IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [proxy]

The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

The word "proxy" is mostly used as short for "proxy server", which is a server that acts as an intermediary between a workstation user and the Internet so that the enterprise can ensure security, administrative control, and caching service.

715 questions
33
votes
6 answers

What legitimate uses do browser proxies have?

The only time I've used my browser's proxy settings is when setting up Burp Pro, which makes me wonder: What was the original use-case for these settings? Other than testing / debugging, what was this feature designed for? Do people actually use…
Mike Ounsworth
  • 59,005
  • 21
  • 158
  • 212
10
votes
2 answers

Is there anything like a known proxy server IP list/database?

I'm looking for something like a known proxy servers IP list (text, comma seperated or database based). Do you happen to know if anything like that exists? Free would be nice. I doubt it because these things change every day, but as various websites…
Ion
  • 666
  • 5
  • 12
10
votes
4 answers

Is it possible for a website to detect the presence of a proxy?

I am attempting to scrape a site which is notoriously difficult to scrape. Access from datacentres is generally blocked. In the past I've used various proxies, but recently these have stopped working. The site employs various pitfalls when it…
CaptainCodeman
  • 341
  • 3
  • 8
6
votes
6 answers

proxy servers and restricted work computers

I have a work-issued computer that I have limited access to the Internet due to the security protocols in place on the device. I want to use this machine at home, for work. I want to be able to hide my IP address as I move frequently for my spouse's…
curious
  • 61
  • 1
  • 3
6
votes
7 answers

HTTP Proxy vs bump-in-wire

If I'm an administrator of a corporate network, I could use an HTTP proxy to examine outgoing connections to monitor what websites my employees are going to, and terminate connections based upon policy/content rules. Or, I put an invisible…
Jumbogram
  • 173
  • 1
  • 7
5
votes
4 answers

Is a reverse proxy worth it?

Is a reverse proxy worth it? There are so many unsecured sites using a reverse proxy and I feel like that doesn't protect them. After all if they have an error in their SQL that could be use for injection, right? I feel like too many people rely…
Snewman8771
  • 133
  • 1
  • 10
5
votes
4 answers

How to prevent proxy server from HTTPS packet inspection?

Proxy servers often inspect HTTPS packets. They decrypt client's HTTPS traffic, inspect them, encrypt them again and send it to destination server. The proxy server injects its own CA certificate to client's PC to snoop their encrypted internet…
defalt
  • 6,851
  • 3
  • 26
  • 40
3
votes
1 answer

WebProxy configuration ... Which threat could apply?

I need some help to identify possible (and rational) threats that could apply to that part of IT infrastructure (WebProxy). I have a webproxy for my users, which behave like a classic webproxy and i'm ok with that (url filtering, flux analysis,…
Anon
  • 41
  • 2
3
votes
3 answers

Go through proxy server to Find an original IP Address

I work for a small company who has troubles with third parties selling our products on Amazon. Sometimes those third parties have websites and when I use an IP address finder online it gives me coordinates to what I think is a proxy server because…
Amanda Greaves
  • 39
  • 1
  • 1
  • 2
3
votes
2 answers

Can ISP detect a proxy connection's contents?

No idea if this is right place to ask. In my country, by law, all ISPs are required to block certain websites. People can not access such sites. But, through proxy websites every one can access blocked websites. I guess the flow is My PC ---> My…
8thperson
  • 177
  • 1
  • 3
  • 6
3
votes
2 answers

How to find the real IP of website behind reverse proxy?

I've set up Nginx as a reverse proxy server that points to an Apache server remotely. Of course IPs are different and let's suppose that I'm only running an HTTP service on that server. How can an attacker find the IP of the server who's serving the…
user134969
  • 1,328
  • 4
  • 17
  • 24
2
votes
2 answers

Force clients to use proxy

Here's my network configuration: My network configuration http://daveden.files.wordpress.com/2013/05/network-configuration.png The proxy server is running Ubuntu with Squid on port 3128 and DansGuardian on port 8080. I'd like to force all clients to…
Big McLargeHuge
  • 121
  • 5
2
votes
1 answer

Proxy server and IP address blockade

i am in china. so i use web freer to use blocked sites like face book and you tube. we use broadband connection provided by our university. some times the server goes too down and we can not use internet. our friends say it goes down because they…
margia
  • 21
  • 2
2
votes
4 answers

How would you assess the added value of web security gateways/proxies in days of > 90% of all traffic encrypted?

As of today, web security gateways add a layer of complexity to corporate web traffic while - in my opinion - only adding a small layer of protection, as most web traffic is encrypted nowadays. Of course, it's - as of now - possible to MITM the…
snhdg
  • 23
  • 3
2
votes
1 answer

How confident is MIME blacklisting on a proxy server?

We are blacklisting a number of MIME types on our proxy server so users can't download certain file types, for example, executables. Could it be possible that somehow, a malicious server can trick a user (maybe through script exploits or drive-by)…
lithium
  • 23
  • 2
1
2 3 4