OP 01 July, 2020 - 11:15 AM
I think there's a lot of misunderstanding when it comes to bulletproof setups. Most of the sellers advertise their service as offshore spoofed bulletproof servers, but then ban you for having a spamhaus report.
That's why I'm going to show you how to do a "bulletproof" setup. This is just a simple reverse proxy and NOT a real bulletproof setup. But this setup will save your backend from any abuses. Your domain will be suspended anyway and your reverse proxy too. But domains and proxies can be replaced quickly and are cheap. Your backend files remain untouched and you don't have to do your setup again. This is for HTTP/S only.
We'll need the following:
1 cheap server that'll be our reverse proxy
1 server for our backend
1 cloudflare account to annoy spamhaus a little bit more
lots of domains
Where should I buy domains from?
Go with nic.ru or rdn.name. The domains are not bulletproof and they'll instantly suspend you for spamhaus reports, but these providers will not ban your account. It's less annoying then. Your fugging domains will get suspended anyway, so don't fall for bulletproof domain providers. It doesn't matter if you're buying .su (which requires ID verification by the way), .ru or .to. Price is normally higher and spamhaus reports will get your domains suspended for sure. Some domains are better for DMCA though. Sometimes free domains are even better due to slow abuse department.
Where should I buy servers from?
Just stay away from providers that pretend to be bulletproof. They're mostly scammers and resellers. There are some legit sellers though.
Let's go! What does our setup look like now?
Our setup will look like this in the end:
domain.com -> cloudflare -> reverse proxy -> backend
What will happen in case of abuse/spamhaus listing?
Spamhaus will put your domain on their useless list. Sometimes they will even contact cloudflare for the backend IP and put that IP on their list too. But literally every provider will give you your server back for the first abuse. Just wait for spamhaus to remove the listing before using it again. Getting your server back takes 1-3 days depending on the reply times of your hosting provider. Buy another server in the meantime, create a new cloudflare account and setup the reverse proxy again. Takes 2 minutes.
And keep your suspended domains in the stub. They'll remove the listing after 2-3 months automatically and you'll get your domain back.
Important tip: Don't configure all your domains from beginning. Working backup domains will be suspended too. If they're just registered and not having any records, they'll just do nothing. You don't even have to register your domains. Just put enough of them into your stub and don't do the setup for all of them.
Let's start with the server that'll be our reverse proxy:
That's why I'm going to show you how to do a "bulletproof" setup. This is just a simple reverse proxy and NOT a real bulletproof setup. But this setup will save your backend from any abuses. Your domain will be suspended anyway and your reverse proxy too. But domains and proxies can be replaced quickly and are cheap. Your backend files remain untouched and you don't have to do your setup again. This is for HTTP/S only.
We'll need the following:
1 cheap server that'll be our reverse proxy
1 server for our backend
1 cloudflare account to annoy spamhaus a little bit more
lots of domains
Where should I buy domains from?
Go with nic.ru or rdn.name. The domains are not bulletproof and they'll instantly suspend you for spamhaus reports, but these providers will not ban your account. It's less annoying then. Your fugging domains will get suspended anyway, so don't fall for bulletproof domain providers. It doesn't matter if you're buying .su (which requires ID verification by the way), .ru or .to. Price is normally higher and spamhaus reports will get your domains suspended for sure. Some domains are better for DMCA though. Sometimes free domains are even better due to slow abuse department.
Where should I buy servers from?
Just stay away from providers that pretend to be bulletproof. They're mostly scammers and resellers. There are some legit sellers though.
Let's go! What does our setup look like now?
Our setup will look like this in the end:
domain.com -> cloudflare -> reverse proxy -> backend
What will happen in case of abuse/spamhaus listing?
Spamhaus will put your domain on their useless list. Sometimes they will even contact cloudflare for the backend IP and put that IP on their list too. But literally every provider will give you your server back for the first abuse. Just wait for spamhaus to remove the listing before using it again. Getting your server back takes 1-3 days depending on the reply times of your hosting provider. Buy another server in the meantime, create a new cloudflare account and setup the reverse proxy again. Takes 2 minutes.
And keep your suspended domains in the stub. They'll remove the listing after 2-3 months automatically and you'll get your domain back.
Important tip: Don't configure all your domains from beginning. Working backup domains will be suspended too. If they're just registered and not having any records, they'll just do nothing. You don't even have to register your domains. Just put enough of them into your stub and don't do the setup for all of them.
Let's start with the server that'll be our reverse proxy:
apt-get install apache2
apt-get install build-essential -y
apt-get install libapache2-mod-proxy-html libxml2-dev -y
a2enmod
proxy proxy_ajp proxy_http rewrite deflate headers proxy_balancer proxy_connect proxy_html
apt-get install nano
nano /etc/apache2/sites-enabled/000-default.conf (path could be different depending on actual OS)
Put the following lines into there:
ProxyPass / http://backend_ip:80/
ProxyPassReverse / http://backend_ip:80/
service apache2 restart
Final setup:
Put a test file on your backend server and check if your reverse proxy is redirecting you to the backend server.
The IP address of the request isn't going to be changed, just fyi.
Register a cloudflare account with some type of shit mail. You don't even need to confirm it. Temp-mail.org is perfect if you want to confirm your mail anyway.
Now add your domain and specify an A record to your reverse proxy. It's good to add two A records. One for www and one for @.
Probably enable SSL in cloudflare. This looks more legit and takes a few seconds. You don't need to install anything. Your domains will get suspended anyway, so this isn't needed, but anyway...
Some providers that are working fine as reverse proxy:
https://www.hetzner.de/ (sometimes quite slow when it comes to abuses)
https://blazingfast.io/ (don't use this for your backend because higher CPU on them load will lead to a lot of crashes)
http://www.racknation.cr/
...
Some providers for your backend that don't break your privacy and scan files:
https://www.crservers.com/
https://www.justhost.in.ua/
https://vinahost.vn/
https://www.hetzner.de/ (fine for backend too, don't pick hetzner as reverse proxy when using it as backend)
https://www.ipserver.su/en (reseller, but prices are okay and payment in bitcoin is possible)
https://www.shinjiru.com/
...
What you should've learned:
Don't fall for bulletproof providers. Especially when it comes to bulletproof domains. Spend $20 and do your own little setup.
Basically no domain is bulletproof. DMCA is another thing. Don't tell me your r01 shit is bulletproof.
Use at least 5-10 backup domains. Everything else is retarded.
Don't message Spamhaus to remove your listing. This is just a waste of time.
apt-get install build-essential -y
apt-get install libapache2-mod-proxy-html libxml2-dev -y
a2enmod
proxy proxy_ajp proxy_http rewrite deflate headers proxy_balancer proxy_connect proxy_html
apt-get install nano
nano /etc/apache2/sites-enabled/000-default.conf (path could be different depending on actual OS)
Put the following lines into there:
ProxyPass / http://backend_ip:80/
ProxyPassReverse / http://backend_ip:80/
service apache2 restart
Final setup:
Put a test file on your backend server and check if your reverse proxy is redirecting you to the backend server.
The IP address of the request isn't going to be changed, just fyi.
Register a cloudflare account with some type of shit mail. You don't even need to confirm it. Temp-mail.org is perfect if you want to confirm your mail anyway.
Now add your domain and specify an A record to your reverse proxy. It's good to add two A records. One for www and one for @.
Probably enable SSL in cloudflare. This looks more legit and takes a few seconds. You don't need to install anything. Your domains will get suspended anyway, so this isn't needed, but anyway...
Some providers that are working fine as reverse proxy:
https://www.hetzner.de/ (sometimes quite slow when it comes to abuses)
https://blazingfast.io/ (don't use this for your backend because higher CPU on them load will lead to a lot of crashes)
http://www.racknation.cr/
...
Some providers for your backend that don't break your privacy and scan files:
https://www.crservers.com/
https://www.justhost.in.ua/
https://vinahost.vn/
https://www.hetzner.de/ (fine for backend too, don't pick hetzner as reverse proxy when using it as backend)
https://www.ipserver.su/en (reseller, but prices are okay and payment in bitcoin is possible)
https://www.shinjiru.com/
...
What you should've learned:
Don't fall for bulletproof providers. Especially when it comes to bulletproof domains. Spend $20 and do your own little setup.
Basically no domain is bulletproof. DMCA is another thing. Don't tell me your r01 shit is bulletproof.
Use at least 5-10 backup domains. Everything else is retarded.
Don't message Spamhaus to remove your listing. This is just a waste of time.