[wander is a multi dwc]

You pretty much can't hide it, no matter what you do completely. verify.cpanel.net fucks it all up for you, unless you have cPanel NAT setup (can't confirm this though).

I can scan the MX records for the hostname to find out the main server IP address, MXToolBox comes in very handy for this. Or, if cPanel's inbuilt mail server is not disabled then I can trace the SMTP server that the mail used (a.k.a the main cPanel) to get the main server's IP address. Only way to fix is to completely disable mail support and instead use a third party mail server.

I can scan the DNS records and find out the main server IP address, any online tool can do that. Best bet is to disable the inbuilt DNS server and instead setup cPanel DNS-ONLY on another VPS, and setup a DNS cluster with your main cPanel server.

Still, there are other ways to find the main IP address that I'm not sure of. Let me think for a while and update this thread. x-x

Cluster servers for web hosting in cPanel isn't ready yet, and unless it is out there is no hiding your main server's IP address properly with cPanel.

If cluster servers for cPanel is out, then say I can use server 1 as a frontend while server 1 fetches all data from server 2. No one knows that server 1 retrieves data from server 2, and if server 1 gets down another copy of server 1 can be setup easily. But I'm just fantasizing, there's no confirmed features about the upcoming cluster feature. jaja!

tl;dr thinking of starting a bulletproof/super duper offshore host? start by not choosing cPanel :)

[Cryptic™]

Have you considered GRE tunnels?

[Fresku]

Well, if you're hosting your own domains on it, make a cloudflare.com account and have your original nameservers pointing to cloudflare's nameservers and then set cloudflare's DNS settings to your server.

This way if someone does an who is on your website, it will return cloudflare's ip.

[wander is a multi dwc]

Have you considered GRE tunnels?

Yes, I have. Infact, I have setup NAT for cPanel a few times so I can relate the experience with you. It only serves to hide the main IP address through HTTP/TCP side, that's all. In other words, it 'remaps' the IP address.

1. Your server will send an outgoing connection from each local IP address to the http://myip.cpanel.net/v1.0/ server.
2. The http://myip.cpanel.net/v1.0/ server responds with the public IP address from which it received the request.
3. The system maps the local IP address to this public IP address.

It won't help you out in hiding your (inbuilt) mail server's IP address (which is the main server IP address) and your (inbuilt) DNS server's IP address (which is again the main server IP address).

Truth be told, I did check up the web host panel that I was experimenting on a year ago against verify.cpanel.net after I finished setting up NAT/GRE tunnel on it. I can't exactly remember the result, I guess it showed up a license not found error (I'm sure it would, just forgot the result so I didn't confirm it on the thread).

Still, I got my point across. Do not use cPanel if you're planning to host some really bad stuff.

Well, if you're hosting your own domains on it, make a cloudflare.com account and have your original nameservers pointing to cloudflare's nameservers and then set cloudflare's DNS settings to your server.

This way if someone does an who is on your website, it will return cloudflare's ip.

Main server ---hosts---> Domain A

Why bother taking down Domain A when you could instead take down the main server itself?

[StevesTrolls]

Hmm - if you configure your GRE tunnel to route all inbound, and outbound traffic through - and license the tunnelling server, surely that would hide it?

Then you've just got to configure your server to stop IP leaks from errors etc.

[wander is a multi dwc]

Hmm - if you configure your GRE tunnel to route all inbound, and outbound traffic through - and license the tunnelling server, surely that would hide it?

Then you've just got to configure your server to stop IP leaks from errors etc.

it's not just the gre tunnel that we're talking about here. i mean, yeah your idea can work but that's like cello taping 1 leak of the pipe when there are 13037404 leaks

1. your cPanel account will show you the main server IP, regardless of whatever tunnel you use (lol)
2. i can get cPanel to cooperate with me in taking down offshore/bp hosts using cPanel, coz they already have the server IP records on their servers 👍
3. gre tunneling only covers up a part of the whole issue

regardless, i've already proven my point to not use cpanel for any illegal stuff. x-x

[Ghost Rider™]

cPanel is one of the most used control panel. I would suggest you to not drop idea of using cPanel unless you are extremely professional in using linux lamp server.

Use cloudflare dns hosting or setup reverse DNS and setup your own name servers.
You can pick any of the option above and use the cPanel by pointing IP to server IP.

For mails, I would suggest you to use third party mail service. I personally use google apps for business.

Best of luck for your site.

[StevesTrolls]

cPanel is one of the most used control panel. I would suggest you to not drop idea of using cPanel unless you are extremely professional in using linux lamp server.

Use cloudflare dns hosting or setup reverse DNS and setup your own name servers.
You can pick any of the option above and use the cPanel by pointing IP to server IP.

For mails, I would suggest you to use third party mail service. I personally use google apps for business.

Best of luck for your site.

I don't think that's the problem. He's posting about running a service, somewhere, some details will have to be provided to clients so they can connect, and there is bound to be an IP leak somewhere - either a client will abuse it, or someone will find it.

[wander is a multi dwc]

I might as well rephrase the thread's entire context later. No one's understanding my point ;_;

[Ghost Rider™]

I don't think that's the problem. He's posting about running a service, somewhere, some details will have to be provided to clients so they can connect, and there is bound to be an IP leak somewhere - either a client will abuse it, or someone will find it.

He can use reverse proxy to pass through connections. Please tell, what is OP actually trying to do ?? 😧

[StevesTrolls]

He can use reverse proxy to pass through connections. Please tell, what is OP actually trying to do ?? 😧

That's not the issue - reverse proxy Will not hide the main server IP. OP was discussing how it's almost impossible to run a BulletProof web host when using cPanel due to the sheer number of ways the main servers IP address can be leaked.

[wander is a multi dwc]

That's not the issue - reverse proxy Will not hide the main server IP. OP was discussing how it's almost impossible to run a BulletProof web host when using cPanel due to the sheer number of ways the main servers IP address can be leaked.

yes, this is what im trying to convey. anyhow, hold ur horses coz im rebuilding the thread soon

[Ghost Rider™]

yes, this is what im trying to convey. anyhow, hold ur horses coz im rebuilding the thread soon

Alright. I will be happy to help !

[Shockru]

Well,

The solution is to set-up GRE Tunnel with all protocols and set-up External IP like your 'Internal IP'.
On cpanel put your external IP for cPanel Verified and install cPanel using your external IP.

Something like put gre default on IP Route, so ALL traffic will pass through it, it includes mail,http,udp,tcp,icmp etc.