Results 1 to 16 of 16
  1. #1

    MAIL servers hostname, they will catch you!!

    I just found out that even though my reseller provider promises 100% anonymous service my users still see their hostname in the e-mail headers , which is not the same as their main website but a random name. The thing is that since that domain doesnt match MY domain people might get suspicious and google it .. well I did that exact same thing and guess what I found..., many posts on forums talking about my provider and that hostname.... Isnt this a really bad thing and how do you deal with this? I also learned from my host that a dedicated IP would not solve this since it is only one domain per mailserver, per server.

  2. #2
    Greetings:

    Setting up 100% guaranteed anonymous services for a reseller would be a very huge investment.

    The IP addresses assigned to the reseller would have to be swiped so they appear to be owned by the reseller if some one did an ARIN (or related – LATNIC, APNIC, RIPE) look up -- http://www.arin.net/whois/index.html.

    If the provider, or even you as the reseller, are not careful, google.com can be used to determine not only vulnerabilities (called “google hacking” – at least that is what sans.org calls it), but also identification.

    You also have hostnames, email server greetings, and more.

    I guess the bottom line is that if being anonymous is required, you are probably looking at a dedicated or co-located server in terms of coming close on your own (you still have the IP ownership issue).

    Thank you.
    ---
    Peter M. Abraham
    LinkedIn Profile

  3. #3
    Join Date
    Sep 2002
    Location
    Earth
    Posts
    2,533
    If the IP space is owned by your datacentre - problems solved

  4. #4
    Greetings:

    As long as any marketing literature speak truthfully about the data center ownership, then the problem is solved under those circumstances.


    Thank you.
    ---
    Peter M. Abraham
    LinkedIn Profile

  5. #5
    Join Date
    Apr 2004
    Posts
    72
    In an email message, there is often headers such as:

    Return-path: <ResellerUsername@something.DisguisedHostName.com>
    Received: from reseller by something.DisguisedHostName.com with ...

    And often doing a whois or searching on the net for DisguisedHostName will reveal who the real host is.

    Isn't there any way for the host to configure the mail server to mask DisguisedHostName in the mail headers by substituting it with the resellers domain name instead?

  6. #6

    i wonder the same thing

    I am wondering the same thing myself.

  7. #7
    Greetings:

    Yes, if you had your own mail server through them.

    Thank you.
    ---
    Peter M. Abraham
    LinkedIn Profile

  8. #8
    Will a VPS allow me to have my own mailserver hostname?

  9. #9
    Join Date
    Jun 2002
    Location
    Waco, TX
    Posts
    5,623
    Just of quick note, when you have mail, you need rDNS, when you have rDNS you have to present a real name, and it is not intelligent enough to know "oh that is a reseller" and send the correct rDNS, so it must be set on one domain.

    I guess if you wanted all mail to go via a vps, and you could configure a mailserver yourself, you could do that, but don't expect and control panel integration to that.

  10. #10
    Join Date
    Dec 2004
    Location
    New York, NY
    Posts
    10,710
    Originally posted by earthdance
    Will a VPS allow me to have my own mailserver hostname?
    Yes. A VPS allows your own hostname. But, if you offer your own resellers and have a branded hostname it's even worse .

    -GSV
    MediaLayer, LLC - www.medialayer.com Learn how we can make your website load faster, translating to better conversion rates for your business!
    The pioneers of optimized web hosting, featuring LiteSpeed Web Server & SSD Storage - Celebrating 10 Years in Business

  11. #11
    Join Date
    Apr 2004
    Posts
    72
    So there is no real 100% anonimity for the reseller. Why do hosts claim that then?

    Even with DisguisedHostName.com being registered with no information linking back to the host, someone could post somewhere saying "My host is XYZ Hosting and they asked me to use nsX.DisguisedHostName.com" as my name servers...". and that would be enough to do the damage.

  12. #12

    hm

    So the only solution to this is going Dedicated or VPS?

  13. #13
    Join Date
    Apr 2004
    Location
    Houston
    Posts
    527
    If your client searched that hostname and get 2,000 results listing 1,000 different companies using that hostname, how will they know which company it belongs to?
    IO Zoom
    https://www.iozoom.com

  14. #14
    Join Date
    Oct 2002
    Location
    EU - east side
    Posts
    21,920
    If your client searched that hostname and get 2,000 results listing 1,000 different companies using that hostname, how will they know which company it belongs to?
    Who it belongs to is rather unimportant. Based on those results the client can consider that chances are he's a reseller, and I believe that's basically all that matters (in terms of our discussion here at least).

    Most such customers (who investigate in such depth) don't really care who the upstream provider is, but whether the host is (or might be) a reseller or not. We've all read the posts where people state "I don't want a reseller."

  15. #15
    Join Date
    Apr 2004
    Location
    Houston
    Posts
    527
    Originally posted by ldcdc
    Who it belongs to is rather unimportant. Based on those results the client can consider that chances are he's a reseller, and I believe that's basically all that matters (in terms of our discussion here at least).

    Most such customers (who investigate in such depth) don't really care who the upstream provider is, but whether the host is (or might be) a reseller or not. We've all read the posts where people state "I don't want a reseller."
    You have a point but that still doesn't mean that the account isn't anonymous as originally posted and what I believe the OP was concerned about.
    IO Zoom
    https://www.iozoom.com

  16. #16
    Join Date
    Mar 2002
    Location
    In My Own World
    Posts
    973
    I would hope that you are not trying to push on your clients that you have control over the servers that their website is on... if you are doing that as a reseller then there are more problems to deal with than anonomous web/mail/dns etc services.

    Tracy Phillips

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •