Server IP blocked by China Great Firewall

R

rsbenedict

Verified User
Joined
Sep 27, 2008
Messages
36
For whatever reason the main server IP on one of my servers was blocked by the Chinese government and I had to switch all of my Chinese accounts to a new IP.

Without getting a new box, I would like to isolate my Chinese clients from my non-Chinese clients, so I don't want to change my server IP.

Is there a way that I can set up new Chinese reseller accounts with this alternative shared IP so that the reseller account and all the account they create use this IP rather than the server IP?

I also don't want to go the route of giving a dedicated IP to each client.

Any ideas, solutions?
 
Create one shared IP# and give it to all your Chinese. Note that email will still come from your main server IP#. While I'm not sure, I believe that http may still come from the main server IP# as well.

To fix the email issue find the thread on these forums which discusses assigning IP#s to exim based on domain name.

And remember of course that you may have a Chinese client doing something that China doesn't like, in which case it'll happen again.

Jeff
 
That's what I've currently done, but the problem is when the resellers create accounts, they all get created on the server IP and then I have to manually go in and change them to the other IP. I can't keep doing this for every account that my resellers open up. I have no idea when they get new accounts and some of the are quite prolific and opening accounts.
 
Then put them all under one reseller account and assign only the IP# shared by users of that reseller account.

Jeff
 
I don't understand what you're saying here. These are all reseller accounts in their own right. If I put them under one reseller account, then they don't have reseller access and can't create accounts under them. Right now, we've been manually moving accounts to the new IP each time a reseller opens a new account, but this is a manual and very tedious solution.
 
Sorry I misunderstood you. Can you set up each reseller with his/her own IP# and allow him/her to create accounts only with that IP#?

Will that work for you?

Jeff
 
Thanks, but I think there's no way to do this without getting a whole new set of IPs.

I don't want to incur the cost of getting a new IP for every reseller account on the system. It's too costly and cuts into the profits and we already run on low margins. On top of that, because of IP rules, our DC is very strict when it comes to getting IP blocks and each one has to be 100% justified and reseller accounts don't qualify under ARINs rules. If they're not getting an SSL cert, setting up a mail server, an anonymous ftp server, etc., our DC won't release IPs.
 
With cPanel, you get have them use an alternative IP, and not the server IP and I was hoping that something like that could be done with DA.

I love DA and it's my preferred panel and this is the first thing that I have found where cPanel handled the situation better than DA.
 
I might be wrong but my understanding is that you can set up a reseller with a shared reseller-IP#.

Jeff
 
Do you know how to go about it?

I currently have to move all of my chinese reseller accounts manually to a new shared IP, but they can't create accounts on that IP. When they create an account, it gets created on the server IP and then I have to manually move all of their sub accounts to that IP as well. It's very tedious especially when they are very active reseller accounts.
 
Hello,

1) When creating a Reseller, if you do not wish them to have access to the server IP, ensure that the "Share Server IP" option is not selected in the Reseller Package.

2) If a Reseller account has already been created, and currently has the server IP, but you wish to remove access of the Server IP from his account, you'd need to manually edit this file, and remove the IP from it:
/usr/local/directadmin/data/users/reseller/ip.list

3) Add the extra IP to the Reseller account normally:
Admin Level -> IP Management

select the free, unassigned IP, and click "Assign To", with the Reseller selected.

4) In order to be able to use this extra IP for multiple User under this Reseller, it must be set as shared. Login as that Reseller, go to:
Reseller Level -> IP Management

select the IP, and click "Share Selected". Failure to set an IP as shared before assigning it to a User will result in that IP becoming "owned", and no other User can be on it. When you set it to be shared, then you can have many Users on that one IP, just like the server IP.

John
 
Hi, John!

I understand how to do this, but is there a way to share the SAME IP amongst more than one reseller and have all of their sub accounts also use that SAME IP. What I want to do is have server IP function to a non-server IP so that I can assign more than one reseller account to the same shared IP and all of their sub accounts that they create will also automatically use that same IP.

What you're talking about here is to give each reseller their own IP and I can't do that with the DC that I'm currently at, and even if I could, that would be cost-prohibitive.

Thanks!
 
You must log in or register to reply here.
Back
Top