Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Fri Nov 02, 2012 1:16 pm 
Offline
Senior Member

Joined: Tue Aug 14, 2012 5:55 pm
Posts: 82
Is it possible for anybody to see how many websites are shared with another website ?

If so, how can I hide this so if example1.com and example2 are on the same server, no one should know this fact ?

Thanks for any help.


Top
   
PostPosted: Fri Nov 02, 2012 1:52 pm 
Offline

Joined: Fri Nov 02, 2012 1:45 pm
Posts: 1
Yes, using a reverse IP lookup someone can see get a list of other websites running on that server.

You could try masking this to an extent by using something like cloudflare as a "CDN"/DNS. It's free. When checking the IP address of your site a user would then get cloudflare's IP instead of your server IP.


Top
   
PostPosted: Fri Nov 02, 2012 6:26 pm 
Offline
Senior Member
User avatar

Joined: Sat Aug 30, 2008 1:55 pm
Posts: 1739
Location: Rochester, New York
Worth noting, for clarity: A reverse DNS lookup will (generally) only show you the hostname of the server itself. However, if someone goes through the effort of doing a forward DNS lookup on a large number of domains, it will be possible for them to create (and publish) a list of many of the A records that point to a given IP address, e.g. 173.194.75.99.

It turns out that 99% of people don't know enough to do this, and the remaining 1% don't really give a damn. It's the way things are. If a customer wants to prevent this sort of thing from being possible, moving their site to their own Linode would probably be the most reliable approach. (You gotta pay for post office boxes, right?)

_________________
Code:
/* TODO: need to add signature to posts */


Top
   
PostPosted: Fri Nov 02, 2012 8:03 pm 
Offline
Senior Member

Joined: Tue Aug 14, 2012 5:55 pm
Posts: 82
Thanks for the replies.

Well, all the client is looking for is not to have his website associated with one of his own other website (in eyes of public). Both sites resides currently on same linode.

Can I safely keep both of em on same box since as per hoopycat, its something very technical ?


Top
   
PostPosted: Fri Nov 02, 2012 8:10 pm 
Offline
Senior Member
User avatar

Joined: Tue May 26, 2009 3:29 pm
Posts: 1691
Location: Montreal, QC
Well, it's very easy for somebody to confirm if they suspect to begin with. If somebody notices that when they do "ping sitea.com" and "ping siteb.com" they get the same IP address, the gig is up.


Top
   
PostPosted: Fri Nov 02, 2012 9:17 pm 
Offline
Senior Member
User avatar

Joined: Sun Dec 27, 2009 11:12 pm
Posts: 1038
Location: Colorado, USA
I have no clue why this would be a concern.

Most people can't spell IP let alone tell you what it really means.

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.


Top
   
PostPosted: Sun Nov 04, 2012 4:26 am 
Offline
Senior Member

Joined: Tue Aug 14, 2012 5:55 pm
Posts: 82
Quote:
Well, it's very easy for somebody to confirm if they suspect to begin with. If somebody notices that when they do "ping sitea.com" and "ping siteb.com" they get the same IP address, the gig is up.


very right. But thats when user particularly guess about siteb knowing sitea. Well all we are looking for is that anybody knowing about just the sitea, can't find out, which other websites are hosted along side. Consider it as, if cutekittens.com and pentagon.com are hosted on same server, a frequent user of cutekittens can't find what other list of websites are being hosted with it.

Hopefully, I made it more clear.


Top
   
PostPosted: Sun Nov 04, 2012 5:00 am 
Offline
Senior Member

Joined: Fri Feb 17, 2012 8:20 pm
Posts: 365
sami1255 wrote:
Quote:
Well, it's very easy for somebody to confirm if they suspect to begin with. If somebody notices that when they do "ping sitea.com" and "ping siteb.com" they get the same IP address, the gig is up.


very right. But thats when user particularly guess about siteb knowing sitea. Well all we are looking for is that anybody knowing about just the sitea, can't find out, which other websites are hosted along side. Consider it as, if cutekittens.com and pentagon.com are hosted on same server, a frequent user of cutekittens can't find what other list of websites are being hosted with it.

Hopefully, I made it more clear.


Whois.domaintools can do what you describe to some extend, e.g. http://www.domaintools.com/research/rev ... witter.com


Top
   
PostPosted: Sun Nov 04, 2012 11:35 am 
Offline
Senior Member

Joined: Tue Aug 14, 2012 5:55 pm
Posts: 82
Quote:
Whois.domaintools can do what you describe to some extend, e.g. http://www.domaintools.com/research/rev ... witter.com


Thats exactly what me or my client are fearing. How can I avoid this considering I don't want to get another linode. 20-25$ isn't a big deal but I already have 4 linodes and me being new in linux administration, its already too much of a work to add a new linode.

Will really appreciate some guidance.


Top
   
PostPosted: Sun Nov 04, 2012 12:53 pm 
Offline
Senior Newbie

Joined: Sun Nov 04, 2012 12:41 pm
Posts: 5
In the "Extras" tab of your dashboard, you can buy additional IP addresses for $1/month. Might do the trick.


Top
   
PostPosted: Sun Nov 04, 2012 12:59 pm 
Offline
Senior Member

Joined: Wed Oct 20, 2010 12:35 pm
Posts: 111
Location: United Kingdom
davidhbrown wrote:
In the "Extras" tab of your dashboard, you can buy additional IP addresses for $1/month. Might do the trick.


Except this would not be a reasonable use of IP addresses and the request would be declined. We are running out of addresses you know :).


Top
   
PostPosted: Sun Nov 04, 2012 1:14 pm 
Offline
Senior Newbie

Joined: Sun Nov 04, 2012 12:41 pm
Posts: 5
Cromulent wrote:
davidhbrown wrote:
We are running out of addresses you know :).

Fair enough. Actually, I thought we already had run out of addresses. Hopefully my ISP will finally enable IPv6 in 2013 and I will finally be able to enable and test it on my Linode soon.


Top
   
PostPosted: Sun Nov 04, 2012 2:08 pm 
Offline
Junior Member

Joined: Tue Feb 03, 2004 2:37 pm
Posts: 26
sami1255 wrote:
Thats exactly what me or my client are fearing.

You could also look into using a CDN (Content Delivery Network) like cloudflare.com to obfuscate your website IP addresses.


Top
   
PostPosted: Sun Nov 04, 2012 5:23 pm 
Offline
Senior Member
User avatar

Joined: Sun Dec 27, 2009 11:12 pm
Posts: 1038
Location: Colorado, USA
You could educate your client and let him know how stupid that fear is. The web has a bazillion shared hosts out there with lots and lots and lots of websites all on one ip.

And there are dozens (if not hundreds) of sites that will tell you which other websites are on your IP - so it's neither an obscure bit of research or rocket science to figure it out.

Either your client can gain some common sense and worry about real scary things instead of "OMG I'm sharing an IP" or he can pony up the money for his own host. Pick one and live with it.

_________________
Either provide enough details for people to help, or sit back and listen to the crickets chirp.
Security thru obscurity is a myth - and really really annoying.


Top
   
PostPosted: Sun Nov 04, 2012 5:57 pm 
Offline
Junior Member

Joined: Tue Feb 03, 2004 2:37 pm
Posts: 26
vonskippy wrote:
You could educate your client and let him know how stupid that fear is.

Rational discussion is out the window once a client sees both business.com and horseboners.com on the same IP.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: mattltm and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group