API tools faq
paste
wandibudiana

Installasi PROXY LUSCA

wandibudiana
Aug 30th, 2012
1,487
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 20.10 KB | None | 0 0
raw download clone embed print report
  1. Installasi PROXY SERVER LUSCA featuring storeurl.pl Kang Ucok Karnadi
  2.  
  3. Lanjutan http://pastebin.com/hkc9TFBb
  4. Tuning Up
  5.  
  6. Optimalkan file system untuk proxy
  7.  
  8. tune2fs -m 0 /dev/sda5
  9. tune2fs -m 0 /dev/sda6
  10.  
  11. If you need to know your drives labels type the following:
  12.  
  13. mount|grep ^'/dev'
  14.  
  15.  
  16. tune2fs -o journal_data_writeback /dev/sda5
  17. tune2fs -o journal_data_writeback /dev/sda6
  18.  
  19. Disabled fsck (file system check)
  20.  
  21. nano /etc/fstab
  22.  
  23. nano /etc/fstab
  24. /cache-1  ext4  noatime,barrier=0,nodiratime,relatime,errors=remount-ro,data=writeback   0   0
  25. /cache-2  ext4  noatime,barrier=0,nodiratime,relatime,errors=remount-ro,data=writeback   0   0
  26.  
  27. Adjusting tcp sockets and limits
  28.  
  29. decrease TCP TIME_WAIT setting, the default value (60 in Debian 6) is too high and will result in too many sockets in TIME_WAIT stait. To decrease waiting time, execute following command:
  30.  
  31. echo 4 >> /proc/sys/net/ipv4/tcp_fin_timeout
  32. mv /etc/sysctl.conf /etc/sysctl.conf_
  33. touch /etc/sysctl.conf
  34.  
  35. echo "kernel.panic = 30
  36. kernel.panic_on_oops = 30
  37. kernel.sysrq = 0
  38. kernel.core_uses_pid = 1
  39. kernel.msgmnb = 65536
  40. kernel.msgmax = 65536
  41. fs.file-max = 65536
  42. vm.swappiness = 10
  43. vm.vfs_cache_pressure=50
  44. vm.mmap_min_addr = 4096
  45. vm.overcommit_ratio = 0
  46. vm.overcommit_memory = 0
  47. kernel.shmmax = 268435456
  48. kernel.shmall = 268435456
  49. vm.min_free_kbytes = 65536
  50. net.ipv4.tcp_syncookies = 1
  51. net.ipv4.tcp_syn_retries = 5
  52. net.ipv4.tcp_synack_retries = 2
  53. net.ipv4.tcp_max_syn_backlog = 4096
  54. net.ipv4.ip_forward = 0
  55. net.ipv4.conf.all.forwarding = 0
  56. net.ipv4.conf.default.forwarding = 0
  57. net.ipv4.conf.all.accept_source_route = 0
  58. net.ipv4.conf.default.accept_source_route = 0
  59. net.ipv4.conf.all.rp_filter = 1
  60. net.ipv4.conf.default.rp_filter = 1
  61. net.ipv4.conf.all.accept_redirects = 0
  62. net.ipv4.conf.default.accept_redirects = 0
  63. net.ipv4.conf.all.log_martians = 0
  64. net.ipv4.conf.default.log_martians = 0
  65. net.ipv4.tcp_fin_timeout = 15
  66. net.ipv4.tcp_keepalive_time = 300
  67. net.ipv4.tcp_keepalive_probes = 5
  68. net.ipv4.tcp_keepalive_intvl = 15
  69. net.ipv4.conf.all.bootp_relay = 0
  70. net.ipv4.conf.all.proxy_arp = 0
  71. net.ipv4.tcp_dsack = 1
  72. net.ipv4.tcp_sack = 1
  73. net.ipv4.tcp_fack = 1
  74. net.ipv4.tcp_timestamps = 1
  75. net.ipv4.icmp_echo_ignore_all = 0
  76. net.ipv4.icmp_echo_ignore_broadcasts = 1
  77. net.ipv4.icmp_ignore_bogus_error_responses = 1
  78. net.ipv4.ip_local_port_range = 1024 65535
  79. net.ipv4.tcp_rfc1337 = 1
  80. net.ipv4.tcp_congestion_control = cubic
  81. net.ipv4.tcp_window_scaling = 1
  82. net.ipv4.tcp_mem = 65536 131072 262144
  83. net.ipv4.udp_mem = 65536 131072 262144
  84. net.ipv4.tcp_rmem = 8192 87380 16777216
  85. net.ipv4.udp_rmem_min = 16384
  86. net.core.rmem_default = 87380
  87. net.core.rmem_max = 16777216
  88. net.ipv4.tcp_wmem = 8192 65536 16777216
  89. net.ipv4.udp_wmem_min = 16384
  90. net.core.wmem_default = 65536
  91. net.core.wmem_max = 16777216
  92. net.core.somaxconn = 32768
  93. net.core.netdev_max_backlog = 4096
  94. net.core.dev_weight = 64
  95. net.core.optmem_max = 65536
  96. net.ipv4.tcp_max_tw_buckets = 1440000
  97. net.ipv4.tcp_tw_recycle = 1
  98. net.ipv4.tcp_tw_reuse = 1
  99. net.ipv4.tcp_max_orphans = 16384
  100. net.ipv4.tcp_orphan_retries = 0
  101. net.ipv4.ipfrag_high_thresh = 512000
  102. net.ipv4.ipfrag_low_thresh = 446464
  103. net.ipv4.tcp_no_metrics_save = 1
  104. net.ipv4.tcp_moderate_rcvbuf = 1
  105. net.unix.max_dgram_qlen = 50
  106. net.ipv4.neigh.default.gc_thresh3 = 2048
  107. net.ipv4.neigh.default.gc_thresh2 = 1024
  108. net.ipv4.neigh.default.gc_thresh1 = 32
  109. net.ipv4.neigh.default.gc_interval = 30
  110. net.ipv4.neigh.default.proxy_qlen = 96
  111. net.ipv4.neigh.default.unres_qlen = 6
  112. net.ipv4.tcp_ecn = 1
  113. net.ipv4.tcp_reordering = 3
  114. net.ipv4.tcp_retries2 = 15
  115. net.ipv4.tcp_retries1 = 3" >> /etc/sysctl.conf
  116.  
  117. echo 65536 > /proc/sys/fs/file-max
  118. echo "*         soft        nofile          65536" >> /etc/security/limits.conf
  119. echo "*         hard        nofile          65536" >> /etc/security/limits.conf
  120. echo "root      soft        nofile          65536" >> /etc/security/limits.conf
  121. echo "root      hard        nofile          65536" >> /etc/security/limits.conf
  122. echo "proxy     soft        nofile          65536" >> /etc/security/limits.conf
  123. echo "proxy     hard        nofile          65536" >> /etc/security/limits.conf
  124. echo "session required        pam_limits.so" >> /etc/pam.d/common-session
  125.  
  126. modprobe ip_tables
  127. modprobe ip_conntrack
  128. modprobe ip_conntrack_ftp
  129. modprobe ip_conntrack_irc
  130. modprobe iptable_nat
  131. modprobe ip_nat_ftp
  132.  
  133. echo "ip_tables
  134. ip_conntrack
  135. ip_conntrack_ftp
  136. ip_conntrack_irc
  137. iptable_nat
  138. ip_nat_ftp" >> /etc/modules
  139.  
  140. echo "ulimit -Hn 65536
  141. ulimit -Sn 65535" >> /etc/profile
  142.  
  143. save
  144.  
  145. # Installasi paket standart #
  146.  
  147. apt-get -y install gcc build-essential sharutils ccze libzip-dev automake1.9 make libfile-readbackwards-perl
  148.  
  149. # Installasi Squid untuk dependensi #
  150. apt-get -y install squid squidclient squid-cgi
  151.  
  152. # Installasi Lusca #
  153. /etc/init.d/squid stop
  154. wget http://lusca-cache.googlecode.com/files/LUSCA_HEAD-r14809.tar.gz && tar xzvf LUSCA_HEAD-r14809.tar.gz && chmod 777 /LUSCA_HEAD-r14809 && cd /LUSCA_HEAD-r14809 && make distclean && bash bootstrap.sh
  155. -------------------------------
  156.  
  157. wget  http://rixum.googlecode.com/files/LUSCA_HEAD-patch.tar.gz &&
  158. tar -xvzf LUSCA_HEAD-patch.tar.gz &&
  159. patch -p0 < 3xx-loop.diff &&
  160. patch -p0 < async-issue.diff &&
  161. patch -p0 < http-gzip.diff &&
  162. patch -p0 < ignore-must-revalidate.diff &&
  163. patch -p0 < improve-nn-parser.diff &&
  164. patch -p0 < lusca-vary.diff &&
  165. patch -p0 < segmentation-fault.diff
  166.  
  167. ./configure --build=x86_64-linux-gnu --prefix=/usr --exec_prefix=/usr --bindir=/usr/sbin  --sbindir=/usr/sbin --libexecdir=/usr/lib/squid --sysconfdir=/etc/squid  --localstatedir=/var/spool/squid  --datadir=/usr/share/squid --enable-async-io --enable-epoll --enable-removal-policies=lru,heap  --with-aio --with-dl --enable-snmp --enable-delay-pools  --enable-htcp  --enable-cache-digests  --disable-unlinkd --enable-large-cache-files  --with-large-files --with-pthreads  --enable-storeio=aufs --enable-linux-netfilter --enable-arp-acl --enable-referer-log --enable-stacktraces --enable-truncate  --enable-http-violations --enable-follow-x-forwarded-for --disable-linux-tproxy --disable-ssl --disable-select --disable-poll --disable-dependency-tracking  --disable-auth --disable-ident-lookups --disable-wccp --disable-wccpv2  --enable-err-languages=English --enable-default-err-language=English  --with-maxfd=65535
  168.  
  169. make &&
  170. make install
  171.  
  172. /etc/init.d/squid stop
  173.  
  174. cd /etc/squid
  175. wget http://tempat-sampah.googlecode.com/svn/storeurl.pl
  176. chmod +x /etc/squid/storeurl.pl
  177. chown proxy:proxy /etc/squid/storeurl.pl
  178.  
  179. edit squid.conf sesuai kondisi
  180. nano /etc/squid/squid.conf
  181.  
  182. hapus semua ganti pake yang simple dulu
  183.  
  184. # -----------------------------------------------------------------------------
  185. #  SQUID CONFIGURATION FOR LUSCA
  186. # -----------------------------------------------------------------------------
  187. # ACCESS CONTROLS
  188. # -----------------------------------------------------------------------------
  189. acl QUERY urlpath_regex -i cgi-bin \? localhost
  190. acl youtube_range url_regex -i .*youtube\.com\/videoplayback.*range\=.*$
  191. acl youtube_range url_regex -i .s.youtube\.com
  192. acl youtube_range url_regex -i .s2.youtube\.com
  193. http_access deny youtube_range
  194. acl all src all
  195. acl manager proto cache_object
  196. acl localhost src 127.0.0.1/32
  197. acl to_localhost dst 127.0.0.0/8
  198. acl localnet src 192.168.2.0/24
  199. #acl localnet src 192.168.3.0/24
  200. acl SSL_ports port 443 563 81 10000
  201. acl Safe_ports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 3228 1025-65535
  202. acl CONNECT method CONNECT
  203. acl purge method PURGE
  204. # acl block url_regex -i "/etc/squid/block.txt"
  205. # http_access deny block
  206. http_access allow manager localhost
  207. http_access deny manager
  208. http_access allow purge localhost
  209. http_access deny purge
  210. http_access deny !Safe_ports
  211. http_access deny CONNECT !SSL_ports
  212. http_access allow localnet
  213. http_access deny all
  214. http_reply_access allow all
  215. icp_access deny all
  216. htcp_access deny all
  217. htcp_clr_access deny all
  218. reply_body_max_size 0 allow all
  219.  
  220. # -----------------------------------------------------------------------------
  221. # NETWORK OPTIONS
  222. # -----------------------------------------------------------------------------
  223.  
  224. http_port 3229 transparent
  225. tcp_outgoing_tos 0x30 localnet
  226. zph_mode tos
  227. zph_local 0x30
  228. zph_parent 0
  229. zph_option 136
  230.  
  231. icp_port 0
  232. htcp_port 0
  233. snmp_port 0
  234. snmp_access deny all
  235.  
  236. # -----------------------------------------------------------------------------
  237. # PARENT/SIBLING CACHE OPTIONS
  238. # -----------------------------------------------------------------------------
  239. hierarchy_stoplist localhost cgi-bin \? localhost
  240.  
  241.  
  242. # -----------------------------------------------------------------------------
  243. # OPTIONS WHICH AFFECT THE CACHE SIZE
  244. # -----------------------------------------------------------------------------
  245. cache_mem 16 MB
  246. maximum_object_size_in_memory 32 KB
  247. memory_replacement_policy heap GDSF
  248. cache_replacement_policy heap LFUDA
  249. cache_dir aufs /cache-1 30000 30 256
  250. cache_dir aufs /cache-2 30000 30 256
  251. maximum_object_size 600 MB
  252. cache_swap_low 90
  253. cache_swap_high 95
  254. update_headers off
  255.  
  256. # -----------------------------------------------------------------------------
  257. # LOGFILE PATHNAMES AND CACHE DIRECTORIES
  258. # -----------------------------------------------------------------------------
  259. #access_log none
  260. access_log /var/log/squid/access.log
  261. cache_log /dev/null
  262. cache_store_log none
  263. logfile_rotate 5
  264. log_ip_on_direct off
  265. log_icp_queries off
  266. buffered_logs off
  267. netdb_filename none
  268. pid_filename /var/run/squid.pid
  269. storeurl_rewrite_program /etc/squid/storeurl.pl
  270. storeurl_rewrite_children 15
  271. storeurl_rewrite_concurrency 30
  272. dns_nameservers 203.130.208.18
  273. dns_nameservers 203.130.193.74
  274. dns_nameservers 208.67.222.222
  275. dns_nameservers 208.67.220.220
  276. dns_nameservers 180.131.144.144
  277. dns_nameservers 180.131.145.145
  278.  
  279. # -----------------------------------------------------------------------------
  280. # OPTIONS FOR TUNING THE CACHE
  281. # -----------------------------------------------------------------------------
  282. #REFRESH PATTERN TUNNING
  283. ##############################################################
  284. # pictures & images
  285. refresh_pattern -i \.(gif|png|jpeg|jpg|bmp|tif|tiff|ico)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private
  286. refresh_pattern -i \.(xml|html|htm|js|txt|css|php)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
  287.  
  288. #sound, video & multimedia
  289. refresh_pattern -i \.(flv|x-flv|mov|avi|qt|mpg|mpeg|swf)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache
  290. refresh_pattern -i \.(wav|mp3|mp4|au|mid)$ 10080 50% 43200 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth ignore-private
  291.  
  292. # files
  293. refresh_pattern -i \.(iso|deb|rpm|zip|tar|kom|tgz|ram|rar|bin|ppt|doc)$ 10080 90% 43200 ignore-no-cache ignore-auth
  294. refresh_pattern -i \.(zip|gz|arj|lha|lzh)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
  295. refresh_pattern -i \.(rar|tgz|tar|exe|bin)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
  296. refresh_pattern -i \.(hqx|pdf|rtf|doc|swf)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
  297. refresh_pattern -i \.(inc|cab|ad|txt|dll)$ 10080 100% 43200 override-expire ignore-no-cache ignore-auth
  298.  
  299. # dynamic content
  300. refresh_pattern ^http://(.*?)/get_video\? 10080 90% 999999 override-expire ignore-no-cache ignore-private
  301. refresh_pattern ^http://(.*?)/videoplayback\? 10080 90% 999999 override-expire ignore-no-cache ignore-private
  302. refresh_pattern -i (get_video\?|videoplayback\?id|videoplayback.*id) 161280 50000% 525948 override-expire ignore-reload
  303.  
  304. # -- refresh pattern for specific sites -- #
  305. refresh_pattern ^http://*.indowebster.com.*/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-reload ignore-no-cache ignore-auth
  306. refresh_pattern ^http://*.blogspot.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  307. refresh_pattern ^http://*.wordpress.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache
  308. refresh_pattern ^http://*.photobucket.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  309. refresh_pattern ^http://*.tinypic.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  310. refresh_pattern ^http://*.imageshack.us/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  311. refresh_pattern ^http://*.friendster.com/.* 720 100% 10080 override-expire override-lastmod ignore-no-cache ignore-auth
  312. refresh_pattern ^http://*.facebook.com/.* 720 100% 10080 ignore-reload override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  313. refresh_pattern ^http://*.apps.facebook.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  314. refresh_pattern ^http://*.fbcdn.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  315. refresh_pattern ^http://*.akamaihd.net/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  316. refresh_pattern ^http://*.zynga.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  317. refresh_pattern ^http://*.farmville.com/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  318. refresh_pattern ^http:\/\/\videoxl\.l[0-9]\.facebook.com\/.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  319. refresh_pattern ^http:\/\/\*.channel\.facebook\.com\/.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  320. refresh_pattern ^http:\/\/video\.ak\.facebook.com*\/.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  321. refresh_pattern ^http:\/\/photos-[a-z]\.ak\.fbcdn\.net\/.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  322. refresh_pattern ^http:\/\/profile\.ak\.fbcdn.net*\/.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  323. refresh_pattern ^http:\/\/static\.ak\.fbcdn.net*\/.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  324. refresh_pattern ^http:\/\/creative\.ak\.fbcdn.net*\/.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  325. refresh_pattern ^http:\/\/facebook\.poker\.zynga.com\.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  326. refresh_pattern ^http:\/\/\statics\.poker\.static\.zynga\.com\.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  327. refresh_pattern ^http:\/\/\*.crowdstar.com*\.* 720 90% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth ignore-must-revalidate store-stale
  328. refresh_pattern ^http://*.yahoo.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  329. refresh_pattern ^http://*.google.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  330. refresh_pattern ^http://*.forummikrotik.com/.* 720 80% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  331. refresh_pattern ^http://*.linux.or.id/.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  332. refresh_pattern ^http://*.l.yimg\.com.*\.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  333. refresh_pattern ^http://*.yahoofs.com\.* 720 100% 10080 override-expire override-lastmod reload-into-ims ignore-no-cache ignore-auth
  334. refresh_pattern ^http://v\.okezone\.com/get_video\/([a-zA-Z0-9]) 129600 100% 129600 ignore-no-cache ignore-no-store reload-into-ims override-expire ignore-must-revalidate store-stale
  335. refresh_pattern \.(ico|video-stats) 129600 100% 129600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod ignore-must-revalidate negative-ttl=10080 store-stale
  336. refresh_pattern \.etology\? 129600 100% 129600 override-expire ignore-reload ignore-no-cache store-stale
  337. refresh_pattern galleries\.video(\?|sz) 129600 100% 129600 override-expire ignore-reload ignore-no-cache store-stale
  338. refresh_pattern \.adtology\? 129600 100% 129600 override-expire ignore-reload ignore-no-cache store-stale
  339. refresh_pattern ^.*safebrowsing.*google 43200 50% 129600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth ignore-must-revalidate negative-ttl=10080 store-stale
  340. refresh_pattern ^http://((cbk|mt|khm|mlt)[0-9]?)\.google\.co(m|\.id) 43200 50% 129600 override-expire ignore-reload store-stale ignore-private negative-ttl=10080
  341. refresh_pattern ^http://*.ytimg\.com.*\.* 43200 50% 129600 override-expire ignore-reload store-stale
  342. refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\? 129600 100% 129600 ignore-no-cache override-expire override-lastmod store-stale
  343. refresh_pattern ^http:\/\/images|pics|thumbs[0-9]\. 129600 100% 129600 ignore-no-cache ignore-no-store ignore-reload override-expire store-stale
  344. refresh_pattern -i \*.speedtest.*com\.* 0 50% 180 override-expire store-stale negative-ttl=0
  345. refresh_pattern -i (cgi-bin|hackshield|xtrap|Loader|login) 0 0% 0
  346. refresh_pattern \.(php|jsp|cgi|asx|js|jsp)\? 0 0% 0
  347. refresh_pattern . 0 50% 2629742 store-stale
  348. # -----------------------------------------------------------------------------
  349. # HTTP OPTIONS
  350. # -----------------------------------------------------------------------------
  351. server_http11 on
  352. collapsed_forwarding on
  353. vary_ignore_expire on
  354. header_access From deny all
  355. header_access Server deny all
  356. header_access Link deny all
  357. header_access Via deny all
  358. header_access X-Forwarded-For deny all
  359.  
  360. # -----------------------------------------------------------------------------
  361. # TIMEOUTS
  362. # -----------------------------------------------------------------------------
  363. forward_timeout 240 seconds
  364. connect_timeout 30 second
  365. peer_connect_timeout 5 seconds
  366. read_timeout 600 second
  367. request_timeout 60 second
  368. persistent_request_timeout 60 seconds
  369. client_lifetime 86400 second
  370. half_closed_clients off
  371. pconn_timeout 60 second
  372. shutdown_lifetime 10 second
  373. # -----------------------------------------------------------------------------
  374. # ADMINISTRATIVE PARAMETERS
  375. # -----------------------------------------------------------------------------
  376.  
  377. cache_mgr admin@hade.war.net
  378. cache_effective_user proxy
  379. cache_effective_group proxy
  380. httpd_suppress_version_string on
  381. visible_hostname proxy.hade.war.net
  382.  
  383. # -----------------------------------------------------------------------------
  384. # ADVANCED NETWORKING OPTIONS
  385. #---------------------------
  386. max_filedescriptors 65536
  387.  
  388. # -----------------------------------------------------------------------------
  389. # DNS OPTIONS
  390. # -----------------------------------------------------------------------------
  391.  
  392. check_hostnames off
  393. dns_timeout 30 seconds
  394. hosts_file /etc/hosts
  395. ipcache_size 8192
  396. ipcache_low 90
  397. ipcache_high 95
  398. fqdncache_size 4096
  399.  
  400. # -----------------------------------------------------------------------------
  401. # MISCELLANEOUS
  402. # -----------------------------------------------------------------------------
  403. memory_pools off
  404. forwarded_for off
  405. reload_into_ims on
  406. coredump_dir /cache
  407. pipeline_prefetch on
  408. offline_mode off
  409. # -=EoF=-
  410.  
  411. chown proxy:proxy /cache-1; chmod 777 /cache-1; squid -z; /etc/init.d/squid start
  412.  
  413. iptables -F
  414. iptables -X
  415. iptables -t nat -F
  416. iptables -t nat -X
  417. iptables -t mangle -F
  418. iptables -t mangle -X
  419. iptables -P INPUT ACCEPT
  420. iptables -P OUTPUT ACCEPT
  421. iptables -A INPUT -s 192.168.2.0/24 -m state --state NEW -p tcp --dport 53 -j ACCEPT
  422. iptables -A INPUT -s 192.168.2.0/24 -m state --state NEW -p udp --dport 53 -j ACCEPT
  423. iptables -A INPUT -p tcp -s 192.168.2.0/24 --dport 80 -j ACCEPT
  424. iptables-save -c > /etc/iptables.up.rules
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!