0

I am using a Proxy for example UltraSurf, if I try to open a URL in my web browser, obviously web browser is going to send this information to my Proxy, then Proxy is going to communicate my Gateway.

So my gateway or firewall will know which URL I am trying to open? if no then how proxy hides this thing?

Updatedd - More details:

To be clear I am talking about Proxy Application running on my system. For example UltraSurf. So this proxy application which is running on my PC will obviously be using the gateway which I have mentioned in my LAN Adapter. So visually,

Browser (application on my PC) -> UltraSurf (proxy application on my PC) -> internet

What UltraSurf does is, it starts listening on a port for example 4545, and it changes the Internet Explorer Proxy setting and set Proxy Server to 127.0.0.1, port 4545

Which is showing that whenever I will put a URL in internet explorer address bar, the internet explorer is going to ask Proxy Server to open this website. At this point the proxy server is an application which is running my PC, so it means browser is asking the application to open the Web page.

Now this application is going to go to the internet using my Gateway mentioned in LAN Adapter.

The question is -> is it directly communicating with the website which is mentioned in Internet Explorer browser, or is it going to communicate its own server and that server is going to open the website?

1 Answer 1

1

So my gateway or firewall will know which URL I am trying to open? - More or less, yes, but not "directly" per se. It will not know what your IP address is, hence the anonymity. A proxy is simply another computer that exists between your computer and the internet. For example, if you type in www.google.com in your browser while your device is connected to a proxy, this is what will occur:

The browser will make a TCP packet with an HTTP GET www.google.com request (with sender address as your IP address) and sends it to the proxy server. The proxy application running on the server looks the packet and sees that it is addressed to google. It forwards the packet to google.com, changing the sender address in the TCP packet to its own. From here google does not know that it was you who is using their service, they only see the proxy server using it.

Google receives this packet from the proxy and sends the contents of its website in another series of packets to the proxy. The proxy accepts this packet and forwards it back to you. Boom.

Visually:

Browser -> Proxy -> example.com

So, your gateway is under the impression that it is sending an HTTP request to the Proxy server, NOT example.com. Therefore, if you have example.com 'blocked' on your gateway, the connection will still be allowed to the proxy.

:update - since this appears to be a UltraSurf specific question.

Ultrasurf does not use a DNS. It takes your typical DNS queries and routes them to a static IP, instead of asking for one (much like modifying your HOSTS file or equivalent). That way you are connecting to port 80 on the unblocked IP address 74.125.224.160 (youtube.com), instead of making a disallowed DNS query.

4
  • Thanks dperconti, but as per your suggestion, my Gateway should block the website, which it does NOT in my case. For example abc.com is blocked by my gateway, if I try to open it without Proxy, it does NOT open, while if I try to open it using Proxy it opens. Which is clearly indicating that Gateway somehow does NOT know which website I am trying to open.
    – sallushan
    Commented Apr 29, 2014 at 4:21
  • My hypothesis is, when I try to request a URL using Proxy software, proxy creates a packet of its own and sends the packet to its own server using my gateway, since proxy is sending a packet to its own server so gateway does NOT stop it. Then the server opens that particular website and sends back the encrypted content to the proxy software and proxy software then translate it back as normal HTML and give it to browser.
    – sallushan
    Commented Apr 29, 2014 at 4:25
  • Please see edits. Essentially your gateway is sending a request to the proxy, not abc.com in your example, hence why it is being allowed. I recommend reading up on this here.
    – dperconti
    Commented Apr 29, 2014 at 17:00
  • Your visual example is NOT correct, I have updated my question.
    – sallushan
    Commented Apr 29, 2014 at 17:24

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .