Silahkan download link berikut ini,
http://www.4shared.com/rar/dUrOCxFNba/Materi_Pembimbingan_UKK__XIISM.html?
Saturday, January 31, 2015
Friday, January 30, 2015
TUGAS tgl 31 Januari 2015
Task!
Instalasi Debian Server
membangun Router, DNS server, Web Server dan Proxy Server
Topologi
Internet
Gateway Internet DNS
192.168.150.254/24 202.134.1.10,202.134.2.5,8.8.8.8
|
|
|
PC Server
eth0 : 192.168.150.X/24
------------------------
eth1 : 192.168.125.125/27
|
|
|
PC Client
IP Lan : X.X.X.X/X
(X : tentukan sendiri!)
Konfigurasi PC Server
a. OS = Debian 7
b. Domain = assalaam.net 192.168.125.125/27
c. SubDomain = smk.assalaam.net
d. Domain baru = alvocat.com (gunakan IP alias 10.10.10.1/24)
e. Virtual Directory = assalaam.net/~datasekolah
f. NAT
g. Port Proxy = 3128
h. Cache mgr = namasiswa@assalaam.net
i. Transparent Proxy
j. Blocking Website = www.youtube.com
halaman website
This Site "website" works Properly
________________________________________
admin : namasiswa@assalaam.net
Task!
Instalasi Debian Server
membangun Router, DNS server, Web Server dan Proxy Server
Topologi
Internet
Gateway Internet DNS
192.168.150.254/24 202.134.1.10,202.134.2.5,8.8.8.8
|
|
|
PC Server
eth0 : 192.168.150.X/24
------------------------
eth1 : 192.168.125.125/27
|
|
|
PC Client
IP Lan : X.X.X.X/X
(X : tentukan sendiri!)
Konfigurasi PC Server
a. OS = Debian 7
b. Domain = assalaam.net 192.168.125.125/27
c. SubDomain = smk.assalaam.net
d. Domain baru = alvocat.com (gunakan IP alias 10.10.10.1/24)
e. Virtual Directory = assalaam.net/~datasekolah
f. NAT
g. Port Proxy = 3128
h. Cache mgr = namasiswa@assalaam.net
i. Transparent Proxy
j. Blocking Website = www.youtube.com
halaman website
This Site "website" works Properly
________________________________________
admin : namasiswa@assalaam.net
Saturday, January 24, 2015
Instruksi Praktikum 25 Januari ( XIISMK pa) dan 26 Januari (XIISMK pi)
Materi : Instalasi SQUID pada Server Debian
A. Topologi
Internet 192.168.150.254/24
|
|
PC Server eth0 192,168,150.(no.urut PC Server) /24
eth1 192.168.125.1/24
|
|
PC Client eth0 192.168.125.(terserah....) /24
B. Langkah Kerja
1. Install OS Debian
2. Buat Partisi [swap : 2048 MB], [root system 40 GB] dan [/home 40 GB]
3. Konfigurasi Interface
~:#nano /etc/network/interfaces
| ........
| auto eth0
| iface eth0 inet static
| address 192.168.150.X
| netmask 255.255.255.0
| gateway 192.168.150.254
| dns-nameservers 202.134.1.10,202.134.2.5,8.8.8.8
|
| auto eth1
| iface eth1 inet static
| address 192.168.125.1
| netmask 255.255.255.0
|
4. Konfigurasi Hosts dan Hostname
nama host = namasiswa
nama domain = namasiswa
ex. 192.168.5,1 rezki
~:#nano /etc/hosts
| .......
| 127.0.0.1 localhost
| 192.168.125.X rezki #gunakan interface eth1
| ......
~:#nano /etc/hostname
| kadal
5. Konfigurasi NAT dan /etc/resolv.conf
~:#iptables -t nat -A POSTROUTING -s 192.168.125.0/24 -j MASQUERADE
~:#iptables-save > /etc/iptables
~:#echo "up command iptables-restore < /etc/iptables" >> /etc/network/interfaces
~:#nano /etc/resolv.conf
| search kadal.net
| nameserver 192.168.125.1
| nameserver 202.134.1.10
| nameserver 202.134.2.5
| nameserver 8.8.8.8
6. Reboot System!
7. konfigurasi PC Client anda, pastikan dapat melakukan ping ke alamat berikut ini
192.168.125.1
192.168.150.254
202.134.1.10
lakukan diagnosa dan troubleshoot jika terjadi masalah,
laporkan hasil pekerjaan anda pada instruktur,
Install SSH server supaya Server dapat dikonfigurasi secara remote menggunakan\
applikasi putty dari PC Client
langkah kerja berikutnya anda disarankan untuk mengupdate list repository
untuk melengkapi applikasi pendukung praktikum ini.
~:#nano /etc/apt/source.list
#tambahkan list berikut ini dibagian akhir file
deb http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb-src http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb-src http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian stable-proposed-updates main non-free contrib
deb http://mirror.poliwangi.ac.id/debian wheezy main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-lts main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-proposed-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian-security wheezy/updates main contrib non-free
lakukan update list repository
~:#apt-get update
l8. Lakukan instalasi SQUID
~:#apt-get install squid
langkah Konfigurasi Squid
~:#nano /etc/squid/squid.conf
19. Konfigurasi ulang IPTABLES
~:#iptables -t nat -a PREROUTING -s 192.168.125.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128
20. Membuat file "url" dan file "key"
~:#:nano /etc/squid/url
~:#nano /etc/squid/key
21. Restart layanan squid
~:#/etc/init.d/squid restart
~:#squid -z
optional!
anda dapat modifikasi tampilan peringatan akses web yang dilarang
/usr/share/squid/errors/English/ERR_ACCESS_DENIED
22. Setting manual pada PC Client
Control Panel à Network & Internet connection à internet option à tab Connectionà LAN Setting à Use proxy [address] port [3128]
A. Topologi
Internet 192.168.150.254/24
|
|
PC Server eth0 192,168,150.(no.urut PC Server) /24
eth1 192.168.125.1/24
|
|
PC Client eth0 192.168.125.(terserah....) /24
B. Langkah Kerja
1. Install OS Debian
2. Buat Partisi [swap : 2048 MB], [root system 40 GB] dan [/home 40 GB]
3. Konfigurasi Interface
~:#nano /etc/network/interfaces
| ........
| auto eth0
| iface eth0 inet static
| address 192.168.150.X
| netmask 255.255.255.0
| gateway 192.168.150.254
| dns-nameservers 202.134.1.10,202.134.2.5,8.8.8.8
|
| auto eth1
| iface eth1 inet static
| address 192.168.125.1
| netmask 255.255.255.0
|
4. Konfigurasi Hosts dan Hostname
nama host = namasiswa
nama domain = namasiswa
ex. 192.168.5,1 rezki
~:#nano /etc/hosts
| .......
| 127.0.0.1 localhost
| 192.168.125.X rezki #gunakan interface eth1
| ......
~:#nano /etc/hostname
| kadal
5. Konfigurasi NAT dan /etc/resolv.conf
~:#iptables -t nat -A POSTROUTING -s 192.168.125.0/24 -j MASQUERADE
~:#iptables-save > /etc/iptables
~:#echo "up command iptables-restore < /etc/iptables" >> /etc/network/interfaces
~:#nano /etc/resolv.conf
| search kadal.net
| nameserver 192.168.125.1
| nameserver 202.134.1.10
| nameserver 202.134.2.5
| nameserver 8.8.8.8
6. Reboot System!
7. konfigurasi PC Client anda, pastikan dapat melakukan ping ke alamat berikut ini
192.168.125.1
192.168.150.254
202.134.1.10
lakukan diagnosa dan troubleshoot jika terjadi masalah,
laporkan hasil pekerjaan anda pada instruktur,
Install SSH server supaya Server dapat dikonfigurasi secara remote menggunakan\
applikasi putty dari PC Client
langkah kerja berikutnya anda disarankan untuk mengupdate list repository
untuk melengkapi applikasi pendukung praktikum ini.
~:#nano /etc/apt/source.list
#tambahkan list berikut ini dibagian akhir file
deb http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb-src http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb-src http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian stable-proposed-updates main non-free contrib
deb http://mirror.poliwangi.ac.id/debian wheezy main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-lts main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-proposed-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian-security wheezy/updates main contrib non-free
~:#apt-get update
l8. Lakukan instalasi SQUID
~:#apt-get install squid
langkah Konfigurasi Squid
~:#nano /etc/squid/squid.conf
#. . .
http_port 3128 transparent #tambahkan “transparent”
cache_mem 16 MB #kurang-lebih ¼ dari kapasitas RAM
cache_mgr namasiswad@kadal.net #sesuaikan nama siswa peserta ujian
visible_hostname proxy.kadal.net #tambahkan secara lengkap
#. . .
#. . .
acl url dstdomain “/etc/squid/url” #url domain yang di blok
acl key url_regex –i “/etc/squid/key” #url kata yang di blok
http_access deny url
http_access deny key
acl lan src 192.168.125.0/24 #ip network lokal
http_access allow lan
http_access allow all
#....
19. Konfigurasi ulang IPTABLES
~:#iptables -t nat -a PREROUTING -s 192.168.125.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128
20. Membuat file "url" dan file "key"
~:#:nano /etc/squid/url
www.kadal.com
www.iwak.com
~:#nano /etc/squid/key
coro
jerapah
21. Restart layanan squid
~:#/etc/init.d/squid restart
~:#squid -z
optional!
anda dapat modifikasi tampilan peringatan akses web yang dilarang
/usr/share/squid/errors/English/ERR_ACCESS_DENIED
22. Setting manual pada PC Client
Control Panel à Network & Internet connection à internet option à tab Connectionà LAN Setting à Use proxy [address] port [3128]
Friday, January 23, 2015
Daftar Source List Repository Linux Debian
# Salin list berikut ini ke dalam file /etc/apt/source.list
# deb cdrom:[Debian GNU/Linux 7.0.0 _Wheezy_ - Official i386 DVD Binary-1 20130504-15:20]/ wheezy contrib main
#deb cdrom:[Debian GNU/Linux 7.0.0 _Wheezy_ - Official i386 DVD Binary-1 20130504-15:20]/ wheezy contrib main
# Line commented out by installer because it failed to verify:
deb http://security.debian.org/ wheezy/updates main contrib
# Line commented out by installer because it failed to verify:
deb-src http://security.debian.org/ wheezy/updates main contrib
# wheezy-updates, previously known as 'volatile'
# A network mirror was not selected during install. The following entries
# are provided as examples, but you should amend them as appropriate
# for your mirror of choice.
#
deb http://ftp.debian.org/debian/ wheezy-updates main contrib
deb-src http://ftp.debian.org/debian/ wheezy-updates main contrib
deb http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb-src http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb-src http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian stable-proposed-updates main non-free contrib
deb http://mirror.poliwangi.ac.id/debian wheezy main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-lts main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-proposed-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian-security wheezy/updates main contrib non-free
# deb cdrom:[Debian GNU/Linux 7.0.0 _Wheezy_ - Official i386 DVD Binary-1 20130504-15:20]/ wheezy contrib main
#deb cdrom:[Debian GNU/Linux 7.0.0 _Wheezy_ - Official i386 DVD Binary-1 20130504-15:20]/ wheezy contrib main
# Line commented out by installer because it failed to verify:
deb http://security.debian.org/ wheezy/updates main contrib
# Line commented out by installer because it failed to verify:
deb-src http://security.debian.org/ wheezy/updates main contrib
# wheezy-updates, previously known as 'volatile'
# A network mirror was not selected during install. The following entries
# are provided as examples, but you should amend them as appropriate
# for your mirror of choice.
#
deb http://ftp.debian.org/debian/ wheezy-updates main contrib
deb-src http://ftp.debian.org/debian/ wheezy-updates main contrib
deb http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb-src http://kambing.ui.ac.id/debian/ wheezy main non-free contrib
deb http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb-src http://kebo.vlsm.org/debian/ wheezy main non-free contrib
deb http://security.debian.org/ wheezy/updates main contrib non-free
deb-src http://security.debian.org/ wheezy/updates main contrib non-free
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian wheezy main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian-volatile wheezy/volatile main contrib
deb http://mirror.kioss.undip.ac.id/debian-security wheezy/updates main non-free contrib
deb http://mirror.kioss.undip.ac.id/debian stable-proposed-updates main non-free contrib
deb http://mirror.poliwangi.ac.id/debian wheezy main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-lts main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-proposed-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian wheezy-updates main contrib non-free
deb http://mirror.poliwangi.ac.id/debian-security wheezy/updates main contrib non-free
Monday, January 19, 2015
Konfigurasi Disk Quota
Disk Quota berfungsi untuk mengatur dan mengawasi pemakaian kapasitas media penyimpanan yang digunakan oleh user
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
# / was on /dev/sda5 during installation
UUID=556f39e0-c5fc-4c08-9a05-77fc3414298e / ext4 errors=remount-ro 0 1
# /home was on /dev/sda6 during installation
UUID=4d5a3bda-1851-45cd-a449-27a90af293bd /home ext4 defaults,usrquota,grpquota 0 2
# swap was on /dev/sda1 during installation
UUID=c6986195-c51e-401b-b04a-90c2c767419f none swap sw 0 0
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
download paket instalasi dari alamat ini,
https://packages.debian.org/squeeze/i386/quotatool/download
lakukan instalasi dengan cara
~:#dpkg -i <nama paket>
atau anda bisa dengan cara berikut dengan catatan anda telah terhubung ke server repository!
~:#apt-get install quota quotatool
Konfigurasi
---------------------------
Memberikan script pada direktory /home (direktory home terpisah dari partisi / )
~:#nano /etc/fstab
# /etc/fstab: static file system information.
#
# Use 'blkid' to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point> <type> <options> <dump> <pass>
# / was on /dev/sda5 during installation
UUID=556f39e0-c5fc-4c08-9a05-77fc3414298e / ext4 errors=remount-ro 0 1
# /home was on /dev/sda6 during installation
UUID=4d5a3bda-1851-45cd-a449-27a90af293bd /home ext4 defaults,usrquota,grpquota 0 2
# swap was on /dev/sda1 during installation
UUID=c6986195-c51e-401b-b04a-90c2c767419f none swap sw 0 0
/dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
simpan konfigurasi kemudian reboot system,
Konfigurasi quoata pada direktory /home
~:#quotacheck -um /home
~:#quotaon -uv /home
| output --> /dev/mapper/vg_target 00 ........ [/home] = userquotas turned on
Melakukan pemeriksaan hasi konfigurasi quota
~:#quotaon -p -a
| out put
| group quota on /dev/mapper/vg_target 00 ........ is off
| user quota on /dev/mapper/vg_target 00 .......... is on
|
Mengatur quota untuk user
~:#edquota -u mardjito
| Disk Quota for user mardjito .......
| file system block soft hard inodes soft hard
| /dev/mapper/......... 32 1024000 2048000 8 0 0
|
Melihat hasil konfigurasi
~:#repquota -a
|Menerapkan konfigurasi suatu user ke user lainnya
~:#edquota -p mardjito lukman
instalasi dan konfigurasi samba server
Instalasi dan Konfigurasi Samba Server
Konfigurasi interface
~:#nano /etc/network/interfaces
| .....
| auto eth0
| iface eth0 inet static
| address 192.168.1.10
| netmask 255.255.255.0
Restart layanan network
~:# /etc/init.d/networking restart
Instalasi paket aplikasi samba
~:#apt-get install samba
Konfigurasi
~:# nano /etc/samba/smb.conf
| === Global ===
| workgroup = WORKGROUP
| interface = 127.0.0.0/8 eth0
| bind interface only = yes
|
| === Authentication ==
| security = user # untuk mengaktifkan valid user access
|
| === Share Definition ==
| ....
| #tambahkan script berikut ini!
| [siswa]
| path = /home/siswa
| wiriteable = yes
| create mode = 0770
| directory mode = 0770
| share modes = yes
| guest ok = no
| valid users = @siswa
| ....
simpan konfigurasi dengan menekan tombol ctrl X
konfigurasi samba selesai, selanjutnya bikin Grup
~:# groupadd siswa
buat direktory untuk group siswa
~:#mkdir /home/siswa
ganti group /home/siswa dari root menjadi siswa
~:#chgrp siswa /home/siswa
ganti mode direktry siswa ke mode 0770
~:#chmod 777 /home/siswa/ -R
Selanjutnya buat user,
~:#useradd mardjito
~:#smbpasswd -a mardjito
new smb password = ******* (konfirmasi 2x)
memasukkan user mardjito ke group siswa
~:#usermod -G siswa mardjito
restart layanan samba
~:#/etc/init.d/samba restart
akses layanan samba dari PC Client dengan memberikan identitas IP Address satu kelas dengan PC Server
ex. PC Server (192.168.1.10/24) ---------- PC Client (192.168.1.11/24)
buka windows Explorer pada PC client, kolom address bar isikan text berikut ini
| \\192.168.1.10
masukkan username dan password.
note :
setiap mengakses layanan samba, maka username dan password anda akan direkam oleh system PC Client,
untuk menghapus session, ketik script berikut pada CMD
net use \\ipserver\direktory yang diakses /delete
semoga berhasil!
Konfigurasi interface
~:#nano /etc/network/interfaces
| .....
| auto eth0
| iface eth0 inet static
| address 192.168.1.10
| netmask 255.255.255.0
Restart layanan network
~:# /etc/init.d/networking restart
Instalasi paket aplikasi samba
~:#apt-get install samba
Konfigurasi
~:# nano /etc/samba/smb.conf
| === Global ===
| workgroup = WORKGROUP
| interface = 127.0.0.0/8 eth0
| bind interface only = yes
|
| === Authentication ==
| security = user # untuk mengaktifkan valid user access
|
| === Share Definition ==
| ....
| #tambahkan script berikut ini!
| [siswa]
| path = /home/siswa
| wiriteable = yes
| create mode = 0770
| directory mode = 0770
| share modes = yes
| guest ok = no
| valid users = @siswa
| ....
simpan konfigurasi dengan menekan tombol ctrl X
konfigurasi samba selesai, selanjutnya bikin Grup
~:# groupadd siswa
buat direktory untuk group siswa
~:#mkdir /home/siswa
ganti group /home/siswa dari root menjadi siswa
~:#chgrp siswa /home/siswa
ganti mode direktry siswa ke mode 0770
~:#chmod 777 /home/siswa/ -R
Selanjutnya buat user,
~:#useradd mardjito
~:#smbpasswd -a mardjito
new smb password = ******* (konfirmasi 2x)
memasukkan user mardjito ke group siswa
~:#usermod -G siswa mardjito
restart layanan samba
~:#/etc/init.d/samba restart
akses layanan samba dari PC Client dengan memberikan identitas IP Address satu kelas dengan PC Server
ex. PC Server (192.168.1.10/24) ---------- PC Client (192.168.1.11/24)
buka windows Explorer pada PC client, kolom address bar isikan text berikut ini
| \\192.168.1.10
masukkan username dan password.
note :
setiap mengakses layanan samba, maka username dan password anda akan direkam oleh system PC Client,
untuk menghapus session, ketik script berikut pada CMD
net use \\ipserver\direktory yang diakses /delete
semoga berhasil!
Subscribe to:
Comments (Atom)