squid

ternyata masang squid gak gampang gak susah :D, akhir nya berhsil juga cara na :
1. seting squid.conf menjadi:

http_port 8080
icp_port 0
cache_mem 80 MB
maximum_object_size 256 KB
cache_dir ufs /cache 200 16 256
memory_pools_limit 32 MB
redirect_rewrites_host_header off
replacement_policy GDSF
half_closed_clients off
#-----------transparent proxy -----------
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
#-------------------------------------------
acl QUERY urlpath_regex cgi-bin ?
no_cache deny QUERY
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl lan src 192.168.30.0/255.255.255.0
acl Safe_ports port 80 443 210 119 563 70 21 1025-65535
acl CONNECT method CONNECT
acl notsex url_regex -i "/etc/squid/notsex"
acl sex url_regex -i "/etc/squid/sex"
no_cache deny SEX
http_access allow notsex all
http_access deny sex all
http_access allow lan
http_access allow localhost
http_access deny !Safe_ports
http_access deny CONNECT
http_access deny all
#---------------- administration info ------------
cache_mgr az1em13@gmail.comThis email address is being protected from spam bots, you need Javascript enabled to view it
cache_effective_user squid
cache_effective_group squid
log_icp_queries off
cachemgr_passwd mypassword all
forwarded_for off
buffered_logs on
visible_hostname alfinuke.edcentral.pdk
ftp_user azim@ringroad.web.idThis email address is being protected from spam bots, you need Javascript enabled to view it

setelah itu maka tinggal di redirect port na

iptables -t nat -A PREROUTING -i eth1 -t tcp -s 192.168.0.0/255.255.255.0 -dport 80 -j DNAT - to 192.168.0.1:8080

dari argument di atas bahwa:
-i eth1 = interface yg di pakai untuk client (gateway client)
-s 192.168.0.0/255.255.255.0 = network client
--dport 80 -j DNAT --to 192.168.0.1:8080 adalah bila ada request port 80 (biasanya browsing), akan di paksa masuk ke squid dengan ip 192.168.0.1 port 8080

demikian lah hasil na :D
thank to alloh SWT, nixel, uncle google,etc.. :D
[ my honey you are spirit for me]