{"id":62,"date":"2011-02-09T12:55:16","date_gmt":"2011-02-09T12:55:16","guid":{"rendered":"http:\/\/gigihfordanama.wordpress.com\/?p=62"},"modified":"2012-08-08T00:15:35","modified_gmt":"2012-08-08T00:15:35","slug":"62","status":"publish","type":"post","link":"https:\/\/dosen.unila.ac.id\/gigih\/2011\/02\/09\/62\/","title":{"rendered":"Packet Shaping – Packet Filter di FreeBSD"},"content":{"rendered":"

Original Link :\u00a0 http:\/\/unilanet.unila.ac.id\/~gigih\/index.php?option=com_content&task=view&id=37&Itemid=34<\/a><\/p>\n

Banyak yang tanya ke Gue gimana sih cara mengatur bandwidth, kalo mesin servernya Pake FreeBSD<\/p>\n

di FreeBSD dikenal ALTQ yang berfungsi sebagai traffick shapper untuk membatasi bandwith client. Sebelum versi FreeBSD 5.3 keluar service NAT,Firewall,ALTQ\u00a0\u00a0 diinstall terpisah,\u00a0 Setelah generasi 5.xx keluar, muncul teknologi baru di FREEBSD yaitu PF (Packet Filter).<\/p>\n

Teknologi ini merupakan penggabungan dari service NAT,Firewall,ALTQ dalam satu kesatuan yang utuh.<\/p>\n

Ok lansung aja deh kita eksperiment, otre…….<\/p>\n

Asumsi saya, Mesin yang akan kita konfigurasi sudah terhubung dengan jaringan bisa ping-pingan dan bisa resolv DNS. Jika belom baca lagi deh manual gua tentang<\/p>\n

pemberian “identitas” pada FreeBSD<\/p>\n

pastikan bahwa\u00a0\u00a0 statement\u00a0 pf_enable=”YES” telah dimasukkan di \/etc\/rc.conf<\/p>\n

Jika udah langsung aja buak editor Vi kesayangan anda<\/p>\n

Dibawah ini merupakan contoh\u00a0 konfigurasi Traffick shapping dengan Menggunakan PF<\/p>\n

proxy# vi \/etc\/pf.conf<\/p>\n\n\n\n
############################################################
\n# Basic (Working) RULE For BSD TELKOM GW
\n# NO IMPROVEMENT YET
\n# Update 07-12-2005
\n# Gigih Forda Nama :
\n############################################################ <\/p>\n

eIF\u00a0 = “rl0”\u00a0 ## Menuju ke TELKOM
\niIF\u00a0 = “em0” ## Network 1
\ndIF\u00a0 = “re0”\u00a0 ## Ke Inherent Dikti<\/p>\n

altq on $iIF hfsc bandwidth 40Mb queue { local, internet }
\nqueue internet bandwidth 4Mb { qPROXY, qGIGIH, qGATEDIAL, qWIFI, qMGT, qAKT, qBBS, qSCSC }<\/p>\n

queue qPROXY bandwidth 2744Kb priority 5 hfsc(realtime 2744Kb
\nupperlimit 2744Kb linkshare 60% red)
\nqueue qGATEDIAL bandwidth 400Kb priority 4 hfsc(realtime 400Kb
\nupperlimit 400Kb linkshare 10% red)
\nqueue qMGT bandwidth 64Kb priority 4 hfsc(realtime 66Kb
\nupperlimit 66Kb linkshare 5% red)
\nqueue qAKT bandwidth 64Kb priority 4 hfsc(realtime 66Kb
\nupperlimit 66Kb linkshare 5% red)
\nqueue qSCSC bandwidth 64Kb priority 4 hfsc(realtime 64Kb
\nupperlimit 64Kb linkshare 1% red)
\nqueue qWIFI bandwidth 256Kb priority 4 hfsc(realtime 256Kb
\nupperlimit 256Kb linkshare 3% red)
\nqueue qGIGIH bandwidth 64Kb priority 4 hfsc(realtime 64Kb
\nupperlimit 64Kb linkshare 1% red)
\nqueue qBBS bandwidth 128Kb priority 4 hfsc(realtime 256Kb
\nupperlimit 1500Kb linkshare 5% red)
\nqueue local bandwidth 90% hfsc(default)<\/p>\n

nat on $dIF from 192.168.1.1 to 152.118.0.0\/16 -> 203.88.66.49
\nnat on $dIF from 192.168.1.204 to 167.205.0.0\/16 ->\u00a0 167.205.143.5<\/p>\n

binat on $dIF from 192.168.10.252 to any -> 167.205.143.9<\/p>\n

##### 2). Rules KE UI\u00a0\u00a0 #########
\nnat\u00a0\u00a0\u00a0\u00a0\u00a0 on $dIF from {192.168.9.9,192.168.113.0\/24}\u00a0\u00a0 to\u00a0 152.118.0.0\/16 -> 167.205.143.10
\n##### 3). RULES\u00a0 KE UGM\u00a0\u00a0 #######
\nnat\u00a0\u00a0\u00a0\u00a0\u00a0 on $dIF from { 192.168.90.0\/24,192.168.112.0\/24,192.168.113.0\/24}\u00a0\u00a0 to\u00a0 222.124.0.0\/16 -> 167.205.143.10<\/p>\n

## Transparent PROXY SQUID
\nrdr on $iIF inet proto tcp from 192.168.1.0\/24 to !192.168.0.0\/16 port www -> 127.0.0.1 port 3128<\/p>\n

# from lan to internet
\npass in\u00a0 log on $iIF inet from any to any
\npass out log on $iIF inet from any to any<\/p>\n

pass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet from 192.168.1.0\/24 to any keep state queue qBBS
\npass\u00a0 in\u00a0 log on $iIF inet from 192.168.1.0\/24 to
\n{ $iIF, 172.16.1.0\/27, 203.88.66.32\/27, 202.72.204.32\/27, 202.174.156.128\/27 } keep state
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from 192.168.1.0\/24 to { 127.0.0.1, $iIF:0 } port 3128 keep state queue qBBS
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from 192.168.1.215\u00a0 to any keep state queue qGATEDIAL
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from {192.168.1.235,192.168.9.13,192.168.9.0\/24}\u00a0 to any keep state queue qWIFI
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from { 192.168.112.15, 192.168.112.16 } to any keep state queue qMGT
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from { 192.168.113.8 } to any keep state queue qAKT
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from 192.168.1.115\u00a0\u00a0\u00a0 to $iIF:0 port 3128 keep state queue qPROXY
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from 192.168.30.2\u00a0\u00a0 to any keep state queue qSCSC
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from 192.168.1.204 to any\u00a0 keep state queue qGIGIH
\npass\u00a0 in\u00a0\u00a0\u00a0\u00a0\u00a0 on $iIF inet proto tcp from 192.168.0.0\/16 to $iIF:0 port 8080 keep state queue qSQAUTH<\/p>\n

pass\u00a0 out log on $iIF inet proto tcp from $iIF to any keep state flags S\/SA<\/p>\n

pass quick on lo0 all
\n#pass in all
\npass out all<\/p>\n

pass quick on $eIF from any to any
\npass quick on $dIF from any to any<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Yang mesti diingat, urut-urutan dari PF ini harus benar<\/p>\n