VPS Acceptable Use — addendum to the Acceptable Use Policy

This addendum covers unmanaged VPS on Inalha Hosting. It adds to the Acceptable Use Policy; where the two disagree about a VPS, this page wins. You accept it at checkout, not buried in the general terms.

Address reputation is shared.

Your VPS gets its own IPv4 address from a block we lease. The block is small and shared with other customers, so one machine getting that block blacklisted affects everyone on it. We watch outbound abuse signals from the first day. If your server causes a listing we give you 24 hours to fix it before we suspend the machine, and three fixed incidents in 90 days ends the account.

Not allowed.

  • Bulk unsolicited mail. Outbound port 25 is blocked by default; unblocking needs a written request, a stated purpose, a matching reverse DNS record, and provider permission on the host.
  • Open relays and open proxies: open SMTP relay, open DNS resolver, public HTTP proxy, SOCKS open to the world.
  • Tor exit nodes.
  • Network abuse: denial of service, port scanning or probing systems you do not own, unauthorised access attempts, botnet command and control.
  • Phishing, malware, and child sexual abuse material. CSAM is zero tolerance: immediate termination and a report to the relevant authority.
  • Cryptocurrency mining.
  • Reselling or sub-allocating addresses without a written agreement.
  • IP rotation or ban-evasion tooling.

Allowed, with conditions.

  • VPN, proxy, game server, web and application hosting: allowed, and tell us at signup what you are running.
  • Mail submission on 587 and 465: allowed by default.
  • Containers, CI runners, development environments: allowed, inside your plan's limits.
  • Nested virtualisation: not offered.
  • Sustained transfer above your allowance: throttled to 100 Mbps, never billed. Persistently saturating the link is an acceptable-use matter, not a billing one.

Unmanaged means unmanaged.

Patching, application security and configuration are yours. Your data is yours. Snapshots are a convenience, not a backup guarantee, and we make no promise about data loss. We do not log into your machine except for an abuse investigation, and we tell you when we do wherever we can. On termination we power the machine off immediately and delete the disk image after 7 days.

Enforcement.

Warning, then suspension of the machine, then the account, then termination, then referral where the law requires it. Severe cases — CSAM, denial of service, phishing — start at termination.

Reporting.

[email protected] We answer within 48 hours.