Block Proxy Servers

Do you operate an e-commerce business? You check your access logs daily to see if there have been suspicious activities, such as hackers or botnets hacking your system. Perhaps one of the challenges you face is proxy servers. You would like to block them so they don’t harm your system. Block proxy servers with the following steps.

Steps

Block Proxy Servers With Software

  1. Install proxy software on your server. You can purchase and download the software from Internet. Using proxy software will save you money and time. You don’t have to worry about collecting a list of proxy servers. You may have to provide the software the URL address of the proxy server. The software will find the rest of the server’s information, and store it. The software will also likely have a feature in which you configure it to update the proxy list every week.
  2. Analyze the IP address. Use the software to help you to learn where the IP address is located. The software can give information, such as the type of protocol, proxy’s speed, country, and port number. You will be able to find out if the IP address is coming from a residential or business computer. If it’s a business computer, the software will let you know if its IP address is coming from an Internet service provider, proxy service, or a co-located server that’s located in a data center.
  3. Verify if the address is a static IP address. A static IP address is a number that the Internet service provider permanently assigns a computer so that it can communicate with other computers via the Internet. If the IP address did not come from a co-location or is privately-owned, then it can be coming from a CIDR. CIDR, which stands for Classless Inter-Domain Routing, is a method to assign and identify the Internet addresses that are applied in inter-domain routing. This method is more flexible than the initial system of IP address classes. CIDRs can vary in size. Some can consist of thousands IP addresses, while others can be as small as four to eight IP addresses.
  4. Search for the IP address in the CIDR. Let the software detect if the IP address is bad.
  5. Block the proxy server from visiting your website. When the proxy server tries to access your website, you can have the software display a message, “Access Denied.”

Block Proxy Servers Without Software

  1. Block proxy servers by HTTP protocols. If you don’t want to purchase software, there is another way. You can insert a script in your website’s root htsaccess file. It’s best to copy and paste the code, rather than type it. That way, you can be sure that you won’t make any errors. After you’ve inserted the code, upload it to your server. This method is effective. Insert the following code:

    # block proxy servers from site access
    # http://perishablepress.com/press/2008/04/20/how-to-block-proxy-servers-via-htaccess/

    RewriteEngine on
    RewriteCond %{HTTP:VIA}  !^$ [OR]
    RewriteCond %{HTTP:FORWARDED}  !^$ [OR]
    RewriteCond %{HTTP:USERAGENT_VIA}  !^$ [OR]
    RewriteCond %{HTTP:X_FORWARDED_FOR}  !^$ [OR]
    RewriteCond %{HTTP:PROXY_CONNECTION}  !^$ [OR]
    RewriteCond %{HTTP:XPROXY_CONNECTION}  !^$ [OR]
    RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
    RewriteCond %{HTTP:HTTP_CLIENT_IP}  !^$
    RewriteRule ^(.*)$ - [F]

Block Proxy Servers With a Third Party Service

  1. Use a free service like Black Box Proxy Block to check if an IP address is associated with an open proxy server.
  2. Other services such as BlockScript, BlockThatProxy, Maxmind and ThreatMetrix track all types of proxy servers, including Open proxies, HTTP proxies, SOCKS proxies, VPN (Virtual Private Network) servers, SSH tunnel servers, web-based proxies, popular anonymity networks, and Tor.

Related Articles

Sources and Citations

Retrieved from "https://kipkis.com/index.php?title=Block_Proxy_Servers&oldid=266562"