Can Use of a Proxy Server be Detected? - GoFuckYourself.com - Adult Webmaster Forum

X

Paul Waters

Confirmed User

Join Date: Mar 2003

Posts: 4402
Share

Post
#1

Can Use of a Proxy Server be Detected?

07-20-2005, 03:29 PM

The password sharing sites recommend use of a specified proxy server to avoid detection by ip logging.

Can it be done?

Or is there an database of proxy servers that can be obtained and maintained?

Thanks

Paul
Tags: None
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#2

07-20-2005, 03:30 PM

http://tor.eff.org/
Comment
Paul Waters

Confirmed User

Join Date: Mar 2003

Posts: 4402
Share

Post
#3

07-20-2005, 03:35 PM

Originally posted by azguy

http://tor.eff.org/

It was this link in another thread that motivated me to post.

I want to control access to a pay site by ip or ip range. I want to reject anything coming through a proxy (or an onion) because it is a hole an entire country could come through.

I know I have to consider people travelling, but that is another issue.

Cheers

Paul
Comment
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#4

07-20-2005, 03:43 PM

Originally posted by Paul Waters

It was this link in another thread that motivated me to post.

I want to control access to a pay site by ip or ip range. I want to reject anything coming through a proxy (or an onion) because it is a hole an entire country could come through.

I know I have to consider people travelling, but that is another issue.

Cheers

Nope, they usually use anonymous proxies that don't even tell you it's a proxy. Unless you maintain your own blacklists - it's nearly impossible.
Comment
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#5

07-20-2005, 03:45 PM

Originally posted by Paul Waters

It was this link in another thread that motivated me to post.

I want to control access to a pay site by ip or ip range. I want to reject anything coming through a proxy (or an onion) because it is a hole an entire country could come through.

I know I have to consider people travelling, but that is another issue.

Cheers

And there is no point in obtaining any databases, because proxies usually last a day or two anyway.. New ones are found every second and posted on various locations, you won't be able to keep up with that.
Comment
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#6

07-20-2005, 03:47 PM

Instead, spend your resources on protecting your member area better... there are no ways around it.
Comment
High Plains Drifter

Confirmed User

Join Date: Jun 2005

Posts: 2341
Share

Post
#7

07-20-2005, 03:49 PM

you could have a script that attempted a client proxy connection on the surfer's IP using well known proxy ports (8000, 8080, etc)... this would weed out most of the proxy traffic, but not something like the Tor network.
Comment
Paul Waters

Confirmed User

Join Date: Mar 2003

Posts: 4402
Share

Post
#8

07-20-2005, 03:50 PM

Originally posted by azguy

Instead, spend your resources on protecting your member area better... there are no ways around it.

How do you protect a member area against password sharing?

Paul
Comment
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#9

07-20-2005, 03:51 PM

Originally posted by skinnywussy

you could have a script that attempted a client proxy connection on the surfer's IP using well known proxy ports (8000, 8080, etc)... this would weed out most of the proxy traffic, but not something like the Tor network.

There are over 20 of them. It used to be the usual 3128, 8080, 1080 crap.. now you see 28882, 4440, and the list goes on. I don't think users will like porn sites attempting to connect to their computer.. there are enough myths about this industry
Comment
High Plains Drifter

Confirmed User

Join Date: Jun 2005

Posts: 2341
Share

Post
#10

07-20-2005, 03:53 PM

Originally posted by azguy

There are over 20 of them. It used to be the usual 3128, 8080, 1080 crap.. now you see 28882, 4440, and the list goes on. I don't think users will like porn sites attempting to connect to their computer.. there are enough myths about this industry

Yeah, you could could cycle through all the ports, nmap style, if you really wanted to... but, as you say, its probably not a good idea.
Comment
Alky

Confirmed User

Join Date: Apr 2002

Posts: 5651
Share

Post
#11

07-20-2005, 03:55 PM

Originally posted by skinnywussy

Yeah, you could could cycle through all the ports, nmap style, if you really wanted to... but, as you say, its probably not a good idea.

do you know how unrealistic that is? are you really serious?
Comment
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#12

07-20-2005, 03:56 PM

Originally posted by Paul Waters

How do you protect a member area against password sharing?

It's very simple and I don't understand how after 10 years companies still deal with this shit.

1. User signs up, password must be 8 chars or longer with at least 1 digit
2. Spend some $$ on a real programmer and come up with a simple, yet very useful, pattern recognition utility that will monitor user activity and detect irregular IP changes, browsers, cookie data. It's not hard.
3. Once the software detects unusual activity, disable the freakin account and send further instructions on re-activating it to the user's email.
4. Get rid of freakin Basic Authentication..
5. Have your login be form-based and implement a Turing test.
6. Ask yourself why it took you 10 years to figure this out lol
Comment
Alky

Confirmed User

Join Date: Apr 2002

Posts: 5651
Share

Post
#13

07-20-2005, 03:58 PM

Originally posted by azguy

2. Spend some $$ on a real programmer and come up with a simple, yet very useful, pattern recognition utility that will monitor user activity and detect irregular IP changes, browsers, cookie data. It's not hard.

all that is overkill... if X amount of ip's login with in Y amount of time = disable
Comment
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#14

07-20-2005, 03:59 PM

Originally posted by Alky

all that is overkill... if X amount of ip's login with in Y amount of time = disable

Not true... trust me. There are forums out there that instruct people to connect to the members' area using a SPECIFIC PROXY only.
Comment
High Plains Drifter

Confirmed User

Join Date: Jun 2005

Posts: 2341
Share

Post
#15

07-20-2005, 04:06 PM

Originally posted by Alky

do you know how unrealistic that is? are you really serious?

I guessed you missed the last four words of the post that said NOT A GOOD IDEA. I was thinking of ways to identify a proxy, not specifically for this scenerio.
Comment
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#16

07-20-2005, 04:08 PM

Proxies will always be here in one form or another.. especially when the EFF themselves push anonymity technologies
Comment
azguy

Confirmed User

Join Date: Nov 2004

Posts: 5167
Share

Post
#17

07-20-2005, 04:09 PM

I just set up my 5th box on the Tor network This one is in Argentina. I'm blocking ports that can be abused easily, such as 25.
Comment
Paul Waters

Confirmed User

Join Date: Mar 2003

Posts: 4402
Share

Post
#18

07-20-2005, 04:10 PM

Originally posted by azguy

It's very simple and I don't understand how after 10 years companies still deal with this shit.

1. User signs up, password must be 8 chars or longer with at least 1 digit
2. Spend some $$ on a real programmer and come up with a simple, yet very useful, pattern recognition utility that will monitor user activity and detect irregular IP changes, browsers, cookie data. It's not hard.
3. Once the software detects unusual activity, disable the freakin account and send further instructions on re-activating it to the user's email.
4. Get rid of freakin Basic Authentication..
5. Have your login be form-based and implement a Turing test.
6. Ask yourself why it took you 10 years to figure this out lol

I was about 80% here. Automatically sending the email with re-activating instructions is something I didn't think of. Thank you!

Paul
Comment
4Pics

Confirmed User

Join Date: Dec 2001

Posts: 7952
Share

Post
#19

07-20-2005, 04:59 PM

I think getting strongbox will save you a lot of time and headache.
Comment

Previous template Next

Working...