2012/4/13 Lynn Nooks <[email protected]>:
> 2012/4/13 Mahyuddin Susanto <[email protected]>:
>
>> Route itu kan memilih jalan mas, jadi seumpama anda di Surabaya, ada
>> beberapa cara untuk ke jakarta, bisa lewat:
>>  - Jalur darat menggunakan bus dan kereta
>>  - Jalur laut menggunakan kapal
>>  - dan jalur udara
>>
>> Tapi jika anda mau pergi ya harus lewat beberapa jalan diatas, tapi
>> kalau cuman muter-muter ke surabaya saja tidak perlu memanfaatkan 3
>> jalan tersebut.
>>
>> Point nya,
>>  - Surabaya = Anda
>>  - Jakarta = Google
>>
>> Jalur-jalur tersebut adalah router-router yang akan membawa paket dari
>> system anda ke Google
>>

 Dear...
 Di saya DHCP sudah jalan.
 Client sudah menerima IP dengan selamat dan sukses
 Tapi, transparent proxynya ngga jalan
 Rule IPTABLES ada dibawah ini (generate oleh webmin)
 Apa yang salah ya?
 Kenapa tidak bisa transparent proxy?
 (Kalau client proxy d set, internet jalan. kalau tidak di set, belum
 bisa jalan). Maunya browser di client ngga di set.

 Tolong dong bantuin saya menemukan dimana salahnya. Sebelumnya terima kasih.


IPTABLES RULES
_______________




# Generated by iptables-save v1.4.10 on Mon Oct 24 12:31:23 2011
*filter
:INPUT ACCEPT [489:105026]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [489:105722]
COMMIT
# Completed on Mon Oct 24 12:31:23 2011
# Generated by iptables-save v1.4.10 on Mon Oct 24 12:31:23 2011
*mangle
:PREROUTING ACCEPT [18741:6861302]
:INPUT ACCEPT [17245:6755530]
:FORWARD ACCEPT [1494:105090]
:OUTPUT ACCEPT [16730:4031262]
:POSTROUTING ACCEPT [18274:4145603]
COMMIT
# Completed on Mon Oct 24 12:31:23 2011
# Generated by iptables-save v1.4.10 on Mon Oct 24 12:31:23 2011
*nat
:INPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -p tcp -m tcp -i eth1 --dport 80 -j DNAT
--to-destination 192.168.2.1:3128
-A PREROUTING -p tcp -m tcp -s 192.168.2.0/24 --dport 80 -j REDIRECT
--to-ports 3128
-A POSTROUTING -o eth0 -j MASQUERADE
COMMIT
# Completed on Mon Oct 24 12:31:23 2011



SQUID.CONF
_______________




acl all src 192.168.2.1-192.168.2.254

acl manager proto cache_object
acl localhost src 127.0.0.1/32
acl to_localhost dst 127.0.0.0/8 0.0.0.0/32
acl SSL_ports port 443 # RFC1918 possible internal network
acl SSL_ports port 563 # RFC1918 possible internal network
acl SSL_ports port 873 # RFC1918 possible internal network
acl Safe_ports port 80 # https
acl Safe_ports port 21 # snews
acl Safe_ports port 443 # rsync
acl Safe_ports port 70 # http
acl Safe_ports port 210 # ftp
acl Safe_ports port 1025-65535 # https
acl Safe_ports port 280 # gopher
acl Safe_ports port 488 # wais
acl Safe_ports port 591 # unregistered ports
acl Safe_ports port 777 # http-mgmt
acl Safe_ports port 631 # gss-http
acl Safe_ports port 873 # filemaker
acl Safe_ports port 901 # multiling http
acl purge method PURGE # cups
acl CONNECT method CONNECT # rsync
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9] # SWAT
acl apache rep_header Server ^Apache

http_port 3128 transparent
hierarchy_stoplist cgi-bin ?
access_log /var/log/squid/access.log squid
refresh_pattern ^ftp:           1440    20%     10080
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (/cgi-bin/|\?) 0     0%      0
refresh_pattern (Release|Packages(.gz)*)$       0       20%     2880
refresh_pattern .               0       20%     4320
upgrade_http0.9 deny shoutcast


http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access allow localhost

http_access allow all

broken_vary_encoding allow apache
extension_methods REPORT MERGE MKACTIVITY CHECKOUT
hosts_file /etc/hosts
coredump_dir /var/spool/squid

--
FAQ milis di http://wiki.linux.or.id/FAQ_milis_tanya-jawab
Unsubscribe: kirim email ke [email protected]
Arsip dan info milis selengkapnya di http://linux.or.id/milis

Kirim email ke