.::PfSense ... oh ... PfSense::. (Page 18 of 19)

dgn meraba-raba sy coba instal yg ini:
$ squid -v
Squid Cache: Version LUSCA_HEAD-r14554
configure options:  '--bindir=/usr/local/sbin' '--sbindir=/usr/local/sbin' '--datadir=/usr/local/etc/squid' '--libexecdir=/usr/local/libexec/squid' '--localstatedir=/usr/local/squid' '--sysconfdir=/usr/local/etc/squid' '--enable-removal-policies=heap' '--disable-linux-netfilter' '--disable-linux-tproxy' '--disable-epoll' '--disable-unlinkd' '--with-coss-membuf-size=33554432' '--disable-wccpv2' '--with-pthreads' '--enable-storeio=aufs coss' '--enable-delay-pools' '--enable-snmp' '--disable-carp' '--disable-wccp' '--disable-ident-lookups' '--enable-arp-acl' '--enable-pf-transparent' '--with-large-files' '--enable-large-cache-files' '--enable-err-languages=English' '--enable-default-err-language=English' '--prefix=/usr/local' '--mandir=/usr/local/man' '--infodir=/usr/local/info/' '--build=i386-portbld-freebsd7.2' 'build_alias=i386-portbld-freebsd7.2' 'CC=cc' 'CFLAGS=-O2 -pipe  -fno-strict-aliasing' 'LDFLAGS=' 'CPPFLAGS='

tail -f /var/squid/log/access.log ---->ga jalan

$ tail -f /var/squid/log/cache.log ----> kayaknya ini erornya...
2010/10/10 05:35:46| Adding nameserver 8.8.4.4 from squid.conf
2010/10/10 05:35:46| helperOpenServers: Starting 4 'storeurl.pl' processes
2010/10/10 05:35:46| Accepting proxy HTTP connections at 10.1.11.1, port 3128, FD 19.
2010/10/10 05:35:46| Accepting transparently proxied HTTP connections at 10.1.11.1, port 80, FD 21.
2010/10/10 05:35:46| Accepting SNMP messages on port 3401, FD 22.
2010/10/10 05:35:46| AUFS: /var/squid/cache: log '/var/squid/cache/swap.state' opened on FD 23
2010/10/10 05:35:46| Loaded Icons.
2010/10/10 05:35:46| Ready to serve requests.
2010/10/10 05:39:35| ctx: enter level  0: 'http://www.charlesproxy.com/update.rdf'
2010/10/10 05:39:35| httpProcessReplyHeader: Too large reply header

di cachemgr.conf dah sy ganti pake port (localhost)
tolong bapak mohon penjelasannya. trims, trims, trims...

@ om serangku, lanjutkan bro, experimen - tips & trik pfsense.
makin lama makin penasaran dengan LUSCA-nya Mang Chudy.
mungkin sudah dibilang 10x saya mencoba new install- error running PFSense Compile Lusca..
tapi mesin masih belum running optimal, sepertinya saya ada yg salah disetting proxynya.
& terus mencoba untuk trial errornya bro.
alhamdulillah berkat tutorial dr forum sbelah, Mesin PFSense + LUSCA saat ini uda UP 3 hari & masih dipantau perkembangannya
TETAP SEMANGAT BRO ....

Om btw cara install pack unbound dns gimana yach. atau ada fetch urlnya, share donk.

<edit> sorry om, saya uda berhasil install unbound di Pfsense.
nice post & success selalu buat om Serangku
ini hasil oprekan gw & masih dipantau perkembangannya

please correct me if i am wrong.....
thanks om

#########################
# Unbound configuration #
#########################

###
# Server config
###
server:
verbosity: 1
port: 53
do-ip4: yes
do-ip6: no
do-udp: yes
do-tcp: yes
do-daemonize: yes
statistics-interval: 120
extended-statistics: yes
statistics-cumulative: no
# Interface IP(s) to bind to
interface: 192.168.0.1

chroot: "/usr/local/etc/unbound"
username: "unbound"
directory: "/usr/local/etc/unbound"
pidfile: "/var/run/unbound.pid"
root-hints: "root.hints"
harden-dnssec-stripped: yes
harden-referral-path: no
private-address: 10.0.0.0/8
private-address: 172.16.0.0/12
private-address: 192.168.0.0/16
prefetch: yes
prefetch-key: yes
use-syslog: no
module-config: "validator iterator"
unwanted-reply-threshold: 10000000
auto-trust-anchor-file: /usr/local/etc/unbound/root-trust-anchor
# Networks allowed to utilize service
access-control: 127.0.0.0/8 allow
access-control: 10.10.1.0/24 allow

#zone localhost
local-zone: "localhost." static
local-data: "localhost. 10800 IN NS localhost."
local-data: "localhost. 10800 IN SOA localhost. nobody.invalid. 1 3600 1200 604800 10800"
local-data: "localhost. 10800 IN A 127.0.0.1"

local-zone: "127.in-addr.arpa." static
local-data: "127.in-addr.arpa. 10800 IN NS localhost."
local-data: "127.in-addr.arpa. 10800 IN SOA localhost. nobody.invalid. 2 3600 1200 604800 10800"
local-data: "1.0.0.127.in-addr.arpa. 10800 IN PTR localhost."

# Host entries

# Domain overrides

forward-zone:
name: "."
forward-addr: 203.130.209.242
forward-addr: 202.134.0.155
forward-addr: 203.134.1.10
forward-addr: 208.67.222.222
forward-addr: 208.67.220.220
forward-addr: 8.8.8.8
forward-addr: 8.8.4.4

###
# Remote Control Config
###
remote-control:
control-enable: yes
control-interface: 127.0.0.1
control-port: 953
server-key-file: "/usr/local/etc/unbound/unbound_server.key"
server-cert-file: "/usr/local/etc/unbound/unbound_server.pem"
control-key-file: "/usr/local/etc/unbound/unbound_control.key"
control-cert-file: "/usr/local/etc/unbound/unbound_control.pem"

maaf ... telat responya ...

untuk pppoe di pf2.0, memang di beberapa snapshoot ada bugnya, diakui oleh devnya juga
coba gunakan latest snapshot. Untuk multi wan, dan ingin digabung dengan squid, sedikit trik. Jelasnya masuk aja forum internasionalnya. om udah gak lama pake multi wannya, mungkin setelah release stable keluar, main2 lagi dgn multi wannya

(1) prinsipnya tdk ada utk 1 pppoe, ketika multi wan, baru ada bedanya ... pf 1.2.3 pppoe hanya bisa dilakukan disisi wan, opt tdk bisa, sdgkan pf2.0, sisi manapun bisa, karena setiap interface diperlakukan sama.

(2) hanya pf2.0 saja

=================================================
Bersahabat dengan PfSense dan KIOSer

yg 25 oktober PPPOe nya bagus dan cukup stabil ... 
Di server snapshot aslinya sudah tdk ada, jadi bisa download di sini saja :
http://www.4shared.com/file/DHdv-sJO/pf … TA4-2.html

@ serangku
unbound di pf 2 kok masih jauh dari stabil  ...

mohon pencerahanya ya master2, kira knpa ya sya buka :

Diagnostics: System logs: System
Jan 7 08:48:10     dhclient[1971]: SENDING DIRECT
Jan 7 08:48:10     dhclient[1971]: DHCPACK from 192.168.1.1
Jan 7 08:48:10     dhclient[1971]: bound to 110.138.xcx.xcxc -- renewal in 30 seconds.

dan client acces internet sering gagal dng muncul "server not found" kmudian d pilih try again bisa tp kdang nda bisa

laksanaken :

pfSense-1.2.3-RELEASE

topologi :
                          192.168.0.200(lan)         
modem ----------- pfsense —-----------------– switch —— client
192.168.1.1         WAN                                                    |
                          (110.138.xyz.xyz) DHCP                         |          192.168.0.0 -> 30

pkg:
Squid, Squidguard, Lightsquid

konfigurasi
squid :
Proxy interface : LAN
Allow users on interface
Transparent proxy
Enabled logging
Log store directory : /var/squid/log
Log rotate : 6
proxy port : 3128
Custom Options :
redirect_program /usr/local/bin/squidGuard -c /usr/local/etc/squidGuard/squidGuard.conf;redirector_bypass on;
zph_mode tos;
zph_local 0x04;
zph_parent 0;
zph_option 136;
redirect_children 3

Squidguard : sesuai yg d ajarin om serangku

awalnya aman2 aj om kemudian Smua client sdh saya scan AVG hasilnya clean

okay om sya besok pagi sya coba, trimakasih

waduh iya Om....
trimakasih sdh ngingetin

terimakasih om
sdh nda muncul lagi....

Last 50 system log entries
Jan 10 14:49:06     syslogd: kernel boot file is /boot/kernel/kernel
Jan 10 14:50:00     check_reload_status: check_reload_status is starting

skrang cumn ini yg muncul client sdh normal...

Seharusnya bisa, coba lihat setting PPPOE nya ..
versi nov 2010 - januari 2011 ... jika WAN sbg PPPOE selalu --- > kernel panic

makasih ya mas

saya akan baca dan coba setelah pulang kantor nanti

Unbound dan captiveportal sepertinya tdk bisa berjalan bersama ...
Ada lagi yg pernah coba ??