Wednesday, November 27, 2013

Konfigurasi Internet Gateway Fedora

-SETTING eth0 # vi /etc/sysconfig/network-scripts/­ ifcfg-eth0 # Networking Interface DEVICE=eth0 HWADDR=00:1A:92:74:26:20 ONBOOT=no BOOTPROTO=dhcp TYPE=Ethernet IPV6INIT=no USERCTL=no NAME="System eth0" -SETTING eth1 # vi /etc/sysconfig/network-scripts/­ ifcfg-eth1 DEVICE=eth1 ONBOOT=yes IPADDR=192.168.50.1 BOOTPROTO=static NETMASK=255.255.255.0 IPV6INIT=no USERCTL=no TYPE=Ethernet NAME="System eth1" -GATEWAY # vi /etc/sysconfig/network NETWORKING=yes HOSTNAME=mitnickserver.net GATEWAY=192.168.2.1 -IP_FORWARD # vi /etc/sysctl.conf net.ipv4.ip_forward = 0 [ganti jadi 1] >> net.ipv4.ip_forward = 1 -RESTART NETWORK # service network restart -SUPAYA CLIENT BISA INTERNET # service iptables stop # echo 1 > /proc/sys/net/ipv4/­ ip_forward # iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE # iptables -t nat -I PREROUTING -s 192.168.50.0/24 -d ! 192.168.50.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128 # service iptables save # service iptables restart -RESTART NETWORK # service network restart -SQUID # rm /etc/squid/squid.conf # y # nano /etc/squid/squid.conf http_port 3128 transparent cache_mgr admin@fraternity-tkj.org visible_hostname mitnickserver.net acl terlarang url_regex -i "/etc/squid/­ situsterlarang.txt" http_access deny terlarang acl jaringan src 192.168.50.0/24 http_access allow jaringan http_access deny all -SITUS TERLARANG # vi /etc/squid/situsterlarang.txt www.facebook.com [1] www.detikcom [2] www.twitter.com [3] # service squid start -WEB SERVER # /etc/init.d/httpd start # /etc/init.d/mysqld start # /var/www/html/index.php BUAT NGETES WEB SERVER = ketik IP eth1 server di mozilla client

No comments:

Post a Comment