· 9 years ago · Sep 05, 2016, 05:12 AM
1# HASIL COPAS :D #
2# ZHIA CYBER #
3# SPESIAL TANKS BUAT GURU #
4# MIKROTIKSQUIDLOVER & MAS SUTA ADMIN DOKTER-SQUID.COM #
5# BESERTA REKAN-REKAN MIKROTIK-SQUID INDONESIA #
6# #
7# # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # # #
8
9cache_mgr admin_squid@dokter-squid.com
10visible_hostname s-proxy1-dsi
11
12acl localnet src 10.0.0.0/8 # RFC1918 possible internal network
13acl localnet src 172.16.0.0/12 # RFC1918 possible internal network
14acl localnet src 192.168.0.0/16 # RFC1918 possible internal network
15acl localnet src fc00::/7 # RFC 4193 local private network range
16acl localnet src fe80::/10 # RFC 4291 link-local (directly plugged) machines
17
18acl SSL_ports port 443
19acl Safe_ports port 80 # http
20acl Safe_ports port 21 # ftp
21acl Safe_ports port 443 # https
22acl Safe_ports port 70 # gopher
23acl Safe_ports port 210 # wais
24acl Safe_ports port 1025-65535 # unregistered ports
25acl Safe_ports port 280 # http-mgmt
26acl Safe_ports port 488 # gss-http
27acl Safe_ports port 591 # filemaker
28acl Safe_ports port 777 # multiling http
29acl CONNECT method CONNECT
30
31#ACL BLOKIR (COPAS DOKTER-SQUID.COM)
32acl blokir dstdomain "/etc/squid/blokir"
33acl jam_blokir time SMTWHFA 07:00-20:00
34
35acl getmethod method GET
36acl PURGE method PURGE
37
38#ACL STOREID
39acl id_url url_regex -i ^http.*\.googlevideo\.com\/videoplayback\?
40acl id_url url_regex -i ^https?:\/\/download[0-9]+.mediafire\.com\/.*
41acl id_url_domain dstdomain .steampowered.com .steamcontent.com
42#acl id_url url_regex -i ^https?:\/\/(.*)\.adobe\.com\/.*\/(.*[\.cab|\.aup|\.exe|\.msi|\.upd|\.msp])
43
44#ACL PATRIAL CONTENT
45#acl 206_url url_regex -i ^http:\/\/server[0-9]\.nanafile\.com\/.*\.mp4
46
47#REP_MIME_TYPE
48acl mimetomiss rep_mime_type -i mime-type ^text/html #BELUM TAU CARA KERJANYA HANYA COPAS BIAR YOUTUBE GAK KESEMUTAN
49acl mimetomiss rep_mime_type -i mime-type ^text/plain
50
51# Recommended minimum Access Permission configuration:
52#
53# Deny requests to certain unsafe ports
54http_access deny !Safe_ports
55http_access deny CONNECT !SSL_ports
56http_access allow localhost manager
57http_access deny manager
58http_access allow localhost purge
59http_access deny purge
60http_access deny blokir jam_blokir
61http_access allow localnet
62http_access allow localhost
63http_access deny all
64
65deny_info http://internetpositif.uzone.id blokir jam_blokir
66
67http_port 3128
68http_port 3129 tproxy
69https_port 3127 tproxy ssl-bump generate-host-certificates=on dynamic_cert_mem_cache_size=4MB cert=/etc/squid/ssl_cert/warnet.pem
70
71#http://empire.goodgamestudios.com/
72acl bypass_ssl dst 37.48.88.132
73#acl bypass_ssl dst 94.236.124.241 94.236.46.101
74acl bypass_ssl dst 203.117.172.5 203.117.155.98 #GCA GARENA
75acl bypass_ssl dst 130.211.14.80 #pokemon
76#acl bypass_ssl dst 239.1.1.0/24 #USEETV
77#acl bypass_ssl dst 202.93.21.243 202.93.21.242
78#acl bypass_ssl dst 103.28.106.134 103.248.57.26
79#acl bypass_ssl dst 74.125.130.0/24 #google.com
80#acl bypass_ssl dst 74.125.68.0/24 #google.com
81#acl bypass_ssl2 dstdomain .gmail.com .mail.google.com
82#acl bypass_ssl2 dstdomain .pk.narvalous.com
83acl bypass_ssl3 ssl::server_name "/etc/squid/splice"
84#acl bypass_ssl3 ssl::server_name ib.bri.co.id
85#acl bypass_ssl3 ssl::server_name topupxshot.winnerinter.co.id
86#BBM-http://bgp.he.net/search?search%5Bsearch%5D=blackberry+messenger&commit=Search
87acl bypass_ssl dst 68.171.224.0/19 #BBM
88acl bypass_ssl dst 74.82.64.0/19 #BBM
89ssl_bump splice localhost
90ssl_bump splice bypass_ssl
91#ssl_bump splice bypass_ssl2
92ssl_bump splice bypass_ssl3
93acl step1 at_step SslBump1
94acl step2 at_step SslBump2
95acl step3 at_step SslBump3
96ssl_bump peek step1 all
97ssl_bump bump all
98sslproxy_cert_error allow all
99sslproxy_flags DONT_VERIFY_PEER
100sslproxy_options NO_SSLv2,NO_SSLv3,SINGLE_ECDH_USE #Jika menggunakan versi setelah squid-3.5.12-20151222-r13967
101sslproxy_cipher EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:HIGH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS
102
103cache_dir aufs /cache 170000 100 256 #INI BUAT APA YA? :V
104cache_dir aufs /cache1 450000 100 256 #INI BUAT APA YA? :V
105cache_mem 8 MB #RAM 4GB GAK BERANI BESAR
106
107cache_replacement_policy heap LFUDA
108memory_replacement_policy heap GDSF
109
110#Maximum Object Size
111maximum_object_size 300 MB #MAX UKURAN FILE YANG INGIN DI CACHE
112maximum_object_size_in_memory 8192 bytes #KALAU RAM BESAR BISA DIKASI 1024 KB (SAYA PAKE RAM 4GB)
113
114#partial 206
115#range_offset_limit 1 MB
116#atau (pilih salah satu)
117#request_header_access Range deny all
118
119# Leave coredumps in the first cache dir
120coredump_dir /var/log/squid
121
122#debugging
123strip_query_terms off
124#debug_options 11,2 22,3
125logfile_rotate 5 #MENYIMPAN ACCESS.LOG KETIKA MELAKUKAN PERINTAH SQUID -K ROTATE (GAK TAU BENAR GAK NYA :V)
126#cache_store_log /var/log/squid/store.log
127
128#ECAP BERFUNGSI MENENTUKAN QUALITY VIDEO YOUTUBE YANG DI BUKA CLIENT
129#yt_quality: tiny = 144px small = 240px medium = 360px large = 480px HD720 = Hd720px
130acl youtube_240 dstdomain .youtube.com
131request_header_access Accept-Encoding deny youtube_240
132loadable_modules /usr/local/lib/ecap_adapter_modifying.so
133ecap_enable on
134ecap_service ecapModifier respmod_precache uri=ecap://dokter-squid.com/ecap yt_quality=medium #BILA INGIN MENGGANTI QUALITAS RESOLUSI YOUTUBE
135adaptation_access ecapModifier allow youtube_240
136adaptation_access ecapModifier deny all
137
138acl loop_302 http_status 302
139send_hit deny loop_302
140
141#storeid
142store_id_program /etc/squid/storeid.pl
143store_id_children 50 startup=5 idle=2 concurrency=200
144store_id_access deny !getmethod
145store_id_access allow id_url
146store_id_access allow id_url_domain
147store_miss deny mimetomiss
148send_hit deny mimetomiss
149store_id_access deny all
150store_id_extras "%{Referer}>h %>a/%>A %un %>rm myip=%la myport=%lp"
151
152#request_header_access Range deny 206_url
153
154# WCCP2
155wccp2_router 192.168.16.1
156wccp2_forwarding_method l2
157wccp2_return_method l2
158wccp2_service standard 0
159
160#tunning
161reload_into_ims on #reload/jika berubah refresh pattern yang bekerja
162quick_abort_min 0 KB #tidak melanjutkan request
163quick_abort_max 0 KB #tidak melanjutkan request
164quick_abort_pct 100 #melanjutkan request download jika kurang dari 100
165cache_swap_low 97
166cache_swap_high 98
167dns_v4_first on
168memory_pools off
169
170include /etc/squid/refresh.conf
171
172qos_flows local-hit=0x30 #BYPASS HIT DI MIKROTIKNYA BRO
173
174#------------- HaarpCache ------------------------
175#acl haarp_lst url_regex -i "/etc/haarp/haarp.lst"
176#never_direct allow haarp_lst
177#cache deny haarp_lst
178#cache_peer 192.168.16.2 parent 8080 0 no-tproxy #proxy-only no-digest
179#dead_peer_timeout 2 seconds
180#cache_peer_access 192.168.16.2 allow haarp_lst
181#cache_peer_access 192.168.16.2 deny all