Buku Digital v1.0: Debian 9

============== installasi dan konfigurasi debian 9.13.0 pada virtualbox ==============

install

English

other

Asia

Indonesia

United States

American English

Continue

Configure Network Manually

IP address : 192.168.40.1

Netmask : 255.255.255.0

Gateway : 192.168.40.1 (penambahan angka 1 di belakang)

Name server addresses : 192.168.40.1

Hostname : server

Domain Name : rija.net

root password :1

Re-enter password : 1

full name : tkj

username : tkj

password user : 1

Re-enter password user :1

Time zone : Central

Partitioning method : Guided - use entire disk

Select disk partition : ST Merek SSD / HDD (langsung enter)

Partitioning scheme : All files in one partition

Finish partitioning and write changes to disk (langsung enter)

Write change to disk : yes

Scan another CD or DVD ? No

use a network mirror ? No

Participate in the package usage survey : No

"dengan cara menekan spasi hilangkan tanda bintang pada”

== Debian desktop environtment dan print server ==

Setelah tanda bintang hilang Tekan tab untuk : continue

Install group boot loader : yes

Device boot for installation : /dev/sda

Installation complete : Continue

==============================installai debian 9.13.0 selesai=============================

===============================Konfigurasi debian 9.13.0================================

server login : root

password : 1

===============================

server login : tkj

password : 1

password : 1 (password root)

===============================

ip address (melihat nama interface apakah (eth0 pada debian 8 ke bawah)

atau pada debian 9 ke atas ( enp0s3 / VBOX ) atau (ens33 / VMWARE )

pico /etc/network/interfaces

“SAVE dengan cara tekan CTRL + X + Y + Enter”

/etc/init.d/networking restart

jika restart failed maka rubah allow-hotplug menjadi auto atau sebalik nya

Cek ip dan interface : ifconfig (debian 5-8) , ip address (debian 9 ke atas)

ping 192.168.40.1

CTRL + C (UNTUK MENGHENTIKAN TAMPILAN PING)

DNS (DOMAIN NAME SYSTEM) SERVER

Masukan #DVD2

apt-cdrom add

apt-get install bind9

pico /etc/bind/named.conf.local

“SAVE dengan cara tekan CTRL + X + Y + Enter”

cp /etc/bind/db.local /var/cache/bind/rija.net

cp /etc/bind/db.local /var/cache/bind/smk.net

cp /etc/bind/db.127 /var/cache/bind/reverse

pico /var/cache/bind/rija.net

"SAVE dengan cara tekan CTRL + X + Y + Enter”

pico /var/cache/bind/smk.net

“SAVE dengan cara tekan CTRL + X + Y + Enter”

pico /var/cache/bind/reverse

“SAVE dengan cara tekan CTRL + X + Y + Enter”

pico /etc/resolv.conf

“SAVE dengan cara tekan CTRL + X + Y + Enter”

/etc/init.d/bind9 restart

apt-get install dnsutils (aplikasi nslookup)

nslookup rija.net

ping rija.net ping www.rija.net ping www

WEB SERVER (SERVER WEBSITE)

apt-get install apache2 links

links rija.net atau links mail.rija.net (menguji service web server / e-mail server dengan perintah links pada server debian)

CTRL + C (UNTUK MENUTUP TAMPILAN WEB)

pico /var/www/html/index.html

rubah isi website rija.net seperti gambar di atas

mkdir /var/www/html/files

mkdir /var/www/html/smk

mkdir /var/www/html/internal

pico /var/www/html/files/document.txt

pico /var/www/html/smk/index.html

isi text pada web smk.net : Selamat Datang di website SMK PGRI Muara Komam

(merubah isi tampilan website smk.net)

pico /var/www/html/internal/index.html

isi text pada web smk.net : Selamat Datang di website INTERNAL RIJA.NET

(merubah isi tampilan website internal.rija.net)

openssl req -new -x509 -days 365 -nodes -out /etc/apache2/apache.pem -keyout /etc/apache2/apache.pem

Country Name (2 letter code) [AU]: ID

State or Province Name (full name) [Some-State]: East Kalimantan

Locality Name (eg, city) []: Samarinda

Organization Name (eg, company; recommended) []: TKJ-Komam

Organizational Unit Name (eg, section) []: IT

Common Name (eg, YOUR name) []: rija.net

Email Address []: rija@rija.net

a2enmod ssl

pico /etc/apache2/ports.conf

ISI VIRTUALHOST KHUSUS WEB SERVER UNTUK EMAIL SERVER TERPISAH

“SAVE dengan cara tekan CTRL + X + Y + Enter”

/etc/init.d/apache2 restart

FTP (FILE TRANSFER PROTOCOL) SERVER

apt-get install proftpd

Secara default ftp ini setelah di install kemudian di restart akan otomatis berfungsi

namun dengan mewajibkan login user, jika ingin mengkonfigurasi ftp server tanpa login user maka konfigurasinya di sini

pico /etc/proftpd/proftpd.conf

/etc/init.d/proftpd restart

SSH (SECURE SHELL) SERVER

apt-get install ssh

pico /etc/ssh/sshd_config

PermitRootLogin prohibit-password

Menjadi berikut ini

PermitRootLogin yes

“SAVE dengan cara tekan CTRL + X + Y + Enter”

/etc/init.d/ssh restart

DHCP (DYNAMIC HOST CONFIGURATION PROTOCOL) SERVER

apt-get install isc-dhcp-server

pico /etc/default/isc-dhcp-server

pico /etc/dhcp/dhcpd.conf

Hilangkan tanda pagarnya dari subnet sampai ketanda tutup kurung kurawal bawah.

tampilan Sesudah di edit

“SAVE dengan cara tekan CTRL + X + Y + Enter”

/etc/init.d/isc-dhcp-server restart

NTP (NETWORK TIME PROTOCOL) SERVER

apt-get install ntp ntpdate

pico /etc/ntp.conf

server 127.127.1.0 ( ketik manual )

fudge 127.127.1.0 stratum 1 ( ketik manual )

#restrict 192.168.123.0 mask 255.255.255.0 notrust (hapus pagar dan edit menjadi)

/etc/init.d/ntp restart

ntpq -p (pengujian di server)

dan

Pengujian di klien windows 7 disabled dan enabled Lancard non fisik nya (ethernet adapter) dan isikan ip server kemuadian klik update now

SAMBA SERVER (FILE SERVICE / SHARING FOLDER / PRINT SERVICE)

apt-get install samba

mkdir /data

mkdir /data/manager

mkdir /data/guest

chmod 777 /data/manager

chmod 755 /data/guest

useradd pengelola

smbpasswd –a pengelola

psswd : akses

pico /etc/samba/smb.conf

/etc/init.d/samba restart

MAIL DAN WEBMAIL SERVER

apt-get install postfix dovecot-imapd dovecot-pop3d

General type of mail configuration : internet site

Sytem mail name : rija.net

pico /etc/postfix/main.cf

home_mailbox = Maildir/ (ketik manual)

maildirmake.dovecot /etc/skel/Maildir

pico /etc/dovecot/conf.d/10-mail.conf

mail_location = maildir:~/Maildir (hapus tagar)

#mail_location = mbox:~/mail:INBOX=/var/mail/%u (penambahan tagar)

“SAVE dengan cara tekan CTRL + X + Y + Enter”

PHP7.0 ( MYSQL / DATABASE SERVER )

apt-get install php mysql-server phpmyadmin

Tanda bintang : apache2

Yes

Configure database for phpmyadmin : yes

pico /etc/php/7.0/apache2/php.ini

upload_max_filesize = 8MB

mysql -u root -p mysql

UPDATE user SET plugin=’ ’ WHERE user=’root’;

flush privileges;

exit

mysql_secure_installation (ketik manual pada root server#)

Enter Current password (langsung enter)

Y 4X

ketik pada browser klien : rija.net/phpmyadmin

root / 1

Membuat user account untuk roundcube

User account - add user account

User name : use text field : roundcube

Hostname : local : localhost

Password : use text field : 1

Re-type : 1

Centang : create database

Centang : grand all

Centang : check all

apt-get install roundcube #DVD3

apt -f install

apt-get install roundcube (install 1x lagi)

Configure database for roundcube : yes

pico /etc/roundcube/config.inc.php

$config[‘default_host’] = ‘rija.net’ ;

(jika tidak di konfigurasi maka login user email harus memasukan server : rija.net) tapi email tetap berhasil di kirim

pico /etc/apache2/sites-available/000.default.conf

/etc/init.d/apache2 restart

/etc/init.d/postfix restart

/etc/init.d/dovecot restart

adduser 2x

NAT MASQURADE DI DEBIAN (SHARING INTERNET KE KLIEN)

pico /etc/sysctl.conf

net.ipv4.ip_forward=1 (hapus tagar)

iptables -t nat -A POSTROUTING -s 192.168.40.0/24 -j MASQUERADE

iptables-save > /etc/iptables

pico /etc/network/interfaces

pre-up iptables-restore < /etc/iptables

PROXY SERVER

apt-get install squid3 #DVD2

apt --fix-broken install

apt-get install squid3

pico /etc/squid/squid.conf

Tambahkan di baris paling atas

http_port 3128 transparent

cache_mem 16 MB

cache_mgr tkj@rija.net

visible_hostname tkj@rija.net

acl url dstdomain "/etc/squid/url"

http_access deny url

acl blockkey url_regex -i "/etc/squid/blockkey"

http_access deny blockkey

acl blockdownload urlpath_regex \.mp3$ \.mp4$

http_access deny blockdownload

acl lan src 192.168.40.0/24

http_access allow lan

http_access allow all

“SAVE dengan cara tekan CTRL + X + Y + Enter”

pico /etc/squid/url

files.rija.net

pico /etc/squid/blockkey

porn

xnxx

squid -z

iptables -t nat -A PREROUTING -s 192.168.40.0/24 -p tcp --dport 80 -j REDIRECT --to-ports 3128

iptables-save > /etc/iptables

Pada debian 9 tidak perlu setting proxy manual di browser firefox versi 52

192.168.40.1 / 3128

JIKA TERJADI KESALAHAN DNS SERVER YANG BERAKIBAT AKSES DOMAIN WEBSERVER TIDAK TEPAT PADA KLIEN, DAN KESALAHAN KONFIGURASI TELAH DI PERBAIKI TAPI DI KLIEN MASIH BELUM BERHASIL MAKA RESTART KLIEN NYA

Album Foto

Debian 9