Tanya-Jawab seputar Squid - disini (Page 22 of 23)

ImmoneeJava, buy xanax alprazolam Xanax is potentially addictive. http://www.wilkinsonloghomes.com/ - xanax 2mg

hmm... saya di kasih kasus sama dosen saya, bagaimana kalau sewaktu ingin mendownload file-file berukuran besar, anggap saja file video yang berukuran 100mb,
lalu sewaktu client mendownload file tersebut, squid terlebih dahulu mendownload file yang ingin di download oleh client dan di simpan di proxy...
nah yang ingin saya tanyakan, settingan di proxy bagian mananya kalau ingin menyimpan objek berukuran besar sperti diatas? lalu bisa tidak squid menyimpan cache berekstensi .exe atau file yang bisa di eksekusi?

mohon pencerahannya kioser

para master sekalian...
kalo squid lognya menunjukkan hasi TCP_MISS/200 xxxxxx di semua baris itu apa maksudnya..
soalnya kalo pake proxy atau ga pake proxy kecepaatn sama meskipun uda beberapa kali buka website yang sama....

maf masih nubiie baget

sekarang kadang TCP_MEM_HIT terkadang TCP HIT dan sering yang TCP_MISS
untuk melihat prosentase penggunaan cache gimana ya...
maf belum sempet copy squid.conf entar ya bang..

bythwy kalo uda pake netwatch apa perlu membuat ip-table di ubuntu nya agar bisa transparent proxy  .... mohon info apa cukup di NAT redirec aja address-listnya... ke port proxy
makasih

sepi sekali kagak ada yg bantu jawab,,,apa memang gak ada yg bisa jawab

Dear Masters KIOS,

Need Help ^_^

inet--mikrotik--squid bridge--client

bagaimana setup squid bridge agar bandwidth bisa dimanajemen sama mikrotik?
Ane coba sukses tapi bandwidth ga bisa dimanaje sama mikrotik..

Mohon pencerahan..

permisi semua..
masih pemula bgt soal squid,...

mw tanya, saia ada PC :

- pentium 4 2,26 Ghz
- memori DDR1 512 MB
- HDD IDE 40 GB

saia sedang install Ubuntu server untuk proxy dgn squid..
saia bngung utk bwt partisi2 nya apa saja yaa yg baik nya utk cache, system atw yg lain nya ?

mohon bantuan nya...

terima kasih..

Om mohon dikoreksi squid.cof saya masalahnya tidak bisa TCP_HIT yang ada TCP_MISS semuanya...
Ini squid.cof saya :

http_port 3128 transparent
#http_port 3128
server_http11 on
icp_port 0

pid_filename /var/run/squid.pid
coredump_dir /var/spool/squid/
error_directory /usr/share/squid/errors/English
icon_directory /usr/share/squid/icons
mime_table /usr/share/squid/mime.conf
#mime_table /usr/local//mime.conf

cache_mem 6 MB
maximum_object_size_in_memory 100000 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA
minimum_object_size 10 byete #0 KB
maximum_object_size 128 MB  #320010 KB
offline_mode off
cache_swap_low 98
cache_swap_high 99
ipcache_size 2048
ipcache_low 99
ipcache_high 98

cache_dir aufs /cache 150000 32 256 max-size=130000

access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_log /dev/null
#cache_log /var/logs/cache.log
#cache_store_log /var/cache/store.log
#cache_swap_log /var/cache/cache_swap.log
cache_store_log /dev/null
redirect_rewrites_host_header off
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl SSL_ports port 443 563 81
acl safeports port 21 70 80 81 210 280 443 488 563 591 631 777 901 3128 1025-65535
acl Safe_ports port 280
acl Safe_ports port 488
acl Safe_ports port 591
acl Safe_ports port 777
acl CONNECT method CONNECT
acl dynamic urlpath_regex cgi-bin \?
acl all src 0.0.0.0/0
acl network src 192.168.1.0/24  #IP LAN
acl network src 192.168.11.0/24  #IP PROXY
#acl webfaceboox dstdomain .facebook.com
#http_access allow webfaceboox
http_access allow manager localhost
http_access allow manager
http_access allow localhost
http_access allow network
http_access deny !Safe_ports
http_access deny CONNECT !SSL_ports
http_access deny all
http_reply_access allow all
http_gzip on
#http_gzip_types text/plain,text/html,text/xml,text/css,application/xml,application/xhtml+xml,application/rss+xml,application/javascript,application/x-javascript

snmp_port 3401
acl snmppublic snmp_community public
snmp_access allow snmppublic all

#----------------------------------------------#
# ACL STORE REWRITE
#----------------------------------------------#
acl store_rewrite_list urlpath_regex            \/(get_video|videoplayback\?id|videoplayback.*id)
acl store_rewrite_list urlpath_regex            \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar)\?
acl store_rewrite_list_domain url_regex         ^http:\/\/([a-zA-Z-]+[0-9-]+)\.[A-Za-z]*\.[A-Za-z]*
acl store_rewrite_list_domain url_regex         (([a-z]{1,2}[0-9]{1,3})|([0-9]{1,3}[a-z]{1,2}))\.[a-z]*[0-9]?\.[a-z]{3}
acl store_rewrite_list_path urlpath_regex       \.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|avc|zip|mp3|3gp|rar|on2|mar|exe)$
acl store_rewrite_list_domain_CDN url_regex     \.rapidshare\.com.*\/[0-9]*\/.*\/[^\/]* ^http:\/\/(www\.ziddu\.com.*\.[^\/]{3,4})\/(.*)
acl store_rewrite_list_domain_CDN url_regex     ^http:\/\/[.a-z0-9]*\.photobucket\.com.*\.[a-z]{3}$
acl store_rewrite_list_domain_CDN url_regex     ^http:\/\/[a-z]+[0-9]\.google\.co(m|\.id)
acl store_rewrite_list_domain_CDN url_regex     ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(rar|zip|flv|wm(a|v)|3gp|mp(4|3)|exe|msi|avi|(mp(e?g|a|e|1|2|3|4))|cab|exe)

acl store_rewrite_list_domain_CDN url_regex     (khm|mt)[0-9]?.google.com
acl store_rewrite_list_domain_CDN url_regex     photos-[a-z].ak.fbcdn.net
acl store_rewrite_list_domain_CDN url_regex     (khm|mt)[0-9]?.google.co(m|\.id) 
acl store_rewrite_list_domain_CDN url_regex     streamate.doublepimp.com.*\.js\? \.doubleclick\.net.* yieldmanager cpxinteractive  quantserve\.com

acl dontrewrite url_regex redbot\.org \.php
acl dontrewrite url_regex yimg.com redbot\.org     (get_video|videoplayback\?id|videoplayback.*id).*begin\=[1-9][0-9]* \.php\? threadless.*\.jpg\?r=
acl getmethod method GET

acl QUERY urlpath_regex -i \.(ini|ui|lst|inf|pak|ver|patch)$
acl QUERY urlpath_regex -i (dat.asp|afs.dat|notice.swf|patchlist.txt|hackshield|captcha|reset.css|update.ver|notice.html|updates.txt|gamenotice)
cache deny QUERY

storeurl_access deny dontrewrite
storeurl_access deny !getmethod
storeurl_access allow store_rewrite_list_domain_CDN
storeurl_access allow store_rewrite_list
storeurl_access allow store_rewrite_list_domain
#storeurl_access allow store_rewrite_list_domain store_rewrite_list_path
storeurl_access deny all
header_access X-Forwarded-For deny all

storeurl_rewrite_program /etc/squid/storeurl.pl
storeurl_rewrite_children 1
storeurl_rewrite_concurrency 99

#=========================================================
# TAG: Refresh Pattern
#=========================================================
# 1 year = 525600 mins, 1 month = 43200 mins, 1 day = 1440
#=========================================================
#max_stale 10 years
refresh_pattern -i \.(sc-|dl-|ex-|mh-|mst|dll)$                0  20% 0
refresh_pattern -i (main.exe|notice.html)$                      0  20% 0
refresh_pattern -i (livescore.com|UpdaterModifier.exe|FreeStyle.exe|FSLauncher.exe) 0  20% 0
refresh_pattern .speedtest.* 0 60% 10 negative-ttl=0
#refresh_pattern -i \.(js?)$ 10080 50% 43200 ignore-reload override-expire override-lastmod

refresh_pattern (get_video|videoplayback|videodownload|\.flv).*(begin|start)\=[1-9][0-9]*       0 0% 0
refresh_pattern imeem.*\.flv  0 0% 0  override-lastmod override-expire
refresh_pattern ^ftp: 40320     20%     40320   override-expire reload-into-ims store-stale
refresh_pattern ^gopher:        1440    0%      1440
refresh_pattern -i (livescore.com|UpdaterModifier.exe|FreeStyle.exe|FSLauncher.exe) 0  20% 0

#speedtest
refresh_pattern .speedtest.* 0 60% 10 negative-ttl=0
refresh_pattern speedtest.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png|swf|txt|js) 0 50% 180 store-stale negative-ttl=0

#ads
refresh_pattern ^.*safebrowsing.*google   131400 999999% 525600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth ignore-must-revalidate negative-ttl=10080 store-stale
refresh_pattern ^.*(streamate.doublepimp.com.*\.js\?|utm\.gif|ads\?|rmxads\.com|ad\.z5x\.net|bh\.contextweb\.com|bstats\.adbrite\.com|a1\.interclick\.com|ad\.trafficmp\.com|ads\.cubics\.com|ad\.xtendmedia\.com|\.googlesyndication\.com|advertising\.com|yieldmanager|game-advertising\.com|pixel\.quantserve\.com|adperium\.com|doubleclick\.net|adserving\.cpxinteractive\.com|syndication\.com|media.fastclick.net).* 5259487 20% 5259487 ignore-no-cache ignore-no-store ignore-private override-expire ignore-reload ignore-auth ignore-must-revalidate store-stale negative-ttl=40320 max-stale=1440

#antivirus
refresh_pattern avast.com.*\.vpx               40320 50% 525600 store-stale reload-into-ims
refresh_pattern (avgate|avira).*\.(idx|gz)$          1440 90% 1440  ignore-reload ignore-no-cache ignore-no-store store-stale ignore-must-revalidate
refresh_pattern kaspersky.*\.avc$              131400 999999% 525600 ignore-reload store-stale
refresh_pattern kaspersky                      1440 50% 131400 ignore-no-cache store-stale
refresh_pattern .symantecliveupdate.com.*\.zip          1440 90% 131400 ignore-must-revalidate store-stale
refresh_pattern .update.nai.com/.*\.(gem|zip|mcs)     43800 999999% 43800   ignore-reload store-stale ignore-must-revalidate
refresh_pattern .symantec.com.*\(exe|zip)            43800 999999% 43800   ignore-reload store-stale  ignore-must-revalidate
refresh_pattern ^http://file.pb.gemscool.com.*\.zip    131400 999999% 131400 override-expire store-stale
refresh_pattern .kaskus.us.*\.(jpg|gif|png)        1440 60% 131400 override-expire store-stale
refresh_pattern ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(rar|mov|mkv|cab|flv|wmv|3gp|mp(4|3)|exe|msi|zip) 43200 99999% 129600 reload-into-ims  ignore-reload override-expire ignore-no-cache ignore-no-store  ignore-private  store-stale ignore-auth

#browser facebook
refresh_pattern ((facebook.com)|(85.131.151.39)).*\.(png|gif)     1440 60% 525600 override-expire store-stale
refresh_pattern .fbcdn.net.*\.(jpg|gif|png)              1440 60% 131400 ignore-no-cache override-expire ignore-reload store-stale negative-ttl=0

#image facebook
refresh_pattern -i \.facebook.com.*\.(jpg|png|gif)     129600 999999% 129600 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern -i \.fbcdn.net.*\.(jpg|gif|png|swf|mp3) 129600 999999% 129600 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern static\.ak\.fbcdn\.net*\.(jpg|gif|png)     129600 999999% 129600 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern ^http:\/\/profile\.ak\.fbcdn.net*\.(jpg|gif|png) 129600 999999% 129600 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale

#games facebook
refresh_pattern ^http:\/\/apps.facebook.com.*\/     10080 999999% 43200 ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern -i \.zynga.com.*\/         10080 999999% 43200 ignore-reload override-expire ignore-no-cache ignore-no-store ignore-must-revalidate store-stale
refresh_pattern -i \.igg.com.*\/             10080 999999% 43200 ignore-reload override-expire ignore-no-cache ignore-no-store ignore-must-revalidate store-stale
refresh_pattern -i \.farmville.com.*\/         10080 999999% 43200 ignore-reload override-expire ignore-no-cache ignore-no-store ignore-must-revalidate store-stale
refresh_pattern -i \.ninjasaga.com.*\/         10080 999999% 43200 ignore-reload override-expire ignore-no-cache ignore-no-store ignore-must-revalidate store-stale
refresh_pattern -i \.mafiawars.com.*\/         10080 999999% 43200 ignore-reload override-expire ignore-no-cache ignore-no-store ignore-must-revalidate store-stale
refresh_pattern -i \.crowdstar.com.*\/         10080 999999% 43200 ignore-reload override-expire ignore-no-cache ignore-no-store ignore-must-revalidate store-stale
refresh_pattern -i \.popcap.com.*\/         10080 999999% 43200 ignore-reload override-expire ignore-no-cache ignore-no-store ignore-must-revalidate store-stale

#banner IIX
refresh_pattern ^http:\/\/openx.*\.(jp(e?g|e|2)|gif|pn[pg]|swf|ico|css|tiff?) 129600 99999% 129600 reload-into-ims ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern ^http:\/\/ads(1|2|3).kompas.com.*\/     43200 99999% 129600 reload-into-ims ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern ^http:\/\/img.ads.kompas.com.*\/     43200 99999% 129600 reload-into-ims ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern .kompasimages.com.*\.(jpg|gif|png|swf)     43200 99999% 129600 reload-into-ims ignore-reload override-expire ignore-no-cache ignore-no-store store-stale
refresh_pattern ^http:\/\/openx.kompas.com.*\/         43200 99999% 129600 reload-into-ims ignore-reload override-expire ignore-no-cache ignore-no-store store-stale

#IIX DOWNLOAD
refresh_pattern ^http:\/\/\.www[0-9][0-9]\.indowebster\.com\/(.*)(mp3|rar|zip|flv|wmv|3gp|mp(4|3)|exe|msi|zip) 43200 99999% 129600 reload-into-ims ignore-reload override-expire ignore-no-cache ignore-no-store store-stale ignore-auth

# ANTI VIRUS
refresh_pattern avast.com.*\.vpx             40320 50% 161280 store-stale reload-into-ims
refresh_pattern (avgate|avira).*\.(idx|gz)$    1440 90% 1440 ignore-reload ignore-no-cache ignore-no-store store-stale ignore-must-revalidate
refresh_pattern kaspersky.*\.avc$ 5259487     999999% 5259487 ignore-reload store-stale
refresh_pattern kaspersky                 1440 50% 161280 ignore-no-cache store-stale
refresh_pattern mbamupdates.com.*\.ref         1440 50% 161280 reload-into-ims store-stale

#specific sites
refresh_pattern \.rapidshare.*\/[0-9]*\/.*\/[^\/]*             131400 90% 525600 ignore-reload store-stale
refresh_pattern ^http://v\.okezone\.com/get_video\/([a-zA-Z0-9])     131400 999999% 43200 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod ignore-must-revalidate negative-ttl=10080 store-stale
refresh_pattern (get_video\?|videoplayback\?|videodownload\?|\.flv?)     525600 99999999% 525600 override-expire ignore-reload ignore-no-cache ignore-must-revalidate ignore-private store-stale negative-ttl=0
refresh_pattern \.(ico|video-stats)                      525600 999999% 525600 override-expire ignore-reload ignore-no-cache ignore-no-store ignore-private ignore-auth override-lastmod ignore-must-revalidate negative-ttl=10080 store-stale
refresh_pattern \.etology\?                           525600 999999% 525600 override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern galleries\.video(\?|sz)                   525600 999999% 525600 override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern brazzers\?                           525600 999999% 525600 override-expire ignore-reload ignore-no-cache store-stale
refresh_pattern \.adtology\?                         525600 999999% 525600 override-expire ignore-reload ignore-no-cache store-stale

refresh_pattern ^http://((cbk|mt|khm|mlt)[0-9]?)\.google\.co(m|\.id)     131400 999999% 525600 override-expire ignore-reload store-stale ignore-private negative-ttl=10080
refresh_pattern ytimg\.com.*\.(jpg|png)                     525600 999999% 525600 override-expire ignore-reload store-stale
refresh_pattern images\.friendster\.com.*\.(png|gif)              131400 999999% 525600 override-expire ignore-reload store-stale
refresh_pattern garena\.com                          525600 999999% 525600 override-expire reload-into-ims store-stale
refresh_pattern photobucket.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png)      525600 999999% 525600 override-expire ignore-reload store-stale
refresh_pattern vid\.akm\.dailymotion\.com.*\.on2\?              525600 999999% 525600 ignore-no-cache override-expire override-lastmod store-stale
refresh_pattern ^http:\/\/images|pics|thumbs[0-9]\.              131400 999999% 525600 ignore-no-cache ignore-no-store ignore-reload override-expire store-stale
refresh_pattern ^http:\/\/www.onemanga.com.*\/               525600 999999% 525600 reload-into-ims override-expire store-stale
refresh_pattern mediafire.com\/images.*\.(jp(e?g|e|2)|tiff?|bmp|gif|png)  131400 999999% 525600 reload-into-ims override-expire ignore-private store-stale
refresh_pattern  \.macromedia.com.*\.(z|exe|cab)              131400 999999%  525600 ignore-reload override-expire  store-stale

#general
refresh_pattern \.(jp(e?g|e|2)|tiff?|bmp|gif|png)                 131400 999999% 525600 ignore-no-cache ignore-no-store reload-into-ims override-expire ignore-must-revalidate store-stale
refresh_pattern \.(z(ip|[0-9]{2})|r(ar|[0-9]{2})|jar|bz2|gz|tar|rpm|vpu)      131400 999999% 525600 override-expire ignore-no-cache reload-into-ims
refresh_pattern \.(mp3|wav|og(g|a)|flac|midi?|rm|aac|wma|mka|ape)           131400 999999% 525600 override-expire reload-into-ims ignore-reload
refresh_pattern \.(exe|msi|dmg|bin|xpi|iso|swf|mar|psf|cab|mar)          131400 999999% 525600 override-expire reload-into-ims ignore-no-store ignore-no-cache ignore-must-revalidate
refresh_pattern \.(mkv|mpeg|ra?m|avi|mp(g|e|4)|mov|divx|asf|wmv|m\dv|rv|vob|asx|ogm|flv|3gp|on2)  525600 9999999% 525600 ignore-must-revalidate ignore-private ignore-no-cache override-expire reload-into-ims
refresh_pattern -i (cgi-bin) 0 0% 0
refresh_pattern \.(php|jsp|cgi|asx)\? 0 0% 0
refresh_pattern . 0 50% 525600 store-stale
header_access X-Forwarded-For deny all

#==============================================
# TAG: Extra Tuning Configuration
#==============================================
fqdncache_size 2048
quick_abort_min 0
quick_abort_max 0
quick_abort_pct 98
shutdown_lifetime 10 seconds
memory_pools off
buffered_logs off
log_icp_queries off
logfile_rotate 1
log_fqdn off
forwarded_for off
icp_hit_stale on
query_icmp on
reload_into_ims on
emulate_httpd_log off
negative_ttl 2 minutes
pipeline_prefetch on
vary_ignore_expire on
half_closed_clients off
high_page_fault_warning 2
nonhierarchical_direct on
prefer_direct off
cache_mgr giga.net17@yahoo.co.id
cache_effective_user proxy
cache_effective_group proxy
visible_hostname SpeedProxy
unique_hostname MyHigh-Proxy
cachemgr_passwd none all
client_db on
max_filedescriptors 8192
n_aiops_threads 24
load_check_stopen on
load_check_stcreate on
download_fastest_client_speed on

# TAG: ZPH
zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

ini dari lognya :

332425572.495  40315 192.168.1.50 TCP_MISS/200 516 GET http://0-ji-w.channel.fa
cebook.com/pull? - DIRECT/69.171.227.57 text/plain
1332425573.092   1586 192.168.1.65 TCP_MISS/200 1580 GET http://0-ji-w.channel.f
acebook.com/pull? - DIRECT/69.171.227.57 text/plain
1332425573.227   6713 192.168.1.64 TCP_MISS/200 1633 GET http://0-62.channel.fac
ebook.com/pull? - DIRECT/66.220.145.39 text/plain
1332425573.620    452 192.168.1.65 TCP_MISS/200 1401 GET http://0-ji-w.channel.f
acebook.com/pull? - DIRECT/69.171.227.57 text/plain
1332425574.440    408 192.168.1.65 TCP_MISS/200 853 POST http://www.facebook.com
/ajax/chat/buddy_list.php? - DIRECT/31.13.79.20 application/x-javascript
1332425575.087   1402 192.168.1.65 TCP_MISS/200 1627 GET http://0-ji-w.channel.f
acebook.com/pull? - DIRECT/69.171.227.57 text/plain
1332425576.849   1690 192.168.1.65 TCP_MISS/200 1631 GET http://0-ji-w.channel.f
acebook.com/pull? - DIRECT/69.171.227.57 text/plain
1332425577.625    685 192.168.1.65 TCP_MISS/200 1448 GET http://0-ji-w.channel.f
acebook.com/pull? - DIRECT/69.171.227.57 text/plain
1332425577.963    256 192.168.1.65 TCP_MISS/200 1505 GET http://0-ji-w.channel.f
acebook.com/pull? - DIRECT/69.171.227.57 text/plain
1332425578.464    428 192.168.1.65 TCP_MISS/200 1478 GET http://0-ji-w.channel.f
acebook.com/pull? - DIRECT/69.171.227.57 text/plain
1332425578.632    530 192.168.1.65 TCP_MISS/200 5249 GET http://www.facebook.com
/ajax/hovercard/user.php? - DIRECT/31.13.79.20 application/x-javascript

Sebelumnya terimakasih atas bantuan dan koreksinya....

Numpang tanya mas-mas

kenapa saat proxy di aktifkan di NAT mikrotik ( saya pakai clearos standalone + mikrotik )
client tidak bisa browsing
padahal squid di Clearos sudah running dan sudah terhubung ke internet
saya ping dari proxy clear os ke www.kompas.com ada reply
saya ping dari client ke www.kompas.com juga sudah ada reply
tapi saat client browsing ( http )tidak bisa "unable to connect "
tapi klo browsing dengan url https bisa

mohon bimbingannya

mungkin konfigurasi NAT-nya ada yang salah masbro
bisa di sertakan topologi sama konfigurasi NAT-nya nggak?

What Medications Affect Intoxilyzer 5000 , buy clonazepam online  Doctors and patients should work closely together to taper doses to avoid withdrawal symptoms, which can be dangerous if not closely monitored. http://bestnoisecancellingearbuds.net/klonopin.html - buy klonopin no prescription

kemungkinan ada yang mengakses dari pc gateway, mungkin bisa pake ssh tunelling.
tapi karena di ACL di blok maka log nya TCP_DANIED.

salam