LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-02-2003, 02:32 AM   #1
Grim Reaper
Member
 
Registered: Apr 2002
Distribution: Gentoo 2006.0 AMD64
Posts: 399

Rep: Reputation: 30
Proxy Servers...


If this isn't allowed then the thread can be removed and I apologise for any problems...

Lately I've really been starting to get into this security stuff, and as they say "In order to stop one, you need to know what they do"...well I've been investigating this "Proxy Stuff"...

The only problem is, I can understand why it works (with the packet routing, etc) but what I don't get, is how do you get your packets actually routed to this proxy server and for it to all work?...

Basically i mean, how can you configure your machine to use this proxy server?


I thought that basically by telling the browser to use "such and such" proxy on "such and such" port, but when i goto an online security scanner to see if it can still get my IP, it does, it gets the correct IP addres...not the one of the proxy server...


Again, If this isn't allowed, just say so

Last edited by Grim Reaper; 02-02-2003 at 02:51 AM.
 
Old 02-02-2003, 02:55 AM   #2
Wolven
Member
 
Registered: Jan 2003
Posts: 195

Rep: Reputation: 30
The thing is, the proxy servers you are using are not masquerading (hiding) your IP. They are passing it along. There are other proxies that hide it.

You were correct in your first assumption as to how it is used, client side. What you did not think about is that computers can be configured in a nearly unlimited amount of ways. Is it surprising to find out that some people don't hide IPs that are going through them? It all depends on the server, and the only way to tell is by trial and error.
 
Old 02-02-2003, 03:14 AM   #3
Grim Reaper
Member
 
Registered: Apr 2002
Distribution: Gentoo 2006.0 AMD64
Posts: 399

Original Poster
Rep: Reputation: 30
I've tried quiet a few, but none are actually hiding my IP...

Don't spose you know of one that actually allows you to surf annonymously...at least then i know it can be done...so far i haven't gotten it/anything to work...
 
Old 02-02-2003, 09:24 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,393
Blog Entries: 55

Rep: Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565Reputation: 3565
Well, the only reason for me to block this thread would be asking for *specifics*.

Next to the "forwarding" proxy servers stuff, users have Java/JS on by default. Ain't hard to get your info tru JS.

There are some proxies that allow you to surf anonymous, tho this is all relatively anonymous, since most proxies are misconfigured servers. This means the admins don't intentionally either scrub or keep logs, so when they're investigating bandwidth irregularities or abusemail from remote networks there always is a chance to find your IP in the logs. One way would be to chain your proxies or use one that's solid and known for anonimity like Magusnet. Note the various clauses on Magusnet pages that will keep you from actually *thinking* about doing harm :-]

There's a huge list of sites w lists of proxies around the 'net (beware commercial sites as usual), and anonymous ones aren't really hard to Google as are tutorials or env.cgi checkers on servers.

The real problem with sharing anonymous proxy addresses is the slew of skiddies that will follow to abuse it, leaving you vulnerable if you use the proxy unaware of it all.

// Btw, I'm sure LQ would be against members sharing (anonymous) proxy nfo over the LQ board.
 
Old 02-03-2003, 01:11 AM   #5
Grim Reaper
Member
 
Registered: Apr 2002
Distribution: Gentoo 2006.0 AMD64
Posts: 399

Original Poster
Rep: Reputation: 30
Ok, so I won't ask for any proxies then ...

I have tried quiet a few, but none of which are working...hmmm, I guess I'll take a squiz at some more guides then, maybe they'll unviel something I'm missing..


Also, I know what you mean by chaining proxies, but how exactly would you do it? I mean, there's only one option in browsers to enter a Proxy IP address...

Last edited by Grim Reaper; 02-03-2003 at 01:13 AM.
 
Old 02-03-2003, 09:02 AM   #6
Wolven
Member
 
Registered: Jan 2003
Posts: 195

Rep: Reputation: 30
Depends on the browser, but most will let you either


ip.ip.ip.ip;ip.ip.ip.ip

(Seperate them with a semicolon.)

or

ip.ip.ip.ip,ip.ip.ip.ip

(Seperate them with a comma.)

Most of the time they need to either be on the same ports,
or you may be able to get away with

ip.ip.ip.ip:port;ip.ip.ip.ip:port
 
Old 02-03-2003, 04:24 PM   #7
Grim Reaper
Member
 
Registered: Apr 2002
Distribution: Gentoo 2006.0 AMD64
Posts: 399

Original Poster
Rep: Reputation: 30
ah! makes sense...so it'll put in the packets the first IP followed by the second IP, and the packet will head off to the first IP, once it reaches there, the proxy will then read the second IP, and pass the packet onto it, then once it reaches the second proxy, it forwards it to where its really meant to go (say this site for example...)

hmmm, complex, but easy on this side hehe
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Knoppix and Proxy servers phuqmnb Linux - Newbie 1 12-19-2004 12:53 PM
Proxy servers the_imax General 3 12-13-2004 01:04 AM
block access to other proxy servers jymbo Linux - Networking 4 07-06-2004 02:59 PM
snort and proxy servers zuessh Linux - Security 8 03-08-2004 07:41 PM
Redundant Proxy Servers or Clusters alasdair247 Linux - Newbie 0 10-01-2002 06:30 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:06 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration