{"id":40852,"date":"2020-02-05T10:06:41","date_gmt":"2020-02-05T07:06:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/podkrovatnyj-hosting-zhutkaya-praktika-domashnih-hostingov"},"modified":"2020-02-05T10:06:41","modified_gmt":"2020-02-05T07:06:41","slug":"podkrovatnyj-hosting-zhutkaya-praktika-domashnih-hostingov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/podkrovatnyj-hosting-zhutkaya-praktika-domashnih-hostingov","title":{"rendered":"Under-the-bed hosting: a creepy practice of home hosting","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Under-the-bed
\n\"Under-bed\" hosting is a slang term for a server located in an ordinary residential apartment, connected to a home internet connection. Such servers usually hosted a public FTP server, the owner's personal webpage, and sometimes even a full hosting service for other projects. This phenomenon was common in the early days of accessible home internet via dedicated lines when renting a dedicated server in a data center was too expensive, and virtual servers were not yet widespread or convenient enough. <\/p>\n

Most often, an old computer was allocated for the \"under-bed\" server, where all found hard drives were installed. It could also function as a home router and firewall. Such a server was a must-have at home for anyone who respected themselves in the telecom industry.<\/p>\n

With the emergence of affordable cloud services, home servers became less popular, and today the maximum you can find in residential apartments is a NAS for storing photo albums, movies, and backups. <\/p>\n

This article discusses curious cases related to home servers and the problems encountered by their administrators. Let's see how this phenomenon looks today and pick out interesting things that can be hosted on your own under-bed server today.<\/p>\n

<\/a><\/noindex>
\n\"Under-the-bed
\nHousehold network servers in Nova Kakhovka. Photo from nag.ru<\/p>\n

<\/p>\n

Correct IP address<\/h2>\n

\n\"Under-the-bedThe main requirement for a home server was to have a real, i.e., routable from the internet IP address. Many providers did not offer this service to individuals, and obtaining one required special arrangements. Often, the provider demanded a separate contract for providing a dedicated IP. Sometimes this procedure even required creating a separate NIC Handle for the owner, making their name and home address accessible directly via the Whois command. Caution was necessary in online disputes, as the joke about \"tracing by IP\" ceased to be a joke. By the way, not long ago, there was a scandal with the provider Akado<\/a><\/noindex>, which decided to publish the personal data of all its clients in WhoIs. <\/p>\n

Static IP address vs DynDNS<\/h3>\n

\nIt's good if you were able to obtain a static IP address \u2014 then you could easily point all domain names to it and forget about it, but this was not always possible. Many large federal-scale ADSL providers only issued their clients real IP addresses for the duration of the session, meaning it could change either once a day or if the modem was rebooted or the connection dropped. In such cases, services like Dyn (dynamic) DNS came to the rescue. The most popular service Dyn.com<\/a><\/noindex>, which for a long time was free, allowed you to obtain a subdomain in the zone *.dyndns.org<\/b>, which could quickly update when the IP address changed. A special client-side script continuously pinged the DynDNS server and, if its outgoing address changed, the new address was immediately set in the A record of the subdomain.<\/p>\n

Closed Ports and Restricted Protocols<\/h2>\n

\n\"Under-the-bed Many providers, especially large ADSL ones, were against users hosting any public services on their addresses, thus prohibiting incoming connections on popular ports like HTTP. There are known cases where providers blocked ports for gaming servers like Counter-Strike and Half-Life. This practice is still common today, causing issues. For instance, nearly all providers block RPC and Windows NetBios ports (135-139 and 445) to prevent the spread of viruses, and often block incoming ports for the Email protocol SMTP, POP3, IMAP.<\/p>\n

Providers that offer IP telephony services alongside internet access like to block SIP protocol ports, forcing customers to use only their telephony services.<\/p>\n

PTR and Email Sending<\/h2>\n

\nHosting your own mail server is a separate large topic. Having a personal mail server under your bed that you have full control over is a very tempting idea. However, implementing it in practice has not always been feasible. Most IP address ranges from home providers are permanently blocked in spam lists (Policy Block List<\/a><\/noindex>), so mail servers simply refuse to accept incoming connections on SMTP from IP addresses of home providers. As a result, sending an email from such a server was nearly impossible. <\/p>\n

Additionally, for successful email delivery, it was necessary to establish a correct PTR record for the IP address, meaning the reverse mapping of the IP address to the domain name. The overwhelming majority of providers agreed to this only with special arrangements or through a separate contract. <\/p>\n

Looking for the under-bed servers of neighbors<\/h2>\n

\nUsing PTR records, we can see which of our neighbors on the IP addresses arranged for a special DNS record for their IP. For this, let's take our home IP address and execute the command whois<\/b>, and we will obtain the range of addresses that the provider hands out to clients. There can be many such ranges, but for the experiment, we will check one. <\/p>\n

In our case, it is the provider Onlime (Rostelecom). Let's go to 2ip.ru<\/a><\/noindex> and get our IP address:
\n\"Under-the-bed
\nBy the way, Onlime is one of those providers that always assigns clients a permanent IP, even without the dedicated IP service activated. As a result, the address might remain unchanged for months.<\/i><\/p>\n

We will resolve the entire address range 95.84.192.0\/18 (about 16 thousand addresses) using nmap. The option -sL<\/b> essentially does not perform active host scanning, but simply sends DNS queries, so in the results, we will only see lines containing the domain linked to the IP address. <\/p>\n

$ nmap -sL -vvv 95.84.192.0\/18\n\n......\nNmap scan report for broadband-95-84-195-131.ip.moscow.rt.ru (95.84.195.131)\nNmap scan report for broadband-95-84-195-132.ip.moscow.rt.ru (95.84.195.132)\nNmap scan report for broadband-95-84-195-133.ip.moscow.rt.ru (95.84.195.133)\nNmap scan report for broadband-95-84-195-134.ip.moscow.rt.ru (95.84.195.134)\nNmap scan report for broadband-95-84-195-135.ip.moscow.rt.ru (95.84.195.135)\nNmap scan report for mx2.merpassa.ru (95.84.195.136)\nNmap scan report for broadband-95-84-195-137.ip.moscow.rt.ru (95.84.195.137)\nNmap scan report for broadband-95-84-195-138.ip.moscow.rt.ru (95.84.195.138)\nNmap scan report for broadband-95-84-195-139.ip.moscow.rt.ru (95.84.195.139)\nNmap scan report for broadband-95-84-195-140.ip.moscow.rt.ru (95.84.195.140)\nNmap scan report for broadband-95-84-195-141.ip.moscow.rt.ru (95.84.195.141)\nNmap scan report for broadband-95-84-195-142.ip.moscow.rt.ru (95.84.195.142)\nNmap scan report for broadband-95-84-195-143.ip.moscow.rt.ru (95.84.195.143)\nNmap scan report for broadband-95-84-195-144.ip.moscow.rt.ru (95.84.195.144)\n.....\n<\/code><\/pre>\n
\nAlmost all addresses have a standard PTR record of the form broadband-address.ip.moscow.rt.ru<\/b> except for a couple, among which is mx2.merpassa.ru<\/b>. Judging by the subdomain mx, this is a mail server (mail exchange). Let's try to check this address with the service SpamHaus<\/a><\/noindex><\/p>\n
\"Under-the-bed
\nIt is clear that the entire range of IPs is in a permanent blocklist, and emails sent from this server will very rarely reach the recipient. Keep this in mind when choosing a server for outgoing mail.<\/p>\n
Keeping a mail server within the IP range of your home provider is always a bad idea. Such a server will have problems sending and receiving emails. Keep this in mind if your system administrator suggests deploying a mail server directly on the office IP address.
\nUse either real hosting or an email service. This way, you will have to call less often to check whether your messages have been delivered. \n<\/p><\/blockquote>\n
Hosting on a WiFi router<\/h2>\n
\nWith the advent of single-board computers like Raspberry Pi, it's no longer surprising to find a website running on a device the size of a pack of cigarettes, but even before Raspberry Pi, enthusiasts were launching homepages directly on WiFi routers! 
\n\"Under-the-bed
\n The legendary WRT54G router, which kickstarted the OpenWRT project in 2004<\/p>\n
The Linksys WRT54G router, which initiated the OpenWRT project, did not have USB ports; however, savvy users discovered GPIO pins inside that could be used as SPI. This led to a mod that added an SD card to the device. This opened up vast possibilities for creativity. I personally remember how, with little soldering skill, I connected an SD card to this router. Later, routers would have USB ports and you could simply insert a flash drive. <\/p>\n
Once, there were several projects online that were entirely hosted on home WiFi routers, which will be noted below. Unfortunately, I couldn't find a single live website. Perhaps you know some?\n<\/p><\/blockquote>\n
Server cabinets made from IKEA tables<\/h2>\n
\n\"Under-the-bed
\nSomeone once discovered that the popular IKEA coffee table called Lack is perfect for standing standard 19-inch servers. Priced at $9, this table became very popular for creating home data centers. This mounting method is called Lack Rack<\/a><\/noindex>. <\/p>\n
\"Under-the-bed
\nThe IKEA Lack table is perfect as an alternative to a server rack<\/p>\n
Tables could be stacked on top of each other, creating real server cabinets. Unfortunately, due to the fragile particle board, the tables would collapse under the weight of heavy servers. To ensure stability, they were reinforced with metal brackets.<\/p>\n
\"Under-the-bed
\n<\/p>\n
How school students deprived me of the internet<\/h2>\n
\nLike everyone else, I also had my own under-bed server running a simple forum dedicated to gaming topics. Once, an unhappy student, upset about being banned, rallied his friends, and they started DDoSing my forum from their home computers. Since my internet connection at the time was around 20 megabits, they managed to completely paralyze my home internet. No firewall blocks helped because it resulted in total bandwidth exhaustion.
\nIt looked very funny from the outside:<\/p>\n
\u2014 Hello, why aren't you responding to me on ICQ? 
\n\u2014 Sorry, no internet, I'm being DDoSed.<\/b><\/p>\n
Inquiries to the provider didn\u2019t help; they replied that handling this wasn't their responsibility, and they could only block all incoming traffic for me. So I spent two days without internet until the attackers got bored. <\/p>\n
Conclusion<\/h2>\n
\nThere was supposed to be a collection of modern P2P services that can be deployed on a home server, like ZeroNet, IPFS, Tahoe-LAFS, BitTorrent, I2P. But my opinion has changed significantly over the last couple of years. I now believe that hosting any public services on a home IP address, especially those that involve user-uploaded content, poses an unreasonable risk for all residents living in the apartment. Now I advise to completely restrict incoming connections from the internet, avoid dedicated IP addresses, and keep all my projects on remote servers online.<\/p>\n
\"Under-the-bed
\n<\/a><\/noindex><\/p>\n
Follow our developer on Instagram<\/h3>\n
\n\"Under-the-bed<\/a><\/noindex>
\n
Source: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u00ab\u041f\u043e\u0434\u043a\u0440\u043e\u0432\u0430\u0442\u043d\u044b\u0439\u00bb \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u2014 \u0436\u0430\u0440\u0433\u043e\u043d\u043d\u043e\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043e\u0431\u044b\u0447\u043d\u043e\u0439 \u0436\u0438\u043b\u043e\u0439 \u043a\u0432\u0430\u0440\u0442\u0438\u0440\u0435 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0433\u043e \u043a \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043a\u0430\u043d\u0430\u043b\u0443. \u041d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 FTP-\u0441\u0435\u0440\u0432\u0435\u0440, \u0434\u043e\u043c\u0430\u0448\u043d\u044f\u044f \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043a\u0430 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0438 \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u0430\u0436\u0435 \u0446\u0435\u043b\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432. \u042f\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043e \u0432 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u0434\u043e\u043c\u0430\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u043f\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043a\u0430\u043d\u0430\u043b\u0443, \u043a\u043e\u0433\u0434\u0430 \u0430\u0440\u0435\u043d\u0434\u0430 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0432 \u0434\u0430\u0442\u0430-\u0446\u0435\u043d\u0442\u0440\u0435 \u0431\u044b\u043b\u0430 \u0441\u043b\u0438\u0448\u043a\u043e\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":40853,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-40852","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Under-bed Hosting: A Horrible Practice of Home Hosting | ProHoster","description":"\u201cUnder-bed\u201d hosting is jargon.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/podkrovatnyj-hosting-zhutkaya-praktika-domashnih-hostingov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0434\u043a\u0440\u043e\u0432\u0430\u0442\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433: \u0436\u0443\u0442\u043a\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432 | ProHoster","og:description":"\u00ab\u041f\u043e\u0434\u043a\u0440\u043e\u0432\u0430\u0442\u043d\u044b\u0439\u00bb \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u2014 \u0436\u0430\u0440\u0433\u043e\u043d\u043d\u043e\u0435.","og:url":"https:\/\/prohoster.info\/en\/blog\/podkrovatnyj-hosting-zhutkaya-praktika-domashnih-hostingov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-05T07:06:41+00:00","article:modified_time":"2020-02-05T07:06:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"40852","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:29:47","updated":"2022-10-04 17:44:29","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/40852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=40852"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/40852\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/40853"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=40852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=40852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=40852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}