Difference between revisions of "SquidGuard: Instalasi di Ubuntu 16.04"

From OnnoWiki
Jump to navigation Jump to search
Line 75: Line 75:
 
  # CONFIG FILE FOR SQUIDGUARD
 
  # CONFIG FILE FOR SQUIDGUARD
 
  #
 
  #
  dbhome /usr/local/squidGuard/db
+
  dbhome /var/lib/squidguard/db
  logdir /usr/local/squidGuard/logs
+
  logdir /var/log/squidguard
 +
 +
src bar-clients {
 +
        ip              192.168.0.0/16
 +
}
 +
 
  dest porn {
 
  dest porn {
  domainlist porn/domains
+
        domainlist     porn/domains
  urllist porn/urls
+
        urllist         porn/urls
  }
+
  #      expressionlist porn/expressions
  dest adv {
 
  domainlist adv/domains
 
  urllist adv/urls
 
}
 
dest spyware {
 
  domainlist spyware/domains
 
  urllist spyware/urls
 
 
  }
 
  }
 +
 
  acl {
 
  acl {
  default {
+
        default {
    pass !porn !adv !spyware all
+
                pass     local none !porn
    redirect http://localhost/block.html
+
                redirect http://admin.foo.bar.de/cgi-bin/blocked.cgi?clientaddr=%a&clientname=%n&clientuser=%i&clientgroup=%s&targetgroup=%t&url=%u
  }
+
        }
 
  }
 
  }
  

Revision as of 10:29, 23 June 2017

Squid

sudo su
locale-gen id_ID.UTF-8
apt update
apt install squid3

Konfigurasi squid

Edit

vi /etc/squid/squid.conf

Tuning konfigurasi

# visible_hostname your-machines-hostname
# http_port 3128
# cache_dir ufs /var/spool/squid 1000 16 256
# cache_access_log /var/log/squid/access.log
# ijinkan localnet
acl localnet 192.168.0.0/16
http_access allow localnet
sudo service squid restart
/etc/init.d/squid restart

Squid bisa digunakan pada port 3128

Instalasi SquidGuard

sudo su
apt install squidguard

Sumber blacklist

http://urlblacklist.com/ RECOMMENDED, tapi bayar:)'
http://www.shallalist.de

Download

sudo su
cd /usr/local/src
wget http://www.shallalist.de/Downloads/shallalist.tar.gz
tar zxvf shallalist.tar.gz
cp -a BL/porn /var/lib/squidguard/db
cp -a BL/adv /var/lib/squidguard/db
cp -a BL/spyware /var/lib/squidguard/db

Edit squid.conf

vi /etc/squid/squid.conf

Tambahkan

url_rewrite_program /usr/bin/squidGuard

Cek

sudo squidGuard -C all
chown -R proxy:proxy /var/lib/squidguard/db
sudo ls -l /var/lib/squidguard/db*

Konfigurasi

Edit squidguard.conf

sudo su
cp /etc/squidguard/squidGuard.conf /etc/squidguard/squidGuard.conf.asli
vi /etc/squidguard/squidGuard.conf

Copy and paste this,

#
# CONFIG FILE FOR SQUIDGUARD
#
dbhome /var/lib/squidguard/db
logdir /var/log/squidguard

src bar-clients {
        ip              192.168.0.0/16
}

dest porn {
        domainlist      porn/domains
        urllist         porn/urls
#       expressionlist  porn/expressions
}

acl {
        default {
                pass     local none !porn
                redirect http://admin.foo.bar.de/cgi-bin/blocked.cgi?clientaddr=%a&clientname=%n&clientuser=%i&clientgroup=%s&targetgroup=%t&url=%u
        }
}

Restart

/etc/init.d/squid restart

Test

Test squidguard, jalankan

sudo echo "http://www.pornhub.com 10.50.55.10/- - GET" | squidGuard -c /etc/squidguard/squidGuard.conf –d

Akan terlihat,

squidGuard ready for requests 
squidGuard stopped

Referensi