Proxy Server Debian

Introduction

Squid is a proxy server. It separates the internal network from the Internet for HTTP and FTP access. This way no user can access the Internet directly.

The official web site is not www.squid.org as may be expected, but http://www.squid-cache.org.

Squid Installation

#apt-get install squid

Configuration

The squid configuration can be found in /etc/squid/squid.conf

Configuration Sections Explained Below

General

http_port 3128

icp_port 3130

htcp_port 4827

cache_mem 16 MB

refresh_pattern . 0 20% 8640

hierarchy_stoplist cgi-bin ?

acl QUERY urlpath_regex cgi-bin \?

no_cache deny QUERY

# snews 563

# gopher 70

# wais 210

acl www_ports 80 443

acl ftp_ports 21

acl localhost src 127.0.0.1/32

acl all src 0.0.0.0/0.0.0.0

acl manager proto cache_object

acl CONNECT method CONNECT

acl PURGE method PURGE

http_access allow manager localhost

http_access deny manager

http_access allow PURGE localhost

http_access deny PURGE

Specials

acl executables url_regex [.]exe$

http_access deny executables

authenticate_program /usr/lib/squid/smb_auth -W DOMEIN -U SERVER

acl network proxy_auth REQUIRED

http_access allow users network

cache_peer proxy1.test.net parent 3128 7 no-query default

HTTP

acl wwwusers src 192.168.2.0/24

http_access allow wwwusers www_ports

FTP

ftp_user Squid@domain1.com

ftp_passive off

acl ftpusers src 192.168.2.0/24

http_access allow ftpusers ftp_ports

Deny all

never_direct allow all

always_direct deny all

http_access deny all

icp_access allow all

miss_access allow all 

Reference links

http://learnlinux.tsf.org.za/courses/build/electives/ch03s03.html

http://www.debian-administration.org/articles/71

http://www.debianhelp.co.uk

Read More

Mail Server Debian (SquirrelMAIL)

Installing SquirrelMail in Debain

#apt-get install squirrelmail

You'll see that it depends on squirrelmail-locales, the translations package. If you're using etch or sid, the squirrelmail-locales package is only recommended, so you can remove it if you have English speaking users exclusively.

Configuring Squirrelmail in Debian

#squirrelmail-configure

This will start an interactive menu where all possible aspects of SquirrelMail can be configured. Start with the bottom option, D. Set pre-defined settings for specific IMAP servers. This preloads some settings specifically for your IMAP server package.

Menu 1

Organisation Preferences, enables you to brand SquirrelMail with your own system name and logo

Menu 2

Server Settings is for configuring the backends of your webmail. The option "Domain" is the domain that is appended to your outgoing email. By default this is read from /etc/mailname.

Press A to configure your IMAP server. Changing the options "Authentication Type" and "TLS" will make the connection with your IMAP server more secure. However, this only makes sense when your IMAP server is not on localhost; encrypting traffic over the local interface is wasting processor cycles. The option Server Software should already be set to to your IMAP server package when you loaded the predefined settings. Option B, SMTP settings, should not have to be changed in most cases.

Menu 3

Folder Defaults can safely be left untouched. Under 4, General Options, you can make some tweaks. Be sure to set option 11, allow server-side sorting. This greatly improves SquirrelMail performance and works with nearly all IMAP servers. Feel free to look around the configuration options. I'd advise not to enable any plugins until you've verified that your current setup actually works. Once it does, you can add plugins. If something breaks, you'll know which plugin to blame.

Press S to save and Q to quit. Under /etc/squirrelmail you'll also find some configuration files for plugins and the file default_pref where you can set default preferences for new users.

Now to make the install web-accessible. With the configuration files you'll find an Apache configuration snippet you can edit and add to your Apache config. It's wise to add it to the configuration of Apache-SSL aswell, so your users can access their mailbox over a secure connection. After that, reload Apache.

Apache Configuration For webmail

If you want to check apache installation click here

If you want to check apache virtual hosts configuration click here

Edit the /etc/apache2/sites-available/configfile.conf (this file name may vary from person to person) Apache configuration file and add the following block:

1.2.3.4:80>
ServerName mail.youydomain.com
ServerAlias mail.*
ServerAdmin postmaster@yourdomain.com
DocumentRoot /home/www/webmail

Here's a breakdown of what's above:

- This indicates I'm setting up my mail interface as a virtual host, rather than IP based. Obviously, you're going to want to replace 1.2.3.4 with the IP address of your web server. Additionally, what you have here may vary from server to server and is dependent on how you have your Apache configured. Be cautious!

ServerName mail.yourdomain.com - The official name of the webmail server virtual host.

ServerAlias mail.* - This line establishes a wildcard serveralias called mail.*. With this setup, any domain that is pointed to your server and that has an A record called "mail", will be able to get to the webmail interface by simply going to http://mail.whateverdomain.com. This is a pretty cool little feature and makes accessing the webmail interface easy for all of your users.

ServerAdmin postmaster@yourdomain.com - The server administrative contact. This is not required, but I like to include it.

DocumentRoot /home/www/webmail - The document root of your webmail interface. This will vary, depending on where you chose to install Squirrelmai. In this example, you can see that I installed it at /home/www/webmail

- The closing tag to the virtualhost.

Make sure you restart Apache after making the above changes.

Now go to https://webmail.test.com/src/configtest.php (if you configured SquirrelMail at the webmail.example.com virtual host). If this configuration test doesn't turn up any errors, proceed to https://webmail.test.com. You will be presented with a login screen. Enter your username and password (the same as your system login). If all went fine you should see your mailbox.

If it does not work, check whether your browser has cookies enabled. Also verify whether your IMAP server is working correctly (in its logs, and/or with a regular IMAP mail client). You can also check your webserver logs for any error messages.

References

http://www.squirrelmail.org/wiki/SquirrelMail

More Webmail Software

http://openwebmail.org/

http://eaccelerator.net

Read More

ftp Server Debian (proftp)

Langsung saja >>

• install ftp server :

#apt-get install proftpd

• browsing IP komputer server (192.168.1.1 ) pada mozila atau IE
• Install file zilla client masukan IP dan user/password

Read More

Web Server Debian

LangkahMembuat Web server cukup mudah dengan 2 langkah saja

1. Install Web servernya (apache2) :

#apt-get install apache2

2. Install PHP (PHP5)

#apt-get install libapache2-mod-php5 php5-cli php5-common php5-cgi

kemudian taruh server web di /var/www

semoga bermanfaat!!!

Read More

DHCP Server ( Dynamic Host Configuration Protocol ) "dhcp3-server"

---------------------------------------------------------------------------------------

1. Install paket dhcp server

# apt-get install dhcp3-server

2. Konfigurasi dhcp server

# pico /etc/dhcp3/dhcp.conf

cari kode :

------------------------------------------------------------------------------------------------

optiondomain-name-servers 192.168.254.1; (...Ket : IP DNS)
subnet 192.168.1.0 netmask 255.255.255.0 { (...Ket : NET ID dan NETMASK)
range 192.168.1.50 192.168.1.100; (...Ket : Range IP)
optiondomain-name-servers 192.168.254.1; (...Ket : IP DNS)
option domain-name “erickiso.com”; (...Ket : domain)
option routers 192.168.1.254; (...Ket : IP GATEAWAY)
option broadcast-address 192.168.1.101; (...Ket : IP BROADCAST)
default-lease-time 3600;
max-lease-time 7200;
}

-----------------------------------------------------------------------------------------------

3. Konfigurasi interface default

# pico /etc/default/dhcp

cari kode :

-----------------------------------------------------------------------------------------------

INTERFACE=”eth0″

(interface yang digubakan sbg dhcp server)

-----------------------------------------------------------------------------------------------

Restart DHCP server

# /etc/init.d/dhcp3-server restart "jika tidak ada error, berarti konfigurasi benar dan lacar...

4. Konfigurasi interface card

auto eth0
iface eth0 inet static
address 192.168.1.1
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.254

----------------------------------------------------------------------------------------

konfigurasi pada client dengan DHCP ...

Read More

File Sharing ( Samba Server) "samba"

-------------------------------------------------------------------------------------------
SAMBA (SERVER >> CLIENT)

-----------------
login sebagai root

• add mirror dari cd-rom : #apt-cdrom add
• Install Samba : #apt-get install samba
• edit file : #pico /etc/samba/smb.conf
• Cari Baris : -----Sharing Definition -----------
• tambahkan :
  

workgroup = workgroup

netbios = debianpian

security = share

[tkj]

path = /home/erickiso/

browseable= yes

available = yes

public = yes

writable = yes

simpan : ctrl + x, lalu tekan y

#cd /home/erickiso (folder sharing)

#pico /home/erickiso/TeknikInformatika.txt (file sharing)

ctrl + x, tekan y

Hak Akses :

#chmod -Rf 777 /home/pian/tkj

#chown -Rf 777 /home/pian/tkj

MENGINSTALL SMBCLIENT

----------------------

Install SAMBA CLIENT

#apt-get install sbmclient

melihat file sharing :

#smbclient -L //192.168.1.2 (sesuaikan dengan IP client)

password : (isi password root)

----------------------------------------------------------

Read More

DNS Server ( Domain Name System ) "bind9"

--------------------------------------------------------------------------------------------

Login Sebagai Root ;

1. Install Bind dengan cara :

server@root # apt-get install bind9 bind9-doc dnsutils

2. edit file named.conf :

server@root # /etc/bind/named.conf

4. Tambahkan konfigurasi di bawah kedalamnya :

zone "smkn1ckl.sch.id" {
type master;
file "/etc/bind/forward";
};

zone "1.168.192.in-addr.arpa" {
type master;
file "/etc/bind/reverse";
};

note : tanda hijau diubah sesuai kebutuhan untuk 1.168.1.192 (ip anda dibalik)

5. Copy file /etc/bind/db.local dengan nama /etc/bind/forward :

server@root # cp /etc/bind/db.local /etc/bind/forward

6. edit forward (IP Address >> DOMAIN :

server@root # pico /etc/bind/forward

$TTL 604800
@ IN SOA smkn1ckl.sch.id. root.smkn1ckl.sch.id. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS server.smkn1ckl.sch.id.
@ IN A 192.168.1.1
www IN CNAME server.smkn1ckl.sch.id.

server@root # cp /etc/bind/forward /etc/bind/reverse

$TTL 604800

@ IN SOA server.smkn1ckl.sch.id. root.smkn1ckl.sch.id. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS server.smkn1ckl.sch.id.

1 IN PTR 192.168.1.1

1 IN PTR www.smkn1ckl.sch.id.

(warna hijau sesuaikan dengan kebutuhan DNS)

NOTE : Jangan Lupa domain diakhiri tanda titik : smkn1ckl.sch.id. <<>

8. Reload bind :

server@root : #/etc/init.d/bind restart

Read More

SSH - Telnet ( Remote Server ) "ssh-server" DEBIAN 4.0 & other debian

---------------------------------------------------------------------------------

1. Login Sebagai Root :
   
2. Ketik Perintah :
   
#apt-get install telnetd
3. tes dengan menggunakan perintah:
#telnet 127.0.0.1

Note : karena telnet bekerja di format clear text. gunakan tools ssh yang bekerja pada port 22 sebagai default

Cara menginstall ssh :

1. Login Sebagai Root :
2. Ketik Perintah :
#apt-get install ssh
3. tes dengan menggunakan perintah:
#ssh 127.0.0.1
Masukan username dan password untuk root anda:
Hasilnya akan seperti gambar dibawah ini :

>> tes service telnet dan ssh berjalan / tidak :

#nmap 127.0.0.1

Read More

IP-Address DEBIAN 4.0 & other debian

IP ADDRESS DEBIAN :

--------------

• Ketik perintah :

# pico /etc/network/interfaces

• Cari Baris :

----------------------------------------------------------------------------------

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
allow-hotplug eth0
iface eth0 inet static
address 192.168.1.1
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.254

----------------------------------------------------------------------------------
note : tanda merah silah kan isi sesuai dengan kebutuhan IP Address :

• Save / simpan ketik perintah :

Ctrl + x,
Tekan y
Tekan Enter

• restart ip :

#/etc/init.d/networking restart

IP DNS :

# pico /etc/resolv.conf

name server 192.168.1.1

catatan : tanda merah sesuaikan dengan kebutuhan

Read More

Admin Server Linux Debian etch 4.0 & other debian

------------------------------------------------------------------------------------------
-----------------------------------------------------------------
-----------------------------


Configuration :

1. IP-Address
   
2. SSH - Telnet ( Remote Server ) "ssh-server"
3. DNS Server ( Domain Name System ) "bind9"
• Forward ( Name / Domain >> IP Address)
  
• Reverse ( IP Address >> Name / domain )
4. File Sharing ( Samba Server) "samba"
5. DHCP Server ( Dynamic Host Configuration Protocol ) "dhcp3-server"
6. FTP Server ( File Transper Protocol ) "proftpd"
7. Web Server "apache2"
• php (Hypertext Preprocessor)
• mysql (data base)
8. Mail Server "postfix"
9. Web Mail "squirrelmail"
10. Proxy Server "squid"

Read More