MAKALAH FIREWALL MENYARING - MEMBATASI - MENOLAK
Penyusun: SAIFUL FAIS
1412120152
2012_F
APRILIA DWI S
1412120111
2012_F
NUR AMALIY AMALIYA A
1412120112 1412120112
2012_F
PROGRAM STUDI TEKNIK INFORMATIKA FAKULTAS FAKULTAS TEKNI TE KNIK K UNIVERSITAS PGRI RONGGOLAWE TUBAN 2015
(0)
BAB I PENDAHULUAN 1.1.
Latar B!a"a#$
Firewall Firewall !a"asa !a"asa In#$nesia: In#$nesia: %e&!$' a(i a%au #in#in) a(i* a#ala" sua%u sis%e& (eran)'a% (eran)'a% luna' yan) &en)i+in'an lalu lin%as ,arin)an yan) #ian))a( a&an un%u' !isa &elaluinya #an &en-e)a" lalu lin%as ,arin)an yan) #ian))a( %i#a' a&an. U&u&nya/ se!ua" %e&!$'a(i #i%era('an #i%era('an #ala& se!ua" &esin %er#e#i'asi/ %er#e#i'asi/ yan) !er,alan !er,alan (a#a (in%u )er!an) )er!an) )a%eway* )a%eway* an%ara ,arin)an l$'al #en)an ,arin)an In%erne%. Firewall #i)una'an un%u' &e&!a%asi a%au &en)$n%r$l a'ses %er"a#a( sia(a sa,a yan) &e&ili'i a'ses %er"a#a( ,arin)an (ri!a#i #ari (i"a' luar. Saa% ini/ is%ila" irewall &en,a#i is%ila" la+i& yan) &eru,u' (a#a sis%e& yan) &en)a%ur '$&uni'asi an%ar #ua &a-a& ,arin)an yan) !er!e#a. Men)in)a% saa% ini !anya' (erusa"aan yan) &e&ili'i a'ses 'e In%erne% #an ,u)a %en%u sa,a ,arin)an !er!a#an "u'u& #i #ala&nya/ &a'a (erlin#un)an %er"a#a( (eran)'a% #i)i%al (erusa"aan %erse!u% #ari seran)an (ara (ere%as/ (e&a%a&a%a/ a%au(un (en-uri #a%a lainnya/ &en,a#i 'enya%aan.
1.2.
R%&%' &%'a# Ma'a!a(
Dala& Dala& &ela'u &ela'u'an 'an (e&!a" (e&!a"asan asan &en#ala &en#ala& & %en%an %en%an) ) irewal irewall/ l/ #i!u%u #i!u%u"'a "'an n uraian uraian #ari #ari ,awa!an un%u' (er%anyaan #an (ernya%aan !eri'u% : 1. 2. . 4. 5. 8.
a)ai& a)ai&ana ana'a" 'a" (en)er (en)er%ian %ian irewal irewall3 l3 Firewall Firewall #i)una'an #i)una'an un%u' un%u' &enyarin)/ &enyarin)/ &e&!a%asi &e&!a%asi #an &en$la' &en$la'.. a)ai&ana a)ai&ana &a'asu#ny &a'asu#nya3 a3 elas'a elas'an n '$nse( '$nse( #ari #ari irew irewall all 6 7ara &en)'$ &en)'$ni)ur ni)urasi asi irewall irewall #an #an !a)ai&an !a)ai&anaa '$ni)ur '$ni)urasiny asinya3 a3 Se!u Se!u%' %'an an %i(e %i(e% %i( i(ee irew irewall all 6 a)ai& a)ai&ana ana'a" 'a" -ara -ara (e&a (e&asan) san)an an irewa irewall ll 3
BAB II
(1)
PEN)ELASAN 2.1.
P#$rt*a# F*r+a!!
Firewall a#ala" (eran)'a% yan) #i)una'an un%u' &en)$n%r$l a'ses %er"a#a( sia(a(un yan) &e&ili'i a'ses %er"a#a( ,arin)an (ri9a% #ari (i"a' luar. Saa% ini/ (en)er%ian irewall #ia"a&i se!a)ai se!ua" is%ila" )eneri' yan) &eru,u' (a#a un)si irewall se!a)ai sis%e& (en)a%ur '$&uni'asi an%ar #ua ,arin)an yan) !erlainan. Men)in)a% se'aran) ini !anya' (erusa"aan yan) &e&ili'i a'ses 'e In%erne% &a'a (erlin#un)an %er"a#a( ase% #i)i%al (erusa"aan %erse!u% #ari seran)an (ara "a-'er/ (ela'u s(i$nase/ a%au(un (en-uri #a%a lainnya/ se"in))a un)si irewall &en,a#i "al yan) san)a% esensial. Deinisi Firewall a#ala" se!ua" sis%e& yan) #i#esain un%u' &en-e)a" a'ses yan) %i#a' sa" 'e a%au #ari ,arin)an (ri!a#i Pri9a% Ne%w$r'*. Firewall #a(a% #ii&(le&en%asi'an #ala& (eran)'a% 'eras #an (eran)'a% luna'/ a%au '$&!inasi 'e#uanya. Firewall serin) #i)una'an un%u' &en-e)a" (en))una In%erne% yan) %i#a' sa"en) &en)a'ses ,arin)an (ri!a#i yan) %er"u!un) 'e In%erne%/ %eru%a&a in%rane%1. Se&ua (esan &asu' a%au 'eluar #ari in%rane% &elewa%i irewall/ ilewall !er%in#a' se!a)ai (en)awas -$n%r$ller* se%ia( (esan #an &e&!l$' ,i'a %i#a' &e&enu"i 'ri%eria 'ea&anan %er%en%u. &enuru% Pen)er%ian Firewall yan) #i&a'su#'an #ia%as/ irewall a#ala" se!ua" sis%e& a%au (eran)'a% yan) &e&!eri $%$risasi (a#a lalu lin%as ,arin)an '$&(u%er yan) #ian))a(nya a&an un%u' &elaluinya #an &ela'u'an (en-e)a"an %er"a#a(a ,arin)an yan) #ian))a( %i#a' a&an. Firewall #a(a% !eru(a (eran)'a% luna' (r$)ra& '$&(u%er a%au a(li'asi* a%au (eran)'a% 'eras (erala%an '"usus un%u' &en,alan'an (r$)ra& irewall* (eran)'a% yan) &enyarin) lalu lin%as ,arin)an an%ara ,arin)an. Perlin#un)an #en)n Firewall a#ala" &u%la' #i(erlu'an un%u' '$&(u%asi (eran)'a% se(er%i '$&(u%er yan) #ia'%i'an #en)an '$ne'si In%erne%. Menin)'a%'an %in)'a% 'ea&anan ,arin)an '$&(u%er #en)an &e&!eri'an in$r&asi rin-i %en%an) ($la($la lalu lin%as ,arin)an. Peran)'a% ini (en%in) #an san)a% #i(erlu'an 'arena !er%in#a' se!a)ai )er!an) 'ea&anan an%ara ,arin) '$&(u%er in%ernal #an ,arin)an '$&(u%er e's%ernal. Dala& '$&(u%asi/ Firewall a#ala" se!ua" sis%e& 'ea&anan ,arin)an yan) &e&an%au #an &en)$n%r$l lalu lin%as ,arin)an &asu' #an 'eluar !er#asar'an a%uran 'ea&anan yan) %ela" #i%en%u'an. Firewall !iasanya &ene%a('an (en)"alan) an%ara #i(er-aya/ ,arin)an in%ernal yan) a&an #an ,arin)an lain #i luar/ se(er%i In%erne%/ yan) #iasu&si'an %i#a' a&an a%au %er(er-aya. Firewall serin) #i'a%e)$ri'an se!a)ai irewall ,arin)an a%au irewall !er!asis "$s%. Firewall ,arin)an a#ala" ala% (eran)'a% luna' yan) !er,alan (a#a %u,uan u&u& (eran)'a% 'eras a%au (erala%an '$&(u%er irewall !er!asis "ar#ware yan) &enyarin) lalu lin%as an%ara
1 ;ransla%e #ari "%%(s:<
(2)
#ua a%au le!i" ,arin)an. Firewall !er!asis "$s% &enye#ia'an la(isan (eran)'a% luna' (a#a sa%u "$s% yan) &en)$n%r$l lalu lin%as ,arin)an &asu' #an 'eluar #ari &esin %un))al. R$u%er yan) lulus #a%a an%ara ,arin)an &en)an#un) '$&($nen irewall #an serin) #a(a% &ela'u'an un)si r$u%in) #asar ,u)a/ (erala%an Firewall &un)'in ,u)a &enawar'an un)si lain 'e ,arin)an in%ernal &ere'a &elin#un)i se(er%i !er%in#a' se!a)ai D=7P a%au ser9er >PN un%u' ,arin)an i%u.2 Dala& ,arin)an '$&(u%er/ irewall a#ala" sa%u se% un)si in$r&asi 'ea&anan yan) &un)'in a%au &un)'in %i#a' !era#a #i '$&(u%er isi' %un))al. arin)an !esar a%au 'esala"an %$leran &e&ili'i !e!era(a irewall. Fun)si &en)$n%r$l ,enis %er%en%u #ari a'ses 'e ,arin)an yan) #ilin#un)i. Palin) serin)/ 'i%a !er(i'ir %en%an) seran)an se!a)ai !erasal #ari In%erne%/ %e%a(i irewall &e&ili'i a(li'asi un%u' ,arin)an in%ernal #an %i#a' se&ua a'ses yan) a&an &elalui In%erne% !er,alan &elalui irewall.
2.2.
F%#$'* F*r+a!!
Se-ara &en#asar/ irewall #a(a% &ela'u'an "al"al !eri'u%: 1* Men)a%ur #an &en)$n%r$l lalu lin%as ,arin)an 2* Mela'u'an au%en%i'asi %er"a#a( a'ses * Melin#un)i su&!er #aya #ala& ,arin)an (ri9a% 4* Men-a%a% se&ua 'e,a#ian/ #an &ela($r'an 'e(a#a a#&inis%ra%$r 2.2.1. M#$at%r ,a# M#$#tr! La!% !*#ta' ar*#$a# Fun)si (er%a&a yan) #a(a% #ila'u'an $le" irewall a#ala" irewall "arus #a(a% &en)a%ur #an &en)$n%r$l lalu lin%as ,arin)an yan) #ii+in'an un%u' &en)a'ses ,arin)an (ri9a% a%au '$&(u%er yan) #ilin#un)i $le" irewall. Firewall &ela'u'an "al yan) #e&i'ian/ #en)an &ela'u'an ins(e'si %er"a#a( (a'e%(a'e% #an &e&an%au '$ne'si yan) se#an) #i!ua%/ lalu &ela'u'an (ena(isan il%erin)* %er"a#a( '$ne'si !er#asar'an "asil ins(e'si (a'e% #an '$ne'si %erse!u%. Pr'' *#'/"'* Pa"t
Ins(e'si (a'e% ?(a-'e% ins(e-%i$n* &eru(a'an (r$ses yan) #ila'u'an $le" irewall un%u' ?&en)"a#an)? #an &e&(r$ses #a%a #ala& se!ua" (a'e% un%u' &enen%u'an !a"wa (a'e% %erse!u% #ii+in'an a%au #i%$la'/ !er#asar'an 'e!i,a'an a'ses a--ess ($li-y* yan) #i%era('an $le" se$ran) a#&inis%ra%$r. Firewall/ se!elu& &enen%u'an 'e(u%usan a(a'a" "en#a' &en$la' a%au &eneri&a '$&uni'asi #ari luar/ ia "arus &ela'u'an ins(e'si %er"a#a( se%ia( (a'e% !ai' yan) &asu' a%au(un yan) 'eluar* #i se%ia( an%ar&u'a #an &e&!an#in)'annya #en)an #a%ar 2 ;ransla%e #ari : "%%(s:<
(3)
'e!i,a'an a'ses. Ins(e'si (a'e% #a(a% #ila'u'an #en)an &eli"a% ele&enele&en !eri'u%/ 'e%i'a &enen%u'an a(a'a" "en#a' &en$la' a%au &eneri&a '$&uni'asi: 1* 2* * 4* 5* 8*
Ala&a% IP #ari '$&(u%er su&!er P$r% su&!er (a#a '$&(u%er su&!er Ala&a% IP #ari '$&(u%er %u,uan P$r% %u,uan #a%a (a#a '$&(u%er %u,uan Pr$%$'$l IP In$r&asi "ea#er"ea#er yan) #isi&(an #ala& (a'e%
K#"'* ,a# Ka,aa# K#"'*
A)ar #ua "$s% ;7P
a&!ar 2.1 Ilus%rasi &en)enai (er-a'a(an an%ara #ua !ua" "$s%
@e#ua %u,uan %erse!u% #a(a% #i)una'an un%u' &enen%u'an 'ea#aan '$ne'si an%ara #ua "$s% %erse!u%/ se(er%i "alnya -ara &anusia !er-a'a(-a'a(. i'a A&ir !er%anya 'e(a#a A&ina" &en)enai sesua%u/ &a'a A&ina" a'an &eres($nsnya #en)an ,awa!an yan) sesuai #en)an (er%anyaan yan) #ia,u'an $le" A&irB Pa#a saa% A&ir &el$n%ar'an (er%anyaannya 'e(a#a A&ina"/ 'ea#aan (er-a'a(an %erse!u% a#ala" A&ir &enun))u res($ns #ari A&ina". @$&uni'asi #i ,arin)an ,u)a &en)i'u%i -ara yan) sa&a un%u' &e&an%au 'ea#aan (er-a'a(an '$&uni'asi yan) %er,a#i. Firewall #a(a% &e&an%au in$r&asi 'ea#aan '$ne'si un%u' &enen%u'an a(a'a" ia "en#a' &en)i+in'an lalu lin%as ,arin)an. U&u&nya "al ini #ila'u'an #en)an &e&eli"ara se!ua" %a!el 'ea#aan '$ne'si #ala& is%ila" irewall: s%a%e %a!le* yan) &e&an%au 'ea#aan se&ua '$&uni'asi yan) &elewa%i irewall. Den)an &e&an%au 'ea#aan '$ne'si ini/ irewall #a(a% &enen%u'an a(a'a" #a%a yan) &elewa%i irewall se#an) C#i%un))uC $le" "$s% yan) #i%u,u/ #an (4)
,i'a ya/ a'a &en)i+in'annya. i'a #a%a yan) &elewa%i irewall %i#a' -$-$' #en)an 'ea#aan '$ne'si yan) #i#einisi'an $le" %a!el 'ea#aan '$ne'si/ &a'a #a%a %erse!u% a'an #i%$la'. =al ini u&u&nya #ise!u% se!a)ai S%a%eul Ins(e-%i$n. Stat%! Pa"t I#'/t*#
@e%i'a se!ua" irewall &en))a!un)'an s%a%eul ins(e-%i$n #en)an (a-'e% ins(e-%i$n/ &a'a irewall %erse!u% #ina&a'an #en)an S%a%eul Pa-'e% Ins(e-%i$n SPI*. SPI &eru(a'an (r$ses ins(e'si (a'e% yan) %i#a' #ila'u'an #en)an &en))una'an s%ru'%ur (a'e% #an #a%a yan) %er'an#un) #ala& (a'e%/ %a(i ,u)a (a#a 'ea#aan a(a "$s%"$s% yan) salin) !er'$&uni'asi %erse!u% !era#a. SPI &en)i+in'an irewall un%u' &ela'u'an (ena(isan %i#a' "anya !er#asar'an isi (a'e% %erse!u%/ %a(i ,u)a !er#asar'an '$ne'si a%au 'ea#aan '$ne'si/ se"in))a #a(a% &en)a'i!a%'an irewall &e&ili'i 'e&a&(uan yan) le!i" le'si!el/ &u#a" #ia%ur/ #an &e&ili'i s'ala!ili%as #ala& "al (ena(isan yan) %in))i. Sala" sa%u 'eun))ulan #ari SPI #i!an#in)'an #en)an ins(e'si (a'e% !iasa a#ala" !a"wa 'e%i'a se!ua" '$ne'si %ela" #i'enali #an #ii+in'an %en%u sa,a se%ela" #ila'u'an ins(e'si*/ u&u&nya se!ua" 'e!i,a'an ($li-y* %i#a' #i!u%u"'an un%u' &en)i+in'an '$&uni'asi !alasan 'arena irewall %a"u res($ns a(a yan) #i"ara('an a'an #i%eri&a. =al ini &e&un)'in'an ins(e'si %er"a#a( #a%a #an (erin%a" yan) %er'an#un) #ala& se!ua" (a'e% #a%a un%u' &enen%u'an a(a'a" se!ua" '$ne'si #ii+in'an a%au %i#a'/ lalu irewall a'an se-ara $%$&a%is &e&an%au 'ea#aan (er-a'a(an #an se-ara #ina&is &en)i+in'an lalu lin%as yan) sesuai #en)an 'ea#aan. Ini &eru(a'an (enin)'a%an yan) -u'u( si)nii'an ,i'a #i!an#in)'an #en)an irewall #en)an ins(e'si (a'e% !iasa. A(ala)i/ (r$ses ini #iselesai'an %an(a a#anya 'e!u%u"an un%u' &en#einisi'an se!ua" 'e!i,a'an un%u' &en)i+in'an res($ns #an '$&uni'asi selan,u%nya. @e!anya'an irewall &$#ern %ela" &en#u'un) un)si ini. M!a"%"a# a%t#t*"a'* tr(a,a/ a"''
Fun)si un#a&en%al irewall yan) 'e#ua a#ala" irewall #a(a% &ela'u'an au%en%i'asi %er"a#a( a'ses. Pr$%$'$l ;7P
(5)
au%". Men))una'an au%" (en))una yan) &en-$!a un%u' &e&!ua% se!ua" '$ne'si a'an #i&in%a in(u% &en)enai na&a #an 'a%a 'un-inya se!elu& a'"irnya #ii+in'an $le" irewall. U&u&nya/ se%ela" '$ne'si #ii+in'an $le" 'e!i,a'an 'ea&anan #ala& irewall/ irewall (un %i#a' (erlu la)i &en)isi'an in(u% (assw$r# #an na&anya/ 'e-uali ,i'a '$ne'si %er(u%us #an (en))una &en-$!a &en)"u!un)'an #irinya 'e&!ali. 2. Me%$#e 'e#ua a#ala" #en)an &en))una'an ser%ii'a% #i)i%al #an 'un-i (u!li'. @eun))ulan &e%$#e ini #i!an#in)'an #en)an &e%$#e (er%a&a a#ala" (r$ses au%en%i'asi #a(a% %er,a#i %an(a in%er9ensi (en))una. Selain i%u/ &e%$#e ini le!i" -e(a% #ala& ran)'a &ela'u'an
(r$ses
au%en%i'asi.
Mes'i(un
#e&i'ian/
&e%$#e
ini
le!i"
ru&i%
i&(le&en%asinya 'arena &e&!u%u"'an !anya' '$&($nen se(er%i "alnya i&(le&en%asi inras%ru'%ur 'un-i (u!li'. . Me%$#e selan,u%nya a#ala" #en)an &en))una'an PreS"are# @ey PS@* a%au 'un-i yan) %ela" #i!eri%a"u 'e(a#a (en))una. i'a #i!an#in)'an #en)an ser%ii'a% #i)i%al/ PS@ le!i" &u#a" #ii&(lenen%asi'an 'arena le!i" se#er"ana/ %e%a(i PS@ ,u)a &en)i+in'an (r$ses au%en%i'asi %er,a#i %an(a in%er9ensi (en))una. Den)an &en))una'an PS@/ se%ia( "$s% a'an #i!eri'an se!ua" 'un-i yan) %ela" #i%en%u'an se!elu&nya yan) 'e&u#ian #i)una'an un%u' (r$ses au%en%i'asi. @ele&a"an &e%$#e ini a#ala" 'un-i PS@ ,aran) se'ali #i(er!arui #an !anya' $r)anisasi serin) se'ali &en))una'an 'un-i yan) sa&a un%u' &ela'u'an '$ne'si %er"a#a( "$s%"$s% yan) !era#a (a#a ,ara' ,au"/ se"in))a "al ini sa&a sa,a &erun%u"'an (r$ses au%en%i'asi. A)ar %er-a(ai se!ua" #era,a% 'ea&anan yan) %in))i/ u&u&nya !e!era(a $r)anisasi ,u)a &en))una'an )a!un)an an%ara &e%$#e PS@ #en)an au%" a%au PS@ #en)an ser%ii'a% #i)i%al. Den)an &en)i&(le&en%asi'an (r$ses au%en%i'asi/ irewall #a(a% &en,a&in !a"wa '$ne'si #a(a% #ii+in'an a%au %i#a'. Mes'i(un ,i'a (a'e% %ela" #ii+in'an #en)an &en))una'an ins(e'si (a'e% PI* a%au !er#asar'an 'ea#aan '$ne'si SPI*/ ,i'a "$s% %erse!u% %i#a' l$l$s (r$ses au%en%i'asi/ (a'e% %erse!u% a'an #i!uan).
2.2.2. M!*#,%#$* '%&r ,a3a ,a!a& ar*#$a# /r*4at
Sala" sa%u %u)as irewall a#ala" &elin#un)i su&!er #aya #ari an-a&an yan) &un)'in #a%an). Pr$%e'si ini #a(a% #i(er$le" #en)an &en))una'an !e!era(a (en)a%uran (era%uran a'ses a--ess -$n%r$l*/ (en))unaan SPI/ a((li-a%i$n (r$y/ a%au '$&!inasi #ari se&uanya un%u' &en)a&an'an "$s% yan) #ilin#un)i su(aya %i#a' #a(a% #ia'ses $le" "$s%"$s% yan) &en-uri)a'an a%au #ari lalu lin%as ,arin)an yan) &en-uri)a'an. Mes'i(un #e&i'ian/ irewall !u'an sa%usa%unya &e%$#e (r$%e'si %era&an %er"a#a( su&!er #aya/ #an &e&(er-aya'an (r$%e'si irewall #ari an-a&an se-ara e's'lusi a#ala" sala" sa%u 'esala"an a%al.
(6)
i'a se!ua" "$s% yan) &en,alan'an sis%e& $(erasi %er%en%u yan) &e&ili'i lu!an) 'ea&anan yan) !elu& #i%a&!al #i'$ne'si'an 'e In%erne%/ irewall &un)'in %i#a' #a(a% &en-e)a" #ie's(l$i%asinya "$s% %erse!u% $le" "$s%"$s% lainnya/ '"ususnya ,i'a e(l$i% %erse!u% &en))una'an lalu lin%as yan) $le" irewall %ela" #ii+in'an #ala& '$ni)urasinya*. Se!a)ai -$n%$"/ ,i'a se!ua" (a-'e%ins(e-%i$n irewall &en)i+in'an lalu lin%as =;;P 'e se!ua" we! ser9er yan) &en,alan'an se!ua" layanan we! yan) &e&ili'i lu!an) 'ea&anan yan) !elu& #i%a&!al/ &a'a se$ran) (en))una yan) Cisen)C #a(a% sa,a &e&!ua% e(l$i% un%u' &erun%u"'an we! ser9er %erse!u% 'arena &e&an) we! ser9er yan) !ersan)'u%an &e&ili'i lu!an) 'ea&anan yan) !elu& #i%a&!al. Dala& -$n%$" ini/ we! ser9er %erse!u% a'"irnya &en)a'i!a%'an (r$%e'si yan) #i%awar'an $le" irewall &en,a#i %i#a' !er)una. =al ini #ise!a!'an $le" irewall %i#a' #a(a% &e&!e#a'an an%ara reEues% =;;P yan) &en-uri)a'an a%au %i#a'. A(ala)i/ ,i'a irewall yan) #i)una'an !u'an a((li-a%i$n (r$y. le" 'arena i%ula"/ su&!er #aya yan) #ilin#un)i "arusla" #i(eli"ara #en)an &ela'u'an (ena&!alan %er"a#a( lu!an)lu!an) 'ea&anan/ selain %en%unya #ilin#un)i $le" irewall.
2..
K#'/ F*r+a!!
Firewall a#ala" sa%u (eran)'a% s$%ware #an "ar#ware yan) !er%u)as &enyarin) (a'e% (a'e% yan) lewa% sesuai #en)an a%uran yan) #i&ili'inya/ irewall !iasanya %er(asan) an%ara ,arin)an in%erne% #en)an ,arin)an l$-al/ a%au ,u)a an%ara ,arin)an l$-al #) ,ar in)an l$-al.#ala& (r$ses il%erisasi/ irewall &e&(unyai #ua &a-a& a%uran yan) #i&ili'i/ yai%u e-lusi9e irewall #an in-lusi9e irewall. a. G-lusi9e irewall yai%u irewall yan) &en)i+in'an se&ua (a'e% %rai-' yan) lewa% 'e-uali (a'e%(a'e% yan) sesuai #en)an rulenya #eaul%all$w*. !. In-lusi9e irewall a#ala" &en$la' se&ua (a'e% %rai-' yan) lewa% 'e-uali (a'e%(a'e% yan) sesuai #en)an rulenya #eaul%#eny*. Dala& (enera(an sesun))u"nya/ in-lusi9e irewall ,au" le!i" a&an #ari (a#a e-lusi9e irewall. ;a(i #ala& (r$ses (e&!ua%an a%uran ,u)a ,au" le!i" suli%/ 'arena "arus %eli%i #ala& (e&!ua%an rule %eru%a&a unre)is%ere# ($r% #an (r$ses(r$ses (asi. Firewall #a(a% #i !an)un (a#a layer /5 #an H (a#a la(isan SI. Firewall #i#esain un%u' &en)i,in'an %rus%e# #a%a lewa%/ &en$la' layanan yan) &u#a" #iseran)/ &en-e)a" ,arin)an in%ernal #ari seran)an luar yan) !isa &ene&!us irewall se%ia( wa'%u. K&/## *r+a!! a#ala" s!!:
1.Passin)
(7)
2. l$-'in) . ;ransla%in) 4. S"a(in) 5. F$rwar#in) 8. L$))in) Un%u' &ela'sana'an un)si #i a%as irewall selalu &e&!a-a !e!era(a (ara&e%er yan) &en,a#i !a)ian rulenya/ a#a(un (ara&e%er %erse!u% a#ala": 1. Ala&a% IP* asal 2. Ala&a% IP* %u,uan . P$r% asal
2.6.
K#*$%ra'* F*r+a!!
Firewall a#ala" sis%e& a%au se'el$&($' sis%e& yan) &ene%a('an 'e!i,a'an 'en#ali a'ses an%ara #ua
,arin)an.
Se-ara
(rinsi(/
irewall
#a(a%
#ian))a(
se!a)ai
se(asan)
&e'anis&e : yan) (er%a&a &e&!l$' lalu lin%as/ yan) 'e#ua &en)i,in'an lalu lin%as ,arin)an. Firewall #a(a% #i)una'an un%u' &elin#un)i ,arin)an an#a #ari seran)an ,arin)an $le" (i"a' luar/ na&un irewall %i#a' #a(a% &elin#un)i #ari seran)an yan) %i#a' &elalui irewall #an seran)an #ari sese$ran) yan) !era#a #i #ala& ,arin)an an#a/ ser%a irewall %i#a' #a(a% &elin#un)i an#a #ari (r$)ra&(r$)ra& a(li'asi yan) #i%ulis #en)an !uru'. Sara %&%&7 *r+a!! *a'a#3a &#a!a#"a# %#$'*8
1. Analisa #an il%er (a'e% Da%a yan) #i'$&uni'asi'an lewa% (r$%$'$l #i in%erne%/ #i!a)i a%as (a'e%(a'e%. Firewall #a(a% &en)analisa (a'e% ini/ 'e&u#ian &e&(erla'u'annya sesuai '$n#isi %er%en%u. Misal/ ,i'a a#a (a'e% a &a'a a'an #ila'u'an !. Un%u' il%er (a'e%/ #a(a% #ila'u'an #i Linu %an(a (r$)ra& %a&!a"an. 2. l$'in) isi #an (r$%$'$l Firewall #a(a% &ela'u'an !l$'in) %er"a#a( isi (a'e%/ &isalnya !erisi a((le% a9e/ A-%i9e/ >S-ri(%/ 7$$'ie. . Au%en%i'asi '$ne'si #an en'ri(si Firewall u&u&nya &e&ili'i 'e&a&(uan un%u'
&en,alan'an en'ri(si #ala&
au%en%i'asi i#en%i%as user/ in%e)ri%as #ari sa%u sessi$n/ #an &ela(isi %ranser #a%a #ari
(8)
in%i(an (i"a' lain. Gn'ri(si yan) #i&a'su# %er&asu' DGS/ ;ri(le DGS/ SSL/ IPSG7/ S=A/ MD5/ l$wFis"/ IDGA #an se!a)ainya. Sara "#'/t%a!7 tr,a/at ,%a &aa& *r+a!! 3a*t% 8
1. Ne%w$r' le9el Firewall ne%w$r' le9el &en#asar'an 'e(u%usan &ere'a (a#a ala&a% su&!er/ ala&a% %u,uan #an ($r% yan) %er#a(a% #ala& se%ia( (a'e% IP. Ne%w$r' le9el irewall san)a% -e(a% #an san)a% %rans(aran !a)i (e&a'ai. A((li-a%i$n le9el irewall !iasanya a#ala" "$s% yan) !er,alan se!a)ai (r$y ser9er/ yan) %i#a' &en)i,in'an lalu lin%as an%ar ,arin)an/ #an &ela'u'an l$))in) #an au#i%in) lalu lin%as yan) &elaluinya 2. A((li-a%i$n le9el. A((li-a%i$n le9el irewall &enye#ia'an la($ran au#i% yan) le!i" rin-i #an -en#erun) le!i" &e&a'sa'an &$#el 'ea&anan yan) le!i" '$nser9a%i #ari(a#a ne%w$r' le9el irewall. Firewall ini !isa #i'a%a'an se!a)ai ,e&!a%an. A((li-a%i$nPr$y Firewall !iasanya !eru(a (r$)ra& '"usus/ &isal sEui#. F*r+a!! IPTa!' /a"t *!tr*#$ &&*!*"* t*$a at%ra# 9/!*3:7 3a*t%8
a. INPU; Men)a%ur (a'e% #a%a yan) &e&asu'i irewall #ari ara" in%rane% &au(un in%erne%. 'i%a !isa &en)el$la '$&(u%er &ana sa,a yan) !isa &en)a'ses irewall. &isal: "anya '$&(u%er IP 1J2.18K.1.100 yan) !isa SS= 'e irewall #an yan) lain %i#a' !$le". !. U;PU; Men)a%ur (a'e% #a%a yan) 'eluar #ari irewall 'e ara" in%rane% &au(un in%erne%. iasanya $u%(u% %i#a' #ise%/ 'arena !isa &e&!a%asi 'e&a&(uan irewall i%u sen#iri. -. FRWARD Men)a%ur (a'e% #a%a yan) &elin%asi irewall #ari ara" in%erne% 'e in%rane% &au(un se!ali'nya. P$li-y $rwar# (alin) !anya' #i(a'ai saa% ini un%u' &en)a%ur '$ne'si in%erne% !er#asar'an ($r%/ &a- a##ress #an ala&a% IP.
Selain a%uran ($li-y* irewall i(%a!les ,u)a &e&(unyai (ara&e%er yan) #ise!u% #en)an ;ARG;/ yai%u s%a%us yan) &enen%u''an '$ne'si #i i(%a!les #ii+in'an lewa% a%au %i#a'. ;ARG; a#a %i)a &a-a& yai%u: a. A77GP; A'ses #i%eri&a #an #ii+in'an &elewa%i irewall !. RGG7;
(9)
A'ses #i%$la'/ '$ne'si #ari '$&(u%er 'lien yan) &elewa%i irewall lan)sun) %er(u%us/ !iasanya %er#a(a% (esan C7$nne-%i$n Reuse#C. ;ar)e% Re,e-% %i#a' &en)"a!is'an !an#wi#%" in%erne% 'arena a'ses lan)sun) #i%$la'/ "al ini !er!e#a #en)an DRP. -. DRP A'ses #i%eri&a %e%a(i (a'e% #a%a lan)sun) #i!uan) $le" 'ernel/ se"in))a (en))una %i#a' &en)e%a"ui 'alau '$ne'sinya #i!a%asi $le" irewall/ (en))una &eli"a% sea'an a'an ser9er yan) #i"u!un)i &en)ala&i (er&asala"an %e'nis. Pa#a '$ne'si in%erne% yan) si!u' #en)an %rai' %in))i ;ar)e% Dr$( se!ai'nya ,an)an #i)una'an.
2.5.
T*/ F*r+a!!
Firewall %er#iri #ari sa%u a%au le!i" ele&en s$%ware yan) !er,alan (a#a sa%u a%au le!i" "$s%. ;i(e%i(e irewall a#ala" se!a)ai !eri'u%: Pa-'e%il%erin) Firewall Dual"$&e# a%eway Firewall S-reene# =$s% Firewall S-reene# Su!ne% Firewall
2.6.1. Pa"t-F*!tr*#$ F*r+a!!
;er#iri #ari se!ua" r$u%er yan) #ile%a''an #ian%ara ,arin)an e's%ernal #an ,arin)an in%ernal yan) a&an.
Rule Pa-'e% Fil%erin) #i#einisi'an un%u' &en)i,in'an a%au &en$la' %rai-.
a&!ar 2.2 Ilus%rasi Pa-'e%Fil%erin) Firewall
2.6.2. D%a!-H&, Gat+a3 F*r+a!!
Dual"$&e "$s% se#i'i%nya &e&(unyai #ua in%era-e ,arin)an #an #ua IP a##ress.
IP $rwar#in) #in$na'%i'an (a#a irewall/ a'i!a%nya %rai' IP (a#a 'e#ua in%era-e %erse!u% 'a-au #i irewall 'arena %i#a' a#a ,alan lain !a)i IP &elewa%i irewall 'e-uali &elalui (r$y a%au S7@S.
Seran)an yan) #a%an) #ari layanan yan) %i#a' #i'enal a'an #i!l$'.
( 10 )
a&!ar 2. Ilus%rasi Dual=$&e a%eway Firewall
2.6.. Sr#, H't F*r+a!!
;er#iri #ari se!ua" (a-'e%il%erin) r$u%er #an a((li-a%i$n le9el )a%eway
=$s% !eru(a a((li-a%i$n le9el )a%eway yan) #i'enal se!a)ai !as%i$n "$s%
R$u%er #i'$ni)urasi un%u' &enerus'an se&ua un%rus%e# %rai- 'e !as%i$n "$s% #an (a#a 'asus yan) sa&a ,u)a 'e in$r&a%i$n ser9er.
a&!ar 2.4 Ilus%rasi S-reene# =$s% Firewall
2.6.6. Sr#, S%#t F*r+a!!
;er#iri #ari #ua r$u%er (a-'e% il%erin) #an se!ua" !as%i$n "$s%
Menye#ia'an %in)'a% 'ea&anan yan) %in))i #ari(a#a %i(e irewall yan) lain
Me&!ua% DMDe&ili%ari+e# $ne* #ian%ara ,arin)an in%ernal #an e's%ernal/se"in))a r$u%er luar "anya &en)i,in'an a'ses #ari luar !as%i$n "$s% 'e in$r&a%i$n ser9er #an r$u%er #ala& "anya &en)i,in'an a'ses #ari ,arin)an in%ernal 'e !as%i$n "$s%
a&!ar 2.5 Ilus%rasi S-reene# Su!ne% Firewall
( 11 )
2.;.
Firewall !era#a #i an%ara 'e#ua ,arin)an se(er%i in%erne% #an '$&(u%er se"in))a irewall !erun)si se!a)ai (elin#un). ;u,uan u%a&a a#anya irewall a#ala" un%u' user yan) %i#a' &en)in)in'an lalu lin%as ,arin)an yan) !erusa"a &asu' 'e '$&(u%er/ na&un %i#a' "anya i%u sa,a yan) !isa #ila'u'an irewall. Firewall ,u)a #a(a% &en)analisis ,arin)an yan) &en-$!a &asu' 'e '$&(u%er an#a/ #an #a(a% &ela'u'an a(a yan) "arus #ila'u'an 'e%i'a ,arin)an %erse!u% &asu'. 7$n%$"nya sa,a/ irewall !isa #ia%ur un%u' &e&!l$'ir !e!era(a ,enis ,arin)an yan) &en-$!a 'eluar a%au &en-a%a% l$) lalu lin%as ,arin)an yan) &en-uri)a'an. Firewall !isa &e&ili'i !er!a)ai a%uran yan) #a(a% an#a %a&!a"'an a%au "a(us un%u' &en$la' ,arin)an %er%en%u. 7$n%$"nya sa,a/ "anya #a(a% &en)a'ses ala&a% IP %er%en%u a%au &en)u&(ul'an se&ua a'ses #ari %e&(a% lain un%u' 'e sa%u %e&(a% yan) a&an %erle!i" #a"ulu 2.;.1. Pa"t-F*!tr F*r+a!!
Pa#a !en%u'nya yan) (alin) se#er"ana/ se!ua" irewall a#ala" se!ua" r$u%er a%au '$&(u%er yan) #ilen)'a(i #en)an #ua !ua" NI7 Ne%w$r' In%era-e 7ar#/ 'ar%u an%ar&u'a ,arin)an* yan) &a&(u &ela'u'an (ena(isan a%au (enyarin)an %er"a#a( (a'e%(a'e% yan) &asu'. Peran)'a% ,enis ini u&u&nya #ise!u% #en)an (a-'e%il%erin) r$u%er. Firewall ,enis ini !e'er,a #en)an -ara &e&!an#in)'an ala&a% su&!er #ari (a'e%(a'e% %erse!u% #en)an 'e!i,a'an (en)$n%r$lan a'ses yan) %er#a%ar #ala& A--ess 7$n%r$l Lis% irewall/ r$u%er %erse!u% a'an &en-$!a &e&u%us'an a(a'a" "en#a' &enerus'an (a'e% yan) &asu' %erse!u% 'e %u,uannya a%au &en)"en%i'annya. Pa#a !en%u' yan) le!i" se#er"ana la)i/ irewall "anya &ela'u'an (en)u,ian %er"a#a( ala&a% IP a%au na&a #$&ain yan) &en,a#i su&!er (a'e% #an a'an &enen%u'an a(a'a" "en#a' &enerus'an a%au &en$la' (a'e% %erse!u%. Mes'i(un #e&i'ian/ (a-'e%il%erin) r$u%er %i#a' #a(a% #i)una'an un%u' &e&!eri'an a'ses a%au &en$la'nya* #en)an &en))una'an !asis "a'"a' yan) #i&ili'i $le" (en))una.
a&!ar 2.8 7$n%$" (en)a%uran a'ses a--ess -$n%r$l* yan) #i%era('an #ala& irewall
Pa-'e%il%erin) r$u%er ,u)a #a(a% #i'$ni)urasi'an a)ar &en)"en%i'an !e!era(a ,enis lalu lin%as ,arin)an #an %en%u sa,a &en)i+in'annya. U&u&nya/ "al ini #ila'u'an #en)an
( 12 )
&en)a'%i'an<&en$na'%i'an ($r% ;7P
a&!ar 2.H 7ara 'er,a (a-'e% il%er irewall
2.;.2. <*r%*t L4! Gat+a3
Firewall ,enis lainnya a#ala" 7ir-ui%Le9el a%eway/ yan) u&u&nya !eru(a '$&($nen #ala& se!ua" (r$y ser9er. Firewall ,enis ini !er$(erasi (a#a le9el yan) le!i" %in))i #ala& &$#el reerensi %u,u" la(is SI !e'er,a (a#a la(isan sesi
( 13 )
a&!ar 2.K 7ara 'er,a -ir-ui% le9el irewall
2.;.. A//!*at*# L4! F*r+a!!
Firewall ,enis lainnya a#ala" A((li-a%i$n Le9el a%eway a%au A((li-a%i$nLe9el Firewall a%au serin) ,u)a #ise!u% se!a)ai Pr$y Firewall*/ yan) u&u&nya ,u)a &eru(a'an '$&($nen #ari se!ua" (r$y ser9er. Firewall ini %i#a' &en)i+in'an (a'e% yan) #a%an) un%u' &elewa%i irewall se-ara lan)sun). ;e%a(i/ a(li'asi (r$y yan) !er,alan #ala& '$&(u%er yan) &en,alan'an irewall a'an &enerus'an (er&in%aan %erse!u% 'e(a#a layanan yan) %erse#ia #ala& ,arin)an (ri9a% #an 'e&u#ian &enerus'an res($ns #ari (er&in%aan %erse!u% 'e(a#a '$&(u%er yan) &e&!ua% (er&in%aan (er%a&a 'ali yan) %erle%a' #ala& ,arin)an (u!li' yan) %i#a' a&an. U&u&nya/ irewall ,enis ini a'an &ela'u'an au%en%i'asi %erle!i" #a"ulu %er"a#a( (en))una se!elu& &en)i+in'an (en))una %erse!u% un%u' &en)a'ses ,arin)an. Selain i%u/ irewall ini ,u)a &en)i&(le&en%asi'an &e'anis&e au#i%in) #an (en-a%a%an l$))in)* se!a)ai !a)ian #ari 'e!i,a'an 'ea&anan yan) #i%era('annya. A((li-a%i$n Le9el Firewall ,u)a u&u&nya &en)"arus'an !e!era(a '$ni)urasi yan) #i!erla'u'an (a#a (en))una un%u' &en)i+in'an &esin 'lien a)ar #a(a% !erun)si. Se!a)ai -$n%$"/ ,i'a se!ua" (r$y F;P #i'$ni)urasi'an #i a%as se!ua" a((li-a%i$n layer )a%eway/ (r$y %erse!u% #a(a% #i'$ni)urasi'an un%u' &en)i+inlan !e!era(a (erin%a" F;P/ #an &en$la' !e!era(a (erin%a" lainnya. enis ini (alin) serin) #ii&(le&en%asi'an (a#a (r$y SM;P se"in))a &ere'a #a(a% &eneri&a sura% ele'%r$ni' #ari luar %an(a &ena&(a''an ala&a% e&ail in%ernal*/ lalu &enerus'an e&ail %erse!u% 'e(a#a e&ail ser9er #ala& ,arin)an. ;e%a(i/ 'arena a#anya (e&r$sesan
yan)
le!i"
ru&i%/
irewall
,enis
ini
&en)"arus'an
'$&(u%er
yan)
#i'$ni)urasi'an se!a)ai a((li-a%i$n )a%eway &e&ili'i s(esii'asi yan) %in))i/ #an %en%u sa,a ,au" le!i" la&!a% #i!an#in)'an #en)an (a-'e%il%er irewall.
( 14 )
a&!ar 2.J 7ara 'er,a A((li-a%i$n Le9el Firewall
2.;.6. NAT F*r+a!!
NA; Ne%w$r' A##ress ;ransla%i$n* Firewall se-ara $%$&a%is &enye#ia'an (r$%e'si %er"a#a( sis%e& yan) !era#a #i !ali' irewall 'arena NA; Firewall "anya &en)i+in'an '$ne'si yan) #a%an) #ari '$&(u%er'$&(u%er yan) !era#a #i !ali' irewall. ;u,uan #ari NA; a#ala" un%u' &ela'u'an &ul%i(lein) %er"a#a( lalu lin%as #ari ,arin)an in%ernal un%u' 'e&u#ian &enya&(ai'annya 'e(a#a ,arin)an yan) le!i" luas MAN/ WAN a%au In%erne%* se$la"$la" (a'e% %erse!u% #a%an) #ari se!ua" ala&a% IP a%au !e!era(a ala&a% IP. NA; Firewall &e&!ua% %a!el #ala& &e&$ri yan) &en)an#un) in$r&asi &en)enai '$ne'si yan) #ili"a% $le" irewall. ;a!el ini a'an &e&e%a'an ala&a% ,arin)an in%ernal 'e ala&a% e's%ernal. @e&a&(uan un%u' &enaru" 'eseluru"an ,arin)an #i !ela'an) se!ua" ala&a% IP #i#asar'an %er"a#a( (e&e%aan %er"a#a( ($r%($r% #ala& NA; irewall. 2.;.5. Stat%! F*r+a!!
S%a%eul Firewall &eru(a'an se!ua" irewall yan) &en))a!un)'an 'eun))ulan yan) #i%awar'an $le" (a-'e%il%erin) irewall/ NA; Firewall/ 7ir-ui%Le9el Firewall #an Pr$y Firewall #ala& sa%u sis%e&. S%a%eul Firewall #a(a% &ela'u'an il%erin) %er"a#a( lalu lin%as !er#asar'an 'ara'%eris%i' (a'e%/ se(er%i "alnya (a-'e%il%erin) irewall/ #an ,u)a &e&ili'i (en)e-e'an %er"a#a( sesi '$ne'si un%u' &eya'in'an !a"wa sesi '$ne'si yan) %er!en%u' %erse!u% #ii+inlan. ;i#a' se(er%i Pr$y Firewall a%au 7ir-ui% Le9el Firewall/ S%a%eul Firewall u&u&nya #i#esain a)ar le!i" %rans(aran se(er%i "alnya (a-'e%il%erin) irewall a%au NA; irewall*. ;e%a(i/ s%a%eul irewall ,u)a &en-a'u( !e!era(a as(e' yan) #i&ili'i $le" a((li-a%i$n le9el irewall/ se!a! ia ,u)a &ela'u'an ins(e'si %er"a#a( #a%a yan) #a%an) #ari la(isan a(li'asi a((li-a%i$n layer* #en)an &en))una'an layanan %er%en%u. Firewall ini "anya %erse#ia (a#a !e!era(a irewall 'elas a%as/ se&a-a& 7is-$ PI. @arena &en))a!un)'an 'eun))ulan ,enis,enis irewall lainnya/ s%a%eul irewall &en,a#i le!i" '$&(le's.
( 15 )
a&!ar 2.10 7ara 'er,a S%a%eul Firewall
2.;.;. V*rt%a! F*r+a!!
>ir%ual Firewall a#ala" se!u%an un%u' !e!era(a irewall l$)is yan) !era#a #ala& se!ua" (eran)'a% isi' '$&(u%er a%au (eran)'a% irewall lainnya*. Pen)a%uran ini &en)i+in'an !e!era(a ,arin)an a)ar #a(a% #i(r$%e'si $le" se!ua" irewall yan) uni' yan) &en,alan'an 'e!i,a'an 'ea&anan yan) ,u)a uni'/ -u'u( #en)an &en))una'an sa%u !ua" (eran)'a%. Den)an &en))una'an irewall ,enis ini/ se!ua" ISP In%erne% Ser9i-e Pr$9i#er* #a(a% &enye#ia'an layanan irewall 'e(a#a (ara (elan))annya/ se"in))a &en)a&an'an lalu lin%as ,arin)an &ere'a/ "anya #en)an &en))una'an sa%u !ua" (eran)'a%. =al ini ,elas &eru(a'an (en)"e&a%an !iaya yan) si)nii'an/ &es'i irewall ,enis ini "anya %erse#ia (a#a irewall 'elas a%as/ se(er%i 7is-$ PI 55. 2.;.=. Tra#'/ar#t F*r+a!!
;rans(aren% Firewall ,u)a #i'enal se!a)ai !ri#)in) irewall* !u'anla" se!ua" irewall yan) &urni/ %e%a(i ia "anya !eru(a %urunan #ari s%a%eul Firewall. Dari(a#a irewallirewall lainnya yan) !er$(erasi (a#a la(isan IP 'e a%as/ %rans(aren% irewall !e'er,a (a#a la(isan Da%aLin' Layer/ #an 'e&u#ian ia &e&an%au la(isanla(isan yan) a#a #i a%asnya. Selain i%u/ %rans(aren% irewall ,u)a #a(a% &ela'u'an a(a yan) #a(a% #ila'u'an $le" (a-'e%il%erin) irewall/ se(er%i "alnya s%a%eul irewall #an %i#a' %erli"a% $le" (en))una 'arena i%ula"/ ia #ise!u% se!a)ai ;rans(aren% Firewall*. In%inya/ %rans(aren% irewall !e'er,a se!a)ai se!ua" !ri#)e yan) !er%u)as un%u' &enyarin) lalu lin%as ,arin)an an%ara #ua se)&en ,arin)an. Den)an &en))una'an %rans(aren% irewall/
'ea&anan
se!ua"
se)&en
,arin)an
(un
#a(a%
#i(er'ua%/
%an(a
"arus
&en)a(li'asi'an NA; Fil%er. ;rans(aren% Firewall &enawar'an %i)a !ua" 'eun%un)an/ ya'ni se!a)ai !eri'u%: 1* @$ni)urasi yan) &u#a" !a"'an !e!era(a (r$#u' &en)'lai& se!a)ai Cer$ 7$ni)ura%i$nC*. =al ini &e&an) 'arena %rans(aren% irewall #i"u!un)'an se-ara lan)sun) #en)an ,arin)an yan) "en#a' #i(r$%e'sinya/ #en)an &e&$#ii'asi se#i'i% a%au %an(a &e&$#ii'asi '$ni)urasi irewall %erse!u%. @arena ia !e'er,a (a#a #a%alin' layer/ (en)u!a"an ala&a% IP (un %i#a' #i!u%u"'an. Firewall ,u)a #a(a% #i'$ni)urasi'an un%u' ( 16 )
&ela'u'an se)&en%asi %er"a#a( se!ua" su!ne% ,arin)an an%ara ,arin)an yan) &e&ili'i 'ea&anan yan) ren#a" #an 'ea&anan yan) %in))i a%au #a(a% ,u)a un%u' &elin#un)i se!ua" "$s%/ ,i'a &e&an) #i(erlu'an. 2* @iner,a yan) %in))i. =al ini #ise!a!'an $le" irewall yan) !er,alan #ala& la(isan #a%a lin' le!i" se#er"ana #i!an#in)'an #en)an irewall yan) !er,alan #ala& la(isan yan) le!i" %in))i. @arena !e'er,a le!i" se#er"ana/ &a'a 'e!u%u"an (e&r$sesan (un le!i" 'e-il #i!an#in)'an #en)an irewall yan) !er,alan (a#a la(isan yan) %in))i/ #an a'"irnya (er$r&a yan) #i%un,u'annya (un le!i" %in))i. * ;i#a' %erli"a% $le" (en))una s%eal%"*. =al ini &e&an) #i'arena'an ;rans(aren% Firewall !e'er,a (a#a la(isan #a%alin'/ #an %i#a' &e&!u%u"'an ala&a% IP yan) #i%e%a('an un%u'nya 'e-uali un%u' &ela'u'an &ana,e&en %er"a#a(nya/ ,i'a &e&an) ,enisnya &ana)e# irewall*. @arena i%ula"/ %rans(aren% irewall %i#a' #a(a% %erli"a% $le" (ara (enyeran). @arena %i#a' #a(a% #irai" $le" (enyeran) %i#a' &e&ili'i ala&a% IP*/ (enyeran) (un %i#a' #a(a% &enyeran)nya.
2.=.
Pr#a#aa# ,a# *&/!&#ta'* F*r+a!!
Peren-anaan #an i&(le&en%asi irewall #ila'u'an &elalui (en#e'a%an !er%a"a(. Peren-anaan irewall #an %a"a(an (ela'sanaannya %er#iri #ari : 1. Peren-anaan/
%a"a(
#i&ana
$r)anisasi
&enen%u'an
irewall
yan)
a'an
#i%era('an #ala& &ene%a('an 'e!i,a'an 'ea&anan $r)anisasi. 2. @$ni)urasi/ %a"a( ins%alasi (eran)'a% 'eras &au(un (eran)'a% luna' irewall ser%a &enyia('an a%uran un%u' sis%e&. . Pen)u,ian/ %a"a( (en)u,ian yan) !erun)si un%u' &en)e9aluasi un)si$nali%as/ 'iner,a/ s'ala!ili%as #an 'ea&anan #an &en)i#en%ii'asi &asala" 4. De(l$y&en%/ %a"a( (enera(an irewall yan) %ela" #i'$ni)urasi #an &elalui %a"a( (en)u,ian. 5. Pen)el$laan/ %a"a(an ini #ila'u'an sela&a si'lus "i#u( #ari irewall ini/ &en-a'u( 'e)ia%an (erawa%an '$&($nen #an #u'un)an %er"a#a( &asala" $(erasi$nal.
2.=.1. Pr#a#aa#
;a"a( (eren-anaan un%u' &e&ili" #an &en)i&(le&en%asi'an irewall "arus #i&ulai "anya se%ela" se!ua" $r)anisasi %ela" &ene%a('an !a"wa irewall #i(erlu'an un%u' &ene)a''an 'e!i,a'an 'ea&anan $r)anisasi. Ini !iasanya %er,a#i se%ela" (enilaian risi'$ #ari sis%e& se-ara 'eseluru"an #ila'u'an. Se!ua" (enilaian risi'$ &eli(u%i : 1. i#en%ii'asi an-a&an #an 'eren%anan #ala& sis%e& in$r&asi/ 2. #a&(a' ($%ensial a%au !esarnya !a"aya !a"wa "ilan)nya 'era"asiaan/ in%e)ri%as 'e%erse#iaan/ a%au a'an &e&ili'i ase% $r)anisasi a%au $(erasi %er&asu' &isi/
( 17 )
un)si/ 7i%ra/ a%au re(u%asi* 'e%i'a %er,a#i e's(l$i%asi an-a&an 'eren%anan #ii#en%ii'asi . i#en%ii'asi #an analisis '$n%r$l 'ea&anan un%u' sys%e& in$r&asi.
Prinsi( #asar !a"wa $r)anisasi "arus &en)i'u%i #ala& (eren-anaan (enye!aran irewall &eli(u%i: •
una'an
(eran)'a%
#ii&(le&en%asi'an
sesuai
#en)an
un)sinya.
Firewall
,an)an
(a#a (eran)'a% yan) !u'an #i&a'su#'an un%u' irewall.
Se!a)ai -$n%$" (eran)'a% r$u%er #ise#ia'an un%u' &enan)ani un)si r$u%in)/ se"arusnya r$u%er %i#a' #i&anaa%'an un%u' &ela'u'an 'e)ia%an il%erin) yan) '$&(le's.Firewall %i#a' #i)una'an un%u' &enye#ia'an layananlayanan lain se(er%i •
we! ser9er a%au &ail ser9er. ;era('an sis%e& (en)a&anan !erla(is/ #en)an #e&i'ian resi'$ #a(a% #i'el$la #en)an le!i" !ai'. Firewall #a(a% #i(asan) #i !e!era(a %e&(a% (eri&e%er/ (a#a !a)ian yan) &e&ili'i #a%a sensi%i9e/ #an (a#a &asin)&asin) -$&(u%er (en))una*. Firewall ,u)a "arus &en,a#i !a)ian #ari (r$)ra& 'ea&anan se-ara 'eseluru"an yan)
•
,u)a &en-a'u( (r$#u' se(er%i an%i&alware #an s$%ware in%rusi$n #e%e-%i$n. Per"a%i'an an-a&an in%ernal. An-a&an ini &un)'in %i#a' #a%an) la n)sun) #ari $ran) #ala&/ %e%a(i #a(a% &eli!a%'an "$s% in%ernal %erine'si $le" &alware a%au #i'$&(r$&i'an $le" (enyeran) e's%ernal. Sis%e& in%ernal (en%in) "arus #i%e&(a%'an
•
#i !ela'an) irewall in%ernal. D$'u&en%asi'an 'e&a&(uan irewall. Se%ia( ,enis irewall &e&ili'i 'e&a&(uan #an 'e%er!a%asan yan) !er!e#a. Ini 'a#an)'a#an) a'an &e&(en)aru"i (eren-anaan 'e!i,a'an 'ea&anan $r)anisasi #an s%ra%e)i (enera(an irewall. Se%ia( i%ur yan) ($si%i a%au ne)a%i &e&(en)aru"i (eren-anaan ini "arus #i%ulis 'e #ala& #$'u&en (eren-anaan se-ara 'eseluru"an.
e!era(a (er%i&!an)an yan) (erlu #ila'u'an #ala& &e&ili" s$lusi irewall/ an%ara lain : 1* @e&a&(uan o Wilaya" $r)anisasi &ana yan) (erlu #ilin#un)i 3(eri&e%er/ #e(ar%e&en in%ernal/ "$s% #s! * o enis %e'n$l$)i irewall &ana yan) sesuai un%u' #i)una'an un%u' &elin#un)i 3 (a-'e% il%erin)/ ins(e'si s%a%eul/ )a%eway a((li-a%i$n (r$y/ #s!*
( 18 )
o Fi%ur 'ea&anan %a&!a"an a(a yan) #i&ili'i $le" irewall 3 -$n%en% il%erin)/ >PN/ IDS * 2* Pen)el$laan o Pr$%$'$l a(a yan) #i)una'an un%u' &en#u'un) (en)el$laan se-ara re&$%e %er"a#a( irewall/ se(er%i =;;PS/ SS= 3 o A(a'a" (en))unaan (r$%$'$l re&$%e %er"a#a( irewall #ii,in'an #an sesuai #en)an 'e!i,a'an $r)anisasi3 o A(a'a" (en)el$laan se-ara re&$%e #i!a%asi (a#a in%era-e irewall #an ala&a% IP su&!er %er%en%u 3 * @iner,a o era(a ,u&la" &a'si&u& '$ne'si
si&ul%an/ %"r$u)"(u% yan) #isu(($r% $le"
irewall 3 o A(a'a" 'e!u%u"an l$a# !alan-in) #an ail $9er %er"a#a( irewall #i(erlu'an 3 o A(a'a" &en))una'an irewall !er!asis s$%ware a%au !er!asis "ar#ware 3 4* In%e)rasi o A(a'a" 'e%i'a irewall %er(asan)/ #i(erlu'an (eru!a"an (a#a area lain #i ,arin)an 3 o A(a'a" sis%e& l$))in) irewall #a(a% salin) !er$(erasi #en)an sis%e& l$) yan) su#a" %erse#ia 3 o A(a'a" irewall "arus '$&(a%i!el #en)an (eran)'a% lain (a#a ,arin)an yan) &enye#ia'an sis%e& 'ea&anan a%au layanan lain3 5* Lin)'un)an Fisi' o Di &ana irewall se-ara isi' #i%e&(a%'an un%u' &e&as%i'an 'ea&anan isi' #an (erlin#un)an #ari !en-ana3 o A(a'a" a#a ra' yan) &e&a#ai a%au ruan) ra' #i l$'asi isi' #i &ana irewall a'an #i%e&(a%'an3 o A(a'a" #aya %a&!a"an/ #aya -a#an)an/ A7/ #an < a%au '$ne'si ,arin)an #i!u%u"'an (a#a l$'asi isi'3
8* Pers$nil o Sia(a yan) a'an !er%an))un) ,awa! un%u' &en)el$la irewall3 o A(a'a" sis%e& a#&inis%ra%$r &e&!u%u"'an (ela%i"an se!elu& irewall ini #i)una'an3 H* @e!u%u"an Masa De(an o A(a'a" irewall &e&enu"i 'e!u%u"an &asa #e(an $r)anisasi3
2.=.2. K#*$%ra'* F*r+a!!
;a"a( '$ni)urasi &eli!a%'an se&ua as(e' '$ni)urasi (la%$r& irewall. Ini %er&asu' ins%alasi (eran)'a% 'eras #an (eran)'a% luna'/ &en)'$ni)urasi 'e!i,a'an/ &en)'$ni)urasi l$))in) #an aler%/ ser%a &en)in%e)rasi'an irewall 'e #ala& arsi%e'%ur ,arin)an. 1. Ins%alasi =ar#ware #an S$%ware
( 19 )
a. Se%ela" irewall #i(ili" #an %erse#ia/ (eran)'a% 'eras/ sis%e& $(erasi #an s$%ware irewall "arus #iins%all. !. Se!elu& s$%ware #iins%all #an se%ela" sis%e& $(erasi #iins%all/ sis%e& $(erasi (erlu #i(er'ua% #en)an &en)ins%all (a%-" yan) %er!aru. @e&u#ian ins%all s$%ware irewall. -. eri'u%nya/ sis%e& irewall (erlu #i(a%-" a%au #iu(#a%e ,i'a 9en#$r &enye#ia'an (a%-" a%au (un u(#a%e #ari s$%ware irewall %ers e!u%. =al ini #ila'u'an !ai' %er"a#a( irewall ,enis "ar#ware &au(un irewall !er!asis s$%ware. #. Sela&a (r$ses ins%alasi #an '$ni)urasi/ "anya a#&inis%ra%$r yan) #ii,in'an un%' &en)el$la irewall. Se&ua layanan &ana,e&en un%u' irewall/ se(er%i SNMP "arus #in$na'%i'an se-ara (er&anen 'e-uali #i(erlu'an. e. i'a irewall &e&ili'i i%ur &ana)e&en% user/ se!ai'nya #i!ua%'an !e!era(a a--$un% un%u' (ers$nel(ers$nil yan) !er%an))un),awa! &en)el$la irewall. . Firewall ,arin)an "arus #i%e&(a%'an #i ruan)an yan) &e&enu"i (ersyara%an yan) #ire'$&en#asi'an. Ruan)an yan) #i)una'an se-ara isi' "arus a&an un%u' &en-e)a" (ers$nil yan) %i#a' &e&ili'i "a' un%u' &en)a'ses irewall. ). Se!ai'nya ,a& in%ernal irewall "arus '$nsis%en #en)an se&ua sis%e& lainnya yan) #i)una'an
$le" se!ua" $r)anisasi.
=al
%erse!u% #a(a%
#ila'u'an
#en)an
&e&anaa%'an sis%e& N;P ser9er un%u' &ela'u'an sin'r$nisasi #en)an su&!er wa'%u $%$ri%a%i. =al ini #i(erun%u'an un%u' &e&!an#in)'an l$) #ari !e!era(a sis%e& 'e%i'a &en)analisis &asala".
2. @e!i,a'an @$ni)urasi Se%ela" (eran)'a% 'eras #an (eran)'a% luna' yan) %ela" %erins%al/ a#&inis%ra%$r #a(a% &e&!ua% 'e!i,a'an irewall. e!era(a irewall &enera('an 'e!i,a'an &elalui a%uran e's(lisi%B !e!era(a irewall &e&erlu'an &en)'$ni)urasi (en)a%uran irewall yan) 'e&u#ian &e&!ua% a%uran in%ernal/ !e!era(a irewall &e&!ua% 'e!i,a'an #an a%uran se-ara $%$&a%is #an a#a (ula yan) &en))una'an '$&!inasi #ari 'e%i)a ,enis '$ni)urasi. =asil a'"irnya a#ala" se(eran)'a% a%uran yan) #ise!u% rulese% yan) &en))a&!ar'an !a)ai&ana irewall !er%in#a'. e!era(a 9en#$r &e&ili'i !a%asan a%au saran (a#a uru%an a%uran #ala& se!ua" rulese%. Se&en%ara i%u a#ala" u&u& un%u' &e&i'ir'an a%uran irewall yan) &e&(en)aru"i lalu lin%as yan) &un-ul (a#a an%ar&u'a in%ernal a%au e's%ernal. Un%u' &e&!ua% rulese%/ (er%a&a 'ali "arus #i%en%u'an a(a ,enis lalu lin%as (r$%$'$l/ ala&a% su&!er #an %u,uan/ #ll* yan) #i!u%u"'an $le" a(li'asi #ise%u,ui un%u' $r)anisasi. Mini&al/ a%uran yan) se"arusnya #i#einisi'an a#ala" :
( 20 )
o P$r% il%erin) "arus #ia'%i'an #i %e(i luar ,arin)an #an #i #ala& ,arin)an ,u)a ,i'a #i(erlu'an. o Penyarin)an '$n%en "arus #ila'u'an se#e'a% &un)'in #en)an (eneri&a '$n%en. i'a &enera('an !e!era(a irewall (erlu &e&ili'i a%uran yan) sa&a/ a%urana%uran %erse!u% se"arusnya #isin'r$nisasi an%ar irewall. =al %erse!u% !iasanya %er)an%un) i%ur yan) #i&ili'i $le" irewall.
. @$ni)urasi sis%e& (en-a%a%an #an aler% Lan)'a" selan,u%nya #ala& (r$ses '$ni)urasi a#ala" un%u' &en)a%ur sis%e& (en-a%a%an #an aler%. L$))in) a#ala" lan)'a" (en%in) #ala& &en-e)a" #an (e&uli"an #ari 'e)a)alan ser%a &e&as%i'an !a"wa '$ni)urasi 'ea&anan yan) %e(a% #ia%ur (a#a irewall. L$))in) yan) %e(a% ,u)a #a(a% &e&!eri'an in$r&asi (en%in) un%u' &eres($n insi#en 'ea&anan. ila &un)'in/ irewall "arus #i'$ni)urasi !ai' un%u' &enyi&(an l$) se-ara l$'al &au(un se-ara %er(usa%. @e%er!a%asan su&!er #aya/ 'e&a&(uan irewall l$))in)/ #an si%uasi lain #a(a% &en))an))u 'e&a&(uan un%u' &enyi&(an l$) !ai' l$'al &au(un %er(usa%. ;en%u'an l$) a(a #an !era(a la&a l$) #i(eli"ara/ "arus #ila'u'an !er#asar'an 'asus (er 'asus. Selain &en)'$ni)urasi l$))in)/ real%i&e aler% ,u)a "arus #i!en%u' un%u' &e&!eri%a"u a#&inis%ra%$r 'e%i'a (eris%iwa (en%in) %er,a#i (a#a irewall. Pe&!eri%a"uan #ila'u'an 'e%i'a:
o M$#ii'asi a%au (en)"en%ian a%uran irewall o Sis%e& re!$$%/ 'e'uran)an #is'/ #an (eris%iwa $(erasi$nal lainnya
4. Pen)u,ian Firewall !aru "arus #iu,i #an #ie9aluasi se!elu& #i (asan) 'e ,arin)an (r$#u'si un%u' &e&as%i'an !a"wa &ere'a !e'er,a #en)an !enar. Pen)u,ian "arus #ila'u'an (a#a ,arin)an u,i %an(a '$ne'%i9i%as 'e ,arin)an (r$#u'si. As(e' O as(e' yan) (erlu #ie9aluasi &eli(u%i:
o @$ne'%i9i%as/ (en))una #a(a% &e&!en%u' #an &e&eli"ara '$ne'si &elalui irewall. Rulese%/
Lalu
Lin%as
yan)
se-ara
'"usus
#ii+in'an
$le"
'e!i,a'an
'ea&anan #i(er!$le"'an. Se&ua lalu lin%as yan) %i#a' #i(er!$le"'an $le" 'e!i,a'an 'ea&anan #i!l$'ir. >erii'asi rulese% "arus &en-a'u( !ai' &enin,au se-ara &anual #an &en)u,i a(a'a" a%uran !e'er,a se(er%i yan) #i"ara('an. @$&(a%i!ili%as A(li'asi/ (enera(an irewall %i#a' &en))an))u (en))unaan a(li'asi (eran)'a% luna' yan) a#a. o Mana,e&en/ A#&inis%ra%$r #a(a% &en)'$ni)urasi #an &en)el$la s$lusi ee'%i #an a&an. L$))in) sesuai #en)an 'e!i,a'an $r)anisasi #an s%ra%e)i. o @iner,a/ &e&!eri'an 'iner,a yan) &e&a#ai sela&a (e&a'aian n$r&al #an (un-a'.
( 21 )
Dala& !anya' 'asus/ -ara %er!ai' un%u' &en)u,i 'iner,a #i !awa" !e!an #ari i&(le&en%asi (r$%$%i(e a#ala" #en)an &en))una'an )enera%$r lalu lin%as si&ulasi (a#a ,arin)an u,i -$!a un%u' &eniru 'ara'%eris%i' a'%ual #ari lalu lin%as yan) #i"ara('an se&a'si&al &un)'in. Si&ulasi !e!an yan) #ise!a!'an $le" seran)an D$S ,u)a #a(a% &e&!an%u #ala& &enilai 'iner,a irewall. Pen)u,ian "arus &en))a!un)'an !er!a)ai a(li'asi yan) a'an &elin%asi irewall/ %eru%a&a yan) 'e&un)'inan !esar a'an %er(en)aru" $le" &asala" ,arin)an %"r$u)"(u% a%au la%en-y.
o @ea&anan/ i&(le&en%asi irewall i%u sen#iri &un)'in !erisi 'eren%anan #an 'ele&a"an yan) (enyeran) !isa &en)e's(l$i%asi. r)anisasi #en)an 'e!u%u"an 'ea&anan yan) %in))i &un)'in in)in &ela'u'an (enilaian 'eren%anan %er"a#a( '$&($nen irewall.
5. De(l$y&en% Se!elu& &e&asan)'an irewall (a#a ,arin)an/ a#&inis%ra%$r "arus &e&!eri%a"u (en))una a%au (e&ili' sis%e& yan) !er($%ensi %er'ena #a&(a' #ari (e&asan)an irewall yan) #iren-ana'an/ #an &e&erin%a"'an &ere'a yan) un%u' &e&!eri%a"u ,i'a &ere'a &ene&ui &asala". Se%ia( (eru!a"an
yan) #i(erlu'an un%u'
(erala%an
lainnya
,u)a "arus
#i'$$r#inasi'an se!a)ai !a)ian #ari 'e)ia%an (e&asan)an irewall. @e!i,a'an 'ea&anan yan) #iun)'a('an $le" '$ni)urasi irewall "arus #i%a&!a"'an #en)an 'e!i,a'an 'ea&anan se-ara 'eseluru"an $r)anisasi/ #an (eru!a"an yan) !er'elan,u%an un%u' '$ni)urasinya "arus #iin%e)rasi'an #en)an (r$ses &ana,e&en $r)anisasi '$ni)urasi.
o i'a %er#iri #ari !e!era(a irewall yan) #ii&(le&en%asi'an/ %er&asu' irewall (ri!a#i a%au
#i
!e!era(a
#i(er%i&!an)'an. Pr$%$%i(e
'an%$r
-a!an)/
(en#e'a%an
!er%a"a(
"arus
,u)a a'an san)a% &e&!an%u/ %eru%a&a un%u'
&en)i#en%ii'asi #an &enyelesai'an &asala" 'e!i,a'an yan) salin) !er%en%an)an. Ini a'an &e&!eri'an a#&inis%ra%$r 'ese&(a%an un%u' &en)e9aluasi #a&(a' s$lusi irewall #an &enyelesai'an &asala" se!elu& #i(asan) #i!e!era(a l$'asi. o Firewall !iasanya !er%in#a' (ula se!a)ai r$u%er/ irewall "arus #iin%e)rasi'an 'e #ala& s%ru'%ur ,arin)an r$u%in). =al ini serin) !erar%i &en))an%i r$u%er yan) !era#a (a#a %e&(a% yan) sa&a #ala& %$($l$)i ,arin)an se!a)ai &ana irewall se#an) #i%e&(a%'an/ %e%a(i ,u)a #a(a% !erar%i &en)u!a" %a!el r$u%in) un%u' r$u%er lain #ala& ,arin)an $r)anisasi un%u' &enan)ani (ena&!a"an ini r$u%er !aru.
8. Pen)el$laan
( 22 )
Fase %era'"ir #ari (eren-anaan #an i&(le&en%asi irewall a#ala" (en)el$laan #an "al ini !ersia% ,an)'a (an,an). e!era(a %in#a'an (erawa%an a#ala":
o o o o
ins%alasi (a%-" un%u' (eran)'a% irewall. Mela'u'an (e&!a"aruan %er"a#a( 'e!i,a'an un%u' &en)"a#a(i ,enis an-a&an yan) !aru %eri#en%ii'asi. Me&an%au 'iner,a irewall #an l$) un%u' &e&as%i'an !a"wa (en))una
&e&a%u"i 'e!i,a'an 'ea&anan. o Mela'u'an (en)u,ian (eri$#i'
un%u'
&e&9erii'asi !a"wa
a%uran
irewall
!erun)si se(er%i yan) #i"ara('an. o Menyi&(an l$)
2.>.
N$%e : 10.10..yy
Q 110* u%' n$&$r 'el$&($' (ra'%i'u&/ yy 1254* un%u' n$ -lien%
1J2.18K.50.
Q )una'an #"-lien% u%' &en#a(a% IP #ari ser9er
2. Se%%in) '$&(u%er se!a)ai r$u%er P71* s!! : a. Se%%in) i(_$rwar#
#echo 1 > /proc/sys/net/ipv4/ip_forward ( 23 )
!. Se%%in) &en))una'an NA; F$r&a% (enulisan : # iptables –t nat –A POSTO!T"$ –o eth% –s
"P_n&'ber (d %/%
() *AS+!,A-,
# iptables –t nat –A POSTO!T"$ –o eth% –) *AS+!,A-, N : un%u' &en)e%a"ui su#a" %erins%all : # iptables –t nat (n. -. Se%%in) IP
eth% 1021325%26 *as78552552552% eth%81 1%21%2121 *as78552552552% #. Se%%in) R$u%in)/ #ia&!il #ari n$ IP r$u%er ser9er F$r&a% : # ro&te add defa< 9w :no_"P_$;>
# ro&te add defa< 9w 1021325%21 . Se%%in) '$&(u%er -lien% se!a)ai !eri'u% a. Se%%in) IP
# ifconfi9 eth% 1%21%212 net'as7 552552552% !. ;a&!a"'an a%eway un%u' P7 7lien%
# ro&te add defa< 9w 1%21%2121 4. La'u'an %es% '$ne'%ii%as (in) 'e P< ro&ter =1%21%2621 (in) 'e "P Server =1021325%21 5. La'u'an '$ne'si #i sisi -lien% un%u' &en)a'ses we! #an %( #ari !r$wser/ #an (as%i'an !er"asil. 7$n%$" :
http8//www2eepis(its2ed& 8. alan'an rule irewall se!a)ai !eri'u% !l$-'in) (in)* : a. l$' P7 7lien% su(aya %i#a' !isa (in)
# iptables –A ?O;A- –s 1%21%212/4 –d %/% –p ic'p () ,@,
# iptables –nv. -. 7e' #en)an &ela'u'an (in)/ -a%a% "asilnya/ &ana yan) !er"asil #i !l$' (in) 'e P< ro&ter =1%21%2621 (in) 'e "P Server =1021325%21 #. =a(us rule #i i(%a!les
# iptables –? e. l$' P7 7lien% su(aya %i#a' !isa (in) #)n (erin%a" !eri'u% INPU;* ( 24 )
# iptables –A "P!T –s 1%21%212/4 –d %/% –p ic'p () ,@,
# iptables –A ?O;A- –s 1%21%212/4 –d %/% –p ic'p () -OP ". Ulan)i lan)'a" !#/ -a%a% #an !an#in)'an "asilnya #en)an ($in 8-. i. A(a 'esi&(ulan an#a %en%an) (en))unaan (erin%a" INPU;/ FRWARD/ RGG7; #an DRP. a)ai&ana a)ar !isa #ila'u'an !l$'in) %er"a#a( se&ua IP #i ($in 8-. H. alan'an rule irewall se!a)ai !eri'u% !l$-'in) we! #an %(* : a. l$' P7 7lien% su(aya %i#a' !isa &en)a'ses we! #an %( #i ($in 5/ -e' 'e&!ali '$ne'si #i ($in 5 #an (as%i'an !er"asil.
# iptables –A ?O;A- –s 1%21%212/4 –p tcp –' '<iport –dport 1% () ,@,
# iptables –nv. -. 7e'
'$ne'si/
-a%a%
"asilnya
http8//www2eepis(its2ed&
ftp8//fileserver2eepis(its2ed&
K. La'u'an lan)'a" !eri'u% #an analisala" : a. Ins%all %( ser9er #an %elne% (a#a sisi P7 R$u%er irewall* Q 1%21%2121
# apt(9et install proftpd telnetd !. La'u'an %es '$ne'si #ari -lien% 'e P7 R$u%er #an (as%i'an !er"asil
# telnet 1%21%2121 # ftp 1%21%2121 -. ua%la" rule irewall se!a)ai !eri'u%/ #an u,ila" rule an#a %s! : Dr$( a'ses #ari -lien% 'e %( ser9er A--e(% a'ses #ari -lien% 'e %elne% J. l$'in) #en)an &en))una'an MA7 a##ress a. =a(us rule se!elu&nya : i(%a!les F !. 7a%a% MA7 a##ress #i sisi -lien%/ #an la'u'an (erin%a" !eri'u% #i P7 R$u%er irewall*
#
iptables
(A
?O;A-
('
%%8B%818A<814841 –d %/% () ,@,
( 25 )
'ac
(('ac(so&rce
# iptables(save > /root/data2fw # vi' /etc/networ7/interfaces
post(&p iptables(restore : /root/data2fw N: ;a&!a"'an (erin%a" #ia%as se%ela" line eth% !. Res%ar% '$&(u%er :
# reboot -. 7e' "asilnya :
# iptables (nv.
DAFTAR PUSTAKA "%%(s:<
( 26 )
