Panduan Installasi TPROXY

22 February 2008

network diagram percobaan cttproxy

tanpa NAT dan Bridge

Persiapan Peralatan Perang... :

-----------------------------------------------------------------------------------
- CD Mikrotik 2.9.27 (cracked)
- CD Debian 4.0 R2 x86
- linux-2.6.18.5.tar.gz
- cttproxy-2.6.18-2.0.6.tar.gz
- iptables-1.3.6.tar.bz2
- squid-2.6.STABLE18.tar.gz
- Kopi hitam + cemilan …..
-----------------------------------------------------------------------------------
Tanyakan sama paman google untuk medapatkan peralatan perang….

Copyleft (c) 2008. Aditya Maulana | adit@comnet.net.id |

HP : 085220082685
085220082685
 Panduan Installasi TPROXY
22 February 2008
MIKROTIK
Install Mikrotik dan pilih semua paket yang ada
Setelah selesai installasi maka lakukan konfigurasi seperti dibawah :

Masukkan IP Address :

/ ip address
add address=202.bbb.bbb.bb/27 network=202.bbb.bbb.bb
broadcast=202.bbb.bbb.bb \
interface=Publik comment="" disabled=no
add address=202.ccc.ccc.c/30 network=202.ccc.ccc.0
broadcast=202.ccc.ccc.c \
interface=Lokal comment="" disabled=no

Buat Static Routing :

/ ip route
add dst-address=202.ddd.ddd.d/29 gateway=202.ddd.ddd.d scope=255 \
target-scope=10 comment="" disabled=no
add dst-address=0.0.0.0/0 gateway=202.aaa.aaa.aa scope=255 target-
scope=10 \
comment="" disabled=no

Masukkan IP DNS :

/ ip dns
set primary-dns=202.xxx.xxx.xx secondary-dns=202.yyy.yyy.yy \
allow-remote-requests=no cache-size=2048KiB cache-max-ttl=1w
/ ip dns static
add name="DNS1" address=202.xxx.xxx.xx ttl=1d

Untuk mempermudah setting di Mikrotik sebaiknya menggunakan winbox.exe

Copyleft (c) 2008. Aditya Maulana | adit@comnet.net.id |

HP : 085220082685
085220082685
 Panduan Installasi TPROXY
22 February 2008
Linux - DEBIAN
1. Installasi standar Linux OS (Debian – kernel 2.6.18-5)
Lakukan installasi seperti biasa (standar base)
tproxy:/# df -h
Filesystem Size Used Avail Use% Mounted on
/dev/sda3 14G 95M 14G 1% /
tmpfs 506M 0 506M 0% /lib/init/rw
udev 10M 88K 10M 1% /dev
tmpfs 506M 0 506M 0% /dev/shm
/dev/sda1 942M 24M 871M 3% /boot
/dev/sda7 4.7G 33M 4.7G 1% /cache1
/dev/sda8 4.7G 33M 4.7G 1% /cache2
/dev/sda9 4.7G 33M 4.7G 1% /cache3
/dev/sda10 4.7G 33M 4.7G 1% /cache4
/dev/sda11 4.7G 33M 4.7G 1% /cache5
/dev/sda12 1.9G 33M 1.9G 2% /root
/dev/sda5 4.7G 127M 4.6G 3% /usr
/dev/sda6 28G 90M 28G 1% /var
tproxy:/#

2. Melakukan patching kernel cttproxy

Sebelum melakukan patching kernel cttproxy sebaiknya siapkan paket-paket
yang diperlukan untuk melakukan kompilasi kernel :

a. Install paket
tproxy:/# apt-get update
tproxy:/# apt-get install kernel-package libncurses5-dev fakeroot
wget bzip2 build-essential

b. Siapkan Paket
copy-kan semua paket di bawah ke direktori /usr/src/
- linux-2.6.18.5.tar.gz
- cttproxy-2.6.18-2.0.6.tar.gz
- iptables-1.3.6.tar.bz2
- squid-2.6.STABLE18.tar.gz

c. Persiapan patching kernel

tproxy:/# cd /usr/src/
tproxy:/usr/src# tar -xzvf linux-2.6.18.5.tar.gz
tproxy:/usr/src# ln -s linux-2.6.18.5 linux
tproxy:/usr/src# tar –xzvf cttproxy-2.6.18-2.0.6.tar.gz
tproxy:/usr/src# cd /usr/src/linux-2.6.18.5/
tproxy:/usr/src/linux-2.6.18.5# for i in /usr/src/cttproxy-
2.6.18-2.0.6/patch_tree/0{1,2,3}*.patch; do cat $i | patch -p1;
done
tproxy:/usr/src/linux-2.6.18.5# make clean && make mrproper
tproxy:/usr/src/linux-2.6.18.5# cp /boot/config-`uname -r`
./.config

Copyleft (c) 2008. Aditya Maulana | adit@comnet.net.id |

HP : 085220082685
085220082685
 Panduan Installasi TPROXY
22 February 2008
tproxy:/usr/src/linux-2.6.18.5# make menuconfig

Pada menuconfig akan muncul menu kompilasi kernel, pilih Load an Alternate
Configuration File dan pilih .config

Networking --->
Networking options --->
Network packet filtering (replaces ipchains) --->
Core Netfilter Configuration --->
built in semua [*]
IP: Netfilter Configuration --->
built in semua [*]

Setelah itu pilih Save Configuration to an Alternate File
OK

tproxy:/usr/src/linux-2.6.18.5# fakeroot make-kpkg --initrd --
append-to-version=-custom kernel_image kernel_headers

Bersabarlah....kompilasi kernel sedang di proses... kira-kira memakan waktu 1

jam... kopi + ngemil dulu...

tproxy:/usr/src/linux-2.6.18.5# make-kpkg clean

d. Install kernel baru…

tproxy:/usr/src/linux-2.6.18.5# cd ..
tproxy:/usr/src# dpkg -i linux-headers-2.6.18.5-custom_2.6.18.5-
custom-10.00.Custom_i386.deb
tproxy:/usr/src# dpkg -i linux-image-2.6.18.5-custom_2.6.18.5-
custom-10.00.Custom_i386.deb
tproxy:/usr/src# shutdown -r now

3. Melakukan patching iptables

a. Persiapan patching iptables

tproxy:/usr/src# tar xjvf iptables-1.3.6.tar.bz2

tproxy:/usr/src# cd /usr/src/iptables-1.3.6/
tproxy:/usr/src/iptables-1.3.6# cat /usr/src/cttproxy-2.6.18-
2.0.6/iptables/iptables-1.3-cttproxy.diff | patch -p1
tproxy:/usr/src/iptables-1.3.6# chmod +x extensions/.tproxy-test

b. Install iptables baru…

tproxy:/usr/src/iptables-1.3.6# make KERNEL_DIR=/usr/src/linux-

headers-2.6.18.5-custom
tproxy:/usr/src/iptables-1.3.6# make install
KERNEL_DIR=/usr/src/linux-headers-2.6.18.5-custom
tproxy:/usr/src/iptables-1.3.6# make install-devel
tproxy:/usr/src/iptables-1.3.6# shutdown -r now

Copyleft (c) 2008. Aditya Maulana | adit@comnet.net.id |

HP : 085220082685
085220082685
 Panduan Installasi TPROXY
22 February 2008
c. Test tproxy…

tproxy:/# iptables -t tproxy -A PREROUTING -i eth1 -p tcp --dport

80 -j TPROXY --on-port 8080

Jika tidak ada pesan error apapun maka iptables telah terpatch tproxy…

Warning…Warning…Warning…
Agar tproxy dapat berjalan sempurna ada beberapa file yang
harus di copy-kan secara manual, seperti :
• copy-kan semua isi file dari /usr/src/iptables-
1.3.6/extensions ke /usr/local/lib/iptables
• copy-kan semua isi file dari /usr/src/iptables-
1.3.6/extensions ke /usr/lib/
• copy-kan semua isi file dari /usr/src/iptables-
1.3.6/extensions ke /lib/iptables

Jika direktori iptables tidak ada di source tujuan maka

buat lah

4. Melakukan installasi squid

a. Install Squid
tproxy:/# apt-get install squid –y
b. Upgrade squid
tproxy:/# cd /usr/src/
tproxy:/usr/src# tar -xzvf squid-2.6.STABLE18.tar.gz
tproxy:/usr/src# cd /usr/src/squid-2.6.STABLE18/
tproxy:/usr/src/squid-2.6.STABLE18# ./configure --prefix=/usr --
exec_prefix=/usr --bindir=/usr/sbin --sbindir=/usr/sbin --
libexecdir=/usr/lib/squid --sysconfdir=/etc/squid --
localstatedir=/var/spool/squid --datadir=/usr/share/squid --
enable-linux-netfilter --enable-storeio=ufs,aufs,diskd,null --
enable-arp-acl --enable-removal-policies=lru,heap --enable-snmp -
-enable-delay-pools --enable-htcp --enable-poll --enable-cache-
digests --enable-underscores --enable-referer-log --enable-
useragent-log --enable-auth="basic,digest,ntlm" --enable-carp --
enable-large-files --enable-linux-tproxy
tproxy:/usr/src/squid-2.6.STABLE18# make all
tproxy:/usr/src/squid-2.6.STABLE18# make install
tproxy:/usr/src/squid-2.6.STABLE18# cp
/usr/src/linux/include/linux/netfilter_ipv4/ip_tproxy.h
/usr/include/linux/netfilter_ipv4
tproxy:/usr/src/squid-2.6.STABLE18# cp
/usr/include/linux/capability.h /usr/include/sys

Copyleft (c) 2008. Aditya Maulana | adit@comnet.net.id |

HP : 085220082685
085220082685
 Panduan Installasi TPROXY
22 February 2008
c. Setting squid
Merubah kepemilikan direktori cache
tproxy:/# chown proxy.proxy /cache1/
tproxy:/# chown proxy.proxy /cache2/
tproxy:/# chown proxy.proxy /cache3/
tproxy:/# chown proxy.proxy /cache4/
tproxy:/# chown proxy.proxy /cache5/

Men-setting squid.conf
tproxy:/# vim /etc/squid/squid.conf
Konfigurasi dari squid.conf
http_port 8080 tproxy transparent

visible_hostname core.badjingan.net
cache_mgr dokter.error@gmail.com

acl manager proto cache_object

acl Lokal-1 src 202.ccc.ccc.0/255.255.255.248
acl all src 0.0.0.0/0.0.0.0

http_access allow Lokal-1

tcp_outgoing_address 202.eee.eee.e Lokal-1

tcp_outgoing_address 202.ddd.ddd.d
server_persistent_connections off

Jalankan squid…

tproxy:/# squid -z

Jika muncul pesan error seperti ini

tproxy:/# squid -z
FATAL: Bungled squid.conf line 1: http_port 8080 tproxy
transparent
Squid Cache (Version 2.6.STABLE18): Terminated abnormally.
tproxy:/#

Lakukan upgrade ulang squid…

Setelah upgrade ulang squid jalankan squid sekali lagi

tproxy:/# squid -z
2008/02/23 00:52:52| Creating Swap Directories
tproxy:/#

Jika muncul pesan seperti di atas maka squid telah sukses berjalan

Copyleft (c) 2008. Aditya Maulana | adit@comnet.net.id |

HP : 085220082685
085220082685
 Panduan Installasi TPROXY
22 February 2008
WINDOWS
Masukkan IP Address di klient berbasis windows
Isikan : IP Address : 202.fff.fff.f
Netmask : 255.255.255.252
Gateway : 202.eee.eee.e
DNS : 202.eee.eee.e

Lakukan pengecekan dengan browsing ke situs http://whatismyipaddress.com/ jika

muncul ip address-nya 202.fff.fff.f maka tproxy telah berjalan dan selamat Anda telah
sukses installasi tproxy…..

Copyleft (c) 2008. Aditya Maulana | adit@comnet.net.id |

HP : 085220082685
085220082685