tugasKU

2008-10-20T23:42:00.000-07:00

INSTALASI UBUNTU SERVER 7.10

1. Setup bios boot from CD.

2. Masukkan CD Instalasi Linux Ubuntu Server 7.10 Gutsy Gibbons, tunggu beberapa saat hingga
muncul tampilan awal instalasi.

3. Pemilihan bahasa
Untuk Bahasa kebetulan saya memilih english sebagai defaultnya.

4. Pemilihan negara asal
Defaultnya adalah united states

5. Pendeteksian Keyboard
Untuk mempercepat kita pilih “no” saja sehingga linux akan memberikan default layoutnya.

6. Pendeteksian Hardware – Hardware yang digunakan

7. Konfigurasi jaringan
Pilih konfigurasi jaringan secara manual karena ip yang kita gunakan adalah konfigurasi ip statis

bukan DHCP atau dinamis.
Masukkan IP untuk ethernet 0 yang menjadi sumber internet.
Masukkan netmask untuk jaringan kita 255.255.255.0
Masukkan gateway untuk server kita, dalam hal ini gateway untuk server ubuntu dijaringan saya
adalah 192.168.0.254
Untuk name server address saya isikan sama dengan gatewaynya yaitu 192.168.0.254.
kemudian hostname untuk server ubuntunya.

8. Pembuatan Partisi Linux

Untuk pembuatan partisi kita memilih secara manual agar dapat mengatur besarnya partisi yang
akan digunakan.
Pilih Tipe hardisk yang terdeteksi dan tekan enter.
Lanjutkan dengan memilih “yes” untuk membuat partisi baru dari hardisk yang kita pilih.

Kemudian pilih partisi yang kosong untuk membuat partisi baru dengan menekan enter.
Akan tampil sebuah konfirmasi pembuatan partisi baru. Partisi utama yang harus dibuat adalah
root dan swap.Untuk partisi swap disarankan ukurannya 2x memori phisical (RAM).

Pilih lokasi partisi “primary partition”
Beberapa hal yang harus diperhatikan saat pembuatan partisi antara lain:
a. Tipe Filesystemnya : ext3
b. Mount Point nya : “ / ”
c. Bootable flag : On
Jika telah selesai mengatur tiap partisi pilih “ Done setting up the partition
Pilih “Finish partitioning and write changes to disk” untuk menulis ke partisi di hardisk.

9. Pemilihan Zona Waktu

10. Konfigurasi Sistem Waktu yang digunakan

11. Pembuatan User Account System Linux
Isikan Nama untuk user yang akan dibuat
Isikan username untuk login ke sistem linux

12. Isikan Password untuk user yang baru dibuat dan Ulangi Password

13. Instalasi Paket – Paket Linux Ubuntu
Jika saat proses instalasi linux meminta konfirmasi untuk alamat proxy server yang akan
digunakan dalam konfigurasi jaringan kosongi saja, karena kita tidak akan menggunakan proxy
server.

14. Pemilihan Sofware yang akan diinstal
Pilih sofware yang akan diinstall seperti DNS Server, OpenSSH Server, Lampp Server dengan
menekan tombol space bar. Kemudian tekan continue.

15. Jika Instalasi berhasil maka akan muncul halaman konfirmasi

16. Jika Instalasi berhasil maka komputer akan booting ulang dan silahkan login dengan username
yang telah anda buat tadi.

2008-10-20T23:36:00.000-07:00

KONFIGURASI UBUNTU SERVER SEBAGAI GATEWAY
DAN SQUID ( TRANSPARANT PROXY )

Pada tutorial ini kita akan memulai konfigurasi ubuntu server yang telah terinstall
dalam mesin anda sebagai gateway untuk internet dan dipadukan dengan squid
sebagai transparasi proxy.

1. Dimisalkan ubuntu server telah terinstall dalam mesin anda. Kemudian
silahkan login dengan user yang telah dibuat dalam proses penginstallan.

2. Setelah anda login dengan user yang dibuat, kita akan membuat password
untuk user “root” atau administrator dengan mengetik perintah “sudo passwd
root”, kemudian masukkan password untuk user yang kita buat tadi.
Kemudian baru masukkan password untuk user root dari mesin anda
Tim ICT Center Kabupaten Batang Tahun 2008

3. Jika password yang anda masukkan sama maka anda telah berhasil mengganti
password root. Komentar jika password anda tepat adalah “password
updated successfully”

4. Untuk mengecek apakah anda telah dapat login dengan user root ketik “exit”
kemudian login lagi dengan user root dan masukkan password root yang telah
dibuat.
Tampilan jika telah berhasil login dengan user root.

5. Tahap selanjutnya adalah konfigurasi kartu jaringan ubuntu server yang akan
digunakan sebagai router gateway. Sebelumnnya edit file konfigurasi jaringan
dengan nama interfaces yang terdapat di dalam folder /etc/network.
Perintah : cd /etc/network
vim interfaces

6. Kemudian tambahkan konfigurasi ip untuk jaringan di ethernet yang ke lan
atau eth1. Dalam kasus ini sesuai dengan desain jaringan sebelumnya ethernet
yang ke LAN dengan “IP 192.168.20.1” dan ethernet yang ke INTERNET
atau eth0 dengan “IP 172.19.99.21” dan default “gateway
172.19.99.254” Untuk mulai mengedit file interfaces tekan tombol “I”
pada keyboard sehingga status berubah menjadi “INSERT” setelah
selesai menambahkan konfigurasi tekan tombol “ESC”. Untuk
menyimpan konfigurasi dan keluar dari ketik “:wq”.
Tim ICT Center Kabupaten Batang Tahun 2008

7. Kemudian untuk menerapkan konfigurasi diatas kita restart konfigurasi
jaringan dengan menggunakan perintah : /etc/init.d/networking restart

8. Cek perubahan konfigurasi IP dengan perintah : “ifconfig”.
Tim ICT Center Kabupaten Batang Tahun 2008

9. Setelah itu tambahkan baris “net.ipv4.ip_forward = 1” di dalam file
sysctl.conf baris terbawah yang terdapat dalam folder /etc/, dengan perintah
“ vim /etc/sysctl.conf ”. Sehingga isi file konfigurasinya menjadi :

10. Setelah itu restart kembali konfigurasi jaringan dan coba ping ke alamat
www.google.co.id

11. Setelah mesin ubuntu dapat terkoneksi dengan internet ketik perintah : apt-get
update untuk mengupdate database repository yang diperlukan untuk instalasi
software.

12. Setelah proses update, sekarang kita install software squid yang diperlukan
untuk web-chace dan transparasi proxy dengan mengetik perintah : apt-get
install squid.
Tim ICT Center Kabupaten Batang Tahun 2008

13. Jika proses instalasi squid telah berhasil lanjutkan dengan menambahkan
perintah iptablesnya melalui perintah :
iptables –t nat –A PREROUTING –i eth1 –p tcp –dport 80 –j DNAT
–to-destination 192.168.20.1:8080
iptables –t nat –A POSTROUTING –s 192.168.20.0/255.255.255.0 –j
MASQUERADE
Maksud dari perintah pertama diatas adalah untuk mengalihkan seluruh paket
yang menuju ke ethernet 1 dengan alamat port 80 untuk dialihkan ke port
8080 yang akan menjadi port service dari squid sehingga setiap paket dapat
di monitoring. Sedangkan perintah kedua digunakan untuk
“memasking” jaringan LAN yang terdapat dibawah router agar hanya
ip publik router ubuntu saja yang dikenal di internet.

14. Kemudian Simpan Konfigurasi iptables dengan mengetik perintah : iptablessave
> /etc/network/iptables

15. Agar konfigurasi selalu dapat berjalan saat mesin ubuntu server dihidupkan
ulang atau booting tambahkan baris berikut :
“iptables-restore /etc/network/iptables” di dalam file rc.local yang
terdapat pada folder /etc/init.d/

16. Kemudian restart service dengan menggunakan perintah
“/etc/init.d/rc.local start”.
Tim ICT Center Kabupaten Batang Tahun 2008

17. Langkah selanjutnya adalah konfigurasi squid. Caranya adalah dengan
berpindah ke dalam folder /etc/squid dengan menggunakan perintah
“cd /etc/squid”, kemudian edit file squid.conf dan sesuaikan
konfigurasinya menjadi seperti dibawah ini :
http_port 8080 transparent
acl QUERY urlpath_regex cgi-bin \?
#redirect_program /usr/bin/adzapper.wrapper
ipcache_size 2056
ipcache_low 90
ipcache_high 95
cache_mem 95 MB
maximum_object_size 10096 KB
maximum_object_size_in_memory 8 KB
cache_access_log /var/log/squid/access.log
cache_dir ufs /var/spool/squid 900 16 256
cache_log /var/log/squid/cache.log
cache_store_log /var/log/squid/store.log
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl to_localhost dst 127.0.0.0/8
acl SSL_ports port 443 # https
acl SSL_ports port 563 # snews
acl SSL_ports port 873 # rsync
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 # https
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl Safe_ports port 631 # cups
acl Safe_ports port 873 # rsync
acl Safe_ports port 901 # SWAT
acl purge method PURGE
acl CONNECT method CONNECT
#Recommended minimum configuration:
Tim ICT Center Kabupaten Batang Tahun 2008
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
#http_access deny to_localhost
#================konfigurasi client ================
acl bahaya url_regex "/etc/squid/blokir.txt"
http_access deny bahaya
acl client src 192.168.20.0/24
http_access allow client
#httpd_accel_port 80
#httpd_accel_host virtual
#httpd_accel_single_host off
#httpd_accel_with_proxy on
#httpd_accel_uses_host_header on
http_access allow localhost
http_reply_access allow all
visible_hostname server-smk1.or.id
cache_mgr admin@smk1batang.or.id
forwarded_for on
ie_refresh on
18. Kemudian buat sebuah file didalam folder /etc/squid dengan nama blokir.txt.

19. Setelah mengedit file squid.conf simpan konfigurasi dan restart service squid
dengan mengetik perintah : /etc/init.d/squid restart.

20. Setelah semua konfigurasi selesai, setting ip di client dengan menggunakan
gateway dari ip lan ubuntu server, dimana ipnya adalah 192.168.20.1
kemudian lakukan tes ping ke alamat www.google.co.id
Tim ICT Center Kabupaten Batang Tahun 2008

21. Jika berhasil silahkan coba browsing dari client, jika konfigurasi anda benar
akan terbuka alamat yang anda tuju.
.::  Akhirnya Konfigurasi Ubuntu Server Kita Selesai ::.
Tim ICT Center Kabupaten Batang Tahun 2008

tugas 2 IP Address

2007-08-27T22:55:00.000-07:00

IP Address.
An IP address (Internet Protocol address) is a unique address that certain electronic devices use in order to identify and communicate with each other on a computer network utilizing the Internet Protocol standard (IP)—in simpler terms, a computer address. Any participating network device—including routers, computers, time-servers, printers, Internet fax machines, and some telephones—can have their own unique address.
An IP address can also be thought of as the equivalent of a street address or a phone number (compare: VoIP (voice over (the) internet protocol)) for a computer or other network device on the Internet. Just as each street address and phone number uniquely identifies a building or telephone, an IP address can uniquely identify a specific computer or other network device on a network. An IP address differs from other contact information, however, because the linkage of a user's IP address to his/her name is not publicly available information.
IP addresses can appear to be shared by multiple client devices either because they are part of a shared hosting web server environment or because a network address translator (NAT) or proxy server acts as an intermediary agent on behalf of its customers, in which case the real originating IP addresses might be hidden from the server receiving a request. A common practice is to have a NAT hide a large number of IP addresses, in the private address space defined by RFC 1918, an address block that cannot be routed on the public Internet. Only the "outside" interface(s) of the NAT need to have Internet-routable addresses.
Most commonly, the NAT device maps TCP or UDP port numbers on the outside to individual private addresses on the inside. Just as there may be site-specific extensions on a telephone number, the port numbers are site-specific extensions to an IP address.
IP addresses are managed and created by the Internet Assigned Numbers Authority (IANA). The IANA generally allocates super-blocks to Regional Internet Registries, who in turn allocate smaller blocks to Internet service providers and enterprises.
Contents
[hide]
• 1 IP versions
o 1.1 IP version 4
o 1.2 IP version 6
 1.2.1 IP version 6 private addresses
• 2 Static and dynamic IP addresses
• 3 IP address legality in Europe
• 4 See also
• 5 External links
o 5.1 RFCs
• 6 References

IP versions
The Internet Protocol has two versions currently in use (see IP version history for details). Each version has its own definition of an IP address. Because of its prevalence, "IP address" typically refers to those defined by IPv4.
IP version 4
Main article: IPv4#Addressing
IPv4 only uses 32-bit (4 byte) addresses, which limits the address space to 4,294,967,296 (232) possible unique addresses. However, many are reserved for special purposes, such as private networks (~18 million addresses) or multicast addresses (~270 million addresses). This reduces the number of addresses that can be allocated as public Internet addresses, and as the number of addresses available is consumed, an IPv4 address shortage appears to be inevitable in the long run. This limitation has helped stimulate the push towards IPv6, which is currently in the early stages of deployment and is currently the only contender to replace IPv4.
Example: 127.0.0.1 (Loopback)
IP version 6
Main article: IPv6#Addressing
IPv6 is the new standard protocol for the Internet. Windows Vista, Apple Computer's Mac OS X, and an increasing range of Linux distributions include native support for the protocol, but it is not yet widely deployed elsewhere.
Addresses are 128 bits (16 bytes) wide, which, even with a generous assignment of netblocks, will more than suffice for the foreseeable future. In theory, there would be exactly 2128, or about 3.403 × 1038 unique host interface addresses. Further, this large address space will be sparsely populated, which makes it possible to again encode more routing information into the addresses themselves.
Example: 2001:0db8:85a3:08d3:1319:8a2e:0370:7334
One source[1] notes that there will exist "roughly 5,000 addresses for every square micrometer of the Earth's surface". This enormous magnitude of available IP addresses will be sufficiently large for the indefinite future, even though mobile phones, cars and all types of personal devices are coming to rely on the Internet for everyday purposes.
The above source, however, involves a common misperception about the IPv6 architecture. Its large address space is not intended to provide unique addresses for every possible point. Rather, the addressing architecture is such that it allows large blocks to be assigned for specific purposes and, where appropriate, aggregated for provider routing. With a large address space, there is not the need to have complex address conservation methods as used in classless inter-domain routing (CIDR).
IP version 6 private addresses
Just as there are addresses for private, or internal networks in IPv4 (one example being the 192.168.0.1 - 192.168.0.254 range), there are blocks of addresses set aside in IPv6 for private addresses. Addresses starting with FE80: are called link-local addresses and are routable only on your local link area. This means that if several hosts connect to each other through a hub or switch then they would communicate through their link-local IPv6 address.
Early designs specified an address range used for "private" addressing, with prefix FEC0. These are called site-local addresses (SLA) and are routable within a particular site, analogously to IPv4 private addresses. Site-local addresses, however, have been deprecated by the IETF, since they create the same problem that does the existing IPv4 private address space (RFC 1918). With that private address space, when two sites need to communicate, they may have duplicate addresses that "combine". In the IPv6 architecture, the preferred method is to have unique addresses, in a range not routable on the Internet, issued to organizations (e.g., enterprises).
The preferred alternative to site-local addresses are centrally assigned unique local unicast addresses (ULA). In current proposals, they will start with the prefix FC00.
Neither ULA nor SLA nor link-local address ranges are routable over the internet.
Static and dynamic IP addresses

This short section requires expansion.

A Static IP address is where a computer uses the same address every time a user logs on to a network, such as the Internet. With a static IP address, a computer's identity can be easily identified by others, and users can easily connect with it. That way, for example, a website, email server, or other type of server connection can be hosted.
This contrasts with a Dynamic IP address, wherein an IP address is assigned to a computer, usually by a remote server which is acting as a Dynamic Host Configuration Protocol server. IP addresses assigned using DHCP may change depending on the addresses available in the set scope. Dynamic IP Addresses assigned by Dynamic Host Configuration Protocol servers are used because it creates effiency within a network. When there is no need to assign everybody a specific IP Address, users can simply log in and out and use the network without the hassle of having to get an IP assigned to them.
IP address legality in Europe
It is important to note that unlike the U.S., under European Union law IP Addresses are considered to be personal data as defined by article 2(a) of Directive 95/46/EC " 'personal data' shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity; " Also see Directive 2006/24/EC.
In association with time codes, IP Addressing information will always identify unique ISP account holders unless there is translation of that information.
It is important that this significant difference in legal status be understood, because Websites that provide for third-party interception of IP addressing information and traffic data, without Website visitor consent, are committing a criminal offence in the UK by virtue of the Regulation of Investigatory Powers Act 2000, where through the requirements of European Council Decision 2005/222/JHA such Website owners face serious sanctions, including the winding up of their businesses, being debarred from running a business, and more than 2 years imprisonment.