Anonymous Proxy Detection
I found a website which should be concern to everyone who values their privacy.
They essentially provide a service whereby they 'request back' the ip address that visits them to see if it grants anonymous proxy. This is actually rather simple to do, and will identify you as using an anonymous proxy server.
In response to this, elite anonymous proxies should most definitely implement a mechanism that denies this kind of activity.
My suggestion is to use a different address to request an anonymous proxy session than the used anonmous proxy ip itself; and deny requests that are made on the used ip.
Another method which is flawed, would be to deny requests on addresses that have gone outbound. The flaw is that the 'badguys' can have more than one address too, and just pass the 'anonymous lookup' request.
Those are my thoughts, and I sincerely hope they are useful.
Thanks![/list]
|