server monitoring
+ Reply to Thread
Results 1 to 9 of 9

Thread: Anonymizer.com and ProxyTest ??

  1. #1
    Join Date
    Oct 2001
    Posts
    4

    Question Anonymizer.com and ProxyTest ??

    Hi!

    How does the proxytest work?

    I was surprised to find for example that it could detect me behind the free proxy at Anonymizer if I used
    [url]http://anon.free.anonymizer.com/http://www.all-nettools.com/pr.htm[/url]

    And yet when a friend tried the same URL it couldn't see him. I'm using IE6 and he's using IE5.5 under a different ISP.

    Any ideas as to what's going on?

    Thanks!


    Andrew

  2. #2
    Join Date
    May 2001
    Posts
    121

    Re: Anonymizer.com and ProxyTest ??

    Hi,


    How does the proxytest work?
    Basically, it studies the HTTP request headers trying to find out if any information about the client leaks through.


    I was surprised to find for example that it could detect me behind the free proxy at Anonymizer if I used
    [url]http://anon.free.anonymizer.com/http://www.all-nettools.com/pr.htm[/url]

    And yet when a friend tried the same URL it couldn't see him. I'm using IE6 and he's using IE5.5 under a different ISP.

    Any ideas as to what's going on?
    Did it detect your real IP address, or just the fact that you were behind a proxy? In either case, it sounds strange, it's possible that it's a bug in Anonymizer. What exactly did the proxy test show, and what was in your browser's address line when you were viewing that page?

    Mr.Byte

  3. #3
    Join Date
    Oct 2001
    Posts
    4

    Unhappy More info

    Hi!

    Thanks for replying.
    Even using a real anonymizer account, the proxytest sees my IP. I get to the proxy test with the URL http://anon.user.anonymizer.com/cipher:<a load of rubbish comes here>
    The test successfully finds my own IP!

    Best wishes,


    Andrew

  4. #4
    Join Date
    May 2001
    Posts
    121

    Re: More info

    Well, this is strange, I've just tried it with a paid account too, and my IP was not detected.

    Here is what you can do ... get Essential NetTools at [url]www.tamos.com.[/url] Run the program, switch to the "RawTCP" tool and start listening on port 80. Then use Anonymizer to connect to your own IP address, as if you have a web server running. The program will accept this connection from Anonymizer and show something like this:

    *** Accepted connection from *68.*4*.**2.8 ***
    GET / HTTP/*.0
    Host: ******** (that was my IP address;-)
    Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, image/png, */*
    Accept-Charset: iso-885*-*,*,utf-8
    Accept-Encoding: identity
    Accept-Language: en
    User-Agent: Mozilla/4.7* [en] (TuringOS; Turing Machine; 0.0)

    That's what the script at all-nettools.com "sees" when you run a proxy test. As you can see, nothing in these headers reveals my IP address. Maybe in your headers you'll see something different. Note that the "Host" header will contain your IP address, this is normal, because you told Anonymyzer where to go. So ignore this header, look at the other ones. Maybe this will lead you somewhere.

  5. #5
    Join Date
    Jun 2001
    Posts
    398

    who runs anonymizer

    hi,


    the big question is who is behind the privacy loving anonymizer.com ?The c.i.a ?

  6. #6
    Join Date
    Oct 2001
    Posts
    4

    Thumbs down

    Thanks again MrByte!

    Well I did what you s***ested and got a rather surprising result:

    *** Accepted connection from *68.*4*.**2.8 *** (that's the anonymizer proxy)
    GET / HTTP/*.0
    Host: <my IP>
    Accept: <the usual stuff>
    Accept-Encoding: identity
    Accept-Language: en-gb
    Cache-Control: no-cache
    Client-ip: <my IP>
    Pragma: no-cache
    User-Agent: Mozilla/4.0 (TuringOS; Turing Machine; 0.0)

    What on Earth is that Client-IP doing there?
    And what are Pragma and this Turing thing?

    Very mysterious
    Best wishes,


    Andrew

  7. #7
    PowerJewels Guest

    Try this

    Trash your browser's History cache folder, download cache folder. Disable java, javascript, ActiveX. Quit your browser.

    Now try your proxy test.

  8. #8
    Join Date
    May 2001
    Posts
    121
    *** Accepted connection from *68.*4*.**2.8 *** (that's the anonymizer proxy)
    GET / HTTP/*.0
    Host: <my IP>
    Accept: <the usual stuff>
    Accept-Encoding: identity
    Accept-Language: en-gb
    Cache-Control: no-cache
    Client-ip: <my IP>
    Pragma: no-cache
    User-Agent: Mozilla/4.0 (TuringOS; Turing Machine; 0.0)

    What on Earth is that Client-IP doing there?
    And what are Pragma and this Turing thing?
    ... another bug in Anonymizer My guess is that you were accessing Anonimyzer via a proxy server. Note that some ISPs route your HTTP traffic via their proxy server(s) even if you don't explicitly configure your browser to use a proxy server.

    Regarding your headers: Pragam is a line inserted by a proxy server. Turing OS is a standard replacement for your actual OS carried out by Anonymizer (that's they way they're joking;-). Now, Client-ip is a header inserted by your proxy server, at least that's what I think it is. Anonymizer should have eliminated this header, but they screwed up. Tell them about it, they must fix it. Oh, and ask for a free life-time account, they gave me one years ago for finding yet another security flaw

    Mr.Byte

  9. #9
    Join Date
    Oct 2001
    Posts
    4

    Thumbs down

    Thanks again for the help!

    I tried the proxytest using Netscape408 with Java and Javascript disabled and the effect was the same as with IE6.
    I have no proxies configured on my own machine so my ISP must be doing something.

    I've emailed Anonymizer, so I'll be interested to see what they say. MrByte, your last sentence was intriguing too :-P

    Best wishes,


    Andrew

+ Reply to Thread

Similar Threads

  1. Is Anonymizer.com truly anonymous?
    By zipkid in forum Internet Privacy
    Replies: 6
    Last Post: 12-25-2002, 12:37 AM
  2. proxytest
    By Passingby in forum Proxies and Firewalls
    Replies: 2
    Last Post: 06-25-2002, 05:33 AM
  3. Your Privacy Tools Anonymizer
    By Unregistered in forum Proxies and Firewalls
    Replies: 2
    Last Post: 03-26-2002, 08:38 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts