Cara Install Artica Proxy di Debian 8.0

Artica Proxy adalah solusi open-source yang digunakan untuk melakukan proxying dan filtering pada jaringan. Dengan Artica Proxy, administrator dapat mengontrol dan memonitor lalu lintas internet pada jaringan perusahaan atau kantor, meningkatkan keamanan dan efisiensi penggunaan internet.

Tutorial ini menjelaskan langkah-langkah instalasi Artica Proxy di Debian 8.0 agar sistem dapat berjalan dengan optimal.

Persiapan Instalasi

Sebelum mulai, pastikan:

• Menggunakan Debian Net.Install
• Tidak menginstall di server produksi langsung
• Mengaktifkan arsitektur i386

dpkg --add-architecture i386

• Mengaktifkan repository non-free

vi /etc/apt/sources.list
deb http://ftp.debian.org/debian/ jessie main

• Update sistem

apt-get update

Instalasi Paket Pendukung

Instal paket dasar yang diperlukan untuk menjalankan Artica Proxy:

apt-get install libhdb9-heimdal libfontconfig1-dev libxau6 libonig2 libhiredis0.10 fail2ban python-yaml python-psycopg2 python-lxml python-dev python python-apt python-ldap python-apt-common python-chardet python-debian python-debianbts python-fpconst python-minimal python-reportbug python-soappy python-support python2.7-minimal kbd libdumbnet1 zerofree libnss3 libjansson4 libpng12-dev libyaml-dev libcrypt-ssleay-perl libnuma-dev saidar dialog tcpdump arp-scan rsync cgroup-bin ipset ipcalc wakeonlan syslinux ntp siege ethtool lm-sensors autofs open-iscsi iscsitarget iscsitarget-dkms smartmontools redis-server libcap2-bin libdb-dev libunix-syslog-perl libsendmail-pmilter-perl libmail-imapclient-perl apache2-utils strace ebtables whois iotop lshw acl socat apache2-suexec apache2.2-common arj bridge-utils build-essential byacc cifs-utils curlftpfs davfs2 discover rsyslog dnsmasq dnsutils flex ftp-proxy g++ gcc htop ifenslave iptables-dev iputils-arping isc-dhcp-client isc-dhcp-server krb5-user krb5-config krb5-kdc mingetty lighttpd locales lsof make monit mysql-client-5.5 mysql-server-5.5 ntpdate openssh-client openssh-server openssl rdate rrdtool sasl2-bin scons slapd sshfs tcsh telnet ucarp unzip zip util-linux-locales vde2 vnstat apt-file hdparm conntrack conntrackd attr quota libnetfilter-conntrack3 netdiscover liblzo2-2 ruby dh-autoreconf libpcap-dev libmagic-dev liblzo2-dev libdbus-1-dev libnetfilter-conntrack-dev less lib32tinfo5 libacl1 libalgorithm-diff-perl libgd-graph-perl libalgorithm-diff-xs-perl libalgorithm-merge-perl libapache2-mod-perl2 libapache2-mod-bw libaprutil1 libaprutil1-dbd-sqlite3 libaprutil1-ldap libapt-inst1.5 libapt-pkg-perl libapt-pkg4.12 libasprintf0c2 libattr1 libaudit1 libavahi-client3 libavahi-common-data libavahi-common3 libavahi-core7 libbind9-90 libblkid1 libbsd-resource-perl libbsd0 libbz2-1.0 libbz2-dev libc-bin libc-client2007e libc-dev-bin libc6-dev libc6 libcairo2 libcdio13 libclass-isa-perl libcomerr2 libconfuse-common libcurl3-gnutls libcurl3 libcwidget3 libdaemon0 libdatrie1 libdb5.3 libdbi-perl libdbi1 libdbus-1-3 libdevel-symdump-perl libdevmapper-event1.02.1 libdevmapper1.02.1 libdiscover2 libdns100 libdpkg-perl libdrm-intel1 libdrm-dev libdrm-nouveau2 libdrm-radeon1 libdrm2 libedit2 libencode-locale-perl libept1.4.12 libev4 libevent-2.0-5 libexpat1 libfam0 libffi-dev libffi6 libfile-fcntllock-perl libfile-listing-perl libfont-afm-perl libfreetype6 libgc1c2 libgcc1 libgcrypt20-dev libgcrypt20 libgdbm3 libgeoip1 libgif4 libglib2.0-0 libglib2.0-data libgmp10 libgnutls28-dev libgnutls-openssl27 libgomp1 libgpg-error-dev libgpg-error0 libgpgme11 libgpm2 libgraph-perl libgssapi-krb5-2 libgssglue1 libgssrpc4 libheap-perl libice6 libidn11-dev libidn11 libisc95 libisccc90 libisccfg90 libitm1 libjpeg62-turbo-dev libjpeg62-turbo libk5crypto3 libkadm5clnt-mit9 libkadm5srv-mit9 libkdb5-7 libkeyutils1 libklibc libkmod2 libkrb5support0 libldap-2.4-2 liblocale-gettext-perl liblockfile-bin liblockfile1 libltdl-dev libltdl7 liblwp-mediatypes-perl liblwp-protocol-https-perl liblwres90 liblzma5 libmagic1 libmailtools-perl libmcrypt4 libmount1 libmpc3 libmpfr4 libmysqlclient18 libncurses5 libncursesw5 libneon27-gnutls libnet-daemon-perl libnet-http-perl libnet-ssleay-perl libnetfilter-queue-dev libnetfilter-queue1 libnet1 libnewt0.52 libnfnetlink0 libnfsidmap2 libnids1.21 libntlm0 libodbc1 libp11-kit-dev libp11-kit0 libpam-modules-bin libpam-runtime libpam-winbind libpam0g libpango1.0-0 libpci3 libpciaccess0 libpcre3 libpipeline1 libpixman-1-0 libpng12-0 libpopt0 libpq5 libprocps3 libpth20 libpython2.7 libqdbm14 libquadmath0 libreadline-dev libreadline5 libreadline6-dev libreadline6 librrd4 librtmp-dev librtmp1 libruby2.1 libruby libsasl2-2 libselinux1 libsemanage-common libsemanage1 libsepol1-dev libsepol1 libsigc++-2.0-0c2a libslang2 libslp1 libsm6 libsocket-perl libsqlite3-0 libss2 libssh2-1-dev libssh2-1 libssl-doc libssl1.0.0 libstdc++-4.9-dev libstdc++6 libsysfs2 libtasn1-6-dev libtasn1-6 libtdb1 libthai-data libthai0 libtimedate-perl libtinfo-dev libtinfo5 libtirpc1 libtokyocabinet9 libudev1 liburi-perl libusb-0.1-4 libusb-1.0-0 libustr-1.0-1 libuuid1 libv4lconvert0 libvde0 libvdeplug2 libverto-libev1 libverto1 libwbclient0 libwrap0 libwww-perl libwww-robotrules-perl libx11-6 libx11-data libxapian22 libxaw7 libxcb-render0 libxcb-shm0 libxcb1 libxcomposite1 libxdamage1 libxdmcp6 libxext6 libxfixes3 libxfont1 libxft2 libxkbfile1 libxml2-dev libxml2 libxmu6 libxmuu1 libxpm4 libxrandr2 libxrender1 libxslt1.1 libxt6 libyaml-0-2 lib32gcc1 lib32ncurses5 lib32stdc++6 lib32z1 libaio1 libapr1 libattr1-dev libauthen-sasl-perl libc6-i386 libcap2 libcdio-dev libconfuse0 libcrypt-openssl-random-perl libcups2 libcurl4-openssl-dev libdbd-mysql-perl libfuse-dev libfuse2 libgeo-ip-perl libgeoip-dev libgsasl7 libiodbc2 libkrb5-3 libkrb5-dev libldap2-dev liblua5.1-0-dev liblualib50-dev libmcrypt-dev libmhash2 libmysqlclient-dev libnss-ldap libnss-mdns libpam-krb5 libpam-ldap libpam-modules libpam0g-dev libpcrecpp0 libperl-dev librrdp-perl libsasl2-modules libsasl2-modules-gssapi-mit libsasl2-modules-ldap libselinux1-dev libssl-dev libtevent0 libtalloc2 libusb-dev libv4l-0 libwrap0-dev libxslt1-dev libgsasl7-dev libblkid-dev libcap-dev libtevent-dev httrack vlan libpcre3-dev wget udev usbutils transmission-daemon calamaris sysvinit-core sysvinit-utils snmp-mibs-downloader libsnmp30

(Paket lengkap sesuai kebutuhan dependency Artica Proxy untuk Debian 8.0)

Menghapus Service yang Tidak Dibutuhkan

Beberapa service default Debian harus di-disable sebelum instalasi:

update-rc.d -f apache2 remove && rm -f /etc/init.d/apache2
update-rc.d -f autofs remove && rm -f /etc/init.d/autofs
update-rc.d -f conntrackd remove && rm -f /etc/init.d/conntrackd
update-rc.d -f exim4 remove && rm -f /etc/init.d/exim4
update-rc.d -f ftp-proxy remove && rm -f /etc/init.d/ftp-proxy
update-rc.d -f isc-dhcp-server remove && rm -f /etc/init.d/isc-dhcp-server
update-rc.d -f iscsitarget remove && rm -f /etc/init.d/iscsitarget
update-rc.d -f nmbd && rm -f /etc/init.d/nmbd
update-rc.d -f nscd && rm -f /etc/init.d/nscd
update-rc.d -f open-iscsi && rm -f /etc/init.d/open-iscsi
update-rc.d -f redis-server && rm -f /etc/init.d/redis-server
update-rc.d -f rsync && rm -f /etc/init.d/rsync
update-rc.d -f samba && rm -f /etc/init.d/samba
update-rc.d -f samba-ad-dc && rm -f /etc/init.d/samba-ad-dc
update-rc.d -f saslauthd && rm -f /etc/init.d/saslauthd
update-rc.d -f smartmontools && rm -f /etc/init.d/smartmontools
update-rc.d -f smbd && rm -f /etc/init.d/smbd
update-rc.d -f transmission-daemon && rm -f /etc/init.d/transmission-daemon
update-rc.d -f vnstat && rm -f /etc/init.d/vnstat
update-rc.d -f winbind && rm -f /etc/init.d/winbind
update-rc.d -f lm-sensors remove ; rm -f /etc/init.d/lm-sensors
update-rc.d -f dnsmasq remove ; rm -f /etc/init.d/dnsmasq
update-rc.d -f krb5-kdc remove ; rm -f /etc/init.d/krb5-kdc
update-rc.d -f ebtables remove ; rm -f /etc/init.d/ebtables
update-rc.d -f minissdpd remove ; rm -f /etc/init.d/minissdpd
update-rc.d -f avahi-daemon remove ; rm -f /etc/init.d/avahi-daemon

Download Artica Proxy

Download package resmi dari Artica Proxy:

wget http://articatech.net/official3/artica-3.02.022217.tgz
tar xf artica-3.02.022217.tgz -C /usr/share/

Tambahkan package tambahan untuk Debian 8:

wget http://articatech.net/download/Debian7-squid/squid32-x64-debian8-3.5.24.tar.gz
wget http://articatech.net/download/Debian7-squid/postgres-debian7-64-9.6.0.tar.gz
tar xf squid32-x64-debian8-3.5.24.tar.gz -C /
tar xf postgres-debian7-64-9.6.0.tar.gz -C /

Konfigurasi Dasar Artica Proxy

Buat direktori daemon dan setting default:

mkdir -p /etc/artica-postfix/settings/Daemons
echo 1 >/etc/artica-postfix/FROM_ISO
echo 1 >/etc/artica-postfix/settings/Daemons/SquidTemplateSimple
echo 1 >/etc/artica-postfix/settings/Daemons/IsPortsConverted
echo 0 >/etc/artica-postfix/settings/Daemons/EnablePHPFPM
echo 0 >/etc/artica-postfix/settings/Daemons/EnableArticaFrontEndToNGninx
echo 1 >/etc/artica-postfix/settings/Daemons/EnableArticaInNGINX
echo 1 >/etc/artica-postfix/settings/Daemons/EnableArticaFrontEndToApache
echo 0 >/etc/artica-postfix/settings/Daemons/EnableNginx
echo 1 >/etc/artica-postfix/settings/Daemons/UpgradeTov10
echo 1 >/etc/artica-postfix/SQUID_APPLIANCE
echo 1 >/etc/artica-postfix/settings/Daemons/ProxyUseArticaDB
echo 1 >/etc/artica-postfix/settings/Daemons/StatsPerfsSquidAnswered
echo 1 >/etc/artica-postfix/settings/Daemons/CacheManagement2
echo 1 >/etc/artica-postfix/settings/Daemons/EnableOpenLDAP

Jalankan script instalasi:

/usr/share/artica-postfix/bin/artica-install --php-ini
/usr/share/artica-postfix/bin/artica-install --slapdconf
/bin/touch /etc/artica-postfix/artica-as-rebooted

Buat shortcut login:

/usr/sbin/groupadd winbindd_priv
/bin/mv /bin/login /bin/login.old
/bin/ln -s /usr/share/artica-postfix/logon.sh /bin/login
dpkg-divert --divert /bin/login.old /bin/login
/bin/chmod 777 /bin/login
/bin/chmod 777 /usr/share/artica-postfix/logon.sh

Konfigurasi Layanan Tambahan

Set beberapa parameter daemon dan service:

echo 1 >/etc/artica-postfix/settings/Daemons/EnableArticaInNGINX
echo 1 >/etc/artica-postfix/settings/Daemons/EnableArticaFrontEndToApache
/usr/share/artica-postfix/bin/artica-install --perl-addons-repos
/usr/share/artica-postfix/bin/artica-install -awstats-reconfigure
/usr/bin/nohup /bin/chown -R www-data:www-data /usr/share/artica-postfix

Eksekusi konfigurasi database, Lighttpd, Postgres, dan Squid:

php /usr/share/artica-postfix/exec.initslapd.php
php /usr/share/artica-postfix/exec.lighttpd.php --nginx-build
php /usr/share/artica-postfix/exec.postgres.php --install
php /usr/share/artica-postfix/exec.squid-db.php --init

Restart semua service:

/etc/init.d/artica-webconsole restart
/etc/init.d/artica-framework restart
/etc/init.d/artica-postgres restart

Reboot server:

reboot

Akses Artica Proxy

Setelah reboot, akses Artica Proxy melalui browser:

https://server-anda:9000

Dari sini, Anda dapat mengelola dan memonitor trafik internet di jaringan internal.

Kesimpulan

Dengan mengikuti langkah-langkah di atas, Artica Proxy dapat diinstal di Debian 8.0 dengan benar. Sistem ini memungkinkan:

• pengaturan proxy
• kontrol lalu lintas internet
• monitoring pengguna
• filter konten
• meningkatkan keamanan jaringan