PRIVOXY on OpenWRT

Privoxy adalah web proxy dan fungsinya sama juga dengan proxomitron,ispce
disini saya akan coba menjelaskan cara instalasinya di openWRT

1.download paket privoxy+depend
2.extract file tersebut dan buka winscp
3.copykan file extract tersebut ke folder /tmp melalui winscp
4.buka putty dan login ke router
5.cd /tmp
6.opkg install *.ipk
7.tunggu sampai selesai dan instalasi privoxy selesai

berikut configurasi privoxy:
1.masuk ke /etc/privoxy
2.edit file "matc-all.action"

{ \
+add-header{host:host_gratisan} \  ##Tambahkan baris tersebut
+change-x-forwarded-for{block} \
+client-header-tagger{css-requests} \
+client-header-tagger{image-requests} \
+hide-from-header{block} \
+set-image-blocker{pattern} \
}
/ # Match all URLs

3.save
4.edit file "config"

confdir /etc/privoxy
logdir /var/log
filterfile default.filter
logfile privoxy
actionsfile match-all.action # Actions that are applied to all sites and maybe overruled later on.
actionsfile default.action   # Main actions file
#actionsfile user.action      # User customizations
listen-address  192.168.1.1:8118 ##ubah seperti ini sesuai gateway router
toggle  1
enable-remote-toggle  1
enable-remote-http-toggle  0
enable-edit-actions 1
enforce-blocks 0
buffer-limit 4096
forward / 123.123.123.123:8080  ##tambahkan barisan ini untuk proxy gratisan anda
forwarded-connect-retries  0
accept-intercepted-requests 0
allow-cgi-request-crunching 0
split-large-forms 0
keep-alive-timeout 300
socket-timeout 300
permit-access  192.168.1.0/24
debug   1    # show each GET/POST/CONNECT request
debug   4096 # Startup banner and warnings
debug   8192 # Errors - *we highly recommended enabling this*
#admin-address privoxy-admin@example.com
#proxy-info-url http://www.example.com/proxy-service.html

5.save
6.enablekan privoxy pada saat boot router "/etc/init.d/privoxy enable"
7.lalu jalankan privoxy "/etc/init.d/privoxy start" atau reboot saja

koneksi:
1.set di client dengan proxy192.168.1.1:8118
2.jika menggunakan openvpn sama juga caranya seperti step 1 berikut log nya:

Fri Mar 23 12:44:53 2012 NMDVPN 2.1.4 i686-pc-mingw32 [SSL] [LZO2] [PKCS11] built on Apr 25 2011
Fri Mar 23 12:44:53 2012 NOTE: NMDVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Fri Mar 23 12:44:53 2012 LZO compression initialized
Fri Mar 23 12:44:53 2012 Control Channel MTU parms [ L:1560 D:140 EF:40 EB:0 ET:0 EL:0 ]
Fri Mar 23 12:44:53 2012 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri Mar 23 12:44:53 2012 Data Channel MTU parms [ L:1560 D:1450 EF:60 EB:135 ET:0 EL:0 AF:3/1 ]
Fri Mar 23 12:44:53 2012 Local Options hash (VER=V4): '958c5492'
Fri Mar 23 12:44:53 2012 Expected Remote Options hash (VER=V4): '79ef4284'
Fri Mar 23 12:44:53 2012 Attempting to establish TCP connection with 192.168.1.1:8118
Fri Mar 23 12:44:53 2012 TCP connection established with 192.168.1.1:8118
Fri Mar 23 12:44:53 2012 Send to HTTP proxy: 'CONNECT freetun.sxx.com:443 HTTP/1.0'
Fri Mar 23 12:44:54 2012 HTTP proxy returned: 'HTTP/1.1 200 Connection Established'
Fri Mar 23 12:44:56 2012 TCPv4_CLIENT link local: [undef]
Fri Mar 23 12:44:56 2012 TCPv4_CLIENT link remote: 192.168.1.1:8118
Fri Mar 23 12:44:57 2012 TLS: Initial packet from 192.168.1.1:8118, sid=1b883585 6258e362
Fri Mar 23 12:44:57 2012 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Mar 23 12:45:08 2012 VERIFY OK: depth=1, /C=AQ/ST=Antarctica/L=Mount_Vinson/O=S6N/CN=S6N_CA/emailAddress=root@s6n.org
Fri Mar 23 12:45:08 2012 VERIFY OK: nsCertType=SERVER
Fri Mar 23 12:45:08 2012 VERIFY OK: depth=0, /C=AQ/ST=Antarctica/L=Mount_Vinson/O=S6N/CN=free.tunsrv.s6n.net/emailAddress=root@s6n.org
Fri Mar 23 12:45:15 2012 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Mar 23 12:45:15 2012 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 23 12:45:15 2012 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Fri Mar 23 12:45:15 2012 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Mar 23 12:45:15 2012 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Fri Mar 23 12:45:15 2012 [free.tunsrv.s6n.net] Peer Connection Initiated with 192.168.1.1:8118
Fri Mar 23 12:45:18 2012 SENT CONTROL [free.tunsrv.s6n.net]: 'PUSH_REQUEST' (status=1)
Fri Mar 23 12:45:20 2012 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 10.10.10.10,dhcp-option DNS 8.8.8.8,route 10.17.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.17.1.130 10.17.1.129'
Fri Mar 23 12:45:20 2012 OPTIONS IMPORT: timers and/or timeouts modified
Fri Mar 23 12:45:20 2012 OPTIONS IMPORT: --ifconfig/up options modified
Fri Mar 23 12:45:20 2012 OPTIONS IMPORT: route options modified
Fri Mar 23 12:45:20 2012 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Fri Mar 23 12:45:20 2012 ROUTE default_gateway=192.168.1.1
Fri Mar 23 12:45:20 2012 TAP-WIN32 device [Local Area Connection 3] opened: \\.\Global\{6D9AFED7-46BB-4858-8B08-4793F5BCCD95}.tap
Fri Mar 23 12:45:20 2012 TAP-Win32 Driver Version 9.6
Fri Mar 23 12:45:20 2012 TAP-Win32 MTU=1500
Fri Mar 23 12:45:20 2012 Notified TAP-Win32 driver to set a DHCP IP/netmask of 10.17.1.130/255.255.255.252 on interface {6D9AFED7-46BB-4858-8B08-4793F5BCCD95} [DHCP-serv: 10.17.1.129, lease-time: 31536000]
Fri Mar 23 12:45:20 2012 Successful ARP Flush on interface [22] {6D9AFED7-46BB-4858-8B08-4793F5BCCD95}
Fri Mar 23 12:45:25 2012 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri Mar 23 12:45:25 2012 NMDVPN ROUTE: omitted no-op route: 192.168.1.1/255.255.255.255 -> 192.168.1.1
Fri Mar 23 12:45:25 2012 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.17.1.129
Fri Mar 23 12:45:25 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 23 12:45:25 2012 Route addition via IPAPI succeeded [adaptive]
Fri Mar 23 12:45:25 2012 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.17.1.129
Fri Mar 23 12:45:25 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 23 12:45:25 2012 Route addition via IPAPI succeeded [adaptive]
Fri Mar 23 12:45:25 2012 C:\WINDOWS\system32\route.exe ADD 10.17.0.1 MASK 255.255.255.255 10.17.1.129
Fri Mar 23 12:45:25 2012 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri Mar 23 12:45:25 2012 Route addition via IPAPI succeeded [adaptive]
Fri Mar 23 12:45:25 2012 Initialization Sequence Completed

selamat berexperiment

MAI