Instalasi Squid3 Debian Wheezy

Install Program 
Langsung copas aja...

apt-get -y install php5-cli php5-common php5-curl php5-intl nginx-extras php-apc php5-fpm apache2-utils \ openvpn htop telnet dnsutils chkconfig p7zip-full zip unzip ntp bzip2 libltdl7 ssh sudo libcap-dev \ libnetfilter-conntrack-dev lm-sensors libgif4 libjasper1 libgomp1 saidar ethtool snmpd snmp siege stress sysstat snmp-mibs-downloader wget http://www.squid-cache.org/Versions/v3/3.5/squid-3.5.15.tar.gz tar xzvf squid-3.5.15.tar.gz cd squid-3.5.15 ./configure --build=x86_64-linux-gnu --prefix=/usr/local/squid3 --includedir=/usr/local/squid3/include --libexecdir=/usr/local/squid3/lib --sysconfdir=/etc/squid3 --with-logdir=/var/log/squid3 --mandir=/usr/local/squid3/share/man --infodir=/usr/local/squid3/share/info --localstatedir=/var --with-default-user=proxy --with-large-files --enable-removal-policies --with-pidfile=/var/run/squid3.pid --enable-storeio=ufs,aufs,diskd,rock --disable-arch-native --enable-icap-client --enable-underscores --enable-inline --enable-esi --enable-zph-qos --enable-async-io --enable-ssl-crtd --with-openssl --enable-follow-x-forwarded-for --enable-htcp --enable-arp-acl --enable-wccpv2 --enable-linux-netfilter --enable-delay-pools --enable-cache-digests --with-maxfd=131072 --with-netfilter-conntrack --enable-snmp make && make install

squid.conf nya Disini

### Edit file di /etc/profiles

# /etc/profile: system-wide .profile file for the Bourne shell (sh(1)) # and Bourne compatible shells (bash(1), ksh(1), ash(1), ...). if [ "`id -u`" -eq 0 ]; then PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/squid3/sbin" else PATH="/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games" fi export PATH if [ "$PS1" ]; then if [ "$BASH" ] && [ "$BASH" != "/bin/sh" ]; then # The file bash.bashrc already sets the default PS1. # PS1='\h:\w\$ ' if [ -f /etc/bash.bashrc ]; then . /etc/bash.bashrc fi else if [ "`id -u`" -eq 0 ]; then PS1='# ' else PS1='$ ' fi fi fi # The default umask is now handled by pam_umask. # See pam_umask(8) and /etc/login.defs. if [ -d /etc/profile.d ]; then for i in /etc/profile.d/*.sh; do if [ -r $i ]; then . $i fi done unset i fi

#### reboot pc

##Membuat ssl Database dan Edit Permission Folder

/usr/local/squid3/lib/ssl_crtd -c -s /etc/squid3/ssl_db mkdir -p /var/spool/squid3/1 mkdir -p /var/spool/squid3/2 mkdir -p /var/spool/squid3/3 mkdir -p /var/log/squid3 chown -R proxy:proxy /etc/squid3 chown -R proxy:proxy /var/spool/squid3/1 chown -R proxy:proxy /var/spool/squid3/2 chown -R proxy:proxy /var/spool/squid3/3 chown -R proxy:proxy /var/log/squid3 chmod -R 777 /etc/squid3 chmod -R 777 /var/spool/squid3/1 chmod -R 777 /var/spool/squid3/2 chmod -R 777 /var/spool/squid3/3 chmod -R 777 /var/log/squid3 chmod -R 777 /var/log/squid3 chown -R proxy:proxy /var/log/squid3 mkdir /var/run/squid chmod -R 777 /var/run/squid chown -R proxy:proxy /var/run/squid squid -z

## /etc/sysctl.conf

#kernel.domainname = example.com #kernel.printk = 3 4 1 3 net.ipv4.tcp_syncookies=1 net.ipv4.tcp_timestamps=1 net.ipv4.tcp_window_scaling=1 net.ipv4.ip_forward=1 net.ipv6.conf.all.forwarding=1 net.netfilter.nf_conntrack_max=131072 #net.ipv4.conf.all.accept_redirects = 0 #net.ipv6.conf.all.accept_redirects = 0 #net.ipv4.conf.all.secure_redirects = 1 net.ipv4.conf.all.send_redirects=1 net.ipv6.conf.all.accept_source_route=1 #net.ipv4.conf.all.log_martians = 1 # Squid non Tproxy #net.ipv4.conf.default.rp_filter=1 #net.ipv4.conf.all.rp_filter=1 # Squid Tproxy net.ipv4.conf.default.rp_filter=0 net.ipv4.conf.all.rp_filter=0 net.ipv4.conf.eth0.rp_filter=0 net.ipv4.conf.lo.rp_filter=0 net.ipv4.conf.gre0.rp_filter=0

## rc.local<br /> # Activate Module modprobe xt_TPROXY modprobe xt_socket modprobe nf_tproxy_core modprobe xt_mark modprobe nf_nat modprobe nf_conntrack_ipv4 modprobe nf_conntrack modprobe nf_defrag_ipv4 modprobe ipt_REDIRECT modprobe iptable_nat #Make Bridge interface brctl addbr br0 #Set eth0 and eth1 to promiscuous mode to listen and receive all frame ifconfig eth0 0.0.0.0 promisc up ifconfig eth1 0.0.0.0 promisc up #Add eth0 and eth1 in br0 brctl addif br0 eth0 brctl addif br0 eth1 #Bring interface br0 up ip link set br0 up cd /proc/sys/net/bridge/ ; { for i in *; do echo 0 > $i; done; unset i; } cd /root # Assign IP to br0 to easy remote to server ip addr add 192.168.1.100/24 brd + dev br0 # Add route to br0 route add default gw 192.168.1.50 dev br0 #Flush all rule from mangle iptables and broute ebtables iptables -t mangle -F ebtables -t broute -F #Add iptables iptables -t mangle -N DIVERT iptables -t mangle -A DIVERT -j MARK --set-mark 1 iptables -t mangle -A DIVERT -j ACCEPT iptables -t mangle -A INPUT -j ACCEPT iptables -t mangle -A PREROUTING -p tcp -m socket -j DIVERT #Change ip as your proxy ip and your client segment iptables -t mangle -A PREROUTING -d 192.168.1.100/24 -p tcp --dport 80 -j ACCEPT iptables -t mangle -A PREROUTING -d 192.168.1.100/24 -p tcp --dport 3128 -j ACCEPT # Redirec All traffic http to 3129 iptables -t mangle -A PREROUTING -p tcp --dport 80 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3129 # Redirec Warnet traffic https to 3127 iptables -t mangle -A PREROUTING -s 192.168.1.0/24 -p tcp --dport 443 -j TPROXY --tproxy-mark 0x1/0x1 --on-port 3127 #Add ebtables, Becareful about INTERFACE #Interface to Internet ebtables -t broute -A BROUTING -i eth0 -p ipv4 --ip-proto tcp --ip-sport 80 -j redirect --redirect-target ACCEPT ebtables -t broute -A BROUTING -i eth0 -p ipv4 --ip-proto tcp --ip-sport 443 -j redirect --redirect-target ACCEPT #Interface to Local Area Network ebtables -t broute -A BROUTING -i eth1 -p ipv4 --ip-proto tcp --ip-dport 80 -j redirect --redirect-target ACCEPT ebtables -t broute -A BROUTING -i eth1 -p ipv4 --ip-proto tcp --ip-dport 443 -j redirect --redirect-target ACCEPT /sbin/ip rule add fwmark 1 lookup 100 /sbin/ip route add local 0.0.0.0/0 dev lo table 100 echo 1 > /proc/sys/net/ipv4/ip_forward echo 0 > /proc/sys/net/ipv4/conf/default/rp_filter echo 0 > /proc/sys/net/ipv4/conf/all/rp_filter echo 0 > /proc/sys/net/ipv4/conf/lo/rp_filter echo 0 > /proc/sys/net/ipv4/conf/eth0/rp_filter /etc/rc.local exit 0

## /etc/network/interfaces

# The loopback network interface auto lo iface lo inet loopback