Anyone know if website being visited knows whether a proxy server was used to connect. I know the i.p. is hidden but is the website aware that a proxy was used?
Thx if anyone knows
Thx if anyone knows
Proxy servers
- Thread starter zoomer
- Start date
I did not know the answer when I read your question but the quick research I found is...
Is there a way, yes
Is it normally tracked, no.
How is it done, by identifying the ports used by the most common proxy servers. Usually php code installed on the website to check incoming visitors (active proxy checking below)
reference
http://security.stackexchange.com/q...nd-my-real-ip-address-while-im-behind-a-proxy
There are several ways:
Is there a way, yes
Is it normally tracked, no.
How is it done, by identifying the ports used by the most common proxy servers. Usually php code installed on the website to check incoming visitors (active proxy checking below)
reference
http://security.stackexchange.com/q...nd-my-real-ip-address-while-im-behind-a-proxy
There are several ways:
- Proxy headers, such as <code style="margin: 0px; padding: 0px; border: 0px; font-size: 12px; vertical-align: baseline; font-family: 'Droid Sans Mono', Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, serif; color: rgb(34, 34, 34); background-color: rgb(243, 243, 243); white-space: pre-wrap; background-position: initial initial; background-repeat: initial initial;">X-Forwarded-For</code> and <code style="margin: 0px; padding: 0px; border: 0px; font-size: 12px; vertical-align: baseline; font-family: 'Droid Sans Mono', Consolas, Menlo, Monaco, 'Lucida Console', 'Liberation Mono', 'DejaVu Sans Mono', 'Bitstream Vera Sans Mono', 'Courier New', monospace, serif; color: rgb(34, 34, 34); background-color: rgb(243, 243, 243); white-space: pre-wrap; background-position: initial initial; background-repeat: initial initial;">X-Client-IP</code>, can be added by non-transparent proxies.
- Active proxy checking can be used - the target server attempts to connect to the client IP on common proxy ports (e.g. 8080) and flags it as a proxy if it finds such a service running.
- Servers can check if the request is coming from an IP that is a known proxy. WhatsMyIP probably has a big list of these, including common ones like HideMyAss.
- Client software (e.g. Java applets or Flash apps) might be able to read browser settings, or directly connect to a web service on the target system (bypassing the proxy) to verify that the IPs match.
