Reverse Proxy for client only

[stevier]

I have a ubuntu VPS that I want to make it where it'll be used for a reverse proxy so I don't have to have my server IP on the client (So it uses my VPS IP that has reverse proxy and the VPS connects to the other server that actually has the emulator), how do I do this exactly?

[MentaL]

[Pastie]

Hello there buddy.
I did this a while back ago running CentOS 6. I was using the program HAProxy which is a TCP Server program for Linux. I have never done it for ubuntu, but I assume it's pretty much the same as for CentOS. Anyway, the recommended RAM for this program is 4GB.
Anyway, here's a tutorial on how to install it on CentOS 5 and 6: http://www.rackspace.com/knowledge_c...ing-up-haproxy

If you do not have a CentOS server and for some reason can't manage to install it on Ubuntu, just send me a PM and I'll fix it for you :)

Thanks,
Zooiki.

[stevier]

Hello there buddy.
I did this a while back ago running CentOS 6. I was using the program HAProxy which is a TCP Server program for Linux. I have never done it for ubuntu, but I assume it's pretty much the same as for CentOS. Anyway, the recommended RAM for this program is 4GB.
Anyway, here's a tutorial on how to install it on CentOS 5 and 6: http://www.rackspace.com/knowledge_c...ing-up-haproxy

If you do not have a CentOS server and for some reason can't manage to install it on Ubuntu, just send me a PM and I'll fix it for you :)

Thanks,
Zooiki.

I tried that, didn't work.

[Pastie]

Did you try the tutorial I gave you on Ubuntu? If so, it's for CentOS and not Ubuntu. Anyway, google is your friend.

Thanks,
Zooiki.

[Mathis Hbx]

Use this http://forum.ragezone.com/f335/tut-d...torial-959382/

[Droppy]

Instead of proxy, why not hiding the IP in the SWF?

[mateuscm]

Instead of proxy, why not hiding the IP in the SWF?

Interesting, how could that be done?

[Droppy]

Interesting, how could that be done?

Which version are you on?

Same goes to the OP ( @stevier )

[Hayd3n]

Interesting, how could that be done?

Hiding it in your swf wont do much, all they need to do is load client then run netstat -n in cmd

[Crab]

Droppy, not the best way to hide your IP but meh

[stevier]

I tried it on CentOS, I switched it from Ubuntu and it didn't work.

- - - Updated - - -

I tried that tutorial already as well and it didn't work and it's centos 6. (The one tutorial Mathis gave)

[Droppy]

Droppy, not the best way to hide your IP but meh

Use proxies won't help much. And it's a paid option. You always will be able to obfuscate the SWF, and compress it. Most of habbo kiddoes won't even think about opening the swf if you have an fake valid ip in place (such as a cloudflare or w.e)

[Spot Ify]

You can also use iptables as proxy

here is a example ps I didn't add any firewall rules but you can just google that by yourself or you can use a "ddos protected" server

#!/bin/bash         

echo "Stopping firewall and allowing everyone..."
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
echo "Setting up the firewall"
// firewall rules here


sysctl net.ipv4.ip_forward=1
iptables -t nat -A PREROUTING  -p tcp -m tcp -d #antiddosserverip# --dport 8080 -j DNAT --to-destination #emulatorserver #:#emulatorPort#
iptables -t nat -A POSTROUTING -j MASQUERADE

and @Droppy peaple doesnt have to deobfucate it you can also see it with netstat ;p

PS I don't recommed to use a proxy or adding the ip to the swf if you have a 200+ retro just buy a good dedicated server <_<


Oh and btw this is the fastest way of setting up a proxy ;p
You can also install a vpn server on it and use this server as a "router" for that you need to edit #emulatorserver # to the local VPN ip like (192.168.0.100)
The vpn methode is little bit like hamachi because you don't have to forward your ports for it and you just get the real ip's.

[Droppy]

You can also use iptables as proxy

here is a example ps I didn't add any firewall rules but you can just google that by yourself or you can use a "ddos protected" server

#!/bin/bash         

echo "Stopping firewall and allowing everyone..."
iptables -F
iptables -X
iptables -t nat -F
iptables -t nat -X
iptables -t mangle -F
iptables -t mangle -X
iptables -P INPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
echo "Setting up the firewall"
// firewall rules here


sysctl net.ipv4.ip_forward=1
iptables -t nat -A PREROUTING  -p tcp -m tcp -d #antiddosserverip# --dport 8080 -j DNAT --to-destination #emulatorserver#:#emulatorPort#
iptables -t nat -A POSTROUTING -j MASQUERADE

and @Droppy peaple doesnt have to deobfucate it you can also see it with netstat ;p

PS I don't recommed to use a proxy or adding the ip to the swf if you have a 200+ retro just buy a good dedicated server <_<

true that brother of the netstat. But not even with a dedicated server would be prevented from DoS/DDoS. A big DDoS would make all scheme go to hell.

[stevier]

I just want it where they can't get the IP and DDoS it, I want to protect it with another IP which I'm trying to do with another server is replace it with that server but make that server use the other server with the emulator so I can still use it.