Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Sites like Wikipedia and Google (among others) don't let you sign up through a proxy or TOR (at least with Google, you have to provide SMS verification if you sign up through proxy.) Somehow they detect it that you are behind a proxy.

Is there a workaround for that? I'm thinking of a service which tell these site you are not behind a proxy, even though you are. Is there such a thing?

share|improve this question
    
You should not depend on being able to detect such behavior. –  Rook Mar 20 '13 at 17:09

2 Answers 2

There is no magic way to detect a proxy. What they are likely doing is looking for IPs that have lots of different users coming from them or that are published as Proxy end points. A proxy that has a limited number of clients and doesn't publish itself as such would seem no different from any other internet user. The problem is that such a proxy would need a large number of IPs to avoid being detected as a proxy and would thus be difficult to manage.

share|improve this answer

Some proxies send the X-Forwarded-For header, which can be used for proxy detection - in addition to the checks for known IPs and excessive/unusual traffic.

To build a service like you are talking about not only would you have to distribute traffic across a large number of IPs to avoid detection as AJ indicated, but also ensure that you are sending (or forwarding) headers that leak client information.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.