• Cara Mengkonfigurasi Linux Debian Sebagai Router (Static Routing & Internet Gateway)

• Cara Konfigurasi Apache dengan SSL Menggunakan OpenSSL di Debian 9
• Konfigurasi Debian sebagai Certificate Authority dan Web HTTPS
• Cara Install dan Konfigurasi DNS server pada debian 9

root@PROXY-SERVER:~# apt-get update
root@PROXY-SERVER:~# apt-get install squid -y
root@PROXY-SERVER:~# apt-get install -f

root@PROXY-SERVER:~# cd /etc/squid/
root@PROXY-SERVER:/etc/squid# cp squid.conf{,.backup}

root@PROXY-SERVER:/etc/squid# nano squid.conf
#  TAG: cache_mgr
cache_mgr kevin@setyasite.com >>> Cari dengan kata kunci cache_mgr
........
..............
#  TAG: visible_hostname
#Default:
visible_hostname setyasite.com >>> Cari dengan kata kunci visible_hostname
.......
.............
# And finally deny all other access to this proxy
# http_access deny all >>> Cari dengan kata kunci http_access deny all

acl CONNNECT method CONNECT
>>> Cari dengan kata kunci acl CONNNECT
acl lan src 192.168.10.0/24
acl client_nakal src 192.168.10.15-192.168.10.20
acl block-url dstdomain "/etc/squid/block-url"
http_access deny client_nakal
http_access deny block-url
http_access allow lan

root@PROXY-SERVER:/etc/squid# nano block-url
block.setyasite.com

root@PROXY-SERVER:~# service squid restart

root@PROXY-SERVER:~# cat /etc/resolv.conf 
nameserver 10.10.10.1

kevin@client:~$ cat /etc/resolv.conf 
nameserver 10.10.10.1
kevin@client:~$ ping setyasite.com
PING setyasite.com (10.10.10.3) 56(84) bytes of data.
64 bytes from setyasite.com (10.10.10.3): icmp_seq=1 ttl=63 time=0.579 ms
64 bytes from setyasite.com (10.10.10.3): icmp_seq=2 ttl=63 time=0.627 ms
64 bytes from setyasite.com (10.10.10.3): icmp_seq=3 ttl=63 time=0.663 ms
64 bytes from setyasite.com (10.10.10.3): icmp_seq=4 ttl=63 time=1.19 ms
^C
--- setyasite.com ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3045ms
rtt min/avg/max/mdev = 0.579/0.765/1.192/0.248 ms

kevin@client:~$ sudo ifconfig vboxnet0 192.168.10.17/24
kevin@client:~$ sudo route add def gw 192.168.10.1 dev vboxnet0

root@PROXY-SERVER:~# nano /etc/squid/squid.conf
# Squid normally listens to port 3128
http_port 3128 transparent

root@PROXY-SERVER:~# service squid restart

root@PROXY-SERVER:~# iptables -t nat -A PREROUTING -s 192.168.10.0/24 -p tcp --dport 80 -j REDIRECT --to-port 3128
root@PROXY-SERVER:~# iptables-save > /etc/network/iptables

root@DHCP-Server:~# sysctl -p

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.ip_forward = 1

root@DHCP-Server:~# sysctl -p

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.ip_forward = 1

root@DHCP-Server:~# apt-get install isc-dhcp-server

root@DHCP-Server:~# nano /etc/dhcp/dhcpd.conf

# A slightly different configuration for an internal subnet.
subnet 10.10.10.0 netmask 255.255.255.248 {
  option broadcast-address 10.10.10.7;
}
# Network For DHCP-Relay
subnet 10.30.100.0 netmask 255.255.255.0 {
  range 10.30.100.2 10.30.100.10;
  option domain-name-servers 10.30.100.1;
  option domain-name "tkjstudies.com";
  option routers 10.30.100.1;
  option broadcast-address 10.30.100.255;
  default-lease-time 600;
  max-lease-time 7200;
}

root@DHCP-Server:~# nano /etc/default/isc-dhcp-server

INTERFACESv4="enp0s3"

root@DHCP-Server:~# /etc/init.d/isc-dhcp-server restart

[ ok ] Restarting isc-dhcp-server (via systemctl): isc-dhcp-server.service.

root@DHCP-Server:~# route add -net 10.30.100.0 netmask 255.255.255.0 gw 10.10.10.2

root@DHCP-Relay:~# apt-get update
root@DHCP-Relay:~# apt-get install isc-dhcp-relay

root@DHCP-Relay:~# dhcrelay 10.10.10.1

Internet Systems Consortium DHCP Relay Agent 4.3.5
Copyright 2004-2016 Internet Systems Consortium.
All rights reserved.
For info, please visit https://www.isc.org/software/dhcp/
Listening on LPF/enp0s8/08:00:27:5a:d1:13
Sending on   LPF/enp0s8/08:00:27:5a:d1:13
Listening on LPF/enp0s3/08:00:27:24:37:06
Sending on   LPF/enp0s3/08:00:27:24:37:06
Sending on   Socket/fallback

root@router:~# nano /etc/network/interfaces

auto enp0s3
iface enp0s3 inet static
address 10.30.100.1
netmask 255.255.255.0
auto enp0s8
iface enp0s8 inet static
address 192.168.10.1
netmask 255.255.255.0

root@router:~# /etc/init.d/networking restart

[ ok ] Restarting networking (via systemctl): networking.service.

root@router:~# nano /etc/sysctl.conf 

net.ipv4.conf.default.rp_filter=1
net.ipv4.conf.all.rp_filter=1
net.ipv4.ip_forward=1

root@router:~# sysctl -p 

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.ip_forward = 1

root@Router-1:~# nano /etc/network/interfaces

auto enp0s3
iface enp0s3 inet static
address 10.30.100.1
netmask 255.255.255.0
auto enp0s8
iface enp0s8 inet static
address 10.10.10.1
netmask 255.255.255.252

root@Router-1:~# /etc/init.d/networking restart

[ ok ] Restarting networking (via systemctl): networking.service.

root@Router-2:~# nano /etc/network/interfaces

auto enp0s3
iface enp0s3 inet static
address 10.10.10.2
netmask 255.255.255.252
auto enp0s8
iface enp0s8 inet static
address 192.168.10.1
netmask 255.255.255.0

root@Router-2:~# /etc/init.d/networking restart

[ ok ] Restarting networking (via systemctl): networking.service.

root@Router-1:~# sysctl -p

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.ip_forward = 1

root@Router-2:~# sysctl -p

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.ip_forward = 1

root@Router-1:~# route add -net 192.168.10.0 netmask 255.255.255.0 gw 10.10.10.2

root@Router-2:~# route add -net 10.30.100.0 netmask 255.255.255.0 gw 10.10.10.1

kevin@Servdeb:~$ sudo ifconfig vboxnet0 10.30.100.10/24
kevin@Servdeb:~$ sudo route add default gw 10.30.100.1

root@Router:~# nano /etc/network/interfaces

auto enp0s3
iface enp0s3 inet static
address 17.17.17.16
gateway 17.17.17.17
netmask 255.255.255.0
auto enp0s8
iface enp0s8 inet static
address 10.30.100.1
netmask 255.255.255.0

root@Router:~# /etc/init.d/networking restart

[ ok ] Restarting networking (via systemctl): networking.service.

root@Router:~# cat /etc/resolv.conf

nameserver 17.17.17.17
nameserver 8.8.8.8

root@Router:~# sysctl -p

net.ipv4.conf.default.rp_filter = 1
net.ipv4.conf.all.rp_filter = 1
net.ipv4.ip_forward = 1

root@Router:~# iptables -t nat -A POSTROUTING -o enp0s3 -j MASQUERADE
root@Router:~# iptables-save > /etc/network/iptables

# systemctl stop apache2
# systemctl disable apache2
# systemctl status apache2

# apt install nginx

# mkdir /var/www/web1.setyasite.com
# cd /var/www/web1.setyasite.com/
# nano index.html

<html>
    <head>
    <title> web1 </title>
    <head>
  <body bgcolor=#000000>
  <h1 style="color: #17ec25;">Welcome To web1.setyasite.com</h1>
               <hr width=100% align=center size=5% color="red">
  <h2 style="color: #ffffff;"><b>Belajar Mengkonfigurasi WEB Server Menggunakan NGINX Pada Linux Debian</b></h2>
  <p style="color: #30d0d5"><marquee><u><i>kevinsetyaone.blogspot.com</i></u> | <u><i>kevinsetyaone.blogspot.com</i></u> | <u><i>kevinsetyaone.blogspot.com</i></u></marquee></p>
</body>
</html>

# mkdir -p /var/www/web2.setyasite.com
# cd /var/www/web2.setyasite.com
# nano index.html

<html>
    <head>
    <title> web2 </title>
    <head>
  <body bgcolor=#ffffff>
  <h1 style="color: #17ec25;">Welcome To web2.setyasite.com</h1>
               <hr width=100% align=center size=5% color="red">
  <h2 style="color: #000000;"><b>Belajar Mengkonfigurasi WEB Server Menggunakan NGINX Pada Linux Debian</b></h2>
  <p style="color: #30d0d5"><marquee><u><i>kevinsetyaone.blogspot.com</i></u> | <u><i>kevinsetyaone.blogspot.com</i></u> | <u><i>kevinsetyaone.blogspot.com</i></u></marquee></p>
</body>
</html>

# cd /etc/nginx/sites-available/
# nano web1.setyasite.com.conf

server {
        listen 80;
        listen [::]:80;
 
        server_name web1.setyasite.com;
        root /var/www/web1.setyasite.com/;
 
        access_log /var/log/nginx/linux.oke.access.log;
        error_log /var/log/nginx/linux.oke.error.log warn;
}

# nano web2.setyasite.com.conf

server {
        listen 80;
        listen [::]:80;

        server_name web2.setyasite.com;
        root /var/www/web2.setyasite.com/;

        access_log /var/log/nginx/debian.oke.access.log;
        error_log /var/log/nginx/debian.oke.error.log warn;
}

# ln -s /etc/nginx/sites-available/web1.setyasite.com.conf /etc/nginx/sites-enabled/
# ln -s /etc/nginx/sites-available/web2.setyasite.com.conf /etc/nginx/sites-enabled/

# nginx -t

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

# systemctl restart nginx
# systemctl status nginx

root@tkjstudies:~# apt-get install apache2 mysql-server php7.0

root@tkjstudies:~# apt-get install snmp snmpd

root@tkjstudies:~# apt-get update
root@tkjstudies:~# apt-get install cacti