Sabtu, 20 September 2008
Kumpulan Foto dan Video Bugil Gadis SMA Mahasiswa Gratis
Ringkasan ini tidak tersedia. Harap
klik di sini untuk melihat postingan.
Sabtu, 17 November 2007
gate conf
[root@localhost cbq]# iptables-save
# Generated by iptables-save v1.2.3 on Sat Nov 12 07:10:00 2005
*mangle
:PREROUTING ACCEPT [10114098:3764899788]
:OUTPUT ACCEPT [171716:34847887]
COMMIT
# Completed on Sat Nov 12 07:10:00 2005
# Generated by iptables-save v1.2.3 on Sat Nov 12 07:10:00 2005
*nat
:PREROUTING ACCEPT [472294:27304776]
:POSTROUTING ACCEPT [157:9079]
:OUTPUT ACCEPT [173:10177]
-A PREROUTING -s 192.168.2.22 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.242 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.201 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.42 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.111 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.173 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.40 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.178 -p tcp -j DROP
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 202.0.0.0/255.0.0.0 -j SNAT –to-source 202.152.55.210
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 203.0.0.0/255.0.0.0 -j SNAT –to-source 202.152.55.210
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 219.0.0.0/255.0.0.0 -j SNAT –to-source 202.152.55.210
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 222.0.0.0/255.0.0.0 -j SNAT –to-source 202.152.55.210
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -j SNAT –to-source 69.88.24.37
-A POSTROUTING -s 192.168.2.178 -j DROP
COMMIT
# Completed on Sat Nov 12 07:10:00 2005
# Generated by iptables-save v1.2.3 on Sat Nov 12 07:10:00 2005
*filter
:INPUT ACCEPT [434997:82489618]
:FORWARD ACCEPT [9678268:3682351211]
:OUTPUT ACCEPT [166295:33653931]
-A INPUT -p tcp -m tcp –dport 8080 -j ACCEPT
COMMIT
# Completed on Sat Nov 12 07:10:00 2005
[root@localhost cbq]#
[root@localhost cbq]# ip r
202.152.55.208/29 dev eth1 scope link
69.88.24.32/29 dev eth1 proto kernel scope link src 69.88.24.37
192.168.2.0/24 dev eth0 scope link
127.0.0.0/8 dev lo scope link
default via 202.152.55.209 dev eth1
[root@localhost cbq]
[root@localhost cbq]# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
202.152.55.208 0.0.0.0 255.255.255.248 U 40 0 0 eth1
69.88.24.32 0.0.0.0 255.255.255.248 U 40 0 0 eth1
192.168.2.0 0.0.0.0 255.255.255.0 U 40 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 40 0 0 lo
0.0.0.0 202.152.55.209 0.0.0.0 UG 40 0 0 eth1
[root@localhost cbq]#
[root@localhost cbq]# cat /etc/resolv.conf
nameserver 202.152.0.2
nameserver 168.215.210.50
nameserver 207.170.210.16
#search localdomain
[root@localhost cbq]#
[root@localhost cbq]# cat /etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
/sbin/cbq start
#touch /var/lock/subsys/local
[root@localhost cbq]#
[root@localhost root]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.4 1416 508 ? S Nov08 0:04 init [3]
root 2 0.0 0.0 0 0 ? SW Nov08 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SW Nov08 0:00 [kapm-idled]
root 4 0.0 0.0 0 0 ? RWN Nov08 0:00 [ksoftirqd_CPU0]
root 5 0.0 0.0 0 0 ? SW Nov08 0:00 [kswapd]
root 6 0.0 0.0 0 0 ? SW Nov08 0:00 [kreclaimd]
root 7 0.0 0.0 0 0 ? SW Nov08 0:00 [bdflush]
root 8 0.0 0.0 0 0 ? SW Nov08 0:00 [kupdated]
root 9 0.0 0.0 0 0 ? SW< Nov08 0:00 [mdrecoveryd]
root 13 0.0 0.0 0 0 ? SW Nov08 0:02 [kjournald]
root 89 0.0 0.0 0 0 ? SW Nov08 0:00 [khubd]
root 686 0.0 0.0 0 0 ? SW Nov08 0:00 [eth1]
root 787 0.0 0.5 1476 584 ? S Nov08 0:01 syslogd -m 0
root 792 0.0 1.0 2108 1192 ? S Nov08 0:00 klogd -2
rpc 812 0.0 0.5 1556 568 ? S Nov08 0:00 portmap
rpcuser 840 0.0 0.6 1608 760 ? S Nov08 0:00 rpc.statd
root 952 0.0 0.4 1400 516 ? S Nov08 0:00 /usr/sbin/apmd -p
ident 1008 0.0 0.8 26932 964 ? S Nov08 0:00 identd -e -o
ident 1014 0.0 0.8 26932 964 ? S Nov08 0:00 identd -e -o
ident 1015 0.0 0.8 26932 964 ? S Nov08 0:02 identd -e -o
ident 1019 0.0 0.8 26932 964 ? S Nov08 0:02 identd -e -o
ident 1026 0.0 0.8 26932 964 ? S Nov08 0:00 identd -e -o
root 1030 0.0 2.1 4064 2348 ? S Nov08 0:00 /usr/sbin/snmpd -
named 1047 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
named 1065 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
named 1066 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
named 1067 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
named 1068 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
root 1072 0.0 1.1 2672 1272 ? S Nov08 0:16 /usr/sbin/sshd
root 1106 0.0 0.8 2272 928 ? S Nov08 0:00 xinetd -stayalive
lp 1125 0.0 0.8 2580 976 ? S Nov08 0:00 lpd Waiting
root 1234 0.0 0.5 1592 656 ? S Nov08 0:00 crond
daemon 1270 0.0 0.4 1448 552 ? S Nov08 0:00 /usr/sbin/atd
root 2161 0.0 0.3 1388 440 tty1 S Nov08 0:00 /sbin/mingetty tt
root 2162 0.0 0.3 1388 440 tty2 S Nov08 0:00 /sbin/mingetty tt
root 2163 0.0 0.3 1388 440 tty3 S Nov08 0:00 /sbin/mingetty tt
root 2164 0.0 0.3 1388 440 tty4 S Nov08 0:00 /sbin/mingetty tt
root 2165 0.0 0.3 1388 440 tty5 S Nov08 0:00 /sbin/mingetty tt
root 2166 0.0 0.3 1388 440 tty6 S Nov08 0:00 /sbin/mingetty tt
root 15152 0.1 1.8 3692 2032 ? S 05:11 0:11 /usr/sbin/sshd
root 15153 0.0 1.2 2552 1372 pts/0 S 05:11 0:00 -bash
root 15299 0.0 1.8 3648 2032 ? S 05:23 0:01 /usr/sbin/sshd
root 15300 0.0 1.2 2560 1396 pts/1 S 05:24 0:00 -bash
root 17576 0.0 1.4 2756 1588 pts/1 S 07:15 0:00 ssh -l root 192.1
root 17582 0.0 0.6 2648 716 pts/0 R 07:20 0:00 ps aux
[root@localhost root]#
# Generated by iptables-save v1.2.3 on Sat Nov 12 07:10:00 2005
*mangle
:PREROUTING ACCEPT [10114098:3764899788]
:OUTPUT ACCEPT [171716:34847887]
COMMIT
# Completed on Sat Nov 12 07:10:00 2005
# Generated by iptables-save v1.2.3 on Sat Nov 12 07:10:00 2005
*nat
:PREROUTING ACCEPT [472294:27304776]
:POSTROUTING ACCEPT [157:9079]
:OUTPUT ACCEPT [173:10177]
-A PREROUTING -s 192.168.2.22 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.242 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.201 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.42 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.111 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.173 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.40 -p tcp -m tcp –dport 80 -j DNAT –to-destination 192.168.2.113
-A PREROUTING -s 192.168.2.178 -p tcp -j DROP
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 202.0.0.0/255.0.0.0 -j SNAT –to-source 202.152.55.210
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 203.0.0.0/255.0.0.0 -j SNAT –to-source 202.152.55.210
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 219.0.0.0/255.0.0.0 -j SNAT –to-source 202.152.55.210
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 222.0.0.0/255.0.0.0 -j SNAT –to-source 202.152.55.210
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -j SNAT –to-source 69.88.24.37
-A POSTROUTING -s 192.168.2.178 -j DROP
COMMIT
# Completed on Sat Nov 12 07:10:00 2005
# Generated by iptables-save v1.2.3 on Sat Nov 12 07:10:00 2005
*filter
:INPUT ACCEPT [434997:82489618]
:FORWARD ACCEPT [9678268:3682351211]
:OUTPUT ACCEPT [166295:33653931]
-A INPUT -p tcp -m tcp –dport 8080 -j ACCEPT
COMMIT
# Completed on Sat Nov 12 07:10:00 2005
[root@localhost cbq]#
[root@localhost cbq]# ip r
202.152.55.208/29 dev eth1 scope link
69.88.24.32/29 dev eth1 proto kernel scope link src 69.88.24.37
192.168.2.0/24 dev eth0 scope link
127.0.0.0/8 dev lo scope link
default via 202.152.55.209 dev eth1
[root@localhost cbq]
[root@localhost cbq]# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
202.152.55.208 0.0.0.0 255.255.255.248 U 40 0 0 eth1
69.88.24.32 0.0.0.0 255.255.255.248 U 40 0 0 eth1
192.168.2.0 0.0.0.0 255.255.255.0 U 40 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 40 0 0 lo
0.0.0.0 202.152.55.209 0.0.0.0 UG 40 0 0 eth1
[root@localhost cbq]#
[root@localhost cbq]# cat /etc/resolv.conf
nameserver 202.152.0.2
nameserver 168.215.210.50
nameserver 207.170.210.16
#search localdomain
[root@localhost cbq]#
[root@localhost cbq]# cat /etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
/sbin/cbq start
#touch /var/lock/subsys/local
[root@localhost cbq]#
[root@localhost root]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.4 1416 508 ? S Nov08 0:04 init [3]
root 2 0.0 0.0 0 0 ? SW Nov08 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SW Nov08 0:00 [kapm-idled]
root 4 0.0 0.0 0 0 ? RWN Nov08 0:00 [ksoftirqd_CPU0]
root 5 0.0 0.0 0 0 ? SW Nov08 0:00 [kswapd]
root 6 0.0 0.0 0 0 ? SW Nov08 0:00 [kreclaimd]
root 7 0.0 0.0 0 0 ? SW Nov08 0:00 [bdflush]
root 8 0.0 0.0 0 0 ? SW Nov08 0:00 [kupdated]
root 9 0.0 0.0 0 0 ? SW< Nov08 0:00 [mdrecoveryd]
root 13 0.0 0.0 0 0 ? SW Nov08 0:02 [kjournald]
root 89 0.0 0.0 0 0 ? SW Nov08 0:00 [khubd]
root 686 0.0 0.0 0 0 ? SW Nov08 0:00 [eth1]
root 787 0.0 0.5 1476 584 ? S Nov08 0:01 syslogd -m 0
root 792 0.0 1.0 2108 1192 ? S Nov08 0:00 klogd -2
rpc 812 0.0 0.5 1556 568 ? S Nov08 0:00 portmap
rpcuser 840 0.0 0.6 1608 760 ? S Nov08 0:00 rpc.statd
root 952 0.0 0.4 1400 516 ? S Nov08 0:00 /usr/sbin/apmd -p
ident 1008 0.0 0.8 26932 964 ? S Nov08 0:00 identd -e -o
ident 1014 0.0 0.8 26932 964 ? S Nov08 0:00 identd -e -o
ident 1015 0.0 0.8 26932 964 ? S Nov08 0:02 identd -e -o
ident 1019 0.0 0.8 26932 964 ? S Nov08 0:02 identd -e -o
ident 1026 0.0 0.8 26932 964 ? S Nov08 0:00 identd -e -o
root 1030 0.0 2.1 4064 2348 ? S Nov08 0:00 /usr/sbin/snmpd -
named 1047 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
named 1065 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
named 1066 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
named 1067 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
named 1068 0.0 3.1 11576 3436 ? S Nov08 0:00 named -u named
root 1072 0.0 1.1 2672 1272 ? S Nov08 0:16 /usr/sbin/sshd
root 1106 0.0 0.8 2272 928 ? S Nov08 0:00 xinetd -stayalive
lp 1125 0.0 0.8 2580 976 ? S Nov08 0:00 lpd Waiting
root 1234 0.0 0.5 1592 656 ? S Nov08 0:00 crond
daemon 1270 0.0 0.4 1448 552 ? S Nov08 0:00 /usr/sbin/atd
root 2161 0.0 0.3 1388 440 tty1 S Nov08 0:00 /sbin/mingetty tt
root 2162 0.0 0.3 1388 440 tty2 S Nov08 0:00 /sbin/mingetty tt
root 2163 0.0 0.3 1388 440 tty3 S Nov08 0:00 /sbin/mingetty tt
root 2164 0.0 0.3 1388 440 tty4 S Nov08 0:00 /sbin/mingetty tt
root 2165 0.0 0.3 1388 440 tty5 S Nov08 0:00 /sbin/mingetty tt
root 2166 0.0 0.3 1388 440 tty6 S Nov08 0:00 /sbin/mingetty tt
root 15152 0.1 1.8 3692 2032 ? S 05:11 0:11 /usr/sbin/sshd
root 15153 0.0 1.2 2552 1372 pts/0 S 05:11 0:00 -bash
root 15299 0.0 1.8 3648 2032 ? S 05:23 0:01 /usr/sbin/sshd
root 15300 0.0 1.2 2560 1396 pts/1 S 05:24 0:00 -bash
root 17576 0.0 1.4 2756 1588 pts/1 S 07:15 0:00 ssh -l root 192.1
root 17582 0.0 0.6 2648 716 pts/0 R 07:20 0:00 ps aux
[root@localhost root]#
2 way downlink uplink conf
[root@dvb root]# iptables-save
# Generated by iptables-save v1.2.3 on Fri Nov 11 23:44:29 2005
*nat
:PREROUTING ACCEPT [2187862:160340692]
:POSTROUTING ACCEPT [2055830:143406338]
:OUTPUT ACCEPT [232:17698]
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 200.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 220.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 200.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 216.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -j SNAT –to-source 69.88.24.34
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 200.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 220.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 200.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 216.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -j SNAT –to-source 69.88.24.34
COMMIT
# Completed on Fri Nov 11 23:44:29 2005
[root@dvb root]#
[root@dvb root]# ip addr
1: lo: mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth0: mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:00:0e:b8:bd:aa brd ff:ff:ff:ff:ff:ff
inet 202.152.55.211/29 brd 202.152.55.215 scope global eth0:0
inet 192.168.2.222/24 brd 192.168.2.255 scope global eth0:1
inet 69.88.24.34/29 brd 69.88.24.39 scope global eth0
3: aba_0: mtu 1500 qdisc noqueue
link/ether 00:d0:72:01:42:0a brd ff:ff:ff:ff:ff:ff
inet 10.2.0.1/24 brd 10.255.255.255 scope global aba_0
[root@dvb root]#
[root@dvb root]# ip r
202.152.55.208/29 dev eth0 proto kernel scope link src 202.152.55.211
69.88.24.32/29 dev eth0 scope link
10.2.0.0/24 dev aba_0 proto kernel scope link src 10.2.0.1
192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.222
127.0.0.0/8 dev lo scope link
default via 202.152.55.209 dev eth0
[root@dvb root]#
[root@dvb root]# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
202.152.55.208 0.0.0.0 255.255.255.248 U 40 0 0 eth0
69.88.24.32 0.0.0.0 255.255.255.248 U 40 0 0 eth0
10.2.0.0 0.0.0.0 255.255.255.0 U 40 0 0 aba_0
192.168.2.0 0.0.0.0 255.255.255.0 U 40 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 40 0 0 lo
0.0.0.0 202.152.55.209 0.0.0.0 UG 40 0 0 eth0
[root@dvb root]#
[root@dvb root]# cat /etc/resolv.conf
nameserver 202.152.0.2
nameserver 168.215.210.50
nameserver 207.170.210.16
[root@dvb root]#
[root@dvb root]# cat /etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.###ini utk dvb
################
#ip route add 69.88.24.33 via 202.152.55.210
route add default gw 202.152.55.209
# touch /var/lock/subsys/local
#arahkan situs dalam ke LA
iptables -t nat -A POSTROUTING -s 192.168.2.200/24 -d 202.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.200/24 -d 222.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.200/24 -d 203.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.200/24 -d 219.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -d 0.0.0.0/0 -j SNAT –to 69.88.24.34
#modprobe ipt_LOG
#modprobe ipt_REJECT
#modprobe ipt_MASQUERADE
#/sbin/depmod -a
#echo “1″ > /proc/sys/net/ipv4/ip_forward
#iptables -F
#iptables -t nat -F
#iptables -X
#iptables -t nat -X
##iptables NEW
#iptables -t nat -A POSTROUTING -d 202.0.0.0/255.0.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -d 203.130.0.0/255.255.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -d 203.134.0.0/255.255.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -d 61.94.0.0/255.255.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -d 61.5.0.0/255.255.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -p tcp -m tcp –dport 6000:7000 -j SNAT –to-source 202.152.55.211
#iptables -t nat -A POSTROUTING -p tcp -m tcp –dport 80 -j SNAT –to-source 69.88.3.241
#iptables -t nat -A POSTROUTING -s 0.0.0.0/0 -d 0.0.0.0/0 -j MASQUERADE
##routing web local
#iptables -t nat -A POSTROUTING -d 202.0.0.0/8 -j SNAT –to 202.152.55.210
##routing web luar
#iptables -t nat -A POSTROUTING -d 203.130.242.0/24 -j SNAT –to 202.152.55.210
###routing irc
#iptables -t nat -A POSTROUTING -p tcp –dport 6667 -j SNAT –to 69.88.3.243
#iptables -t nat -A POSTROUTING -j SNAT –to 69.88.3.241
##cakrawala HPT
#iptables -t nat -A POSTROUTING -d 202.0.0.0/8 -j SNAT –to 202.152.55.210
#iptables -t nat -A POSTROUTING -p tcp –dport 6667 -j SNAT –to 69.88.3.241
##digital
#iptables -t nat -A POSTROUTING -s 192.168.2.34 -o eth0 -p tcp -j SNAT –to 202.174.154.103
#iptables -t nat -A POSTROUTING -s 192.168.2.34 -o eth0 -p udp -j SNAT –to 202.174.154.103
#iptables -t nat -A POSTROUTING -s 192.168.2.34 -o eth0 -d 0/0 -j MASQUERADE
# buka port
#iptables -A INPUT -j ACCEPT -p tcp –dport 80
#iptables -A INPUT -j ACCEPT -p tcp –dport 21
#iptables -A INPUT -j ACCEPT -p tcp –dport 110
#iptables -A INPUT -j ACCEPT -p tcp –dport 25
#iptables -A INPUT -j ACCEPT -p tcp –dport 22
####traffic shapping
#/etc/rc.d/cbq start
#touch /var/lock/subsys/local
#touch /var/lock/subsys/local
[root@dvb root]#
[root@dvb root]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 1412 52 ? S Nov04 0:03 init [3]
root 2 0.0 0.0 0 0 ? SW Nov04 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SW Nov04 0:00 [kapm-idled]
root 4 0.0 0.0 0 0 ? SWN Nov04 0:00 [ksoftirqd_CPU0]
root 5 0.0 0.0 0 0 ? SW Nov04 0:01 [kswapd]
root 6 0.0 0.0 0 0 ? SW Nov04 0:00 [kreclaimd]
root 7 0.0 0.0 0 0 ? SW Nov04 0:00 [bdflush]
root 8 0.0 0.0 0 0 ? SW Nov04 0:00 [kupdated]
root 9 0.0 0.0 0 0 ? SW< Nov04 0:00 [mdrecoveryd]
root 13 0.0 0.0 0 0 ? SW Nov04 0:05 [kjournald]
root 99 0.0 0.0 0 0 ? SW Nov04 0:00 [khubd]
root 581 0.0 0.2 1696 160 ? S Nov04 0:05 syslogd -m 0
root 586 0.0 0.0 2108 0 ? SW Nov04 0:00 klogd -2
rpc 607 0.0 0.0 1548 0 ? SW Nov04 0:00 portmap
root 718 0.0 0.0 4272 0 ? SW Nov04 0:00 /usr/sbin/snmpd -
root 736 0.0 0.4 2676 296 ? S Nov04 0:52 /usr/sbin/sshd
root 769 0.0 0.0 2264 0 ? SW Nov04 0:00 xinetd -stayalive
root 787 0.0 0.1 1584 108 ? S Nov04 0:00 crond
root 865 0.0 0.1 18148 120 ? S Nov04 0:00 /usr/local/bin/ab
root 866 0.0 0.1 18148 124 ? S Nov04 0:00 /usr/local/bin/ab
root 867 0.0 0.1 18148 124 ? S Nov04 0:00 /usr/local/bin/ab
root 868 0.0 0.1 18148 124 ? S Nov04 0:00 /usr/local/bin/ab
root 898 0.0 0.0 1384 0 tty2 SW Nov04 0:00 /sbin/mingetty tt
root 899 0.0 0.0 1384 0 tty3 SW Nov04 0:00 /sbin/mingetty tt
root 900 0.0 0.0 1384 0 tty4 SW Nov04 0:00 /sbin/mingetty tt
root 901 0.0 0.0 1384 0 tty5 SW Nov04 0:00 /sbin/mingetty tt
root 902 0.0 0.0 1384 0 tty6 SW Nov04 0:00 /sbin/mingetty tt
root 2286 0.0 0.0 1384 0 tty1 SW Nov04 0:00 /sbin/mingetty tt
root 18668 0.0 2.8 3536 1748 ? S Nov11 0:00 /usr/sbin/sshd
root 18669 0.0 2.1 2520 1360 pts/0 S Nov11 0:00 -bash
root 18729 0.0 1.1 2636 724 pts/0 R 00:03 0:00 ps aux
[root@dvb root]#
# Generated by iptables-save v1.2.3 on Fri Nov 11 23:44:29 2005
*nat
:PREROUTING ACCEPT [2187862:160340692]
:POSTROUTING ACCEPT [2055830:143406338]
:OUTPUT ACCEPT [232:17698]
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 200.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 220.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 200.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 216.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -j SNAT –to-source 69.88.24.34
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 200.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 220.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 200.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -d 216.0.0.0/252.0.0.0 -j SNAT –to-source 202.152.55.211
-A POSTROUTING -s 192.168.2.0/255.255.255.0 -j SNAT –to-source 69.88.24.34
COMMIT
# Completed on Fri Nov 11 23:44:29 2005
[root@dvb root]#
[root@dvb root]# ip addr
1: lo: mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth0: mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:00:0e:b8:bd:aa brd ff:ff:ff:ff:ff:ff
inet 202.152.55.211/29 brd 202.152.55.215 scope global eth0:0
inet 192.168.2.222/24 brd 192.168.2.255 scope global eth0:1
inet 69.88.24.34/29 brd 69.88.24.39 scope global eth0
3: aba_0: mtu 1500 qdisc noqueue
link/ether 00:d0:72:01:42:0a brd ff:ff:ff:ff:ff:ff
inet 10.2.0.1/24 brd 10.255.255.255 scope global aba_0
[root@dvb root]#
[root@dvb root]# ip r
202.152.55.208/29 dev eth0 proto kernel scope link src 202.152.55.211
69.88.24.32/29 dev eth0 scope link
10.2.0.0/24 dev aba_0 proto kernel scope link src 10.2.0.1
192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.222
127.0.0.0/8 dev lo scope link
default via 202.152.55.209 dev eth0
[root@dvb root]#
[root@dvb root]# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
202.152.55.208 0.0.0.0 255.255.255.248 U 40 0 0 eth0
69.88.24.32 0.0.0.0 255.255.255.248 U 40 0 0 eth0
10.2.0.0 0.0.0.0 255.255.255.0 U 40 0 0 aba_0
192.168.2.0 0.0.0.0 255.255.255.0 U 40 0 0 eth0
127.0.0.0 0.0.0.0 255.0.0.0 U 40 0 0 lo
0.0.0.0 202.152.55.209 0.0.0.0 UG 40 0 0 eth0
[root@dvb root]#
[root@dvb root]# cat /etc/resolv.conf
nameserver 202.152.0.2
nameserver 168.215.210.50
nameserver 207.170.210.16
[root@dvb root]#
[root@dvb root]# cat /etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.###ini utk dvb
################
#ip route add 69.88.24.33 via 202.152.55.210
route add default gw 202.152.55.209
# touch /var/lock/subsys/local
#arahkan situs dalam ke LA
iptables -t nat -A POSTROUTING -s 192.168.2.200/24 -d 202.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.200/24 -d 222.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.200/24 -d 203.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.200/24 -d 219.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -d 0.0.0.0/0 -j SNAT –to 69.88.24.34
#modprobe ipt_LOG
#modprobe ipt_REJECT
#modprobe ipt_MASQUERADE
#/sbin/depmod -a
#echo “1″ > /proc/sys/net/ipv4/ip_forward
#iptables -F
#iptables -t nat -F
#iptables -X
#iptables -t nat -X
##iptables NEW
#iptables -t nat -A POSTROUTING -d 202.0.0.0/255.0.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -d 203.130.0.0/255.255.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -d 203.134.0.0/255.255.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -d 61.94.0.0/255.255.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -d 61.5.0.0/255.255.0.0 -p tcp -m tcp –dport 80 -j SNAT –to-source 202.152.55.210
#iptables -t nat -A POSTROUTING -p tcp -m tcp –dport 6000:7000 -j SNAT –to-source 202.152.55.211
#iptables -t nat -A POSTROUTING -p tcp -m tcp –dport 80 -j SNAT –to-source 69.88.3.241
#iptables -t nat -A POSTROUTING -s 0.0.0.0/0 -d 0.0.0.0/0 -j MASQUERADE
##routing web local
#iptables -t nat -A POSTROUTING -d 202.0.0.0/8 -j SNAT –to 202.152.55.210
##routing web luar
#iptables -t nat -A POSTROUTING -d 203.130.242.0/24 -j SNAT –to 202.152.55.210
###routing irc
#iptables -t nat -A POSTROUTING -p tcp –dport 6667 -j SNAT –to 69.88.3.243
#iptables -t nat -A POSTROUTING -j SNAT –to 69.88.3.241
##cakrawala HPT
#iptables -t nat -A POSTROUTING -d 202.0.0.0/8 -j SNAT –to 202.152.55.210
#iptables -t nat -A POSTROUTING -p tcp –dport 6667 -j SNAT –to 69.88.3.241
##digital
#iptables -t nat -A POSTROUTING -s 192.168.2.34 -o eth0 -p tcp -j SNAT –to 202.174.154.103
#iptables -t nat -A POSTROUTING -s 192.168.2.34 -o eth0 -p udp -j SNAT –to 202.174.154.103
#iptables -t nat -A POSTROUTING -s 192.168.2.34 -o eth0 -d 0/0 -j MASQUERADE
# buka port
#iptables -A INPUT -j ACCEPT -p tcp –dport 80
#iptables -A INPUT -j ACCEPT -p tcp –dport 21
#iptables -A INPUT -j ACCEPT -p tcp –dport 110
#iptables -A INPUT -j ACCEPT -p tcp –dport 25
#iptables -A INPUT -j ACCEPT -p tcp –dport 22
####traffic shapping
#/etc/rc.d/cbq start
#touch /var/lock/subsys/local
#touch /var/lock/subsys/local
[root@dvb root]#
[root@dvb root]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.0 1412 52 ? S Nov04 0:03 init [3]
root 2 0.0 0.0 0 0 ? SW Nov04 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SW Nov04 0:00 [kapm-idled]
root 4 0.0 0.0 0 0 ? SWN Nov04 0:00 [ksoftirqd_CPU0]
root 5 0.0 0.0 0 0 ? SW Nov04 0:01 [kswapd]
root 6 0.0 0.0 0 0 ? SW Nov04 0:00 [kreclaimd]
root 7 0.0 0.0 0 0 ? SW Nov04 0:00 [bdflush]
root 8 0.0 0.0 0 0 ? SW Nov04 0:00 [kupdated]
root 9 0.0 0.0 0 0 ? SW< Nov04 0:00 [mdrecoveryd]
root 13 0.0 0.0 0 0 ? SW Nov04 0:05 [kjournald]
root 99 0.0 0.0 0 0 ? SW Nov04 0:00 [khubd]
root 581 0.0 0.2 1696 160 ? S Nov04 0:05 syslogd -m 0
root 586 0.0 0.0 2108 0 ? SW Nov04 0:00 klogd -2
rpc 607 0.0 0.0 1548 0 ? SW Nov04 0:00 portmap
root 718 0.0 0.0 4272 0 ? SW Nov04 0:00 /usr/sbin/snmpd -
root 736 0.0 0.4 2676 296 ? S Nov04 0:52 /usr/sbin/sshd
root 769 0.0 0.0 2264 0 ? SW Nov04 0:00 xinetd -stayalive
root 787 0.0 0.1 1584 108 ? S Nov04 0:00 crond
root 865 0.0 0.1 18148 120 ? S Nov04 0:00 /usr/local/bin/ab
root 866 0.0 0.1 18148 124 ? S Nov04 0:00 /usr/local/bin/ab
root 867 0.0 0.1 18148 124 ? S Nov04 0:00 /usr/local/bin/ab
root 868 0.0 0.1 18148 124 ? S Nov04 0:00 /usr/local/bin/ab
root 898 0.0 0.0 1384 0 tty2 SW Nov04 0:00 /sbin/mingetty tt
root 899 0.0 0.0 1384 0 tty3 SW Nov04 0:00 /sbin/mingetty tt
root 900 0.0 0.0 1384 0 tty4 SW Nov04 0:00 /sbin/mingetty tt
root 901 0.0 0.0 1384 0 tty5 SW Nov04 0:00 /sbin/mingetty tt
root 902 0.0 0.0 1384 0 tty6 SW Nov04 0:00 /sbin/mingetty tt
root 2286 0.0 0.0 1384 0 tty1 SW Nov04 0:00 /sbin/mingetty tt
root 18668 0.0 2.8 3536 1748 ? S Nov11 0:00 /usr/sbin/sshd
root 18669 0.0 2.1 2520 1360 pts/0 S Nov11 0:00 -bash
root 18729 0.0 1.1 2636 724 pts/0 R 00:03 0:00 ps aux
[root@dvb root]#
proxy conf
[root@router root]# iptables-save
# Generated by iptables-save v1.2.6a on Sat Nov 12 07:38:57 2005
*filter
:INPUT ACCEPT [108975:87806451]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [120593:91453581]
COMMIT
# Completed on Sat Nov 12 07:38:57 2005
[root@router root]#
[root@router root]# ip r
192.168.2.0/24 dev eth1 scope link
192.168.2.0/24 dev eth1 proto kernel scope link src 192.168.2.113
127.0.0.0/8 dev lo scope link
default via 192.168.2.1 dev eth1
[root@router root]#
[root@router root]# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.2.0 0.0.0.0 255.255.255.0 U 40 0 0 eth1
192.168.2.0 0.0.0.0 255.255.255.0 U 40 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 40 0 0 lo
0.0.0.0 192.168.2.1 0.0.0.0 UG 40 0 0 eth1
[root@router root]#
[root@router root]# cat /etc/resolv.conf
nameserver 202.152.0.2
[root@router root]#
[root@router root]# cat /etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
touch /var/lock/subsys/local
[root@router root]#
[root@router root]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.2 1336 480 ? S 05:44 0:03 init
root 2 0.0 0.0 0 0 ? SW 05:44 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SW 05:44 0:00 [kapmd]
root 4 0.0 0.0 0 0 ? SWN 05:44 0:00 [ksoftirqd_CPU0]
root 5 0.0 0.0 0 0 ? SW 05:44 0:00 [kswapd]
root 6 0.0 0.0 0 0 ? SW 05:44 0:00 [bdflush]
root 7 0.0 0.0 0 0 ? SW 05:44 0:00 [kupdated]
root 8 0.0 0.0 0 0 ? SW 05:44 0:00 [mdrecoveryd]
root 12 0.0 0.0 0 0 ? SW 05:44 0:00 [kjournald]
root 68 0.0 0.0 0 0 ? SW 05:45 0:00 [khubd]
root 160 0.0 0.0 0 0 ? SW 05:45 0:00 [kjournald]
root 410 0.0 0.0 0 0 ? SW 05:46 0:00 [eth0]
root 526 0.0 0.3 1748 756 ? S 05:46 0:00 syslogd -m 0
root 531 0.0 0.2 1336 428 ? S 05:46 0:00 klogd -x
rpc 548 0.0 0.2 1484 532 ? S 05:46 0:00 portmap
rpcuser 567 0.0 0.4 1744 828 ? S 05:46 0:00 rpc.statd
root 648 0.0 0.2 1328 476 ? S 05:46 0:00 /usr/sbin/apmd -p
root 686 0.0 0.7 3276 1468 ? S 05:46 0:01 /usr/sbin/sshd
root 700 0.0 0.4 2092 896 ? S 05:46 0:00 xinetd -stayalive
root 723 0.0 1.2 5056 2384 ? S 05:47 0:00 sendmail: accepti
smmsp 733 0.0 1.1 4868 2152 ? S 05:47 0:00 sendmail: Queue r
root 743 0.0 0.2 1372 428 ? S 05:47 0:00 gpm -t ps/2 -m /d
root 752 0.0 0.3 1512 612 ? S 05:47 0:00 crond
root 765 0.0 0.5 3976 1080 ? S 05:47 0:00 squid -D
squid 768 0.3 4.9 11332 9416 ? S 05:47 0:20 (squid) -D
squid 770 0.0 0.1 1304 248 ? S 05:47 0:00 (unlinkd)
daemon 794 0.0 0.2 1368 520 ? S 05:47 0:00 /usr/sbin/atd
root 803 0.0 0.2 1316 404 tty1 S 05:47 0:00 /sbin/mingetty tt
root 804 0.0 0.2 1316 404 tty2 S 05:47 0:00 /sbin/mingetty tt
root 805 0.0 0.2 1316 404 tty3 S 05:47 0:00 /sbin/mingetty tt
root 806 0.0 0.2 1316 404 tty4 S 05:47 0:00 /sbin/mingetty tt
root 807 0.0 0.2 1316 404 tty5 S 05:47 0:00 /sbin/mingetty tt
root 808 0.0 0.2 1316 404 tty6 S 05:47 0:00 /sbin/mingetty tt
root 912 0.0 1.1 6708 2124 ? S 07:38 0:00 /usr/sbin/sshd
root 914 0.0 0.7 4128 1404 pts/0 S 07:38 0:00 -bash
root 959 0.0 0.3 2556 640 pts/0 R 07:41 0:00 ps aux
[root@router root]#
# Generated by iptables-save v1.2.6a on Sat Nov 12 07:38:57 2005
*filter
:INPUT ACCEPT [108975:87806451]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [120593:91453581]
COMMIT
# Completed on Sat Nov 12 07:38:57 2005
[root@router root]#
[root@router root]# ip r
192.168.2.0/24 dev eth1 scope link
192.168.2.0/24 dev eth1 proto kernel scope link src 192.168.2.113
127.0.0.0/8 dev lo scope link
default via 192.168.2.1 dev eth1
[root@router root]#
[root@router root]# netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
192.168.2.0 0.0.0.0 255.255.255.0 U 40 0 0 eth1
192.168.2.0 0.0.0.0 255.255.255.0 U 40 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 40 0 0 lo
0.0.0.0 192.168.2.1 0.0.0.0 UG 40 0 0 eth1
[root@router root]#
[root@router root]# cat /etc/resolv.conf
nameserver 202.152.0.2
[root@router root]#
[root@router root]# cat /etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
touch /var/lock/subsys/local
[root@router root]#
[root@router root]# ps aux
USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
root 1 0.0 0.2 1336 480 ? S 05:44 0:03 init
root 2 0.0 0.0 0 0 ? SW 05:44 0:00 [keventd]
root 3 0.0 0.0 0 0 ? SW 05:44 0:00 [kapmd]
root 4 0.0 0.0 0 0 ? SWN 05:44 0:00 [ksoftirqd_CPU0]
root 5 0.0 0.0 0 0 ? SW 05:44 0:00 [kswapd]
root 6 0.0 0.0 0 0 ? SW 05:44 0:00 [bdflush]
root 7 0.0 0.0 0 0 ? SW 05:44 0:00 [kupdated]
root 8 0.0 0.0 0 0 ? SW 05:44 0:00 [mdrecoveryd]
root 12 0.0 0.0 0 0 ? SW 05:44 0:00 [kjournald]
root 68 0.0 0.0 0 0 ? SW 05:45 0:00 [khubd]
root 160 0.0 0.0 0 0 ? SW 05:45 0:00 [kjournald]
root 410 0.0 0.0 0 0 ? SW 05:46 0:00 [eth0]
root 526 0.0 0.3 1748 756 ? S 05:46 0:00 syslogd -m 0
root 531 0.0 0.2 1336 428 ? S 05:46 0:00 klogd -x
rpc 548 0.0 0.2 1484 532 ? S 05:46 0:00 portmap
rpcuser 567 0.0 0.4 1744 828 ? S 05:46 0:00 rpc.statd
root 648 0.0 0.2 1328 476 ? S 05:46 0:00 /usr/sbin/apmd -p
root 686 0.0 0.7 3276 1468 ? S 05:46 0:01 /usr/sbin/sshd
root 700 0.0 0.4 2092 896 ? S 05:46 0:00 xinetd -stayalive
root 723 0.0 1.2 5056 2384 ? S 05:47 0:00 sendmail: accepti
smmsp 733 0.0 1.1 4868 2152 ? S 05:47 0:00 sendmail: Queue r
root 743 0.0 0.2 1372 428 ? S 05:47 0:00 gpm -t ps/2 -m /d
root 752 0.0 0.3 1512 612 ? S 05:47 0:00 crond
root 765 0.0 0.5 3976 1080 ? S 05:47 0:00 squid -D
squid 768 0.3 4.9 11332 9416 ? S 05:47 0:20 (squid) -D
squid 770 0.0 0.1 1304 248 ? S 05:47 0:00 (unlinkd)
daemon 794 0.0 0.2 1368 520 ? S 05:47 0:00 /usr/sbin/atd
root 803 0.0 0.2 1316 404 tty1 S 05:47 0:00 /sbin/mingetty tt
root 804 0.0 0.2 1316 404 tty2 S 05:47 0:00 /sbin/mingetty tt
root 805 0.0 0.2 1316 404 tty3 S 05:47 0:00 /sbin/mingetty tt
root 806 0.0 0.2 1316 404 tty4 S 05:47 0:00 /sbin/mingetty tt
root 807 0.0 0.2 1316 404 tty5 S 05:47 0:00 /sbin/mingetty tt
root 808 0.0 0.2 1316 404 tty6 S 05:47 0:00 /sbin/mingetty tt
root 912 0.0 1.1 6708 2124 ? S 07:38 0:00 /usr/sbin/sshd
root 914 0.0 0.7 4128 1404 pts/0 S 07:38 0:00 -bash
root 959 0.0 0.3 2556 640 pts/0 R 07:41 0:00 ps aux
[root@router root]#
wrt54g as a gateway ISP back up
here is /etc/rc.d/rc.local on dvb
#!/bin/sh
###ini utk dvb
################
#ip route add 69.88.24.33 via 202.152.55.210
route add default gw 202.152.55.209
# touch /var/lock/subsys/local
#arahkan situs dalam ke LA
iptables -t nat -A POSTROUTING -s 192.168.2.100/24 -d 202.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.100/24 -d 222.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.100/24 -d 203.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.100/24 -d 219.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -d 0.0.0.0/0 -j SNAT –to 69.88.24.34
=================================
ini ip ro dvb
=============
[root@dvb root]# ip ro
202.152.55.208/29 dev eth0 proto kernel scope link src 202.152.55.211
69.88.24.32/29 dev eth0 scope link
10.2.0.0/24 dev aba_0 proto kernel scope link src 10.2.0.1
192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.100
127.0.0.0/8 dev lo scope link
default via 202.152.55.209 dev eth0
—————————-
======
[root@dvb root]# ip addr
1: lo: mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth0: mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:00:0e:b8:bd:aa brd ff:ff:ff:ff:ff:ff
inet 202.152.55.211/29 brd 202.152.55.215 scope global eth0:0
inet 192.168.2.100/24 brd 192.168.2.255 scope global eth0:1
inet 69.88.24.34/29 brd 69.88.24.39 scope global eth0
3: aba_0: mtu 1500 qdisc noqueue
link/ether 00:d0:72:01:42:0a brd ff:ff:ff:ff:ff:ff
inet 10.2.0.1/24 brd 10.255.255.255 scope global aba_0
#!/bin/sh
###ini utk dvb
################
#ip route add 69.88.24.33 via 202.152.55.210
route add default gw 202.152.55.209
# touch /var/lock/subsys/local
#arahkan situs dalam ke LA
iptables -t nat -A POSTROUTING -s 192.168.2.100/24 -d 202.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.100/24 -d 222.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.100/24 -d 203.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.100/24 -d 219.0.0.0/6 -j SNAT –to 202.152.55.211
iptables -t nat -A POSTROUTING -s 192.168.2.0/24 -d 0.0.0.0/0 -j SNAT –to 69.88.24.34
=================================
ini ip ro dvb
=============
[root@dvb root]# ip ro
202.152.55.208/29 dev eth0 proto kernel scope link src 202.152.55.211
69.88.24.32/29 dev eth0 scope link
10.2.0.0/24 dev aba_0 proto kernel scope link src 10.2.0.1
192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.100
127.0.0.0/8 dev lo scope link
default via 202.152.55.209 dev eth0
—————————-
======
[root@dvb root]# ip addr
1: lo: mtu 16436 qdisc noqueue
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 brd 127.255.255.255 scope host lo
2: eth0: mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:00:0e:b8:bd:aa brd ff:ff:ff:ff:ff:ff
inet 202.152.55.211/29 brd 202.152.55.215 scope global eth0:0
inet 192.168.2.100/24 brd 192.168.2.255 scope global eth0:1
inet 69.88.24.34/29 brd 69.88.24.39 scope global eth0
3: aba_0: mtu 1500 qdisc noqueue
link/ether 00:d0:72:01:42:0a brd ff:ff:ff:ff:ff:ff
inet 10.2.0.1/24 brd 10.255.255.255 scope global aba_0
proxy transparent
install squid yg incl. di RH 7.2
edit file /etc/squid/squid.conf
http_port 8080
cache_mem 80 MB
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl localnet src 192.168.2.0/255.255.255.0
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# And finally deny all other access to this proxy
http_access allow localhost
http_access allow localnet
http_access deny all
cache_mgr info@cakrawalamultimedia.com
visible_hostname www.cakrawalamultimedia.com
#setting utk transparent proxy
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
##lalu setting di file /etc/rc.d/rc.local
#iptables
/sbin/modprobe ipt_LOG
/sbin/modprobe ipt_REJECT
/sbin/modprobe ipt_MASQUERADE
#menjalankan ip forward
echo “1″ > /proc/sys/net/ipv4/ip_forward
echo “1″ > /proc/sys/net/ipv4/ip_dynaddr
#hapus filter lama
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -P OUTPUT ACCEPT
#hapus aturan lama
/sbin/iptables -t nat -P PREROUTING ACCEPT
/sbin/iptables -t nat -P POSTROUTING ACCEPT
/sbin/iptables -t nat -P OUTPUT ACCEPT
#batalkan semua filter dan nat
/sbin/iptables -F
/sbin/iptables -t nat -F
#jalankan forward dan masguerading
/sbin/iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
#jalankan proxy transparan
iptables -t nat -A PREROUTING -i eth0 -p tcp –dport 80 -j REDIRECT –to-port 8080
#JALANKAN MASQUERADE
#jika tidak pake proxy maka ini di uncomment
#/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 0/0 -j MASQUERADE
#touch /var/lock/subsys/local
####
## make a squid swap file
squid -z
start the squid with this comand
squid start
#### coba jalankan ####
sudah berjalan di server gili trawangan burnoc dan di superstart senggigi the fastest internet
edit file /etc/squid/squid.conf
http_port 8080
cache_mem 80 MB
#Recommended minimum configuration:
acl all src 0.0.0.0/0.0.0.0
acl manager proto cache_object
acl localhost src 127.0.0.1/255.255.255.255
acl localnet src 192.168.2.0/255.255.255.0
acl SSL_ports port 443 563
acl Safe_ports port 80 # http
acl Safe_ports port 21 # ftp
acl Safe_ports port 443 563 # https, snews
acl Safe_ports port 70 # gopher
acl Safe_ports port 210 # wais
acl Safe_ports port 1025-65535 # unregistered ports
acl Safe_ports port 280 # http-mgmt
acl Safe_ports port 488 # gss-http
acl Safe_ports port 591 # filemaker
acl Safe_ports port 777 # multiling http
acl CONNECT method CONNECT
# Only allow cachemgr access from localhost
http_access allow manager localhost
http_access deny manager
# And finally deny all other access to this proxy
http_access allow localhost
http_access allow localnet
http_access deny all
cache_mgr info@cakrawalamultimedia.com
visible_hostname www.cakrawalamultimedia.com
#setting utk transparent proxy
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
##lalu setting di file /etc/rc.d/rc.local
#iptables
/sbin/modprobe ipt_LOG
/sbin/modprobe ipt_REJECT
/sbin/modprobe ipt_MASQUERADE
#menjalankan ip forward
echo “1″ > /proc/sys/net/ipv4/ip_forward
echo “1″ > /proc/sys/net/ipv4/ip_dynaddr
#hapus filter lama
/sbin/iptables -P INPUT ACCEPT
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -P OUTPUT ACCEPT
#hapus aturan lama
/sbin/iptables -t nat -P PREROUTING ACCEPT
/sbin/iptables -t nat -P POSTROUTING ACCEPT
/sbin/iptables -t nat -P OUTPUT ACCEPT
#batalkan semua filter dan nat
/sbin/iptables -F
/sbin/iptables -t nat -F
#jalankan forward dan masguerading
/sbin/iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE
#jalankan proxy transparan
iptables -t nat -A PREROUTING -i eth0 -p tcp –dport 80 -j REDIRECT –to-port 8080
#JALANKAN MASQUERADE
#jika tidak pake proxy maka ini di uncomment
#/sbin/iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -d 0/0 -j MASQUERADE
#touch /var/lock/subsys/local
####
## make a squid swap file
squid -z
start the squid with this comand
squid start
#### coba jalankan ####
sudah berjalan di server gili trawangan burnoc dan di superstart senggigi the fastest internet
firewalling
edit /etc/rc.d/rc.local
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
# touch /var/lock/subsys/local
modprobe ipt_LOG
modprobe ipt_REJECT
modprobe ipt_MASQUERADE
/sbin/depmod -a
echo “1″ > /proc/sys/net/ipv4/ip_forward
iptables -F
iptables -t nat -F
iptables -X
iptables -t nat -X
LAN_IF=”eth0″
EXT_IF=”eth1″
#######
# warnet client
iptables -t nat -A POSTROUTING -s 192.168.2.42 -o $EXT_IF -p tcp -j SNAT –to-source 202.75.101.126
iptables -t nat -A POSTROUTING -s 192.168.2.42 -o $EXT_IF -p udp -j SNAT –to-source 202.75.101.126
iptables -t nat -A POSTROUTING -s 192.168.2.42 -o $EXT_IF -d 0/0 -j MASQUERADE
# buka port
iptables -A INPUT -j ACCEPT -p tcp –dport 80
iptables -A INPUT -j ACCEPT -p tcp –dport 21
iptables -A INPUT -j ACCEPT -p tcp –dport 110
iptables -A INPUT -j ACCEPT -p tcp –dport 25
iptables -A INPUT -j ACCEPT -p tcp –dport 22
#####
# bandwidth limiter
/etc/rc.d/cbq.init-v0.7
#!/bin/sh
#
# This script will be executed *after* all the other init scripts.
# You can put your own initialization stuff in here if you don’t
# want to do the full Sys V style init stuff.
# touch /var/lock/subsys/local
modprobe ipt_LOG
modprobe ipt_REJECT
modprobe ipt_MASQUERADE
/sbin/depmod -a
echo “1″ > /proc/sys/net/ipv4/ip_forward
iptables -F
iptables -t nat -F
iptables -X
iptables -t nat -X
LAN_IF=”eth0″
EXT_IF=”eth1″
#######
# warnet client
iptables -t nat -A POSTROUTING -s 192.168.2.42 -o $EXT_IF -p tcp -j SNAT –to-source 202.75.101.126
iptables -t nat -A POSTROUTING -s 192.168.2.42 -o $EXT_IF -p udp -j SNAT –to-source 202.75.101.126
iptables -t nat -A POSTROUTING -s 192.168.2.42 -o $EXT_IF -d 0/0 -j MASQUERADE
# buka port
iptables -A INPUT -j ACCEPT -p tcp –dport 80
iptables -A INPUT -j ACCEPT -p tcp –dport 21
iptables -A INPUT -j ACCEPT -p tcp –dport 110
iptables -A INPUT -j ACCEPT -p tcp –dport 25
iptables -A INPUT -j ACCEPT -p tcp –dport 22
#####
# bandwidth limiter
/etc/rc.d/cbq.init-v0.7
Langganan:
Komentar (Atom)