Proxy

[stanfield]

Anyone here use a proxy software to cloak his IP ? If, yes, could he explain to me how this software works and which software is it...
Yes, I'm really afraid of Project like "big brother", "NSA", ...

thanx !

[ March 09, 2002: Message edited by: stanfield ]</p>

[RTC]

This topic would have been better asked at my forum under the computer security section, but anyhows let me explain how and why it works:

How it works:

1]The proxy accepts a request from a Web browser which has been configured to submit its Internet requests (or a portion of them, with the use of Automatic Proxy Configuration [APC]) to that proxy.

2]The proxy checks to determine whether the request is coming from an appropriate user by prompting for some combination of ID and/or password.

3]The proxy attempts to match the user information provided against a directory or file of authorized user IDs/passwords.

4]On the basis of this check the proxy either rejects the request or passes it on to the desired destination, usually a protected Web resource (here the proxy server is acting like a client by requesting the item a second time on behalf of the Web browser).

5]The proxy accepts the reply of the protected resource and passes it back to the browser.

6]If using APC, requests for unprotected resources bypass the proxy and go on normally.

Why it works:

Requests which a proxy chooses to honor are forwarded on to the protected resource under the IP address of the proxy server itself, which, since it sits on your campus network, falls within the authorized IP address range specified by either the database provider or yourself.

For this reason, the request will be honored by the protected resource and the favorable response passed back by the proxy to the remote user, establishing a legitimate connection.

So now you understand how/why it works you'll be needing the two main important things,

1] A Proxy program. - <a href="http://www.inetprivacy.com/a4proxy/" target="_blank">www.inetprivacy.com/a4proxy/</a>

2] A Proxy list. <a href="http://tools.rosinstrument.com/proxy/" target="_blank">http://tools.rosinstrument.com/proxy/</a>

Hope this has helped.

[xoo1246]

Well sometimes I do. I used to use software from <a href="http://www.multiproxy.org," target="_blank">www.multiproxy.org,</a> I also use an ISP where i can use a false name. The only problem is that I dial from home, that makes me traceable. Someone only has to check the proxy logs (hopefully some of them don't log and some are used to collect data), then ask my ISP from where I'm dialing. But really, if you don't plan something more serious than blowing up some stones in the woods(talking about it online), I don't think SWAT teams will show up and join your party with their diversionary devices.

If i in my dreams together with my terrorist network would plan an act of random mayhem, I would try to use internet as little as possible. Maybe using my laptop together with a mobile phone with a prepaid calling card using no encryption but predefined code words...

[stanfield]

On <a href="http://tools.rosintrument.com/proxy" target="_blank">http://tools.rosintrument.com/proxy</a> , no proxy are working...
but I found an another site with proxy list, I put a proxy site in my soft (from <a href="http://www.multiproxy.org)" target="_blank">www.multiproxy.org)</a> and when I go to this page <a href="http://ipid.shat.net/" target="_blank">http://ipid.shat.net/</a> I can always saw my REAL IP so, the proxy or the proxy software doesn't seem to work properly...

How can I cloak my IP ? how must I configure my proxy program and my browser (IE6) to cloak my IP ?

thanx !

[J]

Very few free proxies support java, cookies, and all the other irritating 'features' of web-board software. If you find a fast one that works, please let us know.

[xoo1246]

Have you set up your browser to connect to the localhost proxy first? And you will have to filter out non-anonymous proxies. And disable java.

[stanfield]

no I don't think, could you explain me how ?

[J]

I might as well add that a proxy alone is no good for hiding from 'big brother'. You must have SSL if you don't want your ISP and everyone in between knowing what you're doing. Even then, do you know how often the proxy admin wipes the log files? And how do you know that the proxy you're using isn't run by the government?

And since most of the decent proxies require payment (i.e. a credit card), true anonymity is not possible in this way.

An interesting idea would be to 'appropriate' some corporate bandwidth. Quite a few companies are using wireless networks now, and apparently 2/3rds don't bother turning on encryption (which is disabled by default!). If you lived near a company with such arrangements, it could be worth a try <img border="0" title="" alt="[Wink]" src="wink.gif" />

[xoo1246]

Well, the only way to be sure is to stay offline, shut your computer off, and use large amounts of thermite to destroy it.
Stanfield, set the proxy to 127.0.0.1 and the port to 8088(default).

[nbk2000]

Here's an idea for you (assuming telephone modem):

Buy a couple of hundred feet of good quality phone line.

Attach a splice connector on the end so you can use either clip or plug.

Find neighbors phone box.

Attach your "super-extension cord" to the neighbors line.

Use DUNned dial-up account during hours when they're not at home (work) or asleep (late night).

If feds come smashing down their door, yank hard on cord and reel it in, or RUN while they're busy gunning down the neighbors.

"Whacking" (Wireless LAN Hacking) is an opening that could be exploited if your mobile and in an area that has that sort of thing common.

If you're in San Francisco, Silicon Valley, L.A., or such, than you'll probably have no problems. But if you live in Bucktooth, Arkansas than you're SOL (Shit Out of Luck).

Any smart terrorist won't use the internet...PERIOD. Or cellphones, telephones, fax, answering machine, e-mail, etc, etc.

Any form of electronic communications can be intercepted and traced if the adversary has unlimited resources (like The Man has).

Many "anonymous proxy" services and e-mail forwarders are ran by governmental intelligence services, both ours and foreign.

[RTC]

CTC's are the best places for gaining DUN accounts.

<small>[ March 10, 2002, 11:01 PM: Message edited by: RTC ]</small>

[nbk2000]

What's a CTC?

[RTC]

Computer Technological Centers AKA Internet Cafe's.

[stanfield]

no, on <a href="http://ipid.shat.net/" target="_blank">http://ipid.shat.net/</a> , I can still view my IP, the method with 127.0.0.1 isn't good...
I have AOL, do you think it could be impossible to use proxy with them ?

<small>[ March 11, 2002, 04:11 PM: Message edited by: stanfield ]</small>

[xoo1246]

I Am Jack's Confused Central Nervous System.

You started multiproxy, filtered out all the non-anonymous, did setup you browser to connect via localhost via port 8088 to the multiproxy program and still this page shows you the ip your ISP gave you? I tried it, and I was "anonymous". I have heard that there are java or ActiveX script that run on you localhost, thus obtaining you ip(you can disable java and activex). Not that page though. You seems to be a little bit confused, are you sure the ip is yours and not the ip of the proxy, and no AOL isn't the problem.

[RTC]

But AOL <u>IS</u> a problem.. <img border="0" title="" alt="[Wink]" src="wink.gif" />

[stanfield]

I configured my brownser to pass by the proxy 127.0.0.1 port 8088, disabled all http 1.1 ActiveX and Java on my machine and can still view my IP...

yes, aol is a problem :p hehe

[Anthony]

Multiproxy never worked for me either.

maybe it's something to do with your version of Internet Explorer? I refuse to use anything over 5.0

[stanfield]

I got IE 6.0 but I don't think it could be the problem... I have netcaptor 7.0 beta and, this is the same problem, all sites can view my ip (real ip)

[RTC]

Even if you hide your IP, your computer name/description still stay's the same, and while you can only find the node of an old IP, you can trace an computer's name/description right back to your computer.

If you want true anoniminty, then like someone else stated, don't use a computer.

[James]

Are you remembering to have your proxy connect to a remote proxy (or proxies)? If not, then the remote machine (the webserver) will always get your ip. Also cookies, java, javascript, vb scripts etc. will (unless otherwise configured) send directly to remote machines. So in order to have a secure browser you should probably disable all of them, and connect via a remote proxy (the software above, if I understand correctly should automatically send each request via a diffent proxy on its list.) This thread really belongs on a computer (security) forum, let's move it there now.