Proxy Servers...
 

If this isn't allowed then the thread can be removed and I apologise for any problems...

Lately I've really been starting to get into this security stuff, and as they say "In order to stop one, you need to know what they do"...well I've been investigating this "Proxy Stuff"...

The only problem is, I can understand why it works (with the packet routing, etc) but what I don't get, is how do you get your packets actually routed to this proxy server and for it to all work?...

Basically i mean, how can you configure your machine to use this proxy server?


I thought that basically by telling the browser to use "such and such" proxy on "such and such" port, but when i goto an online security scanner to see if it can still get my IP, it does, it gets the correct IP addres...not the one of the proxy server...


Again, If this isn't allowed, just say so :)

The thing is, the proxy servers you are using are not masquerading (hiding) your IP. They are passing it along. There are other proxies that hide it.

You were correct in your first assumption as to how it is used, client side. What you did not think about is that computers can be configured in a nearly unlimited amount of ways. Is it surprising to find out that some people don't hide IPs that are going through them? It all depends on the server, and the only way to tell is by trial and error.

I've tried quiet a few, but none are actually hiding my IP...

Don't spose you know of one that actually allows you to surf annonymously...at least then i know it can be done...so far i haven't gotten it/anything to work...

Well, the only reason for me to block this thread would be asking for *specifics*.

Next to the "forwarding" proxy servers stuff, users have Java/JS on by default. Ain't hard to get your info tru JS.

There are some proxies that allow you to surf anonymous, tho this is all relatively anonymous, since most proxies are misconfigured servers. This means the admins don't intentionally either scrub or keep logs, so when they're investigating bandwidth irregularities or abusemail from remote networks there always is a chance to find your IP in the logs. One way would be to chain your proxies or use one that's solid and known for anonimity like Magusnet. Note the various clauses on Magusnet pages that will keep you from actually *thinking* about doing harm :-]

There's a huge list of sites w lists of proxies around the 'net (beware commercial sites as usual), and anonymous ones aren't really hard to Google as are tutorials or env.cgi checkers on servers.

The real problem with sharing anonymous proxy addresses is the slew of skiddies that will follow to abuse it, leaving you vulnerable if you use the proxy unaware of it all.

// Btw, I'm sure LQ would be against members sharing (anonymous) proxy nfo over the LQ board.

Ok, so I won't ask for any proxies then :)...

I have tried quiet a few, but none of which are working...hmmm, I guess I'll take a squiz at some more guides then, maybe they'll unviel something I'm missing..


Also, I know what you mean by chaining proxies, but how exactly would you do it? I mean, there's only one option in browsers to enter a Proxy IP address...

Depends on the browser, but most will let you either


ip.ip.ip.ip;ip.ip.ip.ip

(Seperate them with a semicolon.)

or

ip.ip.ip.ip,ip.ip.ip.ip

(Seperate them with a comma.)

Most of the time they need to either be on the same ports,
or you may be able to get away with

ip.ip.ip.ip:port;ip.ip.ip.ip:port

ah! makes sense...so it'll put in the packets the first IP followed by the second IP, and the packet will head off to the first IP, once it reaches there, the proxy will then read the second IP, and pass the packet onto it, then once it reaches the second proxy, it forwards it to where its really meant to go (say this site for example...)

hmmm, complex, but easy on this side ;) hehe