Instalasi DansGuardian: Difference between revisions

From OnnoCenterWiki
Jump to navigationJump to search
← Older edit
Onnowpurbo (talk | contribs)
69,477 edits
Onnowpurbo (talk | contribs)
69,477 edits
No edit summary
Onnowpurbo (talk | contribs)
69,477 edits
 
(10 intermediate revisions by the same user not shown)
Line 1: Line 1:
Install SSH, Squid cache & DansGuardian
==Install==


  # apt-get install openssh-server squid dansguardian
  sudo su
   
locale-gen id_ID.UTF-8
apt update
apt install squid dansguardian
  freshclam &


Konfigurasi DansGuardian
==Konfigurasi==


# vi /etc/dansguardian/dansguardian.conf
Edit


Lakukan
vi /etc/dansguardian/dansguardian.conf


* Buang / comment kalimat UNCONFIGURED
Ubah,
* Ubah variabel 'virusscan' menjadi off, jika anda belum menyiapkan clamav untuk DansGuardian


Siapkan port ke Firewall. Bagian ini memang sifatnya optional, tapi sangat di sarankan. Copy perintah berikut ke file /etc/network/if-up.d/iptables-config
accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'


#!/bin/bash
Misalnya (IP server 192.168.0.100)
iptables -F
# set the default policy for each of the pre-defined chains
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# to allow incoming SSH and Proxy
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -m state --state NEW -p tcp -m tcp -s 127.0.0.1 --dport 3128 -j ACCEPT
iptables -A INPUT -m state --state NEW -p tcp -m tcp --dport 8080 -j ACCEPT
# drop everything else
iptables -A INPUT -i eth+ -p udp -j DROP
iptables -A INPUT -i eth+ -p tcp -m tcp --syn -j DROP


Pastikan iptables-config dapat di execute / jalankan
accessdeniedaddress = 'http://192.168.0.100/cgi-bin/dansguardian.pl'


# chmod +x /etc/network/if-up.d/iptables-config


Aktifkan SSH, DansGuardian, & Squid cache saat startup
Ubah,
 
UNCONFIGURED - Please remove this line after configuration
 
Jadi
 
# UNCONFIGURED - Please remove this line after configuration
 
 
==Start Service==


# update-rc.d ssh defaults
# update-rc.d squid defaults
# update-rc.d dansguardian defaults


Restart
Restart


  # /etc/init.d/networking restart
  /etc/init.d/squid restart
# /etc/init.d/squid restart
  /etc/init.d/dansguardian restart
  # /etc/init.d/dansguardian restart


selesai
selesai
==Setup di Sisi Client==
Pastikan proxy server di arahkan ke
IP address Server DansGuardian
Port      8080
DansGuardian akan membaca text Web yang di akses. Jika ada kata-kata yang tidak pantas, akan terblokir seperti tampak pada gambar.
[[Image:Google-dansguardian-block.jpg|center|200px|thumb]]




Line 55: Line 58:
==Pranala Menarik==
==Pranala Menarik==


* [[Firewall Untuk Proxy DansGuardian]]
* [[Edit Konfigurasi Pemblokiran Dansguardian]]
* [[Teknik Memblok Situs Tidak Baik]]
* [[Teknik Memblok Situs Tidak Baik]]
* [[Instalasi antivirus clamav]]
* [[Linux Howto]]
* [[Linux Howto]]

Latest revision as of 00:52, 23 June 2017

Install

sudo su
locale-gen id_ID.UTF-8
apt update
apt install squid dansguardian
freshclam &

Konfigurasi

Edit 

vi /etc/dansguardian/dansguardian.conf

Ubah, 

accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'

Misalnya (IP server 192.168.0.100) 

accessdeniedaddress = 'http://192.168.0.100/cgi-bin/dansguardian.pl'


Ubah, 

UNCONFIGURED - Please remove this line after configuration

Jadi 

# UNCONFIGURED - Please remove this line after configuration


Start Service

Restart 

/etc/init.d/squid restart
/etc/init.d/dansguardian restart

selesai

Setup di Sisi Client

Pastikan proxy server di arahkan ke 

IP address Server DansGuardian
Port       8080

DansGuardian akan membaca text Web yang di akses. Jika ada kata-kata yang tidak pantas, akan terblokir seperti tampak pada gambar.



Pranala Menarik

Retrieved from "https://lms.onnocenter.or.id/wiki/index.php?title=Instalasi_DansGuardian&oldid=48852"