Install Squid-3.4.8 ( Intercept Mode ) di FreeBSD 10 64 bit dengan ZFS file system

Bismillahirrohmanirrohiim .
Bahan - bahan :
1. CPU dgn processor 64 bit  ( AMD atau Intel ).
2. RAM 4 GB
3. Harddisk 300 GB
4. Flashdisk Minimal 1 GB
5. Win32 Disk Imager , dapat didownload disini : http://sourceforge.net/projects/win32diskimager/
6. Image Freebsd 10 , download disini : http://mfsbsd.vx.sk/files/images/10/amd64/mfsbsd-se-10.0-RELEASE-amd64.img
7. Rokok , Capucino dan obat sakit kepala :p .

DnsCrypt + Unbound Untuk membuka filtering internet dari ISP

Source : Zoky Raharjo dari Grup Mikrotik-Squid Indonesia
1. install paket buat compile dlu,bisa dilewati jika sudah terinstall sebelumnya
# apt-get install build-essential
2. install packet pendukung dnscrypt
# wget https://download.libsodium.org/libsodium/releases/libsodium-0.7.0.tar.gz
# tar -xvzf libsodium-0.7.0.tar.gz
# cd libsodium-0.7.0
# ./configure
# make && make install
3. install dnscrypt
# wget http://download.dnscrypt.org/dnscrypt-proxy/dnscrypt-proxy-1.4.0.tar.gz
# tar xvf dnscrypt-proxy-1.4.0.tar.gz
# cd dnscrypt-proxy-1.4.0
# ./configure
# make && make install
4. eksekusi dnscrypt agar runing
# /usr/local/sbin/dnscrypt-proxy -a 127.0.0.1:40 -d -R d0wn-sg-ns1 -e 4096 -p /run/dnscrypt-proxy.pid

Install Unbound ( Dns Resolver ) di Ubuntu 14.04 LTS

Unbound Berguna untuk mempercepat dns resolve.
Langkah berikut adalah cara install unbound di ubuntu server 14.04 LTS
Install dulu paket yang diperlukan :
#sudo apt-get update ( selalu jalankan ini untuk mengecek list server terbaru )
Setelah itu
# apt-get install unbound
# killall unbound
# dig +bufsize=1200 +norec NS . @a.root-servers.net > /etc/unbound/named.cache
Lalu tambahkan ini di /etc/unbound/unbound.conf :

# Unbound configuration file for Debian. # # See the unbound.conf(5) man page. # # See /usr/share/doc/unbound/examples/unbound.conf for a commented # reference config file. # # The following line includes additional configuration files from the # /etc/unbound/unbound.conf.d directory. #include: "/etc/unbound/unbound.conf.d/*.conf" server: verbosity: 1 statistics-interval: 120 #Tergantung berapa core CPU anda num-threads: 2 statistics-cumulative: yes interface: 0.0.0.0 port: 53 outgoing-range: 950 num-queries-per-thread: 1024 #kalikan 2 dgn num-threads msg-cache-slabs: 4 rrset-cache-slabs: 4 infra-cache-slabs: 4 key-cache-slabs: 4 msg-cache-size: 50m rrset-cache-size: 100m so-rcvbuf: 4m so-sndbuf: 4m cache-min-ttl: 600 cache-max-ttl: 86400 access-control: 192.168.0.0/16 allow access-control: ::1 allow chroot: "" username: "unbound" directory: "/etc/unbound" #logfile: "/etc/unbound/unbound.log" use-syslog: no pidfile: "/var/run/unbound.pid" root-hints: "/etc/unbound/named.cache" identity: "DNS" version: "1.4" hide-identity: yes hide-version: yes harden-glue: yes harden-dnssec-stripped: yes do-not-query-address: 127.0.0.1/8 do-not-query-localhost: yes module-config: "iterator" forward-zone: name: "." forward-addr: 120.89.95.245 forward-addr: 120.89.95.246 forward-addr: 8.8.8.8 forward-addr: 8.8.4.4 # enable remote-control remote-control: control-enable: yes control-interface: 127.0.0.1 control-port: 953 server-key-file: "/etc/unbound/unbound_server.key" server-cert-file: "/etc/unbound/unbound_server.pem" control-key-file: "/etc/unbound/unbound_control.key" control-cert-file: "/etc/unbound/unbound_control.pem"
# Setelah itu anda klik save
Cek configurasi unbound :

#unbound-checkconf /etc/unbound/unbound.conf

Jika tidak ada error jalan unbound-control-setup :
#unbound-control-setup
Setelah itu jalan Unbound kembali :
#unbound-control start

Setting ubuntu agar mengunakan DNS unbound :
edit file di /etc/network/interfaces :
# nano /etc/network/interfaces
ganti dns-nameservers :
dns-nameserver 127.0.0.1

Setelah itu update resolv.conf :
#resolvconf -u

Edit squid.conf di line "dns_nameserver" menjadi :
dns_nameservers 127.0.0.1

reboot cpu server....
untuk mengecek DNS unbound sudah jalan ada beberapa cara :
#/etc/init.d/unbound status

atau dengan mengecek port 53 :
#lsof -i :53

# ps -fp 1055 ( 1055 adalah PID unbound yang didapat dari output lsof -i :53 )

Error yang biasa dihadapi ketika install unbound :
root@proxyku:~# /etc/init.d/unbound restart
* Restarting recursive DNS server unbound
[1335536129] unbound[17221:0] error: bind: address already in use
[1335536129] unbound[17221:0] fatal error: could not open ports        [fail]

solusinya : cek line ini di /etc/init.d/unbound

NAME=unbound
DESC="recursive DNS server"
DAEMON=/usr/local/sbin/unbound
PIDFILE="/etc/unbound/unbound.pid" <============ ini
CONFIG="/etc/unbound/unbound.conf" <============ sama ini

harus sama dgn yang diatas. Lalu reboot

Kalau masih error coba :
#apt-get autoremove bind9
atau :

#service dnsmasq stop

Coba test dns lookup nya 

# nslookup 192.168.0.200
Server: 127.0.0.1
Address: 127.0.0.1#53

200.0.168.192.in-addr.arpa name = regent.net 

Untuk memflush isi dns bisa lihat menu disini :
#unbound-control -h

Untuk melihat statistiknya :

#unbound-control stats

Isinya akan seperti ini :

thread0.num.queries=38
thread0.num.cachehits=7
thread0.num.cachemiss=31
thread0.num.recursivereplies=31
thread0.requestlist.avg=0.129032
thread0.requestlist.max=1
thread0.requestlist.overwritten=0
thread0.requestlist.exceeded=0
thread0.requestlist.current.all=0
thread0.requestlist.current.user=0
thread0.recursion.time.avg=0.088811
thread0.recursion.time.median=0.0185685
thread1.num.queries=10
thread1.num.cachehits=1
thread1.num.cachemiss=9
thread1.num.recursivereplies=9
thread1.requestlist.avg=0
thread1.requestlist.max=0
thread1.requestlist.overwritten=0
thread1.requestlist.exceeded=0
thread1.requestlist.current.all=0
thread1.requestlist.current.user=0
thread1.recursion.time.avg=0.049576
thread1.recursion.time.median=0.016384
total.num.queries=48
total.num.cachehits=8
total.num.cachemiss=40
total.num.recursivereplies=40
total.requestlist.avg=0.1
total.requestlist.max=1
total.requestlist.overwritten=0
total.requestlist.exceeded=0
total.requestlist.current.all=0
total.requestlist.current.user=0
total.recursion.time.avg=0.079984
total.recursion.time.median=0.0174763
time.now=1281681396.583885
time.up=7299.491047
time.elapsed=4177.655650

Kalau ditambahkan memakai mikrotik dan ubuntu sebagai proxy redirect dns supaya mengarah ke proxy . Disini ip proxy adalah 192.168.1.100. Tambahkan command berikut :
add action=dst-nat chain=dstnat comment=proxydns disabled=no dst-port=53 protocol=udp src-address=!192.168.1.100 to-addresses=192.168.1.100 to-ports=53