(轉帖)從國外代理論壇上看到的「反代理」措施。

Anti-proxy: how to detect your IP if you are using an anonymous proxy server?
+ C7 u3 I% t$ K3 a7 R& F  _As you already know, there are anonymous proxy servers that can be used for surfing the web anonymously. It is also interesting to know, is there a way of tracking down a web-surfer behind an anonymous proxy server.
Yes, there are a number of possibilities not only to detect a visitor using several anonymous proxy servers, but also to detect his real IP even if he is using an anonymous proxy server.
9 N7 m+ j  I# K$ [6 W. U! t# i# q: _
" t3 s, \1 k' ^6 l, f1 ?* \: H" J' [Cookies
4 ~7 j0 D8 E8 d0 ^' s1 f% JAt first sight, cookies are not anyhow related to proxy servers. Cookies are used to transfer small portions of information from the web server to the client as an addition to the requested web page. This additional information is stored in the client s browser and is retrieved by the web server. Cookies can be both temporary (for one-time use during a web session; when the session is over, these cookies are deleted) and long-term (for continuous store on the client s machine).
So, why do we need cookies? For example, if the password is requested while checking your e-mail box. After you have entered the password, it is stored in cookies, so each time you browse from page to page, the web server would check the password in the cookies instead of asking for it on every page.

4 J* ]  H. v0 z' X0 qHow can a cookie help to detect a proxy? You cannot detect IP with the help of cookies. However, when you first visit a web site, the IP (i.e. your proxy server s IP) is detected by the web server and then stored in the cookies. When you re-visit this site, the web server detects your IP again and checks it with the one stored in the cookies. If the IPs are not the same, the web server can make certain conclusions. And if you don't disable cookies in your browser, no proxy will help you (anonymizers can disable cookies and stop relaying them to your machine).

JavaScript / VBScript
There are special subprograms (scripts) run by the client s browser. Therefore, no matter how hard you try to setup your browser (unless you disable these active scripts), you won't be able to hide your real IP. These scripts are actually classified as simple programs and have very limited number of functions, however they are able to detect your IP as well as many other settings of your browser. These scripts can change your browser settings too!
; m- D9 t& A; ~5 h+ i
1 V1 y+ t7 M$ k. o3 d$ K8 o/ iThere is a multilevel protection from these scripts. You can restrict a script from accessing your browser features. However, the best way to protect your browser is completely disabling active scripts. You can disable scripts directly in anonymizers.
' l9 o- ^# i* \
/ x3 S  j% C% `# OJava
3 z9 I# T$ t) ^( Z# `Unlike JavaScript, Java is a full-featured programming language. So Java scripts have many additional abilities (particularly, detecting or changing your browser settings). In other words, Java programs can easily detect your IP and partially the settings of your browser.
' i+ k) z8 J. E+ u- O9 b6 b
8 ]# m5 @( A  PAs far as it goes to protecting your IP from being detected by Java scripts, all is much more complicated: the most secure and probably the only way is to completely disable Java in browser settings, as long as Java has many network functions and it's quite difficult to switch them all off.

$ L* ^6 v, K0 P* Q2 b7 D2 tActiveX and plug-ins
; D- _. `. Y( P% c% Y9 n, |+ JActiveX and plug-ins are various add-ons and modules of your browser. These modules are in fact real proper programs run on the client s machine and therefore they have wider capacities than Java and Javascript. They can easily detect your browser settings and track down your real IP address. What's more, they can even easily change your proxy server s settings!

To secure your browser and IP address, disable ActiveX and plug-ins options in your browser settings.

Armour vs. bombs
The war between those who want to stay anonymous web-surfers and those who want to know all about their clients and visitors will never end. There always will be new ways of hiding your life inside the web, likewise there always will be new technologies to hack or to pass this protection.

9 H8 H' h4 L# ?) [5 e+ l( Y% p& \! yYou can secure your IP using several methods:
9 ~! _3 ]* i1 [8 G
Restrictions
; J$ v. W( n' |' B2 idisable cookies
- H' l8 {5 @3 [; [, g4 sdisable active scripts
, K% V% {/ p" R, Q" s$ Ldisable Java
5 W3 F' B5 J: R1 `1 v. t* P" Cdisable ActiveX
Use socksification in your browser. This will enable relaying all the information your browser or any other software sends and transfers to the proxy server.
The first method of protection is very easy to pass: it only takes building a site based on Java/JavaScript/Cookies (for example, dynamic menus, etc.). In this case, if you switch off the active scripts, the site will not work (e.g. if you disable cookies, your access to web mail servers may be denied).

7 [8 F5 K1 i* V8 {; ?The second method doesn't provide a 100% guarantee that your IP address will be really protected. Here's why. There are two methods to identify your IP:
3 N: J1 o0 X) u, S% g/ `
A Java program connects directly to the Internet (without using proxy), even if your browser is set to work via proxy. So the server gets your real IP address from this Java program.
& R  o0 x* T% M5 i! u, LYour Windows settings may be scanned for your real IP address.
So, socksification can guard you from the first method of IP tracing, but it's totally useless when dealing with the second method.

% s8 H5 x% s$ `: ^. M3 WWhat you need to do if you wish to stay anonymous with enabled Java/JavaScript/ActiveX:
What's the core of this task and what do you need to do in order to make it work?

1 q+ k9 V1 V  L2 q7 X( Ohide real external IP address in Windows settings
: V3 x" O: ~, I& j' q! _9 qdisable direct connection to the Internet (route it only via an anonymous proxy server)
There are two options to solve this problem:

; U( g  L0 i: ~7 _6 y  b: j" l0 aYou need to set up LAN, local IP addresses (192.168.1.x or alike). A corporate proxy server should forwards ALL requests to a free anonymous proxy server (you need to have skills and rights of a system administrator in order to do that). It's impossible to connect to the Internet bypassing a corporate proxy, as long as external IP address is not assigned to local machines. It's also impossible to scan local machine's settings: even if Java/ActiveX applets detects and gives out your local IP address (192.168.1.x) to the web server, your anonymity will remain unbroken. So, basically, you can rate this option as 100% anonymity.
/ d" W, K3 G5 l" d' v; h! XInstall Firewall on your machine and restrict all the connections to the Internet (except for the anonymous proxy server) from a browser. It's also recommended to use port mapping for this free anonymous proxy server and define the browser's proxy as 127.0.0.1 with the local port from port mapping. However, this option can be insecure, because your real external IP address can be transferred to the server (the script will scan the Windows settings and detect your real IP).
* N) h+ h! d# x9 q+ Y" R; g5 GAnd finally: any proxy server, especially a free proxy, keeps logs (reports) with detailed information on every IP sending requests to it as well as on the time of requests. So, any person or organization authorized to access this information can always find out what places in the web you have visited and what you did there, even if you use a chaining of 10 anonymous proxy servers located in different parts of the world.

好東東

disable cookies
disable active scripts
3 [# e' b5 O. Z; F* g: Ndisable Java
; U; R/ t0 E, ^- u  a/ w! C4 kdisable ActiveX

原帖由 雪狼孩 於 2005-9-13 09:31 發表
) G! |  E$ i. q% Y好東東

/ I5 ^5 w4 N- U* d
5 J& A  p8 @) X8 W% H0 v' M哈哈~~~東東好就來個精華哈，雖然是轉貼，但也搞的我手酸:

原帖由 道天 於 2005-9-13 09:42 發表

4 c& A0 X/ ]; x, z) q
! R* _& s5 R9 P( A* S哈哈~~~東東好就來個精華哈，雖然是轉貼，但也搞的我手酸:

手酸?難道你打出來的?:

原帖由 kiss2008 於 2005-9-13 09:35 發表
' X' m1 ?1 v1 \7 c7 q1 M- N0 tdisable cookies
disable active scripts
disable Java
disable ActiveX

, {, W! {6 L0 Z0 ]2 a# t7 d( G! E  u都禁止了，還有幾個網頁可以打開啊？

原帖由 道天 於 2005-9-13 09:12 發表
7 N* A$ [# d3 C& q  Q4 S- CAnti-proxy: how to detect your IP if you are using an anonymous proxy server?
' i5 S5 U1 ]* C1 JAs you already know, there are anonymous proxy servers that can be used for surfing the web anonymously. It is also i ...

一看到英語就頭暈，怎麼辦，誰翻譯個大概。

道高一尺，魔高一丈

( 轉帖) 從國外代理論壇上看到的" 反代理" 措施.
0 A9 l7 p; \- S# X7 @  I6 K8 V
反代理： 怎樣發現你的IP，如果你正使用一台匿名的代理服務器嗎？
  P/ j8 q- Z  ~正如已經的你所知，有匿名的代理服務器可能用於匿名在網上衝浪。 也有趣被知道，到那裡路的在匿名服務器代理後面追捕網上衝浪者的。
6 y! f& }* h) f. D是的， 不僅有許多可能性使用幾台匿名的代理服務器發現一位參觀者， 而且發現他的真正的IP，即使他正使用一台匿名的代理服務器。
. W' t& e, u& ]* O9 j. u
! ~. u- R- f5 D; }, k7 {- r: |/ hCookie
5 s6 f& m8 f# |+ a乍看起來，Cookie不無論如何與代理服務器有關。 Cookie用來作為被請求的網頁的增加從網服務器到客戶轉存信息的小的部分。 這附加信息被儲存在客戶s 瀏覽器裡並且被網服務器挽回。 Cookie可能兩暫時(供過去使用在一個網會議期間； 當會議結束時，這些Cookie被刪除)，長期(對在客戶s機器身上的連續的商店來說)。
因此，我們為什麼需要Cookie？ 例如，如果口令在檢查你的電子郵件箱子時被請求。 在你已經輸入口令之後， 它被儲存在Cookie裡， 因此每當你從頁到頁瀏覽時，網服務器將在Cookie裡檢查口令而不是在每頁上要它。
9 a- a( \" K7 X1 V  z# ^
% O7 Z4 H) [: E) X# D4 W+ M一Cookie怎樣能幫助發現一個代理人？ 你不能借助於Cookie 發現IP。 但是， 當你首先訪問一個網站時， IP(即你的代理人服務器s IP)被網服務器發現然後儲存在Cookie裡。 當你重新訪問這個網站時，網服務器再次識別你的IP並且與儲存在Cookie裡的那個檢查它。 如果IPs不相同，網服務器能查明結論。 並且如果你不使在你的瀏覽器裡的Cookie無能力，沒有代理將幫助你(anonymizers 能使Cookie無能力並且停止轉播他們到你的機器)。

Java腳本/ VBScript
有由客戶s 瀏覽器控制的特別的子程序(手稿)。 因此， 不管你對安裝試驗你的瀏覽器(除非你使這些活躍的手稿無能力)多麼嚴重，你將不能隱藏你的真正的IP。 手稿這些實際上被歸類當時簡單計劃並且有有限功能的數量， 但是他們能發現你的你的瀏覽器的IP和多其他設置。 這些手稿也能改變你的瀏覽器設置！

/ Y$ J) A) c- |- V( q6 ]有來自這些手稿的一個多層的防護物。 你能從訪問你的瀏覽器特徵限制一篇手稿。 不過，保護你的瀏覽器的最好的方法正完全傷殘活躍的手稿。 你直接在anonymizers裡能使手稿無能力。

爪哇
7 `+ Z) A+ b' Q. z1 D( W與Java腳本不同，爪哇是一種充滿特色的程序語言。 因此Java 手稿有很多附加能力(尤其，檢測或者改變你的瀏覽器設置)。 換句話說，Java程序能容易發現你的IP 和部分你的瀏覽器的設置。

只要保護你的IP以防被爪哇手稿發現去，全部都更錯綜複雜： 最安全和或許唯一的方式是完全使在瀏覽器設置裡的Java無能力， 只要Java有很多網絡功能並且關掉他們全部是十分困難的。
7 s' f( }( w: `' ^  {, ?4 l
/ S. s% ]! C' Q! O" m/ p: L, j) u" oActiveX和插頭
4 O+ B' w! E8 |* CActiveX和插頭是你的瀏覽器的各種各樣的附加物和模件。 與Java和Javascript相比較，這些模件實際上是實的適當的程序在客戶s機器上運行，因此他們有更寬的能力。 他們能容易發現你的瀏覽器設置並且找出你的真正的IP 地址。 而且，他們甚至能容易改變你的代理人服務員s 底座！
/ g7 O! T, q2 t, k1 f
3 x. _7 T& a4 m% X% h3 R- d為了獲得你的瀏覽器和IP 地址，使ActiveX 和在你的瀏覽器設置裡的插頭選擇無能力。
! A- R# V% Z& m/ H! L$ ~
盔甲與炸彈
在想保持匿名的網上衝浪者和想完全瞭解他們的客戶的那些人的那些人之間的戰爭和參觀者永遠不會結束。 有將新在網裡面隱藏你的生活的方式，有總是將是亂砍或者通過這保護的新技術。
; P1 ~& V+ r+ X) {9 v9 c4 E
% S4 C+ ~7 f+ D0 C) S; U你能使用幾種方法獲得你的IP：
: F. x8 ]1 J% |) {
9 Z9 u4 M9 x4 v  T0 v5 K+ }0 ]; ?; k限制
3 V5 x9 g: y" [7 ?8 o傷殘Cookie
3 Q  W  j$ U3 Z1 j% `傷殘活躍的手稿
% y- K) Y. B* g( R$ m: i傷殘爪哇
# s4 M# I6 F: D6 p" K7 [- u# t傷殘ActiveX
4 k; k6 l+ b# W在你的瀏覽器裡使用socksification。 這將使轉播你的瀏覽器或者任何其他軟件送並且轉存到代理服務器的全部信息成為可能。
保護的第一個方法非常容易遞給： 它只帶建造一個基於Java / Java腳本/ Cookie(例如，動態的菜單，等等)的站點。 這樣的話， 如果你關掉活躍的手稿， 站點將不工作(例如你使Cookie無能力，你的網郵件的入口服務器可能被否認)。

& {" f; u* w' D2 O& Q第2 種方法不提供你的IP 地址將真的被保護的一個100%的保證。 這裡是為什麼。 有兩種方法鑒定你的IP：
  E# A, K# x0 a6 h
一個Java程序直接連接因特網(沒有使用代理)， 即使你的瀏覽器被通過代理開始工作。 因此服務器從這個爪哇計劃得到你的真正的IP 地址。
+ k% }' N  ]- E3 m2 O) I# `你的Windows設置可能被為你的真正的IP 地址掃瞄。
因此， socksification 能保衛從跟蹤的IP的第一個方法那裡的你，經營第2 種方法是全部沒用的。

如果你希望與使保持匿名成為可能的爪哇/ Java腳本/ ActiveX，你需要做的：
這項任務的核心是什麼，並且為了使它工作，你需要做什麼？

把真正的外部IP 地址隱藏在Windows設置裡
對因特網傷殘直接的連接(途經一台匿名的代理服務器運送只的它)
有兩種選擇解決這個問題：
; F9 ~* L( F/ B( F2 ~
你需要建立局域網，本地IP 地址(192.168.1.x或者一樣)。 一台共同的代理服務器應該把全部請求寄給一個免費匿名的代理服務員 (為了做那，你需要有一個系統管理員的技能和權利)。 連接為一個公司的代理人設旁路的因特網是不可能的，只要外部IP 地址沒被分配到本地機器。 掃瞄本地機器的底座也是不可能的： 即使Java/ActiveX小應用程序到網服務器發現並且宣佈你的本地IP 地址(192.168.1.x)，你的匿名將保持不間斷。 因此，基本上，你能評價這種選擇為100%的匿名。
! C6 B2 c2 t5 C8 Y  O8 `8 x( P1 n2 b在你的機器上安裝防火牆並且從一個瀏覽器限制對因特網(除了匿名的代理服務器)的全部連接。 也推薦使用港口這個免費匿名的代理人菜盤的繪圖並且確定瀏覽器的委託書為有來自港口繪圖的局部的端口的127.0.0.1。 但是， 這種選擇可能是不安全的， 因為你的真正的外部IP 地址可能被轉到服務器(書寫將掃瞄Windows設置並且發現你的真正的IP)。
; u, v4 C! }: Q. o並且最後： 任何代理服務器， 一免費代理特別是，保持木材(報告)與送的在每IP上的詳細資料一起給它和關於請求的時間請求。 因此， 授權訪問這信息的任何人或者組織總是能查明在網裡你已經拜訪什麼地方和你那裡做的， 即使你使用位於世界的不同的部分的10台匿名的代理服務器的鏈接。

好貼 ，可以加精了
" w' D1 n$ a: R8 ~2 U
' f0 j8 g- t7 ]COOKIES不能關啊 關了之後你想用代理做些什麼呢？註冊也不計 點擊也不計……