Difference between revisions of "Instalasi DansGuardian"

From OnnoWiki
Jump to navigation Jump to search
 
(8 intermediate revisions by the same user not shown)
Line 1: Line 1:
Install SSH, Squid cache & DansGuardian
+
==Install==
  
  # apt-get install openssh-server squid dansguardian
+
  sudo su
   
+
locale-gen id_ID.UTF-8
 +
apt update
 +
apt install squid dansguardian
 +
  freshclam &
  
Konfigurasi DansGuardian
+
==Konfigurasi==
  
# vi /etc/dansguardian/dansguardian.conf
+
Edit
  
Lakukan
+
vi /etc/dansguardian/dansguardian.conf
 +
 
 +
Ubah,
  
* Jika IP address Server adalah, 192.168.0.1. Ubah
 
 
  accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'
 
  accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'
menjadi
 
accessdeniedaddress = 'http://192.168.0.1/cgi-bin/dansguardian.pl'
 
  
* Buang / comment kalimat "UNCONFIGURED - Please remove this line after configuration" setelah semua proses konfigurasi selesai.
+
Misalnya (IP server 192.168.0.100)
* Ubah variabel 'virusscan' menjadi off, jika anda belum menyiapkan clamav untuk DansGuardian. Biasanya di Ubuntu clamav akan terinstall bersama DansGuardian.
 
  
Siapkan port ke Firewall. Bagian ini memang sifatnya optional, tapi sangat di sarankan. Copy perintah berikut ke file /etc/network/if-up.d/iptables-config
+
accessdeniedaddress = 'http://192.168.0.100/cgi-bin/dansguardian.pl'
  
#!/bin/bash
 
iptables -F
 
# set the default policy for each of the pre-defined chains
 
iptables -P INPUT ACCEPT
 
iptables -P OUTPUT ACCEPT
 
iptables -P FORWARD DROP
 
iptables -A INPUT -i lo -j ACCEPT
 
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
 
# to allow incoming SSH and Proxy
 
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
 
iptables -A INPUT -m state --state NEW -p tcp -m tcp -s 127.0.0.1 --dport 3128 -j ACCEPT
 
iptables -A INPUT -m state --state NEW -p tcp -m tcp --dport 8080 -j ACCEPT
 
# drop everything else
 
iptables -A INPUT -i eth+ -p udp -j DROP
 
iptables -A INPUT -i eth+ -p tcp -m tcp --syn -j DROP
 
  
Pastikan iptables-config dapat di execute / jalankan
+
Ubah,
  
  # chmod +x /etc/network/if-up.d/iptables-config
+
  UNCONFIGURED - Please remove this line after configuration
  
Aktifkan SSH, DansGuardian, & Squid cache saat startup
+
Jadi
 +
 
 +
# UNCONFIGURED - Please remove this line after configuration
 +
 
 +
 
 +
==Start Service==
  
# update-rc.d ssh defaults
 
# update-rc.d squid defaults
 
# update-rc.d dansguardian defaults
 
  
 
Restart
 
Restart
  
  # /etc/init.d/networking restart
+
  /etc/init.d/squid restart
# /etc/init.d/squid restart
+
  /etc/init.d/dansguardian restart
  # /etc/init.d/dansguardian restart
 
  
 
selesai
 
selesai
 
  
 
==Setup di Sisi Client==
 
==Setup di Sisi Client==
Line 62: Line 48:
 
  Port      8080
 
  Port      8080
  
 +
DansGuardian akan membaca text Web yang di akses. Jika ada kata-kata yang tidak pantas, akan terblokir seperti tampak pada gambar.
  
 +
[[Image:Google-dansguardian-block.jpg|center|200px|thumb]]
  
  
Line 71: Line 59:
  
 
* [[Firewall Untuk Proxy DansGuardian]]
 
* [[Firewall Untuk Proxy DansGuardian]]
 +
* [[Edit Konfigurasi Pemblokiran Dansguardian]]
 
* [[Teknik Memblok Situs Tidak Baik]]
 
* [[Teknik Memblok Situs Tidak Baik]]
 +
* [[Instalasi antivirus clamav]]
 
* [[Linux Howto]]
 
* [[Linux Howto]]

Latest revision as of 07:52, 23 June 2017

Install

sudo su
locale-gen id_ID.UTF-8
apt update
apt install squid dansguardian
freshclam &

Konfigurasi

Edit

vi /etc/dansguardian/dansguardian.conf 

Ubah,

accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'

Misalnya (IP server 192.168.0.100)

accessdeniedaddress = 'http://192.168.0.100/cgi-bin/dansguardian.pl'


Ubah,

UNCONFIGURED - Please remove this line after configuration

Jadi

# UNCONFIGURED - Please remove this line after configuration


Start Service

Restart

/etc/init.d/squid restart
/etc/init.d/dansguardian restart

selesai

Setup di Sisi Client

Pastikan proxy server di arahkan ke

IP address Server DansGuardian
Port       8080

DansGuardian akan membaca text Web yang di akses. Jika ada kata-kata yang tidak pantas, akan terblokir seperti tampak pada gambar.

Google-dansguardian-block.jpg



Pranala Menarik