Difference between revisions of "Instalasi DansGuardian"

From OnnoWiki
Jump to navigation Jump to search
 
(11 intermediate revisions by the same user not shown)
Line 1: Line 1:
Install SSH, Squid cache & DansGuardian
+
==Install==
  
  # apt-get install openssh-server squid dansguardian
+
  sudo su
   
+
locale-gen id_ID.UTF-8
 +
apt update
 +
apt install squid dansguardian
 +
  freshclam &
  
Konfigurasi DansGuardian
+
==Konfigurasi==
  
# vi /etc/dansguardian/dansguardian.conf
+
Edit
  
Lakukan
+
vi /etc/dansguardian/dansguardian.conf
  
* Buang / comment kalimat UNCONFIGURED
+
Ubah,
* Ubah variabel 'virusscan' menjadi off, jika anda belum menyiapkan clamav untuk DansGuardian
 
  
Siapkan port ke Firewall. Bagian ini memang sifatnya optional, tapi sangat di sarankan. Copy perintah berikut ke file /etc/network/if-up.d/iptables-config
+
accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'
  
#!/bin/bash
+
Misalnya (IP server 192.168.0.100)
iptables -F
 
# set the default policy for each of the pre-defined chains
 
iptables -P INPUT ACCEPT
 
iptables -P OUTPUT ACCEPT
 
iptables -P FORWARD DROP
 
iptables -A INPUT -i lo -j ACCEPT
 
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 
# to allow incoming SSH and Proxy
 
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
 
iptables -A INPUT -m state --state NEW -p tcp -m tcp -s 127.0.0.1 --dport 3128 -j ACCEPT
 
iptables -A INPUT -m state --state NEW -p tcp -m tcp --dport 8080 -j ACCEPT
 
# drop everything else
 
iptables -A INPUT -i eth+ -p udp -j DROP
 
iptables -A INPUT -i eth+ -p tcp -m tcp --syn -j DROP
 
  
Pastikan iptables-config dapat di execute / jalankan
+
accessdeniedaddress = 'http://192.168.0.100/cgi-bin/dansguardian.pl'
  
# chmod +x /etc/network/if-up.d/iptables-config
 
  
Aktifkan SSH, DansGuardian, & Squid cache saat startup
+
Ubah,
 +
 
 +
UNCONFIGURED - Please remove this line after configuration
 +
 
 +
Jadi
 +
 
 +
# UNCONFIGURED - Please remove this line after configuration
 +
 
 +
 
 +
==Start Service==
  
# update-rc.d ssh defaults
 
# update-rc.d squid defaults
 
# update-rc.d dansguardian defaults
 
  
 
Restart
 
Restart
  
  # /etc/init.d/networking restart
+
  /etc/init.d/squid restart
# /etc/init.d/squid restart
+
  /etc/init.d/dansguardian restart
  # /etc/init.d/dansguardian restart
 
  
 
selesai
 
selesai
 +
 +
==Setup di Sisi Client==
 +
 +
Pastikan proxy server di arahkan ke
 +
 +
IP address Server DansGuardian
 +
Port      8080
 +
 +
DansGuardian akan membaca text Web yang di akses. Jika ada kata-kata yang tidak pantas, akan terblokir seperti tampak pada gambar.
 +
 +
[[Image:Google-dansguardian-block.jpg|center|200px|thumb]]
  
  
Line 55: Line 58:
 
==Pranala Menarik==
 
==Pranala Menarik==
  
 +
* [[Firewall Untuk Proxy DansGuardian]]
 +
* [[Edit Konfigurasi Pemblokiran Dansguardian]]
 +
* [[Teknik Memblok Situs Tidak Baik]]
 +
* [[Instalasi antivirus clamav]]
 
* [[Linux Howto]]
 
* [[Linux Howto]]

Latest revision as of 07:52, 23 June 2017

Install

sudo su
locale-gen id_ID.UTF-8
apt update
apt install squid dansguardian
freshclam &

Konfigurasi

Edit

vi /etc/dansguardian/dansguardian.conf 

Ubah,

accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'

Misalnya (IP server 192.168.0.100)

accessdeniedaddress = 'http://192.168.0.100/cgi-bin/dansguardian.pl'


Ubah,

UNCONFIGURED - Please remove this line after configuration

Jadi

# UNCONFIGURED - Please remove this line after configuration


Start Service

Restart

/etc/init.d/squid restart
/etc/init.d/dansguardian restart

selesai

Setup di Sisi Client

Pastikan proxy server di arahkan ke

IP address Server DansGuardian
Port       8080

DansGuardian akan membaca text Web yang di akses. Jika ada kata-kata yang tidak pantas, akan terblokir seperti tampak pada gambar.

Google-dansguardian-block.jpg



Pranala Menarik