihat seperti berikut supaya tidak hilang sekalipun komputer server di reboot
  
  #!/bin/sh -e
  #
  # rc.local
  #
  # This script is executed at the end of each multiuser runlevel.
  # Make sure that the script will "exit 0" on success or any other
  # value on error.
  #
  # In order to enable or disable this script just change the execution
  # bits.
  #
  # By default this script does nothing.
  
  iptables -t nat -A PREROUTING -i eth3 -p tcp --dport 80 -j REDIRECT --to-port 3128
  exit 0
  

Selesai, selamat mencoba!!