Is there any way to stop/block proxy servers to access https based sites ?.
As I have enabled
mod_geoip to allow certain countries traffic, to access our critical websites, but still open web proxies are easily searchable by which any attacker try to access the site using the part of the allowed country.
I have googled a lot and found a solution to detect/block requests coming via proxy based on
http-x-forwarded-for, (reference URL).
But this work only for HTTP based sites not for https, as on HTTPS
x-forwarded-for headers are not coming due to encryption. So I believe is there must be some possible approach to block proxies for https, ?? else
mod_geoip is useless for https based websites.