RoutersProxy

[SERVER] Install VNC Server on Ubuntu Server

noreply@blogger.com (Anonymous) — Tue, 29 Oct 2013 23:08:00 +0700

[1] Install VNC Server to operate Ubuntu with GUI from remote Windows client.

root@dlp:~# aptitude -y install vnc4server
root@dlp:~# su - narwhal

# switch to a user who set VNC
narwhal@dlp:~$ vncpasswd

# set VNC password
Password:

# any password you like to set
Verify:
narwhal@dlp:~$ vncserver :1

# start
xauth: file /home/narwhal/.Xauthority does not exist
New 'dlp:1 (narwhal)' desktop is dlp:1
Creating default startup script /home/narwhal/.vnc/xstartup
Starting applications specified in /home/narwhal/.vnc/xstartup
Log file is /home/narwhal/.vnc/dlp:1.log
narwhal@dlp:~$ vncserver -kill :1

# stop
Killing Xvnc4 process ID 10540
narwhal@dlp:~$ vi .vnc/xstartup

# add follows
exec gnome-session &

# start with diplay number '1', screen resolution '800x600', color depth '24'
narwhal@dlp:~$ vncserver :1 -geometry 800x600 -depth 24
New 'dlp:1 (narwhal)' desktop is dlp:1
Starting applications specified in /home/narwhal/.vnc/xstartup
Log file is /home/narwhal/.vnc/dlp:1.log

[2] Install VNC viewer on client computer next. Download from the site below to install.

http://www.realvnc.com/products/free/4.1/download.html
Start VNC viewer after installing. Then following scrren is shown. Input [(Server's hostname or IP address):(display number)] like following example.

[3] Password is required. Input VNC password you set in the section [1].

[4] Just connected.

[SERVER] Install PHP on Ubuntu Server

noreply@blogger.com (Anonymous) — Tue, 29 Oct 2013 22:56:00 +0700

[1] Install PHP

root@www:~# aptitude -y install php5 php5-cgi libapache2-mod-php5 php5-common php-pear
root@www:~# vi /etc/apache2/mods-enabled/mime.conf

# near line 219: add extension for PHP
AddHandler php5-script .php
root@www:~# /etc/init.d/apache2 restart

* Restarting web server apache2
... waiting ...done.

[2] Create a PHP test page and access to it with web browser. It's OK if following page is shown.

root@www:~# vi /var/www/index.php

<html>
<body>
<div style="width: 100%; font-size: 40px; font-weight: bold; text-align:center;">
<?php
print Date("Y/m/d");
?>
</div>
</body>
</html>

[SERVER] Configure Squid3 as a Reverse Proxy on Ubuntu Server

noreply@blogger.com (Anonymous) — Tue, 29 Oct 2013 22:48:00 +0700

[1] Install Squid

root@lan:~#
aptitude -y install squid3

root@lan:~#
vi /etc/squid3/squid.conf

acl CONNECT method CONNECT
# line 706: define ACL for internalacl lan src 10.0.0.0/24
http_access allow localhost

# line 830: add (set ACL for internal)
http_access allow lan

# line 1117: change
http_port
8080

# line 3368: add follows
request_header_access Referer deny all
request_header_access X-Forwarded-For deny all
request_header_access Via deny all
request_header_access Cache-Control deny all

# line 3653: add (define hostname)
visible_hostname lan.server.world

# forwarded_for on
# line 5384:: add (hide IP address)
forwarded_for off

root@lan:~#
/etc/init.d/squid3 restart

* Restarting Squid HTTP Proxy 3.x squid3
* Waiting...
...done.
* Creating Squid HTTP Proxy 3.x cache structure
2011/05/05 03:31:41| Creating Swap Directories
...done.

[2] Start Web browser on your client PC. This is the example on Internet Explorer 9. Select [Tools] - [Internet Options] and move to [Connections] tab like below.

[3] Check 'use a proxy' and input server's hostname and port number set in the section [1]. Then, you can access to internet through proxy server.

[SERVER] Configure SSL di Ubuntu Server

noreply@blogger.com (Anonymous) — Tue, 29 Oct 2013 22:37:00 +0700

[1] Create certificates first. See here.
[2] Configure SSL

root@www:~#
vi /etc/apache2/sites-available/default-ssl

# line 3: change to webmaster's email
ServerAdmin
webmaster@mr-ekoapriadi.net

# line 11,12: change
Options FollowSymLinks
ExecCGI

AllowOverride
All

# line 51,52: change
SSLCertificateFile
/etc/ssl/private/server.crt

SSLCertificateKeyFile
/etc/ssl/private/server.key

root@www:~#
a2ensite default-ssl

Enabling site default-ssl.
Run '/etc/init.d/apache2 reload' to activate new configuration!
root@www:~#
a2enmod ssl

Enabling module ssl.
See /usr/share/doc/apache2.2-common/README.Debian.gz on how to configure SSL and create self-signed certificates.
Run '/etc/init.d/apache2 restart' to activate new configuration!
root@www:~#
/etc/init.d/apache2 restart

* Restarting web server apache2
... waiting ...done.

[3] Access to the test page with https. Following window is shown because Certification File is made by yourdelf, it's no ploblem, Click Ok to proceed.

[DOWNLOAD] Ubuntu 11.04

noreply@blogger.com (Anonymous) — Mon, 28 Oct 2013 16:16:00 +0700

[1] Download Ubuntu 11.04 ( released on 28 April, 2011 ) from the following site.

⇒ http://www.ubuntu.com/download/server/download

It's OK to download 64 bit version commonly.
But if your computer is old and not supported 64 bit computing, download 32 bit version.

* The example on this site uses 64 bit version of Ubuntu 11.04.

[2] Burn ISO file to DVD with an apprication on your computer for burning and Make an Installation Disk. After finishing it, proceed to next step for installing Ubuntu 11.04.

[DOWNLOAD] Squid Calculator

noreply@blogger.com (Anonymous) — Fri, 25 Oct 2013 01:41:00 +0700

Program ini dirancang untuk menghitung besaran partisi cache. Gunakan Program Squid Calculator ini untuk menghitung squid cache anda.

Program ini dibuat untuk memudahkan perhitungan disk cache, pada konfigurasi squid.Perhitungan ini diperoleh hasil rangkuman dari beberapa thread yang dibuat oleh senior-senior di FMI (Forum MIkrotik Indonesia)

Berikut sekilas cara perhitungannya:

1 GB disk cache, membutuhkan memory 10 MB
Alokasikan memory hanya sebesar 25% dari total memory yang ada untuk disk cache, sisanya adalah untuk system
Gunakan 80% saja dari partisi cache yang dibuat, agar lebih lebih leluasa ‘menulisnya’
Untuk perhitungan cache_dir, menggunakan rumus : ((( x / y ) / 256 ) / 256 )
2 = L1 dimana x = ukuran harddisk y = average object (biasanya 13 kb) L1, L2 = jumlah directory

[DOWNLOAD] PuTTY

noreply@blogger.com (Anonymous) — Fri, 25 Oct 2013 01:27:00 +0700

Download PuTTY

PuTTY is an SSH and telnet client, developed originally by Simon Tatham for the Windows platform. PuTTY is open source software that is available with source code and is developed and supported by a group of volunteers.

You can download PuTTY

[DOWNLOAD] WinSCP

noreply@blogger.com (Anonymous) — Fri, 25 Oct 2013 01:22:00 +0700

WinSCP 5.2.5 beta released

The most important changes/additions are:

Distinguishing main question of a message box;
Session can be opened in PuTTY from Login dialog;
Improved working with session colors;
and more bug fixes and improvements

[Go to Download page] [Complete list of changes]

[CCBoot] Setting Diskless Boot Software for Windows

noreply@blogger.com (Anonymous) — Fri, 25 Oct 2013 01:15:00 +0700

Diskless Boot Technology Background
Diskless boot is a technology based on IP (Internet Protocol), UDP (User Datagram Protocol), DHCP (Dynamic Host Configuration Protocol) and TFTP (Trivial File Transfer Protocol). It requires two computers: diskless boot server and client. The client is a computer you want to diskless boot up on LAN, while the server is a combination of DHCP server and TFTP server. It responds requests from diskless stations over network, allocates IP addresses via DHCP for them, pushes necessary data to these stations so that they can boot on LAN even without a harddisk. CCBoot support diskless internet cafe and diskless solution cybercafe.

If using diskless boot solution, the boot process is as bellow:
1. Power on,
2. Load BIOS,
3. PXE stack built-in the NIC (Network Information Center),
4. Download NBP (Network Boot Program) from server to client's RAM by TFTP,
5. NBP's responsibility to perform the next step (a.k.a. 2nd stage boot).
As an administrator responsible for a network of about dozens of computers or more, Diskless boot program will drastically reduce your daily workload. If you want to install or upgrade various softwares for all computers in the network, you just need to do it one time and all computers can get changed. It can also bring you enhanced Disaster Recovery solutions, all computers will get into a clean OS after reboot.

Benifits of Diskless Boot Solution
- Reduce initial capital and implementation costs, reduce power and cooling requirements, reduce complexity and risk.
- Accelerate deployments, upgrades, and server repurposing.
- Implement enhanced Disaster Recovery solutions.
Using CCBoot to Build a Diskless Boot Server
1. Install Diskless Boot Server with CCBoot - An all-in-one Diskless Boot Software
  Download diskless boot software - CCBoot server installation package from - http://www.ccboot.com/download.htm.
  Launch ccbootsetup.exe on the diskless boot server and keep press the next button to the end.
  Figure 1
  CCBoot will use the following ports - 67 (DHCP), 69 (TFTP), 3260 (iSCSI), 1000 (Image Upload), 8001 (Service Control). You need to open these ports in the firewall of the diskless boot server. Since CCBoot v2.1, you also need to open port 66. V2.1 uses port 66 as DHCP backup.
  
  Note: Please shut down the other DHCP services on the LAN especially the DHCP service in the router.
  
  Launch CCBoot and you will get the main interface as bellow:
  Figure 2
2. Initialize the Diskless Boot Server
  Demo Environment
  Server IP: 192.168.1.10
  Gateway: 192.168.1.1
  DNS Address: 192.168.1.1
  IP Mask: 255.255.255.0
  DHCP Range: 192.168.1.101-192.168.1.254
  
  Launch the diskless boot software - CCBoot, menu "Options" -> "Options Wizard" and configure step by step as bellow:
  
  Figure 3
  You need to select the correct local IP address as "DHCP Server IP". Press "Scan DHCP" to check if there are other DHCP services on the LAN. You need to stop other DHCP services on the LAN.
  
  Figure 4
  Set "Server IP Address". Normally, it’s the same as "DHCP Server IP".
  Set "Write-back File Path" and "Image Save Path" as you want.
  
  "Write-back File Path" is used to store the diskless booted clients’ write-back data. You’d better use a big volume hard disk as "Write-back File Path". This disk should be formatted as NTFS and 64K bytes per cluster.
  
  "Image Save Path" is used to store the boot images. This disk should be also formatted as NTFS and 64K bytes per cluster. You’d better use a fast speed hard disk as "Image Save Path". For example, use an SAS hard disk.
  
  Figure 5
  Keep default values in "Server Cache Settings".
  
  Figure 6
  Keep default values in "Other Settings". Press the "Finish" button and confirm the popup dialog box.
3. Create Image for Diskless Boot Windows XP
  To diskless boot Windows XP over network with the diskless boot software - CCBoot, we first of all need to create a system image and here're the steps -
  1. Choose one client PC as master PC used to create diskless boot image. Attach a hard disk on the PC.
  2. Delete all partitions first. Allocate a small MBR partition about 40G size and leave the rest unallocated. Format the 40G partition with NTFS. Install Windows XP and the latest SP into this partition.
  3. After complete Windows installation, open the local area connection network properties and configure as bellow:
    Figure 7
    Click "Properties".
    Figure 8
    Select "Internet Protocol (TCP/IP)" and click "Properties".
    Figure 9
    Select "Obtain an IP address automatically" and "Obtain DNS server address automatically", then click "OK" to save.
  4. On the CCBoot diskless boot server you will find a client in the client list (Figure 10) that was added by CCBoot automatically when the client PC got IP address from the CCBoot DHCP service.
    Figure 10
  5. Double click the client to edit and check both "Enable Upload Image" and "Keep Write-back File" (Figure 11), when press "save" button it will ask you "Are you sure to delete write-back file?" Just press "No".
    Figure 11
  6. Download CCBoot client installation package from: http://www.ccboot.com/download.htm. Launch ccbootsetupclient.exe and keep press the next button to the end. Then launch CCBoot client and you will see the main interface as bellow (Figure 12).
    Figure 12
  7. Press the "Install CCBoot Client" button. After finished, it will require reboot system. Reboot the client PC.
  8. After reboot, launch CCBootClient again, input the correct "Server IP address", it should be the IP address of the PC on which CCBoot server has been located. Input the image file name as you want in the "Image File Name". Press the "Upload Image" button to upload the image to the CCBoot server. Then CCBoot will create an image in the server "Image Save Path".
    
    Note: CCBoot supports two types image file format. It supports VMDK if you are using Windows 2003 as CCBoot server system. It will support both VMDK and VHD if you are using Windows 7 or Windows 2008. As you can see in Figure 12, the file format depends on what you have set for "Image File Name". For example, "XP01.vmdk" and "XP01.vhd".
4. Diskless Boot Windows XP on LAN
  1. On CCBoot diskless boot server, double click PC101 (Figure 10) to open the master PC’s properties dialog box, uncheck "Enable Upload Image" and "Keep Write-back File".
  2. Remove the HDD from the master PC, set it firstly boot from LAN (or network, PXE rom, or some similar settings) in BIOS settings so that it will start network boot to diskless boot Windows XP.(Figure 13).
    Figure 13
  3. The first time you diskless boot Windows XP on the master PC, you can modify its computer name (Figure 14).
    Figure 14
    Set the computer name as you wish then press enter key to boot it (Figure 15).
    Figure 15
  4. On CCBoot server, "Options" -> "Settings" -> "Default Client Settings" -> "Disk Group" -> press the ">>" button, select "XP01.vmdk" as the default boot image in "System Image Selection" section.
  5. Do the same as Step 2 and Step 3 for other client PCs with the same specifications as the master PC to diskless boot Windows XP for them.
5. Diskless Boot Windows 7 and Vista
  Diskless boot Windows 7 step by step.
  Diskless boot Vista step by step.

[WINDOWS] Setting diskclass windows

noreply@blogger.com (Anonymous) — Fri, 25 Oct 2013 01:06:00 +0700

Welcome to definitive Guide ( how-to ) to Boot Windows from AoE with Freeware software to your company network.

This How-to allows a diskless boot of either Windows XP, Windows 2003, Windows Vista, Windows 7 / 8, or Windows 2008 from an AoE target machine remotely located over a standard IP network. It’s also known as network boot or lan boot. Diskless boot makes it possible for computers to be operated without a local disk. The diskless computer is connected to a hard drive over a network and boots up an operating system from a remotely located machine. AoE is the convergence of the rapidly emerging AoE protocol with PXE diskless boot technology. Thus it’s also called PXE boot.

The How-To offers a seamless diskless boot on LAN. Eliminating the need for a local hard drive opens a wide range of possibilities for network management. Using this configuration, the disks for many network computers can be centrally managed, thereby facilitating backup, redundancy, and dynamic allocation of valuable storage resources while at the same time reducing cost to the enterprise.

Booting from AoE makes system administration considerably easier. Freeing a server of its boot volume allows administrators to manage investments in their AoE SANs, attaining improved data security, integrity and recovery, higher availability, quicker server deployment & repurposing, and more efficient utilization of storage resources.

AoE vblade supports .ISO, .IMG, .VHD and .VMDK formats. The AoE has lower overhead than iSCSI targets providing for you a very good performance, even better than computers with hard disk.This solution can be used for Internet cafes, computer labs, hotels, testing organizations, computer rooms in schools, and even offices.

Diskless Windows with fast and free software that work !

Benifits:

Significantly reduce initial capital and implementation costs.
Reduce power and cooling requirements.
Accelerate deployments, upgrades, and server repurposing.
Reduce complexity and risk.
Improve critical system availability.
Implement enhanced Disaster Recovery solutions.

[TUTORIAL] Agar Blog Terdeteksi Search Engine Google, Yahoo, Bing DLL

noreply@blogger.com (Anonymous) — Fri, 25 Oct 2013 00:52:00 +0700

Langsung saja saya tampilkan caranya sebagai berikut :

1. Submit url website atau blog kita di beberapa search engine berikut :

*www.google.com/addurl/
*www.google.com/webmasters/tools/
*search.yahoo.com/info/submit.html
*www.altavista.com/addurl/default
*www.submitexpress.com/submit.html(pihak ketiga)

2. Submit url website atau blog kita di direktori terkenal :

*www.dmoz.org

3. Submit url website atau blog kita di situs jejaring sosial

* Pasang link kita di jejarig sosial seperti Facebook, Twiter, Friendster, dan lain-lain.
* Leave koment pada blog yang terkenal dengan mencantumkan alamat blog kita entah itu follow maupun no follow.
* Kalo kenalan sama orang lain jangan lupa promosi blog kita.
* Pasang iklan di iklan online gratis
* Rajin menebar link kita pada blog aktif di internet.

4. Perlu diingat proses crawl sampai index bisa memakan waktu yang variatif. Bisa lama ataupun sebentar. Tergantung sistem bot google. Kadang dalam hitungan minggu, bulan ataupun tahun. Jadi bersabarlah. Selain itu, jangan terlalu tergantung pada mesin pencari. Tapi lebih utamakan kemampuan promosi Anda pada siapapun. Dan juga konsentrasilah pada pengunjung blog Anda dengan membuat blog terlihat menarik.

Semoga Bermanfaat :D

[SERVER] MEMBERSIHKAN CACHE PROXI MANUAL

noreply@blogger.com (Anonymous) — Thu, 24 Oct 2013 22:34:00 +0700

Sebenarnya cache proxy tidak perlu di kosongkan, karena secara otomatis akan menghapus sendiri cache yang sudah lama jika mencapai parameter tertentu, tetapi adakalanya kita ingin membersihkan cache secara manual

1. Matikan squid yang sedang berjalan

Code:

#service squid stop

2. Bersihkan cache nya

Code:

#rm –rf /direktori_cache
Contoh : # rm –rf /var/spool/squid

3. Buat swapnya lagi

Code:

#squid –z

4. Jalankan squid

Code:

#service squid start

Selamat Mencoba :D

[MIKROTIK] Limit IDM Menggunalan Layer7 di MikroTik

noreply@blogger.com (Anonymous) — Thu, 24 Oct 2013 22:30:00 +0700

Ros V4.9
Sesuaikan ip dijaringan anda
10.0.0.0/24 = ip_local client
192.168.1.100 = ip proxy Ext <-Kalo Ada
10.0.0.30 = ip router

/ip firewall address-list
add address=10.0.0.30 comment="" disabled=no list=bypass
add address=192.168.1.100 comment="" disabled=no list=bypass
add address=192.168.1.100 comment="" disabled=no list=skip_content_download
add address=10.0.0.0/24 comment="" disabled=no list=skip_content_download

Penjelasan:
Buat dulu ip di address_list buat pisahin agar tidak ketangkap oleh rule difilter dan mangle

/ip firewall layer7-protocol
add comment="" name="Extension \" .exe \"" regexp="\\.(exe)"
add comment="" name="Extension \" .rar \"" regexp="\\.(rar)"
add comment="" name="Extension \" .zip \"" regexp="\\.(zip)"
add comment="" name="Extension \" .7z \"" regexp="\\.(7z)"
add comment="" name="Extension \" .cab \"" regexp="\\.(cab)"
add comment="" name="Extension \" .asf \"" regexp="\\.(asf)"
add comment="" name="Extension \" .mov \"" regexp="\\.(mov)"
add comment="" name="Extension \" .wmv \"" regexp="\\.(wmv)"
add comment="" name="Extension \" .mpg \"" regexp="\\.(mpg)"
add comment="" name="Extension \" .mpeg \"" regexp="\\.(mpeg)"
add comment="" name="Extension \" .mkv \"" regexp="\\.(mkv)"
add comment="" name="Extension \" .avi \"" regexp="\\.(avi)"
add comment="" name="Extension \" .flv \"" regexp="\\.(flv)"
add comment="" name="Extension \" .pdf \"" regexp="\\.(pdf)"
add comment="" name="Extension \" .wav \"" regexp="\\.(wav)"
add comment="" name="Extension \" .rm \"" regexp="\\.(rm)"
add comment="" name="Extension \" .mp3 \"" regexp="\\.(mp3)"
add comment="" name="Extension \" .mp4 \"" regexp="\\.(mp4)"
add comment="" name="Extension \" .ram \"" regexp="\\.(ram)"
add comment="" name="Extension \" .rmvb \"" regexp="\\.(rmvb)"
add comment="" name="Extension \" .dat \"" regexp="\\.(dat)"
add comment="" name="Extension \" .daa \"" regexp="\\.(daa)"
add comment="" name="Extension \" .iso \"" regexp="\\.(iso)"
add comment="" name="Extension \" .nrg \"" regexp="\\.(nrg)"
add comment="" name="Extension \" .bin \"" regexp="\\.(bin)"
add comment="" name="Extension \" .vcd \"" regexp="\\.(vcd)"
add comment="" name="Extension \" .mp2 \"" regexp="\\.(mp2)"
add comment="" name="Extension \" .3gp \"" regexp="\\.(3gp)"
add comment="" name="Extension \" .mpe \"" regexp="\\.(mpe)"
add comment="" name="Extension \" .qt \"" regexp="\\.(qt)"
add comment="" name="Extension \" .raw \"" regexp="\\.(raw)"
add comment="" name="Extension \" .wma \"" regexp="\\.(wma)"
add comment="" name="Extension \" .ogg \"" regexp="\\.(ogg)"
add comment="" name="Extension \" .doc \"" regexp="\\.(doc)"

Penjelasan:
Regex content Layer7

/ip firewall filter
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .mp3 \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .avi \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .flv \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .iso \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .pdf \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .mpeg \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .exe \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .rar \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .zip \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .mp4 \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .mp2 \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .3gp \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .mov \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .mpe \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .mpg \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .qt \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .ram \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .rm \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .raw \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .wav \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .wmv \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .wma \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .ogg \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .doc \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .7z \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .asf \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .bin \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .cab \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .daa \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .dat \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .mkv \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .nrg \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .rmvb \"" protocol=tcp
add action=add-dst-to-address-list address-list=content_download address-list-timeout=5s chain=forward comment="" disabled=no dst-address-list=!skip_content_download layer7-protocol="Extension \" .vcd \"" protocol=tcp

Penjelasan:
filter buat nangkap ip content L7

/ip firewall mangle
add action=mark-connection chain=prerouting comment=Content_download disabled=no dst-address-list=content_download new-connection-mark=Bw_Download passthrough=yes protocol=tcp
add action=mark-connection chain=prerouting comment="" connection-bytes=262146-4294967295 disabled=no dst-address-list=!bypass new-connection-mark=Bw_Download passthrough=yes protocol=!icmp
add action=mark-packet chain=prerouting comment="" connection-mark=Bw_Download disabled=no dst-address-list=!bypass new-packet-mark=Paket_Download passthrough=no
add action=mark-connection chain=prerouting comment=Content_browsing disabled=no dst-address-list=!bypass new-connection-mark=Bw_Browsing passthrough=yes protocol=!icmp
add action=mark-packet chain=prerouting comment="" connection-mark=Bw_Browsing disabled=no dst-address-list=!bypass new-packet-mark=Paket_Browsing passthrough=no

Penjelasan:
Kita buat manglenya buat nandain keneksi download pake connbyte digabungin dgn ip_content L7 yg kita tangkap tadi + nandain koneksi browsing

/queue type
add kind=pcq name=pcq-down pcq-classifier=dst-address pcq-limit=50 pcq-rate=256000 pcq-total-limit=2000
add kind=pcq name=Pcq_Browsing_Down pcq-classifier=dst-address pcq-limit=50 pcq-rate=0 pcq-total-limit=200

/queue tree
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=DOWN parent=LOCAL priority=8
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no limit-at=0 max-limit=0 name=Browsing_Down packet-mark=Paket_Browsing parent=DOWN priority=5 queue=Pcq_Browsing_Down
add burst-limit=0 burst-threshold=0 burst-time=0s disabled=no max-limit=256k name=Regular_Down packet-mark=Paket_Download parent=DOWN priority=8 queue=pcq-down

Penjelasan:
Masalah limit download udah selesai sampai disini, skarang tinggal rule untuk Drop koneksi IDM (tetap nangkapnya memakai content L7

/ip firewall filter
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .exe \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .3gp \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .7z \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .asf \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .avi \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .bin \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .cab \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .daa \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .dat \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .doc \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .flv \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .iso \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .mkv \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .mov \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .mp2 \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .mp3 \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .mp4 \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .mpe \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .mpeg \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .mpg \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .nrg \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .ogg \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .pdf \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .qt \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .ram \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .rar \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .raw \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .rm \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .rmvb \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .vcd \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .wav \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .wma \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .wmv \"" protocol=tcp
add action=drop chain=forward comment="" connection-limit=4,32 disabled=no in-interface=LOCAL layer7-protocol="Extension \" .zip \"" protocol=tcp

Penjelasan:
Langsung Filter aja pake conn_limit trus di Drop (perhatikan in-interfacenya sesuaikan dgn nama interface yg menuju Local client anda

[MIKROTIK] NAT MANGLE PROXI HIT

noreply@blogger.com (Anonymous) — Thu, 24 Oct 2013 22:27:00 +0700

Nat :

chain=dstnat action=dst-nat to-addresses=192.168.4.10 to-ports=3128 protocol=tcp src-address=!192.168.4.10 in-interface=lan dst-port=80

Mangle:

chain=forward action=mark-packet new-packet-mark=proxy-hit passthrough=no dscp=12

[MIKROTIK] BYPASS PROXY HIT

noreply@blogger.com (Anonymous) — Thu, 24 Oct 2013 22:26:00 +0700

Mikrotik OS 5.7 dan Squid 2.7 Stable9+Patch

Disini maksudnya adalah apabila ada objek yang HIT dari cache proxy maka tidak terlimit oleh manajemen limit bandwidth yang kita buat baik di simple queue/queue tree. karena klo tetap terlimit ya percuma dong ente bikin squid proxy.

sebenernya ada beberapa cara, tapi berikut yang ane gunakan dan terbukti efektif :

Pertama, pastikan ada baris perintah ini di squid.conf anda :

Code:
zph_mode tos
zph_local 48
zph_sibling 0
zph_parent 0
zph_option 136

Lalu buat Mangle baru di mikrotik anda, pastikan mangle ini posisinya diatas Mangle untuk manajemen bandwidth anda :

Code:

/ip firewall mangle add chain=postrouting dscp=12 action=mark-packet new-packet-mark=Proxy-DSCP passthrough=no

Edit :
Gunakan opsi mangle ini jika yang diatas tidak jalan (pilih salah satu saja)

Code:

/ip firewall mangle add chain=forward dscp=12 action=mark-packet new-packet-mark=Proxy-DSCP passthrough=no

Lalu buat rule queues, contoh disini adalah menggunakan queue tree :

Code:

/queue tree add name="Proxy HIT" parent=global-out packet-mark=Proxy-DSCP \
limit-at=0 queue=default priority=1 max-limit=0 burst-limit=0 burst-threshold=0 burst-time=0s
untuk simple queue silahkan sesuaikan saja, yang penting adalah penggunaan packet mark=Proxy-DSCP

Permasalahan akan muncul klo ada Dynamic Queue di simple queue seperti penggunaan login hotspot gateway mikrotik.

Berikut penyelesaiannya ada di index Page 1 yaitu : Prioritas Proxy Hit diatas Dynamic Queue

Bagi pengguna hotspot mikrotik yang selama ini di puyengkan dengan munculnya queue dynamic di simple queue yang juga melimit proxy hit sehingga proxy hit jadi tidak maksimal untuk user hotspot. Dimana dynamic queue ini selalu muncul pada urutan queue paling atas sehingga akan di eksekusi pertama. semoga script dibawah ini bisa membantu rekan2 sekalian :

Prinsip :

Script ini bekerja dengan memonitor prioritas pada queue, sehingga berikan prioritas queue 1 pada proxy hit.

Paste script berikut pada user profiles pada bagian on-login di IP>HOTSPOT>USER PROFILES

on login script :

Code:

:foreach n in=[/queue simple find priority=1] do={ /queue simple move $n [:pick [/queue simple find] 0] }

Trik untuk yang menggunkan user manager :

buat user profiles sesuai dengan limitation pada user manager (IP>hotspot>user profiles)
Masukkan nama user profiles yang di buat tadi ke group name yang ada di limitation user manager bagian constraints
Buat profile user manager dengan limitation yang udah diberi grup barusan,

Harusnya setiap ada user dari usermanager maupun user hotspot login otomatis dynamic queue-nya akan tergeser menjadi dibawah queue hit proxy.

Selamat Mencoba.

[INFO] Have You Ever Tried Walnut Dining Room Furniture?

noreply@blogger.com (Anonymous) — Wed, 23 Oct 2013 12:27:00 +0700

One of the best kinds of dining room furnishings you can ever get for your dwelling is walnut furniture. If you've not ever glimpsed walnut before, it's the very dark walnut kind that is so much rarer to get, but much more attractive to gaze at - in general, very dark walnut appears straight-grained, with a uniform texture that feels a bit coarse to the feel. The beauty of very dark walnut dining room furnishings is that it begins of with a wealthy, warm shade, which is so beautiful to gaze at, particularly in the lightweight. As it ages, and as time progresses, it then turns into a more golden brown, which is equally spectacular. If you are looking to make your dining room area elegant and spectacular, walnut might be the flawless type of hardwood for you! The richness of its hues create a majestic, solid piece that one could gaze at for hours. To start with, getting your dining room benches in walnut.

These emulate an air of sophistication, while at the same time not ostentatiously so. Your dining room tables will gaze dynamite in walnut - this I am sure of. However, do not overlook that adorning your consuming locality with dining room furniture does not halt with dining room tables. You have to make sure that everything additional aligns in well with your theme. Your seating, cutlery, ceramic chests of drawers, and all other dining room accessories also need to emulate the same vibe. They don't all necessarily have to be made of very dark walnut, but you need to find complementing shades and forms that will gaze perfect with the rest of your walnut dining room furnishings. Your dining room benches, for demonstration, can be accessorized with table leaves or linen of a creamy hue. Walnut furnishings examines truly incredible with lighter shades that are somewhat creamier in texture. Beiges will not really work in this position. All in all, confer a expert designer who will guide you through the method and will offer you proposals and recommendations on how to agree all your furniture so that your dining room locality doesn't gaze too cluttered. Walnut dining room furnishings is best for those who want to be adept to hurl intimate, smart-casual get-togethers.

The walnut furniture is flawless for that air of chic sophistication without looking too snooty. If you conclude to only get one piece of walnut-based furniture, these have to be your dining room benches, as they will probably be the centerpiece of the room. Make certain that you get one in good quality and know how to care for it well so that it will stand the test of time and will look shone and brand-new. If you are still confused about dining room furnishings or which dining room tables to get, go to your localizedizedized furniture shop and confer a professional to get a second attitude. These persons will certainly be able to aid you in finding the flawless parts to establish in your dining room locality. One thing is for sure: walnut-based furnishings is one of the best alternatives out there, and will absolutely last you for years. For that dignified, comfortable look, it is decisively one of the best kinds of hardwood to proceed for that will double-check you that you will get the gaze you want.

[INFO] Plethora of Different Dining Room Set

noreply@blogger.com (Anonymous) — Wed, 23 Oct 2013 12:25:00 +0700

Choosing a dining room set can be a joy decision to make and can involve the whole family. A dining room set is likely to be the centerpiece of your dining room or space, so choosing a dining room set mindfully will help to make the most use of your space and decor. There are a plethora of different dining groups accessible nowadays to agree anyone's house decor. The dining room set is a treasure to behold, when all the coordinates have been expertly matched and placed. For those who are not familiar with the ‘dining room set,' it consists of the dining room table and snug seating, resting sofa, corner seating if space permits and a hutch to house all the crockery and supplementary pieces like table mats and cutlery. We might furthermore find end benches, lights, ottomans and other little base rests. The beauty of the set is that each constituent has been matched to enhance the ambiance and feeling of the room. In case one has the luxury of a entire dining room, formal dining room groups must be favoured as these are best for entertaining. although, you might have to hack up couple of additional bucks for formal dining room groups. The table dimensions is large-scale enough for six persons with six chairs that agree well with the table.

A sideboard would enhance the attractiveness of the dining set along with a diverging cabinet. It will make a large-scale conceive declaration – do you desire certain thing contemporary for joy evening meal parties; a traditional tale for large holiday evening meals; or a joy, casual, and family-friendly table? Another style to consider is whether you desire a table with legs, on one pedestal, or two pedestals. The chairs at your table can furthermore make a distinction in your room method, which is why buying a dining table set can save you time and cash from having to run around to try to agree your chairs to our dining table. When people are on the lookout for a dining room set for their dwellings they should be cognizant of the distinct categories under which dining area sets can be classified.

Dining area sets are now accessible in the formal method as well as the casual method. It is furthermore likely to get dining room furnishings in numerous different forms. Whether you are going for classic, up to date or country, you want your new dining room set to be snug. Wood, glass and metal are the most widespread components for benches and they all look large. If you want your set to last a long time or probably be passed down to the next generation, good hefty hardwoods are the best choice. There are distinct kinds of dining room furnishings, which is fundamentally a dining room table, whole with the chairs and the whole set-up. For more formal events, a dining room table is best to buy, which can be established right in your major dining locality. select a brand that is made of wood for durability and longevity. For a more casual take on dining and mealtime instants, kitchen benches are best.

[INFO] Attractive Italian Dining Room Furniture

noreply@blogger.com (Anonymous) — Wed, 23 Oct 2013 12:22:00 +0700

Selecting up to date furnishings for a dining environment allows your place backgrounds and table decor to take center stage. With clean lines and negligible adornment to divert from your backgrounds, modern room groups supply a magnificent canvas for your table top centerpieces, flatware, assisting dishes and service sets to take center stage. choosing clean bordered up to date dining room furniture ensures the nourishment and the adornment of the table are the star of the dinner party. up to date dining room furnishings is alert and leaves an innate effect on visitors about ones flavour. Modern dining room seating in specific loan a very appealing charm to the room and allow span for dining room decoration, be it with slipcover ties or devoid of frills. Modern dining groups have changed from timber to incorporate distinct materials. The new tubular metals and synthetic fibers are commonly being used be obliged to their durability and lightweight. Dining furnishings not only provides larger solace but furthermore adds to the aesthetic worth of the dining room and the benches are also more compact, with glass-top being the most common surface. Contemporary furnishings for the dining room is utilitarian in environment and has a sleeker conceive as compared to customary furniture for the dining room.

More often than not it is characterized by pointed, linear lines, and the focus is on giving the dining room a bare look. A contemporary method of furnishings generally is accessible in dark colors like steel gray, very dark, etc. Making your dining room a resting place is easy with the modern dining room furniture. This is possible when you choose the right kind of furnishings that will fit in your room and is good enough to create a lasting effect in the minds of your visitors. Accompanying dining room accessories should be selectively selected to avoid a mismatch with the kind of the modern dining furnishings that you purchase. Creating a resting and asking for dining room is very simple with up to date dining room furniture. select a up to date room set that fits your room, accommodates your family and visitors and provides a spectacular backdrop for your creative flairs of centerpieces, candles and dining service parts. one time you have selected the perfect set and accessories for you and your dwelling, you will relish hosting thriving evening meal parties and displaying off your signature conceive style.

[DOWNLOAD] Firmware Nokia C3-00 RM-614 v8.71 Bahasa Indonesia

noreply@blogger.com (Anonymous) — Tue, 22 Oct 2013 23:11:00 +0700

Kali ini saya akan share Firmware Handphone Nokia C3-00. Daripada nganggur, iseng-iseng sharing, siapa tahu dari para pengunjung membutuhkan Firmware ini. Dan menurut hasil penelurusan, Firmware versi ini masih tergolong terbaru.

Di posting selanjutnya mungkin akan saya bahas tentang instalasi Firmware Nokia menggunakan Phoenix dan Custom PPM untuk Nokia C3-00 ini, karena kebetulan saya sedang memakai Nokia C3-00 sebelumnya sudah beberapa Smarthphone tergenggam di tangan ini.

FIRMWARE NOKIA C3-00 RM-614 v8.71 BI ONLY

RM-614 SEAP-X GOLD CN-PRC INDONESIA (0598883)

RM614_0594045_08.71_062.vpl (3.61 kB)
RM614_0594045_08.71_062.dcp (16.58 kB)
rm614__08.71.mcusw (27.92 MB)
rm614__08.71.ppm_x (6.88 MB)
rm614__08.71.image_x_0594045 (13.18 MB)
P7327201dpi600.pcx (11.84 kB)
P7327201dpi600_+label_+layout.xml (2.34 kB)
RM614_0594045_08.71_062_signature.bin (3.21 kB)

Selamat Mencoba :D

[INFO] BBM Goes to Android and IPhone

noreply@blogger.com (Anonymous) — Tue, 22 Oct 2013 23:06:00 +0700

We promised you'd be the first to know when BBM™ for Android™ and iPhone® is available. We’re excited to announce that the rollout has resumed!

Due to incredible demand there is a line-up to start using BBM. But, since you took the time to sign up in advance, we'd like to give you the chance to start using BBM on Android or iPhone right away without having to wait in line.

Here's what to do to get past the line-up:

Visit BBM.com from your iPhone or Android browser to download BBM.

Once the BBM app has been installed, open it.

When asked to "Enter your email address to check if you can start using BBM", use the email address this message was sent to.

Get started with setting up BBM.

Note to iPhone users: Apps can take up to a few hours to appear in the App Store so if you don’t see it right away, it will be there soon.

From Google Play

The OFFICIAL version of BBM™ from BlackBerry is now here for Android. Get the free BBM app for the best way to stay connected with friends and family. Download it now.

Chat with friends on Android, BlackBerry and iPhone:

BBM is always on and always connected – no app to open
Know when messages have been delivered (D’s) and read (R’s)
Share photos, files, documents, voice notes and more
See when contacts are responding to your message
Emoticons for every mood and emotion let you express yourself

BBM lets you protect your privacy. You control it:

You chose how to share your information - BBM uses PINs instead of phone numbers or email addresses so that it's more private, and you always control who can contact you
You chose your contacts – 2-way opt-in means you have control over who is able to message you
Chat and Share with many at once:
Groups – BBM groups help you share pictures, lists, and appointments with group members. You can even be in a group with people who aren't part of your own BBM contact list.

If you want to download, please check this link below:

https://play.google.com/store/apps/details?id=com.bbm

[MIKROTIK] Setting Loadbalance 2 Line Speedy dengan Routing Mark | External Proxy

noreply@blogger.com (Anonymous) — Sat, 19 Oct 2013 22:08:00 +0700

Berikut ini adalah langkah - langkah setting MikroTik Loadbalance dengan Routing Mark + External Proxy :

1. INTERFACE LIST:

/interface

/interface add name="Modem1" type="ether" mtu=1500 l2mtu=1524
/interface add name="Modem2" type="ether" mtu=1500 l2mtu=1524
/interface add name="LAN" type="ether" mtu=1500 l2mtu=1524
/interface add name="Proxy" type="ether" mtu=1500 l2mtu=1524

2. IP ADDRESS LIST:

/ip address

/ip address add address=192.168.0.2/24 network=192.168.0.0 interface=Modem1
/ip address add address=192.168.2.2/24 network=192.168.2.0 interface=Modem2
/ip address add address=192.168.0.1/24 network=192.168.0.0 interface=LAN
/ip address add address=192.168.254.1/24 network=192.168.254.0 interface=Proxy

3. PPP-PPPoE CLIENT:

/interface pppoe-client

/interface pppoe-client add name="pppoe-speedy1" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem1 user="111xxx@telkom.net" password="istana1806" profile=default service-name="mr-ekoapriadi.net1" ac-name="" add-default-route=no dial-on-demand=no use-peer-dns=no allow=pap,chap,mschap1,mschap2
/interface pppoe-client add name="pppoe-speedy2" max-mtu=1480 max-mru=1480 mrru=disabled interface=Modem2 user="111xxx@telkom.net" password="FEVQYT12SA" profile=default service-name="mr-ekoapriadi.net2" ac-name="" add-default-route=no dial-on-demand=no use-peer-dns=no allow=pap,chap,mschap1,mschap2

4. IP FIREWALL NAT

/ip firewall nat

/ip firewall nat add chain=dstnat action=dst-nat to-addresses=192.168.254.27 to-ports=3128 protocol=tcp dst-address-list=!Local+Proxy in-interface=LAN dst-port=80,81,8080,3128 comment="TRANSPARENT PROXY"
/ip firewall nat add chain=srcnat action=masquerade out-interface=pppoe-speedy1 comment="MASQUERADE"
/ip firewall nat add chain=srcnat action=masquerade out-interface=pppoe-speedy2
/ip firewall nat add chain=srcnat action=masquerade out-interface=Modem1
/ip firewall nat add chain=srcnat action=masquerade out-interface=Modem2
/ip firewall nat add chain=dstnat action=dst-nat to-ports=53 protocol=udp in-interface=LAN dst-port=53 comment="TRANSPARENT DNS"
/ip firewall nat add chain=dstnat action=dst-nat to-ports=53 protocol=tcp in-interface=LAN dst-port=53
/ip firewall nat add chain=dstnat action=dst-nat to-ports=53 protocol=udp in-interface=Proxy dst-port=53
/ip firewall nat add chain=dstnat action=dst-nat to-ports=53 protocol=tcp in-interface=Proxy dst-port=53
/ip firewall nat add chain=dstnat action=dst-nat to-addresses=192.168.254.27 to-ports=22 protocol=tcp dst-address="IP-Public" dst-port=2221 comment="SSH PROXY OUT REMOTE TO WINsCP"

5. IP FIREWALL ADDRESS-LIST

/ip firewall address-list

/ip firewall address-list add list=LAN-NeT address=192.168.0.0/24
/ip firewall address-list add list=Proxy-NeT address=192.168.254.0/24
/ip firewall address-list add list=Local+Proxy address=192.168.0.0/24
/ip firewall address-list add list=Local+Proxy address=192.168.254.0/24

6. IP FIREWALL MANGLE

/ip firewall mangle

/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=tcp dst-address=203.89.146.0/23 dst-port=49100 comment="Router POINTBLANK"
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=udp dst-address=203.89.146.0/23 dst-port=40000-40010
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=PointBlank passthrough=yes protocol=tcp dst-address=203.89.146.0/23 dst-port=39190

7. PPPoe CONN:

/ip firewall mangle add chain=input action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=new in-interface=pppoe-speedy1 comment="PPPoE CONN"
/ip firewall mangle add chain=input action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=new in-interface=pppoe-speedy2
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=established in-interface=pppoe-speedy1
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=established in-interface=pppoe-speedy2
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=pppoe1-conn passthrough=yes connection-state=related in-interface=pppoe-speedy1
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=pppoe2-conn passthrough=yes connection-state=related in-interface=pppoe-speedy2

/ip firewall mangle add chain=output action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=no connection-mark=pppoe1-conn
/ip firewall mangle add chain=output action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=no connection-mark=pppoe2-conn

8. HTTP CONN:

/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=http-pppoe1 passthrough=yes protocol=tcp src-address-type="" dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy per-connection-classifier=both-addresses-and-ports:2/0 comment="HTTP CONN"
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=http-pppoe2 passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy per-connection-classifier=both-addresses-and-ports:2/1
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=http-pppoe1 passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=80,3128 per-connection-classifier=both-addresses-and-ports:2/0
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=http-pppoe2 passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=80,3128 per-connection-classifier=both-addresses-and-ports:2/1

9. MARK-HTTP ROUTE:

/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=yes in-interface=Proxy connection-mark=http-pppoe1 comment="MARK-HTTP ROUTE"
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=yes in-interface=Proxy connection-mark=http-pppoe2

10. NON-HTTP CONN:

/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 per-connection-classifier=both-addresses-and-ports:2/0 comment="NON-HTTP CONN"
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy dst-port=80,3128 per-connection-classifier=both-addresses-and-ports:2/1
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 per-connection-classifier=both-addresses-and-ports:2/0
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=tcp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=LAN dst-port=!80,3128 per-connection-classifier=both-addresses-and-ports:2/1
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=udp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy per-connection-classifier=both-addresses-and-ports:2/0
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=udp dst-address-type=!local dst-address-list=!Local+Proxy in-interface=Proxy per-connection-classifier=both-addresses-and-ports:2/1
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe1 passthrough=yes protocol=udp dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:2/0
/ip firewall mangle add chain=prerouting action=mark-connection new-connection-mark=non-http-pppoe2 passthrough=yes protocol=udp dst-address-type=!local in-interface=LAN per-connection-classifier=both-addresses-and-ports:2/1

11. MARK NON HTTP ROUTE:

/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy1 passthrough=yes in-interface=LAN connection-mark=non-http-pppoe1 comment="MARK NON HTTP ROUTE"
/ip firewall mangle add chain=prerouting action=mark-routing new-routing-mark=pppoe-speedy2 passthrough=yes in-interface=LAN connection-mark=non-http-pppoe2

12. CRITICAL CONN:

/ip firewall mangle add chain=postrouting action=change-dscp new-dscp=1 protocol=tcp dst-port=53 comment="CRITICAL CONN"
/ip firewall mangle add chain=postrouting action=change-dscp new-dscp=1 protocol=icmp
/ip firewall mangle add chain=postrouting action=change-dscp new-dscp=1 protocol=udp dst-port=53
/ip firewall mangle add chain=postrouting action=mark-connection new-connection-mark=critical-conn passthrough=yes dscp=1
/ip firewall mangle add chain=postrouting action=mark-packet new-packet-mark=critical-pkt passthrough=no connection-mark=critical-conn

13. PROXY-HIT:

/ip firewall mangle add chain=prerouting action=mark-packet new-packet-mark=PKT-HIT passthrough=no protocol=tcp in-interface=Proxy dscp=12 comment="PROXY-HIT"
/ip firewall mangle add chain=postrouting action=mark-packet new-packet-mark=PKT-HIT passthrough=no out-interface=LAN dscp=12

14. IP ROUTE:

/ip route add dst-address=0.0.0.0/0 gateway=pppoe-speedy1 check-gateway=ping distance=1 scope=30 target-scope=10 comment="Default-Route-speedy1-Distance-1"
/ip route add dst-address=0.0.0.0/0 gateway=pppoe-speedy2 check-gateway=ping distance=2 scope=30 target-scope=10 routing-mark=PointBlank comment="Default-Route-speedy2-Distance-2"
/ip route add dst-address=0.0.0.0/0 gateway=pppoe-speedy1 check-gateway=ping distance=1 scope=30 target-scope=10 routing-mark=pppoe-speedy1
/ip route add dst-address=0.0.0.0/0 gateway=pppoe-speedy2 check-gateway=ping distance=1 scope=30 target-scope=10 routing-mark=pppoe-speedy2

Selamat Mencoba

[JASA SETTING ONLINE] Mikrotik | Proxy

noreply@blogger.com (Anonymous) — Fri, 18 Oct 2013 12:58:00 +0700

DAFTAR PAKET :

Mikrotik Load Balancing 2 Line + Routing Mark + Proxy Squid Lusca High Peforma : Rp.800.000 PESAN / +6282376222119

Mikrotik Load Balancing 3-4 Line + Routing Mark + Proxy Squid Lusca High Peforma: Rp.1.000.000 PESAN / +6282376222119

Mikrotik Load Balancing 5-7 Line + Routing Mark + Proxy Squid Lusca High Peforma: Rp.1.250.000 PESAN / +6282376222119

NB: GARANSI PEMELIHARAAN 3 BULAN

[JASA SETTING ONLINE] Mikrotik | Proxy

noreply@blogger.com (Anonymous) — Wed, 16 Oct 2013 19:04:00 +0700

DAFTAR PAKET :

Mikrotik Load Balancing 2 Line + Routing Mark + Proxy Squid Lusca High Peforma
Harga: Rp.800.000 PESAN / +6282376222119

Mikrotik Load Balancing 3-4 Line + Routing Mark + Proxy Squid Lusca High Peforma
Harga: Rp.1.000.000 PESAN / +6282376222119

Mikrotik Load Balancing 5-7 Line + Routing Mark + Proxy Squid Lusca High Peforma
Harga: Rp.1.250.000 PESAN / +6282376222119

NB: GARANSI PEMELIHARAAN 3 BULAN

[PROXY] Squid.conf

noreply@blogger.com (Anonymous) — Wed, 16 Oct 2013 18:06:00 +0700

# WELCOME TO SQUID LUSCA_FMI
# Provided by http://www.routerproxy.com/
# last revision 26/06/2013

# Start Config
http_port 3128 transparent
#==============================================================#
pid_filename /var/run/squid.pid
cache_effective_user proxy
cache_effective_group proxy
error_directory /usr/share/squid/errors/English
icon_directory /usr/share/squid/icons
visible_hostname www.mr-ekoapriadi.blogspot.com
cache_mgr mr.ekoapriadi@gmail.com
access_log /var/log/squid/access.log
cache_log /var/log/squid/cache.log
cache_store_log none
logfile_rotate 1
shutdown_lifetime 10 seconds
cache_mem 8 MB
maximum_object_size_in_memory 32 KB
memory_replacement_policy heap GDSF
cache_replacement_policy heap LFUDA

#==============================================================#
cache_dir aufs /cache 15000 35 256

#CONTOH DNS GOOGLE
dns_nameservers 8.8.8.8 8.8.4.4
#==============================================================#

dns_testnames 127.0.0.1
minimum_object_size 128 bytes
maximum_object_size 128000 KB
offline_mode off
cache_swap_low 98
cache_swap_high 99
# Setup some default acls
acl all src 0.0.0.0/0.0.0.0
acl localhost src 127.0.0.1/255.255.255.255
acl safeports port 21 70 80 210 280 443 488 563 591 631 777 901 81 3128 1025-65535
acl sslports port 443 563 81
acl manager proto cache_object
acl purge method PURGE
acl connect method CONNECT
acl dynamic urlpath_regex cgi-bin \?
acl snmppublic snmp_community public
acl shoutcast rep_header X-HTTP09-First-Line ^ICY.[0-9]
acl apache rep_header Server ^Apache

#==============================================================#
#acl blockweb url_regex "/etc/squid/block.txt"
#http_access deny blockweb
#==============================================================#
acl localnet src 192.168.1.0/16 # RFC1918 possible internal network

#==============================================================#
#start storeurl htproxy
#==============================================================#
acl store_rewrite_list dstdomain .fbcdn.net .youtube.com .googlevideo.com .gstatic.com .bp.blogspot.com
acl store_rewrite_list dstdomain .4shared.com .twimg.com .ytimg.com .orkut.com
acl store_rewrite_list dstdomain .ggpht.com .media.tumblr.com .photobucket.com
acl store_rewrite_list dstdomain .avast.com .avg.com .vimeo.com .v.mccont.com .blip.tv
acl store_rewrite_list dstdomain .flashvideo.globo.com .terra.com
acl store_rewrite_list dstdomain .wpc.porntube.com .redtubefiles.com .xvideos.com .phncdn.com .pornhub.com
acl store_rewrite_list dstdomain .catalog.video.msn.com .mais.uol.com.br
acl store_rewrite_list dstdomain .videobb.com .sourceforge.net
acl store_rewrite_list_url url_regex (firefox|speedtest|iavs5x|iavs4x)

acl dontrewrite url_regex (get_video|videoplayback\?id|videoplayback.*id).*begin\=[1-9][0-9]*
acl dontrewrite url_regex \.(php|asp|aspx|jsp|cgi|js)\?
acl dontrewrite url_regex threadless.*\.jpg\?r=
storeurl_access deny dontrewrite
storeurl_access allow store_rewrite_list
storeurl_access allow store_rewrite_list_url
storeurl_access deny all

storeurl_access deny all
storeurl_rewrite_program /etc/squid/storeurl.pl
storeurl_rewrite_children 1

#==============================================================#
#end storeurl acl

#==============================================================#
broken_vary_encoding allow apache
upgrade_http0.9 deny shoutcast
http_access allow manager localhost
http_access deny manager
http_access allow purge localhost
http_access deny purge
http_access deny !safeports
http_access deny CONNECT !sslports

# Always allow localhost connections
http_access allow localhost

# Allow local network(s) on interface(s)
http_access allow localnet

# Default block all to be sure
http_access deny all
#==============================================================#
#REFRESH PATTERN TUNNING
#==============================================================#
#Spesific Site
refresh_pattern ^http://([a-z][0-9]\.){0,1}(profile|sphotos|photos-[a-z])\.ak\.fbcdn\.net/hp(rofile|hotos)-ak- 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://[^/]*\.(youtube|googlevideo).com/(get_video|videoplayback|videodownload)\? 5259487 99999% 5259487 override-expire ignore-reload reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://lh.\.ggpht\.com/.*\.(bmp|gif|jpg|png) 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://i.\.ytimg\.com/.*\.(bmp|gif|jpg|png) 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://a.\.twtimg\.com/.*\.(bmp|gif|jpg|png) 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://(.{1,2}\.|)media\.tumblr\.com/.*\.(bmp|gif|jpg|png) 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://(i|th).{1,4}\.photobucket\.com/.*\.(bmp|gif|jpg|png) 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://[1-4]\.bp\.blogspot\.com/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://download.*\.avast\.com/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://download.*\.4shared\.com/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://(backup|a.|pupdate-aa)\.avg\.c(om|z)/softw/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://av\.vimeo\.com/.*\.(mp4|flv) 5259487 99999% 5259487 override-expire ignore-reload stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://.{1,3}\.video.\.blip\.tv.*\.(m4v|flv|mp4|wmv|rm|ram|mov|avi|mp3) 5259487 99999% 5259487 override-expire ignore-reload stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://flashvideo.globo.com/.*mp4 5259487 99999% 5259487 override-expire ignore-reload stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://(img|content).{1,2}.catalog.video.msn.com/ 5259487 99999% 5259487 override-expire ignore-reload stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://(video.{1,2}|thumb|storage)\.mais\.uol\.com.br/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://v.mccont.com/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://(img..|videos\.flv.{0,1})\.redtubefiles\.com/ 5259487 99999% 5259487 override-expire ignore-reload stale-while-revalidate=2592000 ignore-private ignore-no-cache
refresh_pattern ^http://wpc.porntube.com/ 5259487 99999% 5259487 override-expire ignore-reload stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://porn.{1,3}\.xvideos\.com/.*\.flv 5259487 99999% 5259487 override-expire ignore-reload stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://s[0-9]{0,3}\.videobb\.com/ 5259487 99999% 5259487 override-expire ignore-reload stale-while-revalidate=2592000 ignore-private ignore-no-cache store-stale
refresh_pattern ^http://t.\.gstatic\.com/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache
refresh_pattern ^http://cdn[1-3][a-z]{0,1}.*\.phncdn\.com/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache
refresh_pattern ^http://nyc-v[0-9]{1,3}\.pornhub\.com/*\.flv 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache
refresh_pattern ^http://[a-z]{1,}\.dl\.sourceforge\.net\/project/ 5259487 99999% 5259487 override-expire reload-into-ims stale-while-revalidate=2592000 ignore-private ignore-no-cache
refresh_pattern (speedtest|firefox) 5259487 99999% 5259487 override-expire override-expire reload-into-ims ignore-must-revalidate ignore-private ignore-no-cache store-stale

#Generic files
refresh_pattern \.(jp(e?g|e|2)|tiff?|bmp|gif|png) 2629742 999999% 2629742 override-expire ignore-no-cache ignore-no-store reload-into-ims ignore-private store-stale
refresh_pattern \.(z(ip|[0-9]{2})|r(ar|[0-9]{2})|jar|bz2|gz|tar|rpm|vpu) 2629742 999999% 2629742 override-expire reload-into-ims store-stale ignore-must-revalidate
refresh_pattern \.(mp3|wav|og(g|a)|flac|midi?|rm|aac|wma|mka|ape) 2629742 999999% 2629742 override-expire reload-into-ims ignore-reload ignore-must-revalidate store-stale
refresh_pattern \.(kom|nzp|iop|exe|msi|dmg|bin|xpi|iso|swf|mar|psf|cab) 2629742 999999% 2629742 override-expire reload-into-ims ignore-no-cache ignore-must-revalidate store-stale
refresh_pattern \.(mpeg|ra?m|avi|mp(g|e|4)|mov|divx|asf|wmv|m\dv|rv|vob|asx|ogm|flv|3gp|on2) 2629742 9999999% 2629742 override-expire reload-into-ims ignore-must-revalidate ignore-private ignore-no-store store-stale
refresh_pattern -i (cgi-bin|hackshield|xtrap|Loader|login) 0 0% 0
refresh_pattern \.(php|jsp|cgi|asx|js|jsp)\? 0 0% 0
refresh_pattern . 0 50% 2629742 store-stale
#==============================================================#
acl download url_regex -i \.rm$ \.mpg$ \.mpeg$ \.avi$ \.dat$ \.exe$ \.vqf$ \.tar.gz$ \.gz$ \.rpm$ \.mp4$ \.mp3$
acl download url_regex -i \.zip$ \.bz2$ \.rar$ \.qt$ \.ram$ \.rm$ \.iso$ \.raw$ \.wav$ \.mov$ \.cab$
acl download url_regex -i \.rhz$ \.dat$ \.hlp$ \.psf$ \.exe$ \.bin$ \.cab$ \.amr$ \.msi$ \.dll$

delay_pools 1
delay_class 1 1
delay_parameters 1 1000/16000
delay_access 1 allow download
delay_access 1 deny ALL
#==============================================================#
#flow qos mark HIT
zph_mode tos
zph_local 0x30
zph_parent 0
zph_option 136

#SNMP enable for MRTG
snmp_port 3401
snmp_access allow snmppublic all

#Option Tunning
max_filedescriptors 65536
range_offset_limit 128 KB
read_ahead_gap 32 KB
reload_into_ims on
strip_query_terms on
negative_dns_ttl 1 second
negative_ttl 1 second
maximum_single_addr_tries 2
retry_on_error on
vary_ignore_expire on
client_db on
ipcache_size 10240
fqdncache_size 1024
pipeline_prefetch on
half_closed_clients off
buffered_logs on
download_fastest_client_speed off
n_aiops_threads 32
# End Config

[PROXY] Storeurl.pl

noreply@blogger.com (Anonymous) — Wed, 16 Oct 2013 18:00:00 +0700

#!/usr/bin/perl
# mr.ekoapriadi@yahoo.com
# Edit By: Eko Apriadi, S.Kom.

$|=1;
while (<>) {
   @X = split;
   # $X[1] =~ s/&sig=.*//;
   $x = $X[0] . " ";
   $_ = $X[1];
   $u = $X[1];

if ($X[1] =~ /(youtube|google).*videoplayback\?/){
   @itag = m/[&?](itag=[0-9]*)/;
   @id = m/[&?](id=[^\&]*)/;
   @range = m/[&?](range=[^\&\s]*)/;
   @begin = m/[&?](begin=[^\&\s]*)/;
   @redirect = m/[&?](redirect_counter=[^\&]*)/;
   print $x . "http://video-srv.youtube.com.SQUIDINTERNAL/@itag&@id&@range@begin@redirect\n";

# youtube HD itag=22
} elsif (m/^http:\/\/([0-9.]{4}|.*\.youtube\.com|.*\.googlevideo\.com|.*\.video\.google\.com).*?\&(itag=22).*?\&(id=[a-zA-Z0-9]*)/) {
   print $x . "http://video-srv.youtube.com.SQUIDINTERNAL/" . $2 . "&" . $3 . "\n";

# youtube Normal screen always HD itag 35, Normal screen never HD itag 34, itag=18 <--normal?
} elsif (m/^http:\/\/([0-9.]{4}|.*\.youtube\.com|.*\.googlevideo\.com|.*\.video\.google\.com).*?\&(itag=[0-9]*).*?\&(id=[a-zA-Z0-9]*)/) {
   print $x . "http://video-srv.youtube.com.SQUIDINTERNAL/" . $3 . "\n";

# speedtest
} elsif (m/^http:\/\/(.*)\/speedtest\/(.*\.(jpg|txt))\?(.*)/) {
   print $x . "http://www.speedtest.net.SQUIDINTERNAL/speedtest/" . $2 . "\n";

# mediafire
} elsif (m/^http:\/\/199\.91\.15\d\.\d*\/\w{12}\/(\w*)\/(.*)/) {
   print $x . "http://www.mediafire.com.SQUIDINTERNAL/" . $1 ."/" . $2 . "\n";

# fileserve
} elsif (m/^http:\/\/fs\w*\.fileserve\.com\/file\/(\w*)\/[\w-]*\.\/(.*)/) {
   print $x . "http://www.fileserve.com.SQUIDINTERNAL/" . $1 . "./" . $2 . "\n";

# filesonic
} elsif (m/^http:\/\/s[0-9]*\.filesonic\.com\/download\/([0-9]*)\/(.*)/) {
   print $x . "http://www.filesonic.com.SQUIDINTERNAL/" . $1 . "\n";

# 4shared
} elsif (m/^http:\/\/[a-zA-Z]{2}\d*\.4shared\.com(:8080|)\/download\/(.*)\/(.*\..*)\?.*/) {
   print $x . "http://www.4shared.com.SQUIDINTERNAL/download/$2\/$3\n";

# 4shared preview
} elsif (m/^http:\/\/[a-zA-Z]{2}\d*\.4shared\.com(:8080|)\/img\/(\d*)\/\w*\/dlink__2Fdownload_2F(\w*)_3Ftsid_3D[\w-]*\/preview\.mp3\?sId=\w*/) {
   print $x . "http://www.4shared.com.SQUIDINTERNAL/$2\n";

# photos-X.ak.fbcdn.net where X a-z
} elsif (m/^http:\/\/photos-[a-z](\.ak\.fbcdn\.net)(\/.*\/)(.*\.jpg)/) {
   print $x . "http://photos" . $1 . "/" . $2 . $3 . "\n";

# YX.sphotos.ak.fbcdn.net where X 1-9, Y a-z
} elsif (m/^http:\/\/[a-z][0-9]\.sphotos\.ak\.fbcdn\.net\/(.*)\/(.*)/) {
   print $x . "http://photos.ak.fbcdn.net/" . $1 ."/". $2 . "\n";

# maps.google.com
} elsif (m/^http:\/\/(cbk|mt|khm|mlt|tbn)[0-9]?(.google\.co(m|\.uk|\.id).*)/) {
   print $x . "http://" . $1 . $2 . "\n";

# compatibility for old cached get_video?video_id
} elsif (m/^http:\/\/([0-9.]{4}|.*\.youtube\.com|.*\.googlevideo\.com|.*\.video\.google\.com).*?(videoplayback\?id=.*?|video_id=.*?)\&(.*?)/) {
   $z = $2; $z =~ s/video_id=/get_video?video_id=/;
   print $x . "http://video-srv.youtube.com.SQUIDINTERNAL/" . $z . "\n";

} elsif (m/^http:\/\/www\.google-analytics\.com\/__utm\.gif\?.*/) {
   print $x . "http://www.google-analytics.com/__utm.gif\n";

#Cache High Latency Ads
} elsif (m/^http:\/\/([a-z0-9.]*)(\.doubleclick\.net|\.quantserve\.com|\.googlesyndication\.com|yieldmanager|cpxinteractive)(.*)/) {
   $y = $3;$z = $2;
   for ($y) {
   s/pixel;.*/pixel/;
   s/activity;.*/activity/;
   s/(imgad[^&]*).*/\1/;
   s/;ord=[?0-9]*//;
   s/;&timestamp=[0-9]*//;
   s/[&?]correlator=[0-9]*//;
   s/&cookie=[^&]*//;
   s/&ga_hid=[^&]*//;
   s/&ga_vid=[^&]*//;
   s/&ga_sid=[^&]*//;
   # s/&prev_slotnames=[^&]*//
   # s/&u_his=[^&]*//;
   s/&dt=[^&]*//;
   s/&dtd=[^&]*//;
   s/&lmt=[^&]*//;
   s/(&alternate_ad_url=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
   s/(&url=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
   s/(&ref=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
   s/(&cookie=http%3A%2F%2F[^(%2F)]*)[^&]*/\1/;
   s/[;&?]ord=[?0-9]*//;
   s/[;&]mpvid=[^&;]*//;
   s/&xpc=[^&]*//;
   # yieldmanager
   s/\?clickTag=[^&]*//;
   s/&u=[^&]*//;
   s/&slotname=[^&]*//;
   s/&page_slots=[^&]*//;
   }
   print $x . "http://" . $1 . $2 . $y . "\n";

# cache high latency ads
} elsif (m/^http:\/\/(.*?)\/(ads)\?(.*?)/) {
   print $x . "http://" . $1 . "/" . $2 . "\n";

# spicific servers starts here....
} elsif (m/^http:\/\/(www\.ziddu\.com.*\.[^\/]{3,4})\/(.*?)/) {
   print $x . "http://" . $1 . "\n";

# cdn, varialble 1st path
} elsif (($u =~ /filehippo/) && (m/^http:\/\/(.*?)\.(.*?)\/(.*?)\/(.*)\.([a-z0-9]{3,4})(\?.*)?/)) {
   @y = ($1,$2,$4,$5);
   $y[0] =~ s/[a-z0-9]{2,5}/cdn./;
   print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

# rapidshare
} elsif (($u =~ /rapidshare/) && (m/^http:\/\/(([A-Za-z]+[0-9-.]+)*?)([a-z]*\.[^\/]{3}\/[a-z]*\/[0-9]*)\/(.*?)\/([^\/\?\&]{4,})$/)) {
   print $x . "http://cdn." . $3 . "/SQUIDINTERNAL/" . $5 . "\n";

} elsif (($u =~ /maxporn/) && (m/^http:\/\/([^\/]*?)\/(.*?)\/([^\/]*?)(\?.*)?$/)) {
   print $x . "http://" . $1 . "/SQUIDINTERNAL/" . $3 . "\n";

# like porn hub variables url and center part of the path, filename etention 3 or 4 with or without ? at the end
} elsif (($u =~ /tube8|pornhub|xvideos/) && (m/^http:\/\/(([A-Za-z]+[0-9-.]+)*?(\.[a-z]*)?)\.([a-z]*[0-9]?\.[^\/]{3}\/[a-z]*)(.*?)((\/[a-z]*)?(\/[^\/]*){4}\.[^\/\?]{3,4})(\?.*)?$/)) {
   print $x . "http://cdn." . $4 . $6 . "\n";
   #...spicific servers end here.

# photos-X.ak.fbcdn.net where X a-z
} elsif (m/^http:\/\/photos-[a-z].ak.fbcdn.net\/(.*)/) {
   print $x . "http://photos.ak.fbcdn.net/" . $1 . "\n";

# for yimg.com video
} elsif (m/^http:\/\/(.*yimg.com)\/\/(.*)\/([^\/\?\&]*\/[^\/\?\&]*\.[^\/\?\&]{3,4})(\?.*)?$/) {
   print $x . "http://cdn.yimg.com//" . $3 . "\n";

# for yimg.com doubled
} elsif (m/^http:\/\/(.*?)\.yimg\.com\/(.*?)\.yimg\.com\/(.*?)\?(.*)/) {
   print $x . "http://cdn.yimg.com/" . $3 . "\n";

# for yimg.com with &sig=
} elsif (m/^http:\/\/(.*?)\.yimg\.com\/(.*)/) {
   @y = ($1,$2);
   $y[0] =~ s/[a-z]+[0-9]+/cdn/;
   $y[1] =~ s/&sig=.*//;
   print $x . "http://" . $y[0] . ".yimg.com/" . $y[1] . "\n";

# youjizz. We use only domain and filename
} elsif (($u =~ /media[0-9]{2,5}\.youjizz/) && (m/^http:\/\/(.*)(\.[^\.\-]*?\..*?)\/(.*)\/([^\/\?\&]*)\.([^\/\?\&]{3,4})((\?|\%).*)?$/)) {
   @y = ($1,$2,$4,$5);
   $y[0] =~ s/(([a-zA-A]+[0-9]+(-[a-zA-Z])?$)|(.*cdn.*)|(.*cache.*))/cdn/;
   print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

# general purpose for cdn servers. add above your specific servers.
   } elsif (m/^http:\/\/([0-9.]*?)\/\/(.*?)\.(.*)\?(.*?)/) {
   print $x . "http://squid-cdn-url//" . $2 . "." . $3 . "\n";

# generic http://variable.domain.com/path/filename."ex" "ext" or "exte" with or withour "? or %"
   } elsif (m/^http:\/\/(.*)(\.[^\.\-]*?\..*?)\/(.*)\.([^\/\?\&]{2,4})((\?|\%).*)?$/) {
   @y = ($1,$2,$3,$4);
   $y[0] =~ s/(([a-zA-A]+[0-9]+(-[a-zA-Z])?$)|(.*cdn.*)|(.*cache.*))/cdn/;
   print $x . "http://" . $y[0] . $y[1] . "/" . $y[2] . "." . $y[3] . "\n";

# generic http://variable.domain.com/...
   } elsif (m/^http:\/\/(([A-Za-z]+[0-9-]+)*?|.*cdn.*|.*cache.*)\.(.*?)\.(.*?)\/(.*)$/) {
   print $x . "http://cdn." . $3 . "." . $4 . "/" . $5 . "\n";

# spicific extention that ends with ?
   } elsif (m/^http:\/\/(.*?)\/(.*?)\.(jp(e?g|e|2)|gif|png|tiff?|bmp|ico|flv|wmv|3gp|mp(4|3)|exe|msi|zip|on2|mar|rar|cab|amf|swf)(.*)/) {
   print $x . "http://" . $1 . "/" . $2 . "." . $3 . "\n";

# all that ends with ;
   } elsif (m/^http:\/\/(.*?)\/(.*?)\;(.*)/) {
   print $x . "http://" . $1 . "/" . $2 . "\n";

} else {
   print $x . $_ . "sucks\n";
}
}

RoutersProxy

[SERVER] Install VNC Server on Ubuntu Server

[SERVER] Install PHP on Ubuntu Server

[SERVER] Configure Squid3 as a Reverse Proxy on Ubuntu Server

[SERVER] Configure SSL di Ubuntu Server

[DOWNLOAD] Ubuntu 11.04

[DOWNLOAD] Squid Calculator

[DOWNLOAD] PuTTY

Download PuTTY

[DOWNLOAD] WinSCP

[CCBoot] Setting Diskless Boot Software for Windows

Diskless Boot Technology Background

Using CCBoot to Build a Diskless Boot Server

[WINDOWS] Setting diskclass windows

[TUTORIAL] Agar Blog Terdeteksi Search Engine Google, Yahoo, Bing DLL

[SERVER] MEMBERSIHKAN CACHE PROXI MANUAL

[MIKROTIK] Limit IDM Menggunalan Layer7 di MikroTik

[MIKROTIK] NAT MANGLE PROXI HIT

[MIKROTIK] BYPASS PROXY HIT

[INFO] Have You Ever Tried Walnut Dining Room Furniture?

[INFO] Plethora of Different Dining Room Set

[INFO] Attractive Italian Dining Room Furniture

[DOWNLOAD] Firmware Nokia C3-00 RM-614 v8.71 Bahasa Indonesia

[INFO] BBM Goes to Android and IPhone

[MIKROTIK] Setting Loadbalance 2 Line Speedy dengan Routing Mark | External Proxy

[JASA SETTING ONLINE] Mikrotik | Proxy

[JASA SETTING ONLINE] Mikrotik | Proxy

[PROXY] Squid.conf

[PROXY] Storeurl.pl