Level 1 Elite Proxy - Howto build

S3M73X · #1 (**permalink**) 06-11-2007, 08:06 AM

Hi buddies, Ave

i use SSH to make a lokal SOCKS5-Proxy and Tunnel my Internettraffic through it. It's a bit like a VPN-Tunnel so my Traffic is also encryptet for my provider which makes me sleep more well. Very Happy - clap

What's my problem?

On a testpage (http://www.proxyblind.org/proxy-anonymous-checker.shtml) and on many others i only get "level 2" if i a test against the php-proxy-judge and only "level 3" when using TOR+Privproxy instead of my SSH-Tunnel. Mad

According to a explanation-page (http://www.proxyblind.org/a.shtml) my Proxy leaks some Vars which prevent it from making it "Elite level 1" but i dont know which exactly these are because it's not on that page.

The results the anon-check spits out are (ip and hostname changed):
Quote:

Quote:

??? DATE_GMT = Mon Jun 11 07:43:24 GMT 2007
??? DATE_LOCAL = Mon Jun 11 03:43:24 EDT 2007
HTTP_ACCEPT = text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5
HTTP_ACCEPT_CHARSET = ISO-8859-1,utf-8;q=0.7,*;q=0.7
HTTP_ACCEPT_ENCODING = gzip,deflate
HTTP_ACCEPT_LANGUAGE = en-us,en;q=0.5
HTTP_CONNECTION = keep-alive
??? HTTP_KEEP_ALIVE = 300
HTTP_USER_AGENT = Opera/9.20 (Windows NT 6.0; U; en)
??? LAST_MODIFIED = Tue Apr 10 15:23:01 EDT 2007
REMOTE_ADDR = 1.2.3.4
REMOTE_HOST = 1234.NSA.gov
??? SERVER_PROTOCOL = INCLUDED
??? USER_NAME = proxybli
esult hostname No proxy.

The hostname 1234.NSA.gov looks like a typical Cable, Dialup or DSL address. Server logs have no way to determine whether this request came from a proxy or a "real" client. However, keep in mind that there are still environment variable checkers, which may find revealing hints elsewhere
Result headers Suspicious.
There were some headers found, which aren't normally sent by the client and could attract the interest of server owners. Sometimes applications send such headers, but this could come from a proxy server as well. However most environmental checkers just look for known headers, so there's still a chance that proxy usage will stay undetected. HTTP 1.1 wasn't used for establishing this connection, which is usually the case whenever compatibility with applications that don't understand the latest HTTP version has to be kept. Nevertheless a lot of proxies also use the older protocol.
Rating
2 (Useful)

So if somebody could tell me how i can "filter" these vars out or whats important to make a proxy-method Level-1-elite i would appreciate that very much and eventually make a video-tutorial about this very interssting topic.