Iran, you better run - .ir hosting in US ILLEGAL PART 2 - embargo breakers

[drmike]

So, we remember the Iran hosting thread that blew up with some sad providers mad about it being a CC shill piece:

http://vpsboard.com/topic/1944-justhost-a-us-hosting-company-shuts-down-iranian-opposition-website/

Well, the topic of Iran hosting within the United States hit WebhostingTalk, again.

This time, @funkywizard / Gabe from the very well liked IOFLOOD in Phoenix, Arizona, posed the question:

I've gotten an unusual request, and I really don't know the answer. A sales lead has asked: "We Want To Resell Your Dedicated Server In Iran; Can We?"

I really don't know the answer to this question. Ignoring for a moment payment methods, is this something I'm even allowed to do?

What follows is aside from political bantering about stereotyping against whole countries, is a clear, no you cannot host .IR hosts and/or sell to Iranians even in your "uknown" downstream.

Whole thing here ---> https://www.webhostingtalk.com/showthread.php?t=1189254

 

[peterw]

This is not about US or not US. Don't play with embargos. Even the EU does not play nice with embargo breakers.

 

[jarland]

The topic was better received when someone with a fancier signature and a "corporate member" badge posted it. Exactly my problem with the posters at WHT.

Random person says it, the members basically say "GTFO out of our clubhouse."

Old member says the same thing, "Hey let's have a serious discussion."

 

[drmike]

Yeah you think about breaking the embargo as a rogue capitalist you join the ranks of terrorists, money launderers and their ilk.  It's mega nowhere land to put your company in.

Folks complained for past decade or better about HIPAA regulations and open ended penalties on those disclosing medical info.  Compared to the Treasury regulations for embargo stuff, HIPAA looks like a wrist slap.

I brought this back to the forefront, since the topic isn't going away any time soon.  The embargo has been in place since the 1970s.

Regs might loosen like they did recently, but PLEASE consult with legal advisors and get proper clarification from Treasury before engaging in Iran deals.  Applies to downstream customers of customers too.

 

[peterw]

And add some additional coutries to the list: http://www.pmddtc.state.gov/embargoed_countries/

Afghanistan
Belarus
Burma
China (PR)
Côte d'Ivoire
Cuba
Cyprus
Democratic Republic of the Congo
Eritrea
Fiji
Guinea, Republic of
Haiti
Iran
Iraq
Kyrgyzstan
Lebanon
Liberia
Libya
North Korea
Somalia
Sri Lanka
Sudan
Syria
Venezuela
Vietnam
Zimbabwe
 

 

[drmike]

Fiji  

Thanks for the list @peterw.

I suspect popular panels blocks these countries or at least the clear no-no's?  

 

[peterw]

I suspect popular panels blocks these countries or at least the clear no-no's?  

I am not sure about China and Vietnam (weapon related) but the rest should be no-no's.

 

[Shados]

And add some additional coutries to the list: http://www.pmddtc.state.gov/embargoed_countries/

Afghanistan


Belarus


Burma


China (PR)


Côte d'Ivoire


Cuba


Cyprus


Democratic Republic of the Congo


Eritrea


Fiji


Guinea, Republic of


Haiti


Iran


Iraq


Kyrgyzstan


Lebanon


Liberia


Libya


North Korea


Somalia


Sri Lanka


Sudan


Syria


Venezuela


Vietnam


Zimbabwe

I've been to two of those. Guess I've got my travel plans for the next few years, then .

 

[ChrisM]

And add some additional coutries to the list: http://www.pmddtc.state.gov/embargoed_countries/

Afghanistan


Belarus


Burma


China (PR)


Côte d'Ivoire


Cuba


Cyprus


Democratic Republic of the Congo


Eritrea


Fiji


Guinea, Republic of


Haiti


Iran


Iraq


Kyrgyzstan


Lebanon


Liberia


Libya


North Korea


Somalia


Sri Lanka


Sudan


Syria


Venezuela


Vietnam


Zimbabwe

You should really research it more. Some of these bans were over in the late 80's early 90's. 

 

[HalfEatenPie]

If I recall EDIS once sold large quantities of servers to North Korea.

 

[drmike]

You should really research it more. Some of these bans were over in the late 80's early 90's. 

That list links through to the US Department of State - Directorate of Defense Trade Controls.

Meaning that is the long list for arms/military restrictions.  A bit over reaching for hosting area like Miller is inferring.

A reduced and slightly more on point list here:

http://www.treasury.gov/resource-center/sanctions/Programs/Pages/Programs.aspx

 

[NetWatcher]

We had situation when cPanel contact us to remove an .ir account from our shared hosting server... 

We had to do it, because otherwise they would suspend license... 

And we are non US company... But by their policy we cannot let IR users to use their services... 

Even we paid for that license  

So, it's very pity... 

 

[Francisco]

We had situation when cPanel contact us to remove an .ir account from our shared hosting server... 

We had to do it, because otherwise they would suspend license... 

And we are non US company... But by their policy we cannot let IR users to use their services... 

Even we paid for that license  

So, it's very pity...

Does the law require this? Or is it just a 'they prefer' option?

Francisco

 

[NetWatcher]

I guess US law require this on some level. 

cPanel also have require to agree with 

" To the best of my knowledge, the license I am about to add is not for a machine owned, operated, or located in a country and/or person that US export regulations prohibit. Further information can be found at US Department of Treasury Office of Foreign Asset Control (OFAC).

" 

Before you proceed with adding some license. 

 

But from other side, for example Microsoft and Apple should say "Ok, you cannot use our OS if you work with Iran people"  

Such decisions and regulations are very questionable. 

 

[EricGregory]

When I used to work for cPanel we always had to deal with people who were doing things they shouldn't be.  Always a fun time.  The OFAC list is your friend.  Basically, if there is a doubt about the legality of doing business with someone, somewhere the potential hassle usually isn't worth it.

This page may also be of use:

http://www.treasury.gov/resource-center/sanctions/Programs/Pages/Programs.aspx

 

[DomainBop]

no you cannot host .IR hosts and/or sell to Iranians even in your "uknown" downstream.

That might explain why bgp.he.net now has a red lock symbol next to the 185.2.12.0/22 IP range http://bgp.he.net/net/185.2.12.0/22

A large percentage of the websites which this page (https://route.robtex.com/185.2.12.0-22.html#sites) shows were formerly hosted on that IP range are now hosted on AS19084 which is single homed to [fill in blank]

 

[graeme]

The long list is completely wrong. I live in one of the countries on the list, and there have never been US or EU sanctions that would affect anything other than weapons sales.

The link to the OFAC site is more helpful, but you need to read the documents. A lot of the sanctions apply to dealing in property and investments (so services are OK, I think) by certain people, not the country as a whole -  it does not matter if they move to another country - you still cannot sell them stuff.

Finally, US and EU sanctions are far from identical.

 

[scv]

That might explain why bgp.he.net now has a red lock symbol next to the 185.2.12.0/22 IP range http://bgp.he.net/net/185.2.12.0/22

A large percentage of the websites which this page (https://route.robtex.com/185.2.12.0-22.html#sites) shows were formerly hosted on that IP range are now hosted on AS19084 which is single homed to [fill in blank]

The red lock means the ROA (Route Origin Authorization) is invalid. So, they aren't supposed to be using that IP space or they've incorrectly setup their ROA.

 

[Ruchirablog]

I suspect popular panels blocks these countries or at least the clear no-no's?  

I'm a Sri lankan and I never had a problem signing up to anything  

 

[InertiaNetworks-John]

We had situation when cPanel contact us to remove an .ir account from our shared hosting server... 

We had to do it, because otherwise they would suspend license... 

And we are non US company... But by their policy we cannot let IR users to use their services... 

Even we paid for that license

So, it's very pity... 

How did they know you had an .ir account on your server?