catatanku

DEBIAN SERVER

#Debian
1.pastikan semua perangkat siap
2.- ip server : 192.168.10.xxx/29 = N 11 = 0,8,16,24,32,40,48,56,64,72,80,:81 82
  - ip client : 192.168.3\20.xxx/28 = N 14 =  0,16,32,48,64,80,96,112,128,144,160,176,192,108:109 110
3 -name server address kasih ip address diawal tadi
4.hostname terserah
5.domain terserah.net
6.root pass 123
7.fullname nama sendiri
8.pass 123
9.partisi swap 2x ram
10.partisi ext4 sisa
11.finish
12.scan another cd or dvd ; no1
13.pakage survey : no
14.cabut cd-drivernya

#pindah ke Router
1.masuk winbox
2.ip-dhcp client-add-eth:eth1(yg terhubung ke internet)-apply-ok-tunggu statusnya:bound
3.cek tes ping di terminal sampai bisa
4.berikan ip client-ip server
5.ip server : misal 192.168.40.90/29 (yg 90 gateway server),apply-ok
6.ip client : misal 192.168.30.129/28 (yg 129 gateway client) apply-ok
7.wireless - mode:ap-bridge - band 2ghz-b/g/n ssid: terserah -apply -ok
8.ip- firewall - NAT - add - chain:srcnat - out.intrf:ether1 - action:masqurade -apply -ok
9.ip- DNS -allow remote request centang - add - name:domainkamu -address:192.168.40.89
atau name:google address:8.8.8.8 dan name:google2 addrs 8.8.4.4

#client
1.konekan ke wifi yg tadi dibuat,
2.kalo belum terhubung,kasih ip secara manual misal:192.168.30.130 ,subnet mask:255.255.255.252
gateway:192.168.30.129 ,dns1 : ipserver :192.168.40.89 ,dns2 ip google :8.8.8.8



#pindah ke debian
1.nano /etc/network/interfaces
-allow hotplug ganti auto
-cek address sama seperti diawal tadi 192.168.40.89
-netmask 248
-network 192.168.40.88
-broadcast 192.168.40.95
-gateway 192.168.40.90
-dns nameserver 192.168.40.89
2.nano /etc/resolv.conf
-tambahkan dns google
-nameserver 8.8.8.8
-nameserver 8.8.4.4
3.restart networknya : service networking restart
pastikan ok

pindahkan kabel utp ke server

4.ping google.com sampai ttl

masukkan cd 1
5.eject
-apt-cdrom add
-sampai ok
6.apt-get apache2 php5
bar kuwi check o nak chrom ip servermu
7.apt-get install ssh (remote server)-agar bisa diremot dari luar dengan memasukkan ip server
8.remote melalui putty dilaptop
-masukkan ip server
-login,pass ke server
-edit source list dengan cara  :nano /etc/apt/sources.list
-tambhkan pagar # di :
deb cdrom:[Debian GNU/Linux 7.6.0 _Wheezy_ - Official i386 DVD Binary-1 201407$
deb http://security.debian.org/ wheezy/updates main contrib
deb-src http://security.debian.org/ wheezy/updates main contrib

-dibawahnya yg sudah ditambahkan pagar tambahkan :
deb http://kambing.ui.ac.id/debian/ wheezy main contrib non-free
deb http://kambing.ui.ac.id/debian/ wheezy-updates main contrib non-free
deb http://kambing.ui.ac.id/debian-security/ wheezy/updates main contrib non-free

-apt-get update
-apt-get install bind9 squid -y

kembali ke server debian
9.cd /var/www/
10.mcedit /var/www/index.html : (mengedit html dasar)
-edit terserah
-save

kembali ke putty
11.-cd /etc/bind/



12.-cp db.local db.debian
   -cp db.127 db.ip
13.-mcedit db.debian
-f4
-localhost - bersama.net - all
-ip diganti ip server
-f10
14.-mcedit db.ip
-f4
-localhost - bersama.net - all
-1.0.0.0 diganti ip terakhir server : 192.168.40.89 :yg diambil 89
-f10
15.-mcedit named.conf.default-zones
-ganti localhost dgn domain kita
-db.local ganti db.debian
-127 diganti ip server kita secara terbalik 40.168.192
-db.127 diganti dengan db.ip
16.-mcedit named.conf.options
-hapus tanda miring forwarder dan bawahnya juga (3 baris)
-0.0.0.0; ganti ip server kita : 192.168.40.89
-f10
17.service bind9 restart
18.nslookup domain.net
19.-mcedit atau nano /etc/squid/squid.conf
-tambahkan kalimat dibawah ini diatas wellcom
-http_port 3128 transparent
-cache_mem 8 mb
-cache_dir ufs /var/spool/squid 100 16
-cache_mgr admin@bersama.net
-visible_hostname siadmin
-acl lan src 192.168.30.128/28(network ip client)
-acl kata url_regex -i "/etc/squid/kata.txt"
-acl domain dstdomain "/etc/squid/domain.txt"
-http_access deny kata
-http_access deny domain
-http_access allow lan

20.-nano /etc/squid/domain.txt (alamat yg mau diblok)
21.-nano /etc/squid/kata.txt ( kata yg diblok)
22.-service squid restart

#masuk Ke Winbox
1.ip - firewall - nat - add - chain;dstnat -protocol:6(tcp) - dstport:80 - in.itrf:wlan1(client)
action:dstnat ,to address:192.168.40.89 (ip server),to ports:3128