Instalasi DansGuardian: Difference between revisions

From OnnoCenterWiki
Jump to navigationJump to search
Onnowpurbo (talk | contribs)
No edit summary
Onnowpurbo (talk | contribs)
 
(8 intermediate revisions by the same user not shown)
Line 1: Line 1:
Install SSH, Squid cache & DansGuardian
==Install==


  # apt-get install openssh-server squid dansguardian
  sudo su
   
locale-gen id_ID.UTF-8
apt update
apt install squid dansguardian
  freshclam &


Konfigurasi DansGuardian
==Konfigurasi==


# vi /etc/dansguardian/dansguardian.conf
Edit


Lakukan
vi /etc/dansguardian/dansguardian.conf
 
Ubah,


* Jika IP address Server adalah, 192.168.0.1. Ubah
  accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'
  accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'
menjadi
accessdeniedaddress = 'http://192.168.0.1/cgi-bin/dansguardian.pl'


* Buang / comment kalimat "UNCONFIGURED - Please remove this line after configuration" setelah semua proses konfigurasi selesai.
Misalnya (IP server 192.168.0.100)
* Ubah variabel 'virusscan' menjadi off, jika anda belum menyiapkan clamav untuk DansGuardian. Biasanya di Ubuntu clamav akan terinstall bersama DansGuardian.


Siapkan port ke Firewall. Bagian ini memang sifatnya optional, tapi sangat di sarankan. Copy perintah berikut ke file /etc/network/if-up.d/iptables-config
accessdeniedaddress = 'http://192.168.0.100/cgi-bin/dansguardian.pl'


#!/bin/bash
iptables -F
# set the default policy for each of the pre-defined chains
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# to allow incoming SSH and Proxy
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -m state --state NEW -p tcp -m tcp -s 127.0.0.1 --dport 3128 -j ACCEPT
iptables -A INPUT -m state --state NEW -p tcp -m tcp --dport 8080 -j ACCEPT
# drop everything else
iptables -A INPUT -i eth+ -p udp -j DROP
iptables -A INPUT -i eth+ -p tcp -m tcp --syn -j DROP


Pastikan iptables-config dapat di execute / jalankan
Ubah,


  # chmod +x /etc/network/if-up.d/iptables-config
  UNCONFIGURED - Please remove this line after configuration


Aktifkan SSH, DansGuardian, & Squid cache saat startup
Jadi
 
# UNCONFIGURED - Please remove this line after configuration
 
 
==Start Service==


# update-rc.d ssh defaults
# update-rc.d squid defaults
# update-rc.d dansguardian defaults


Restart
Restart


  # /etc/init.d/networking restart
  /etc/init.d/squid restart
# /etc/init.d/squid restart
  /etc/init.d/dansguardian restart
  # /etc/init.d/dansguardian restart


selesai
selesai


==Setup di Sisi Client==
==Setup di Sisi Client==
Line 62: Line 48:
  Port      8080
  Port      8080


DansGuardian akan membaca text Web yang di akses. Jika ada kata-kata yang tidak pantas, akan terblokir seperti tampak pada gambar.


[[Image:Google-dansguardian-block.jpg|center|200px|thumb]]




Line 71: Line 59:


* [[Firewall Untuk Proxy DansGuardian]]
* [[Firewall Untuk Proxy DansGuardian]]
* [[Edit Konfigurasi Pemblokiran Dansguardian]]
* [[Teknik Memblok Situs Tidak Baik]]
* [[Teknik Memblok Situs Tidak Baik]]
* [[Instalasi antivirus clamav]]
* [[Linux Howto]]
* [[Linux Howto]]

Latest revision as of 00:52, 23 June 2017

Install

sudo su
locale-gen id_ID.UTF-8
apt update
apt install squid dansguardian
freshclam &

Konfigurasi

Edit

vi /etc/dansguardian/dansguardian.conf 

Ubah,

accessdeniedaddress = 'http://YOURSERVER.YOURDOMAIN/cgi-bin/dansguardian.pl'

Misalnya (IP server 192.168.0.100)

accessdeniedaddress = 'http://192.168.0.100/cgi-bin/dansguardian.pl'


Ubah,

UNCONFIGURED - Please remove this line after configuration

Jadi

# UNCONFIGURED - Please remove this line after configuration


Start Service

Restart

/etc/init.d/squid restart
/etc/init.d/dansguardian restart

selesai

Setup di Sisi Client

Pastikan proxy server di arahkan ke

IP address Server DansGuardian
Port       8080

DansGuardian akan membaca text Web yang di akses. Jika ada kata-kata yang tidak pantas, akan terblokir seperti tampak pada gambar.



Pranala Menarik