curahan HATI, PIKIRAN, dan KEINGINAN

Just another WordPress.com weblog

  • Blog Stats

    • 627 hits
  • Klik tertinggi

    • Tidak ada

win XP tweaks

Ditulis oleh andri prayogo di/pada Agustus 22, 2008

Generic Changes

Num Lock ON

1. Type REGEDIT and press <Enter>.
2. Locate the key HKEY_USERS/.DEFAULT/Control Panel/Keyboard
3. In the left pane you will see the key InitialKeyboardIndicators. Change the value of this key to 2; it is 0 by default.

Change the Windows Logon Screen Saver in Windows XP

When you start Windows, you may be presented with the Windows XP welcome screen, which prompts you click your user name to begin, or you may be presented with a Welcome to Windows dialog box that prompts you to press CTRL+ALT+DEL to log on. By default, if you do not press a key for 10 minutes, the Windows logon screen saver (Logon.scr) starts.

1. Click Start , and then click Run .
2. In the Open box, type regedt32 , and then click OK .
3. In the Registry Editor window, locate the following registry key:
HKEY_USERS\DEFAULT\Control Panel\Desktop
4. In the right pane, double-click SCRNSAVE.EXE .
5. In the Edit String dialog box, type the name of the screen saver that you want in the Value data box, and then click OK . For example, if you want to use the Mystify screen saver as your logon screen saver, type ssmyst.scr .

IMPORTANT : Make sure that you correctly specify the path to the screen saver. If the screen saver is located in %SystemRoot%\System32, the explicit path is not required.

6. Click Exit on the File menu to quit Registry Editor.

>>Default User

If you take the time to setup one account, you can then logon as Administrator and copy all the information from “C:\Documents and Settings\UserName” to “C:\Documents and Settings\Default User”. Now, everytime you create a new user, they will have the exact same profile. This is also useful to know if you reinstall WinXP and want to keep all your settings. This comes in ultra handy if you are an administrator of many machines. You can set things up just the way you want them, then every account generated will have all the same base settings.

Relocate My Documents Folder

Simply right-click on the desktop icon and select properties. Now you can change the location to another drive, or out onto a server for nightly backups. If you are using a server, you may also want to disable Offline Files, otherwise it will work from dummy copies and replace the originals when you shutdown. This is painfully slow when you just want to turn off the computer and go home.

Remove E-Books, My Pictures and My Music from My Documents

Goto START then RUN. Type “Regsvr32 /u mydocs.dll” and hit enter. They won’t come back.

Replace Outlook Email

In Win9x, all your email used to be located in c:\windows\application data\microsoft\outlook but now you can find it at “C:\Documents and Settings\UserName\Local Settings\Application Data\Microsoft\Outlook”

Fix Your Address Book in Outlook

Periodically, you may wish you make a backup copy of your address book. I prefer to do it this way: In Outlook, Go to File – Import and Export – Export to a File – Comma Separated Values (Windows) and if you ever need to bring it back, just Re-Import the .CSV file.

Getting rid of unwanted items in “open with…” shell extension

When rightclicking any file you´re likely to see an option called “open with”, which lists any available program on you computer to open the file with. To simply clear up this list of unwanted items, or to remove useless associations, like opening an mp3 file with a paint program, follow these steps:

- Click on the start button, click on Run… and type the word “regedit” (without the quotes) in the box that appears to open the registry editor, Navigate to “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts”
- Find the extention you wish to edit and click on the “+”-sign to locate the key that says “OpenWithList”
- In the right pane of the registry editor you´ll see a list with the programs in the list, like “paint.exe” or “notepad.exe”
- Simple click on the one you wish to delete and press the delete button on your keyboard

Don´t worry if you´ve removed an entry you rather hadn´t removed. When rightclicking a file there will be another option in the “open with” extension where you can choose any program on your computer. Once used, it will reappear in the list of associated programs.

Disabling Balloon Tips

To turn off balloon tips in applications that support XP Themes
Start Regedit
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
Change the value of EnableBalloonTips from 1 to 0

Folder views not being saved

Sometimes you’ll change a folder view, its position, or one of the folder’s display options and upon rebooting the changes haven’t been saved. The first thing to do is go to Control Panel>Folder Options and under the View tab make sure that ‘Remember each folder’s view settings’ is ticked.

However even with this setting ticked you’ll wind up with unsaved settings – I know from personal experience. Before using this tweak, every time I opened Control Panel it would show Details view and not Icons view, no matter how many times I changed it back to Icon view. The way to fix this problem is to open Regedit and go to the following sub-folders:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags]

Right-click on each one (i.e. BagMRU and Bags) and select Delete to get rid of both of them. Reboot your PC and set up each of your folders as you like it. These settings should now be saved and restored on the next reboot. By deleting the registry entries above Windows is forced to recreate them and in doing so get rid of corruption and bad entries, typically caused by third-party programs.

>>Remove the Link folder in Favorites

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar]

LinksFolderName=Links If you want to get rid of the annoying Links folder in Favorites for good (and not just hide it), edit this string so that it equals a blank value. Now go into Favorites and delete the Links folder and it won’t reappear again.

Make WinXP a registered copy without going through registration

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion]
RegDone=1 This is not to be confused with Activation – it’s MS product registration.
RegisteredOrganization=”" Fill in organization name or leave blank.
RegisteredOwner=User1 Fill in a name – I suggest one which is not uniquely identifiable.

Remove the ’shortcut’ arrow that appears in the corner of desktop icons

Start regedit.
Navigate to HKEY_CLASSES_ROOT\lnkfile
Delete the IsShortcut registry value.
Restart.

How to display any message you want when Windows starts

If you would like to display a legal message or any other message in a pop-up window when windows starts read below:
Start regedit, if you are unfamiliar with regedit please see our FAQ.
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Modify the key legalnoticecaption with what you want to name the window.
Modify the key legalnoticetext with what you want the window to say.
Restart

>>Remove Shared Documents In My Computer

By default, when you open My Computer in Windows XP, you see some folders above your hard drives. These are ‘Shared Folders’ (see the highlighted section in the above image), and basically provide folders for all users to share things. Personally, having these folders is annoying and unecessary. The solution is to remove these folders from My Computer, and the method is simple; simply navigate to

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\DelegateFolders in the registry and then delete the key {59031a47-3f72-44a7-89c5-5595fe6b30ee}. Next time you open My Computer, the folders will not be there.

Disable CD autoplay In Windows XP Home

To disable the CD autoplay feature, use the following Windows XP registry hack:
Hive: HKEY_LOCAL_MACHINE
Key: SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
Name: NoDriveTypeAutoRun
Type: REG_DWORD
Value: 181 hex 0×0b5

How to Change Office XP Product Key

  1. How to change the CD Registry Key of my Office XP installation?
    You can do it by editing the Registry. Apply this procedure:
  2. Locate your valid product CD Key, which is located on the back of the original CD case.
  3. On the Start menu, click Run.
  4. In the Open box, type regedit, and then click OK.
  5. In Registry Editor, find the following subkey:
  6. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\10.0\Registration
  7. Click the plus sign (+) next to this folder. If you see only one subkey in this folder that has a 32-character {GUID} (globally unique identifier), select that subkey and go to step 5.
  8. If you see more than one subkey that has a 32-character {GUID}, select each one until you find the one whose DisplayName value (in the right pane) matches your version of Office.
  9. For the selected {GUID} subkey, select the ProductID string value in the right pane.
  10. On the Edit menu, click Rename.
  11. Type ( you wanna back it up just in case )
  12. OldProductID
  13. and then press ENTER.
  14. On the Registry menu, click Exit.
  15. Start any Office program.
  16. When the Microsoft Office XP User Information dialog box appears, type your valid product CD Key (located on the back of the CD case). Follow the instructions on your screen.

>>Disable error reporting

One feature that I can do without is error reporting. Every time a program crashes I do not want to send a report to Microsoft. Read below to find out how to disable this stupid feature.
Open Control Panel
Click on System.
Then click on the Advanced tab
Click on the error reporting button at the bottom.
Select Disable error reporting.
Click OK

Event Viewer

Quickly access the computer management console, where you can see event logs (to see what’s causing a problem, for example), right-click My Computer and choose Manage.

Then, select the Event viewer and double-click highlighted events in the Applications or System areas to view detailed explanations of what went wrong.

Event Viewer #2

You will need to run gpedit.msc from the run command and drill down to: Computer Configuration – Windows Settings – Security Settings – Local Policies – Audit Policy and chenge them all (if wanted). This will enable the event viewer’s Security tab so you can see who logged on when and where.

Media Player 8 High encoder

Allows MP3 ripping at a higher Rate.
Download – Here

Speed up Nero in XP

Go to “administrative tools” in the control panel, and in the “services” list, disable the IMAPI CD-Burning COM service.
(Note: manual setting is not enough it must be disabled) It is the built-in CD-burning capability for windowsXP (incidentally, written by Roxio).
Once it is disabled, Nero will start up much quicker.

Remove Built in CD burning

Run gpedit.msc
User Configuration –> Administrative Templates –> Windows Explorer
Look for Remove CD Burning Features and double click on it
Choose enabled and apply

To rename a series of files

1.Open the My Pictures folder. (Click Start, and then click My Pictures.) Or open another folder containing files that you want to rename.
2.Select the files you want to rename. If the files you want are not adjacent in the file list, press and hold CTRL, and then click each item to select it.
3.On the File menu, click Rename.
4.Type the new name, and then press ENTER.

All of the files in the series will be named in sequence using the new name you type. For example, if you type Birthday, the first will be named Birthday and subsequent files in the series will be named Birthday (1), Birthday (2), and so on. To specify the starting number for the series, type the starting number in parentheses after the new file name. The files in the series will be numbered in sequence starting with the number you type. For example, if you type Birthday (10), the other files will be named Birthday (11), Birthday (12), and so on.

Set Priority option

Press CTRL-SHIFT-ESC
1.Go to the second tab called Processes, right click on one of the active processes, you will see the Set Priority option
2.For example, your Run your CDwriter program , set the priority higher, and guess what, no crashed CD’s

>>To change drive letters

To change drive letters (useful if you have two drives and have partitioned the boot drive, but the secondary drive shows up as “D”)
Go to Start > Control Panel > Administrative Tools > Computer Management, Disk Management, then right-click the partition whose name you want to change (click in the white area just below the word “Volume”) and select “change drive letter and paths.”
From here you can add, remove or change drive letters and paths to the partition.

>>ZIP Folders

A really quick tweak… Windows XP has built-in support for .ZIP files, so that you can view them as normal folders. However, the system uses a sizeable portion of resources doing this, so disabling this feature can increase performance. It’s easy to do, you just have to un-register the zipfldr.dll, by going to Start -> Run… and typing

regsvr32 /u zipfldr.dll

then pressing Enter.

>>See all files in Device Manager

Microsoft have decided in XP both Home and Professional Edition that we shouldnt see all our Devices in Device Manager by default…. especially the Non-Plug & Play devices. !

This is really useful if your XP machine is on or running a network.

Right click on My Computer
Properties
Hardware
Device Manager.

Now In Device Manager, select “View” from the toolbar and choose
Show Hidden Devices. And see all the new stuff appear …..

Hacking the XP Boot Screen

This is a very simple trick to do if you have done the same for the logon screen and the start button. There are 2 ways to do this trick that I know about one is doing it manually and the other is using a program called bootxp. I am going to tell you the manual way to do it, but if you want to know the other way just let me know, so I can do an update to the guide. Now once you have downloaded your ntoskrnl.exe file save it a general location so that you will have easy access to it, like my folder.

Once you have ntoskrnl.exe file in an easy access folder, restart your pc into safe mode. Once into safe mode go to the folder where your files are located.

Now that you are there copy the file that you want to change your boot screen too. Once you have copied that file, hit the window key + r or type %windir%\system32 in the run command, so that folder as follows.

Once there paste your new file into the folder and overwrite the existing folder.

Now that you have your new file in the folder restart your pc as you normally would and your new boot screen should appear. You can download this bootscreen here.

Disable Auto reboot

1. Right Click My computer and hit properties
2. Go to Advanced
3. Under the Startup and Recovery section, click Settings…
4. Under System Failure un-check “Automatically restart”

>>Turn off System Restore

Go to your Control Panel
Click System
Go to the System Restore tab
Check the box Turn off System Restore for all drives

Turn off Automatic Updates

Go to your Control Panel
Click System
Go to the Automatic Updates tab
Click the turn off updates box

>>Turn off user tracking

Run gpedit.msc
User Configuration –> Administrative Templates –> Start Menu and taskbar
Look for Turn off user tracking and double click on it
Select Enable
This setting prevents the system from tracking the programs users run, the paths they navigate, and the documents they open. The system uses this information to customize Windows features, such as personalized menus.

If you enable this setting, the system does not track these user actions. The system disables customized features that require user tracking information, including personalized menus.

The Default start menu relies on this. If you’re using the classic start menu like I am then make sure you turn this off cause it doesn’t do any good for you.

MSConfig

XP also includes elements from the Win9x, ME family line. Msconfig, the System Configuration Utility is one of the most important of these tools. Start -> Run -> msconfig to access. For background, see Where do things load from? How to you stop them? . Want to view and or control the programs and elements of XP’s startup process, study the information delivered by msconfig which is a menu of locations that control startup loading of programs. :
General tab : select from
Normal startup : load all device drivers and services
Diagnostic startup : load basic devices and services only
Selective startup : role your own
Launch System Restore : create a restore point or restore back to a restore point
System.ini tab
Win.ini tab
Boot.ini tab
Services tab : another method to disable services
Startup tab : which programs are automatically loaded
disable / enable all or selectively

Put Admin tools on Start Menu

To access the local administrative utilities, you need to:
Click Start
Click Control Panel
You can switch from the new XP view to the classic NT view using left panel Switch to category view
Click Administrative Tools
If you access Admin tools often, you can make the tools available from the Start Menu directly:
Right-Click Start
Click Properties
Click Customize selection box in the Start Menu tab
Click Advanced Tab
Click down Start Menu items pulldown to System Administrative Tools section
Select Display on the All Programs and the Start menu radio button

Enable ClearType font rendering

Click Start
Click Control Panel
Click Display applet
Click the Appearance tab
Click the Effects box
Click Use the following method to smooth edges of screen fonts:
Select ClearType

Disable CD autoplay In Windows XP Pro

It is safest to disable CD autoplay in XP using either local group policy or, for an enterprise, an Active Directory group policy. The local group policy editor method:

Click Start
Click Run
Enter GPEDIT.MSC
Group Policy mmc will popup. On left panel:
Double-click Computer Configuration to open submenu
Double-click Administrative Templates to open submenu
Double-click System to open submenu
Double-click Turn autoplay off option which will be near the bottom of the list in the right panel.
The default is the Not configured . Set it to Disabled.

Move the Spool Folder in Windows XP

The spool folder is the area on the hard disk that Windows uses to store print jobs as they are being printed. This allows Windows to quickly return control to a program after a document is printed. By default, Windows stores this file on the same partition as the Windows system files. You can increase the performance of Windows, and increase free space on this partition, by moving this folder to a different partition.

How to Move the Windows XP Spool Folder
Log on to the computer as Administrator.
Click Start , and then click My Computer .
Open the driver or folder in which you want to store the spool folder.
Under File and Folder Tasks , click Make a new folder . In the Name box, type the name that you want.
Click Start , and then click Printers and Faxes .
On the File menu, click Server Properties .
Click the Advanced tab.
In the Spool folder box, type the complete path to the new folder that you created.
Click Apply . The following message appears:

The changes to the spool folder will occur immediately and any currently active documents will not print. It is recommended to allow all documents to complete printing before changing the spool folder. Are you sure you want to change the spool folder?
Ensure that all documents have finished being printed, and then click Yes .
Click OK , and then close the Printers and Faxes folder.

Remove MSN

X:\Windows\inf\sysoc.inf
msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,hide,7
To this:
msmsgs=msgrocm.dll,OcEntry,msmsgs.inf,,7
They say that you can now go to Add/Remove Windows Componants and remove it, but this never worked for me.

Create Desktop icon to lock the computer

1. Right click on an empty area on your desktop.
2. Select New>Shortcut.
3. In the first box of the Create Shortcut Wizard, type “Rundll32.exe User32.dll,LockWorkStation” (without quotes). Note there is no space between the comma and LockWorkStation, which is also one word. Click Next.
4. Call the shortcut something like “Lock PC” (without quotes) and click Finish.
5. To add the finishing touch, right click on the new icon, select Properties, click the Change Icon button and select an appropriate icon.

Now whenever you click this icon your PC will instantly be locked, and can only be accessed by the user entering a correct password in the Login box. Note you can also lock the computer at any time by press WINDOWS + L. Also note that if you have an account with no password, locking the desktop is a little pointless as anyone can login by just leaving the password field blank and clicking OK to log back in.

Set Explorer’s default startup folder

If you open Explorer from an icon, this tweak allows you to set which directory it will display by default upon opening:

1. Right click on the icon you use to launch Explorer and select Properties.
2. In the Target box of Properties type (or replace the existing text with) the following (without quotes):

“%SystemRoot%\Explorer.exe /e, path”

Where in place of path above you should enter the actual path to the directory you want open by default. For example C:\Windows, or C:\Documents and Settings, etc. The path also doesn’t require quotes around it.

>>Clean Up Context Menus

Have messy Right Click Menus? Here are all the places you should look in:

[HKEY_CLASSES_ROOT\*\OpenWithList]
[HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers]

[HKEY_CLASSES_ROOT\Directory\shell]
[HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers]

[HKEY_CLASSES_ROOT\Drive\shell]
[HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers]

[HKEY_CLASSES_ROOT\Folder\shell]
[HKEY_CLASSES_ROOT\Folder\shellex\ContextMenuHandlers]

Dos Prompt

Here are a few useful commands:

  • shutdown
    You can shut down or restart your own computer, or an administrator can shut down or restart a remote computer. Type “shutdown” into your command prompt to see a list of possible arguments.
  • systeminfo
    Basic system configuration information, such as the system type, the processor type, your time zone, your virtual memory settings, and much more.
  • tasklist
    Want to know what’s going on behind the scenes? Type “tasklist” into the command prompt, and get a list of current processes.
  • taskkill
    Now that you know what’s going on behind the scenes, maybe you want to shut a few of these extraneous tasks down. That’s where taskkill comes in. Type “taskkill /?” for a quick lesson in the syntax of the command, then shut down all those random processes. I just killed my MS messenger by typing “taskkill /PID 1680.” I got the PID from running tasklist, above.

Ditulis dalam PIKIRAN | Leave a Comment »

Squid 2.6 setting at windows XP

Ditulis oleh andri prayogo di/pada April 24, 2008

Squid di Windows

Tutorial singkat ini akan membahas tentang alternatif berbagi pakai internet menggunakan software open source Squid..
Kita akan menggunakan Windows® XP sebagai contoh, mungkin bisa diterapkan juga di Windows® NT atau Windows® 2000..
Untuk tutorial ini kamu akan memerlukan squid yang bisa di donlod di sini.
Hasil donlod akan berupa file zip, extract file tersebut ke C:\ , sehingga di drive C akan muncul direktori baru dengan nama SQUID..
Masuk ke direktori C:\squid\etc, kita akan menemukan 3 buah file dengan nama “cachemgr.conf.default”, “mime.conf.default” dan “squid.conf.default”.

Salin ketiga file tersebut dan rubah namanya..

  • “cachemgr.conf.default” menjadi ”cachemgr.conf”
  • “mime.conf.default” menjadi “mime.conf”, dan
  • “squid.conf.default” menjadi “squid.conf”

Setelah ketiga file diatas dirubah namanya, kita hanya akan edit satu file saja yaitu file “squid.conf”, buka file “squid.conf” menggunakan notepad atau text editor kesukaan kamu..
Disitu sudah ada konfigurasi default untuk squid, kita tidak akan merubah banyak konfigurasi tersebut, cukup rubah seperlunya saja, dalam file konfigurasi ini yang diawali dengan tanda “#” adalah comment atau keterangan saja dan diabaikan oleh squid.

* Cari konfigurasi untuk http_port

Pastikan nilainya 3128. Bisa dirubah ke nilai lain tapi untuk mempermudah biarkan saja 3128, pastikan barisnya sama dengan “http_port 3128”

# Squid normally listens to port 3128
http_port 3128

* Cari tag visible_hostname

# TAG: visible_hostname
# If you want to present a special hostname in error messages, etc, define this.
# Otherwise, the return value of gethostname() will be used.
# If you have multiple caches in a cluster and get errors about IP-forwarding you must set them to have individual names with this setting.
#Default:
# none

tambahkan baris visible_hostname localhost dibawah #none, sehingga menjadi

# TAG: visible_hostname
# If you want to present a special hostname in error messages, etc, define this.
# Otherwise, the return value of gethostname() will be used.
# If you have multiple caches in a cluster and get errors about IP-forwarding you must set them to have individual names with this setting.
#Default:
# none
visible_hostname localhost

* Cari kata our_networks

#acl our_networks src 192.168.1.0/24 192.168.2.0/24
#http_access allow our_networks

di edit, dan hilangkan tand “#” dan sesuaikan dengan alamat jaringanmu ditambah dengan localhost, sehingga menjadi

acl our_networks src 192.168.1.0/24
http_access allow localhost
http_access allow our_networks

* Cari section dns_nameservers

# TAG: dns_nameservers
# Use this if you want to specify a list of DNS name servers (IP addresses) to use instead of those given in your /etc/resolv.conf file.
# On Windows platforms, if no value is specified here or in the /etc/resolv.conf file, the list of DNS name servers are taken from the Windows registry, both static and dynamic DHCP configurations are supported.
# Example: dns_nameservers 10.0.0.1 192.172.0.4
#Default:
# none

Isi baris dibawahnya dengan nama DNS ISPmu, untuk pelanggan dial-up, cara mengetahui alamat DNS ISPmu adalah, dengan mengetikkan ipconfig /all pada command prompt, setelah nyambung ke internet, cari entry DNS, biasanya ada dua alamat. Misalnya DNS ISPmu 10.10.10.1 dan 10.10.10.2, maka isikan baris sebagai berikut

# TAG: dns_nameservers
# Use this if you want to specify a list of DNS name servers (IP addresses) to use instead of those given in your /etc/resolv.conf file.
# On Windows platforms, if no value is specified here or in the /etc/resolv.conf file, the list of DNS name servers are taken from the Windows registry, both static and dynamic DHCP configurations are supported.
# Example: dns_nameservers 10.0.0.1 192.172.0.4
#Default:
# none
dns_nameservers 10.10.10.1 10.10.10.2

Simpan file squid.conf, buka command prompt (cmd).
Masuk ke direktori C:\squid\sbin, didalamnya ada file squid.exe, untuk pertama kali jalankan squid dengan option -z


\>squid -z

Command diatas berfungsi untuk inisialisasi cache squid

Output:
2007/04/23 18:31:13| Creating Swap Directories

\>squid -d 1 -D

option -d 1 digunakan untuk masuk ke debug level (untuk ngecek aja) dan option -D digunakan untuk membypass pengecekan DNS, berguna jika kamu belum nyambung ke internet..

Output :
2007/11/27 16:21:52| Starting Squid Cache version 2.6.STABLE16 for i686-pc-winnt

2007/11/27 16:21:52| Running on Windows Server 2003
2007/11/27 16:21:52| Process ID 3052
2007/11/27 16:21:52| With 2048 file descriptors available
2007/11/27 16:21:52| With 512 CRT stdio descriptors available
2007/11/27 16:21:52| Windows sockets initialized
2007/11/27 16:21:52| Using select for the IO loop
2007/11/27 16:21:52| DNS Socket created at 0.0.0.0, port 2849, FD 4
2007/11/27 16:21:52| Adding nameserver 10.126.13.2 from squid.conf
2007/11/27 16:21:52| Adding nameserver 10.126.13.3 from squid.conf
2007/11/27 16:21:52| User-Agent logging is disabled.
2007/11/27 16:21:52| Referer logging is disabled.
2007/11/27 16:21:52| Unlinkd pipe opened on FD 7
2007/11/27 16:21:52| Swap maxSize 102400 KB, estimated 7876 objects
2007/11/27 16:21:52| Target number of buckets: 393
2007/11/27 16:21:52| Using 8192 Store buckets
2007/11/27 16:21:52| Max Mem size: 8192 KB
2007/11/27 16:21:52| Max Swap size: 102400 KB
2007/11/27 16:21:52| Local cache digest enabled; rebuild/rewrite every 3600/3600
sec
2007/11/27 16:21:52| Rebuilding storage in c:/squid/var/cache (DIRTY)
2007/11/27 16:21:52| Using Least Load store dir selection
2007/11/27 16:21:52| Set Current Directory to c:/squid/var/cache
2007/11/27 16:21:52| Loaded Icons.
2007/11/27 16:21:52| Accepting proxy HTTP connections at 0.0.0.0, port 3128, FD
13.
2007/11/27 16:21:52| Accepting ICP messages at 0.0.0.0, port 3130, FD 14.
2007/11/27 16:21:52| Accepting HTCP messages on port 4827, FD 15.
2007/11/27 16:21:52| Accepting SNMP messages on port 3401, FD 16.
2007/11/27 16:21:52| Ready to serve requests.
2007/11/27 16:21:52| Done reading c:/squid/var/cache swaplog (0 entries)
2007/11/27 16:21:52| Finished rebuilding storage from disk.
2007/11/27 16:21:52| 0 Entries scanned
2007/11/27 16:21:52| 0 Invalid entries.
2007/11/27 16:21:52| 0 With invalid flags.
2007/11/27 16:21:52| 0 Objects loaded.
2007/11/27 16:21:52| 0 Objects expired.
2007/11/27 16:21:52| 0 Objects cancelled.
2007/11/27 16:21:52| 0 Duplicate URLs purged.
2007/11/27 16:21:52| 0 Swapfile clashes avoided.
2007/11/27 16:21:52| Took 0.1 seconds ( 0.0 objects/sec).
2007/11/27 16:21:52| Beginning Validation Procedure
2007/11/27 16:21:52| Completed Validation Procedure
2007/11/27 16:21:52| Validated 0 Entries
2007/11/27 16:21:52| store_swap_size = 0k
2007/11/27 16:21:53| storeLateRelease: released 0 objects

setelah squid dieksekusi, kita tinggal masukkan squid ke service windows dengan cara :

\>squid -i

Output :
Registry stored HKLM\SOFTWARE\GNU\Squid\2.6\Squid\ConfigFile value C:/squid/etc/ squid.conf
Squid Cache version 2.6.STABLE12 for i686-pc-winnt
installed successfully as Squid Windows System Service.
To run, start it from the Services Applet of Control Panel.
Don’t forget to edit squid.conf before starting it.

Lanjutkan dengan mengetikkan

\>squid -O -D

Command diatas untuk memasukkan parameter -D ketika service dijalankan

Output :
Registry stored HKLM\SOFTWARE\GNU\Squid\2.6\Squid\CommandLine value -D

Start service pertama kali, masuk ke control panel –> administrative tools –> services, cari service dengan nama squid, klik kanan trus START..
Konfigurasi di client tinggal masukkan aja alamat proxynya (alamat dimana squid diinstall) dan portnya 3128..

Untuk informasi lebih lanjut atau konfigurasi yang lebih lengkap silahkan buka alamat http://www.squid-cache.org

Ditulis dalam PIKIRAN | Leave a Comment »

TOPOLOGI Load balancing multi hoaming

Ditulis oleh andri prayogo di/pada April 24, 2008

Topologi

Menggunakan 3 etrernet card

ether1 ==> wireless
ether2 ==> speedy
ethet3 ==> Lan

mikrotik command:
/ip address add address 202.152.74.1/32 interface ether1
/ip address add address 192.168.1.2/32 interface ether2
/ip address add address 192.168.10.1/24 interface ether3

Membagi Ip menjadi 2 Group

add chain=prerouting action=mark-connection src-address 192.168.10.0/25 new-routing-mark= Group-A
add chain=prerouting action=mark-connection src-address 192.168.10.128/25 new-routing-mark=Group-B

Default gw masing-masing Group

Group-A=192.168.10.0/25 default gw 192.168.1.1

Group-B=192.168.10.128/25 default gw 202.152.74.128

mikrotik command:

/ip route add gateway=192.168.1.1 routing-mark=Group-A
/ip route add gateway=202.152.74.128 routing-mark=Group-B

Nat ip local

192.168.10.0/24 ==>masquerade

mikrotik command:
/ip firewall nat add chain=srcnat src-address 192.168.10.0/24 action=masquerade

Selamat mencoba dan Semoga sukses….

Ditulis dalam PIKIRAN | Leave a Comment »

load balancing & fail over di mikrotik

Ditulis oleh andri prayogo di/pada April 24, 2008

Kondisi : ISP dimana kita bekerja sebagai Administrator menggunakan lebih dari satu gateway untuk terhubung ke Internet. Semuanya harus dapat melayani layanan upstream & downstream. Karena akan beda kasusnya apabila salah satunya hanya dapat melayani downstream, contohnya jika menggunakan VSAT DVB One-way.
Untuk kasus ini dimisalkan ISP memiliki 2 jalur ke Internet. Satu menggunakan akses DSL (256 Kbps) dan lainnya menggunakan Wireless (512 Kbps). Dengan rasio pemakaian DSL:Wireless = 1:2 .

Yang akan dilakukan :

  1. Menggunakan semua jalur gateway yang tersedia dengan teknik load-balancing.
  2. Menjadikan salah satunya sebagai back-up dengan teknik fail-over.

OK, mari saja kita mulai eksperimennya :

  1. IP address untuk akses ke LAN :
    >
    /ip address add address=192.168.0.1/28 interface=LAN
    IP address untuk akses ke jalur DSL :
    >
    /ip address add address=10.32.57.253/29 interface=DSL
    IP address untuk akses ke jalur Wireless :
    >
    /ip address add address=10.9.8.2/29 interface=WIRELESS
    Tentukan gateway dengan rasionya masing-masing :
    >
    /ip route add gateway=10.32.57.254,10.9.8.1,10.9.8.1
  2. Pada kasus untuk teknik fail-over. Diasumsikan jalur utama melalui Wireless dengan jalur DSL sebagai back-up apabila jalur utama tidak dapat dilalui. Untuk mengecek apakah jalur utama dapat dilalui atau tidak, digunakan command ping.
    >
    /ip firewall mangle add chain=prerouting src-address=192.168.0.0/28 action=mark-routing new-routing-mark=SUBNET1-RM
    >
    /ip route add gateway=10.9.8.1 routing-mark=SUBNET1-RM check-gateway=ping
    >
    /ip route add gateway=10.32.57.254
  3. Good Luck!!

PCQ

Dengan menggunakan queue type pcq di Mikrotik, kita bisa membagi bandwidth yang ada secara merata untuk para pelahap-bandwidth™ saat jaringan pada posisi peak.

Contohnya, kita berlangganan 256 Kbps. Kalau ada yang sedang berinternet ria, maka beliau dapat semua itu jatah bandwidth. Tetapi begitu teman-temannya datang, katakanlah 9 orang lagi, maka masing-masingnya dapat sekitar 256/10 Kbps. Yah.. masih cukup layaklah untuk buka-buka situs non-porn atau sekedar cek e-mail & blog .

OK, langsung saja ke caranya :

  1. Asumsi : Network Address 192.168.169.0/28, interface yang mengarah ke pengguna diberi nama LAN, dan interface yang mengarah ke upstream provider diberi nama INTERNET;
  2. Ketikkan di console atau terminal :
    >
    /ip firewall mangle add chain=forward src-address=192.168.169.0/28 action=mark-connection new-connection-mark=NET1-CM
    >
    /ip firewall mangle add connection-mark=NET1-CM action=mark-packet new-packet-mark=NET1-PM chain=forward
    >
    /queue type add name=downsteam-pcq kind=pcq pcq-classifier=dst-address
    >
    /queue type add name=upstream-pcq kind=pcq pcq-classifier=src-address
    >
    /queue tree add parent=LAN queue=DOWNSTREAM packet-mark=NET1-PM
    >
    /queue tree add parent=INTERNET queue=UPSTREAM packet-mark=NET1-PM
  3. Good Luck!!

Memanipulasi ToS ICMP & DNS di MikroTik

Tujuan :

  • Memperkecil delay ping dari sisi klien ke arah Internet.
  • Mempercepat resolving hostname ke ip address.

Asumsi : Klien-klien berada pada subnet 10.10.10.0/28

  1. Memanipulasi Type of Service untuk ICMP Packet :
    >
    ip firewall mangle add chain=prerouting src-address=10.10.10.0/28 protocol=icmp action=mark-connection new-connection-mark=ICMP-CM passthrough=yes
    >
    ip firewall mangle add chain=prerouting connection-mark=ICMP-CM action=mark-packet new-packet-mark=ICMP-PM passthrough=yes
    >
    ip firewall mangle add chain=prerouting packet-mark=ICMP-PM action=change-tos new-tos=min-delay
  2. Memanipulasi Type of Service untuk DNS Resolving :
    >
    ip firewall mangle add chain=prerouting src-address=10.10.10.0/28 protocol=tcp dst-port=53 action=mark-connection new-connection-mark=DNS-CM passthrough=yes
    >
    ip firewall mangle add chain=prerouting src-address=10.10.10.0/28 protocol=udp dst-port=53 action=mark-connection new-connection-mark=DNS-CM passthrough=yes
    >
    ip firewall mangle add chain=prerouting connection-mark=DNS-CM action=mark-packet new-packet-mark=DNS-PM passthrough=yes
    >
    ip firewall mangle add chain=prerouting packet-mark=DNS-PM action=change-tos new-tos=min-delay
  3. Menambahkan Queue Type :
    >
    queue type add name=”PFIFO-64″ kind=pfifo pfifo-limit=64
  4. Mengalokasikan Bandwidth untuk ICMP Packet :
    >
    queue tree add name=ICMP parent=INTERNET packet-mark=ICMP-PM priority=1 limit-at=8000 max-limit=16000 queue=PFIFO-64
  5. Mengalokasikan Bandwidth untuk DNS Resolving :
    >
    queue tree add name=DNS parent=INTERNET packet-mark=DNS-PM priority=1 limit-at=8000 max-limit=16000 queue=PFIFO-64
  6. Good Luck!!

Queue Tree with more than two interfaces

Basic Setup

This page will tak about how to make QUEUE TREE in RouterOS that with Masquerading for more than two interfaces. It’s for sharing internet connection among users on each interfacess. In manual this possibility isn’t writted.

First, let’s set the basic setting first. I’m using a machine with 3 or more network interfaces:

[admin@instaler] > in pr

# NAME TYPE RX-RATE TX-RATE MTU

0 R public ether 0 0 1500

1 R wifi1 wlan 0 0 1500

2 R wifi2 wlan 0 0 1500

3 R wifi3 wlan 0 0 1500

And this is the IP Addresses for each interface:

[admin@instaler] > ip ad pr

Flags: X – disabled, I – invalid, D – dynamic

# ADDRESS NETWORK BROADCAST INTERFACE

0 10.20.1.0/24 10.20.1.0 10.20.1.255 public

1 10.10.2.0/24 10.10.2.0 10.10.2.255 wifi1

2 10.10.3.0/24 10.10.3.0 10.10.3.255 wifi2

3 10.10.4.0/24 10.10.4.0 10.10.4.255 wifi3

On the public you can add NAT or proxy if you want.

Mangle Setup

And now is the most important part in this case.

We need to mark our users. One connectoin for upload and second for download. In this example I add mangle for one user. At the end I add mangle for local transmission because I don’t QoS local trafic emong users. But for user I need to separate upload and download.

[admin@instaler] ip firewall mangle> print

Flags: X – disabled, I – invalid, D – dynamic

disabled=no

0 chain=forward dst-address=10.10.2.36 action=mark-connection

new-connection-mark=users-userU passthrough=yes comment=”” disabled=no

1 chain=forward dst-address=10.10.2.36 action=mark-connection

new-connection-mark=users-userD passthrough=yes comment=”” disabled=no

2 chain=forward connection-mark=users-userU action=mark-packet

new-packet-mark=userU passthrough=yes comment=”” disabled=no

3 chain=forward connection-mark=users-userD action=mark-packet

new-packet-mark=userD passthrough=yes comment=”” disabled=no

98 chain=forward src-address=10.10.0.0/16 dst-address=10.10.0.0/16

action=mark-connection new-connection-mark=users-lokal passthrough=yes

99 chain=forward connection-mark=users-lokal action=mark-packet

new-packet-mark=lokalTrafic passthrough=yes

Queue Tree Setup

And now, the queue tree setting. We need one rule for downlink and one rule for uplink. Be careful when choosing the parent. for downlink traffic, we use parent “global-out”, because we have two or more downloading interfaces. And for uplink, we are using parent “public”, we want QoS uplink traffic. (I’m using pcq-up and download from manual) This example is for 2Mb/1Mb

[admin@instaler] > queue tree pr

Flags: X – disabled, I – invalid

0 name=”Download” parent=global-out packet-mark=”” limit-at=0

queue=pcq-download priority=1 max-limit=2000000 burst-limit=0

burst-threshold=0 burst-time=0s

1 name=”Upload” parent=WGW packet-mark=”” limit-at=0 queue=pcq-upload

priority=1 max-limit=1000000 burst-limit=0 burst-threshold=0

burst-time=0s

Now we add our user:

2 name=”user10D” parent=Download packet-mark=userD limit-at=0

queue=pcq-download priority=5 max-limit=0 burst-limit=0

burst-threshold=0 burst-time=0s

3 name=”user10U” parent=Upload packet-mark=userU limit-at=0

queue=pcq-upload priority=5 max-limit=0 burst-limit=0 burst-threshold=0

burst-time=0s

MAC Address + IP Address Linux

#!/bin/sh

iptables=/sbin/iptables

#definisikan default policy disini
$iptables -F INPUT
$iptables -F OUTPUT
$iptables -P INPUT DROP
$iptables -P OUTPUT DROP #ingat nanti buka policy output yg perlu
$iptables -F FORWARD
$iptables -F -t nat
$iptables -P FORWARD DROP

#definisi default policy dan bikin chain baru bernama maccheck di interface eth1
$iptables -t mangle -F
$iptables -t mangle -F maccheck
$iptables -t mangle -X maccheck
$iptables -t mangle -N maccheck
$iptables -t mangle -I PREROUTING -i eth1 -p all -j maccheck

#self explanatory… ip address + mac
$iptables -t mangle -A maccheck -s 192.168.0.1 -i eth1 -m mac -j RETURN
–mac-source
00:80:11:11:11:11
$iptables -t mangle -A maccheck -s 192.168.0.2 -i eth1 -m mac -j RETURN
–mac-source
00:80:22:22:22:22
$iptables -t mangle -A maccheck -s 192.168.0.3 -i eth1 -m mac -j RETURN
–mac-source
00:80:33:33:33:33

#selain yg terdaftar baik ip maupun mac akan di mark untuk nanti di drop, isi
dengan salah satu
mac yg aktif yg mana saja
#disini contohnya 00:80:11:11:11:11 yg sudah kita definisikan di atas
$iptables -t mangle -A maccheck -s 0/0 -i eth1 -m mac -j MARK –mac-source !
00:80:11:11:11:11
–set-mark 1
$iptables -t mangle -A maccheck -s 0/0 -i eth1 -p all -j MARK –set-mark 1

#drop packet yg di mark
$iptables -A INPUT -i eth1 -m mark –mark 1 -j DROP
$iptables -A OUTPUT -o eth1 -m mark –mark 1 -j DROP
$iptables -A FORWARD -i eth1 -m mark –mark 1 -j DROP

#lanjutkan firewall script anda disini

source = primadonal.com

Ditulis dalam PIKIRAN | Leave a Comment »