Anonymity from web-hosts

[Mowkdizz]

I want to have anonymity from web-hosts (it doesn't matter if my ISP sees my traffic) when browsing the web. I am going to be running a private server that in turn hosts virtual machines. These virtual machines will go through a private proxy provider (I will have previously bought anonymous private proxies) to connect to websites and make requests/upload various data. I wondering what the web server will in turn be able to see when I make these requests in terms of my anonymity. I made this picture to help better describe my question:

http://i.imgur.com/k7WT1fD.png


Will the website be able to see that I am using a private proxy of some nature? Will they see the MAC address from the hardware that is hosting the proxy, the MAC address of my virtual machine setup, or the MAC address of my private server? If the web-host sees the MAC address from the proxy providers hardware and they host multiple private proxies on one server, will requests from all of the proxies to the web-server be originating from the same MAC addresses?
Thanks so much!!

 

[redmoon]

Use Tor or high anonymous private proxies to connect to your site and offshore hosting to be completely anonymous and not leave a footprint.

 

[Mowkdizz]

Use Tor or high anonymous private proxies to connect to your site and offshore hosting to be completely anonymous and not leave a footprint.

The problem with this is I want to upload large files!

 

[ricaweb]

OK good question,
if you are using IPv4 mac address is not transferred outside your lan,
the packet that the webhost will recieve will have the mac address of their router (you only see last hop mac address in ipv4)

if you are using IPv6 it is diffrent story as some fields in the IPv6 save the mac address unless you disable it from the host

So the rule you dont care about MAC in IPv4 request

for what they see is the IP address of the last proxy which is IP2

but note: in http there is a header called X-Forwarded-For: and if the proxy is not configured correctly this header will have your original ip address
so make sure the proxy hide this header


Thanks

 

[Mowkdizz]

the packet that the webhost will recieve will have the mac address of their router (you only see last hop mac address in ipv4)

If this is the case, will the web-server always be seeing the router MAC address of the proxy provider and know something fishy is going on if multiple IPs are coming from the same router?

but note: in http there is a header called X-Forwarded-For: and if the proxy is not configured correctly this header will have your original ip address
so make sure the proxy hide this header

How would I go about making sure this is configured correctly? Would this be up to the proxy provider?

 

[ricaweb]

for first question

If this is the case, will the web-server always be seeing the router MAC address of the proxy provider and know something fishy is going on if multiple IPs are coming from the same router?

No because the packet will go out of the proxy tot heir router and from there it will travel through a number of routers till it reach the router of target site, then it will travel through target site network till it reach the target host

so it will only see its own network router or switch not the proxy router or switch

How would I go about making sure this is configured correctly? Would this be up to the proxy provider?

if you are creating your own proxy like squid then it is simple configuration
but most proxy providers should be already hiding this header

use test proxy sites some of them check for this header as well to make sure itis not sent

Also since we are at it even with all of that you could be caught if you enable JavaScript and Flash in your browser
because javascript and flash can make direct requests bypassing the proxy except if you are running on VPN that forward all your traffic to the proxy server

there are some sites for proxy check that do flash and javascript tests so search for them

Thanks

 

[Mowkdizz]

No because the packet will go out of the proxy tot heir router and from there it will travel through a number of routers till it reach the router of target site, then it will travel through target site network till it reach the target host

Ah. I thought the host MAC address might have been passed in the packets as well! Thanks

Also since we are at it even with all of that you could be caught if you enable JavaScript and Flash in your browser
because javascript and flash can make direct requests bypassing the proxy except if you are running on VPN that forward all your traffic to the proxy server

there are some sites for proxy check that do flash and javascript tests so search for them

Interesting. Is it possible to buy a private proxy and put that proxy into a VPN? If so is it easy to edit which proxy the VPN is using? I am not very familiar with VPN concepts. Where would be a good starting point in this matter? I will need flash and javascript enabled (I belive Javascript at least), so would using a VPN of some sort be the way to go in this case? I was planning on just buying anonymous private proxies in bulk, so if there is a way to use these proxies in a VPN program that would be terrific!

Thanks for the help ricaweb!

 

[ricaweb]

you can buy a VPN directly or maybe get a Linux VPS and install your VPN software on it
getting VPN directly is the easiest way to go since most of them even have ready clients to use with them

just search for cheap vpn

i see your issue most proxies are not VPN they are just socks or http proxy
but at least get 1 VPN or 2 and make them first point of contact for your connection and then use the proxy list.
in this case in worst case only your VPN ip will be revealed if the websites you are visiting use complicated JS and flash to get your source address

the ultimate way is to get a vps for each location you want and run everything from it in this case you will never be caught with your real ip

 

[Mowkdizz]

you can buy a VPN directly or maybe get a Linux VPS and install your VPN software on it
getting VPN directly is the easiest way to go since most of them even have ready clients to use with them

just search for cheap vpn

i see your issue most proxies are not VPN they are just socks or http proxy
but at least get 1 VPN or 2 and make them first point of contact for your connection and then use the proxy list.
in this case in worst case only your VPN ip will be revealed if the websites you are visiting use complicated JS and flash to get your source address

the ultimate way is to get a vps for each location you want and run everything from it in this case you will never be caught with your real ip

Is it possible to force all connections to go through a socks5 proxy instead of paying for expensive VPNs? I will need multiple (maybe several hundred) private IPs for several accounts on various web servers and therefore buying a new VPN IP would get pricey much quicker in this situation (I see about 5$ for VPN IPs VS $1.50 for private proxies). I read somewhere that they were forcing every connection to go through these proxies, and I would be very interested in doing something like that if it can save me money.

Alternatively, do you know of any VPN software that allows you to simply enter a private proxy and password and it will route all traffic through this IP? I'm not sure if it is possible, but it would certainly be useful. I'm not really sure I see a reason for the VPN to be so much more expensive, so maybe it has to do with the underlying infrastructure.

Do you think a company that has the technology enabled to view your host IP through javascript and java would be skeptical of a browser that doesn't have them enabled? I know its just asking for speculation, but I'm trying to find all available options here.

Thanks so much!

 

[Mowkdizz]

Would ProxyCap (http://www.proxycap.com/index.html) be a way around this?

 

[ricaweb]

Actually i was just going to suggest it

so all the traffic from the browser will be redirect by proxycab
so just configure it to redirect browser traffic

it works i tried it before but just for playing with it not real work was done so i am not sure how stable it is

Thanks

 

[Mowkdizz]

Actually i was just going to suggest it

so all the traffic from the browser will be redirect by proxycab
so just configure it to redirect browser traffic

it works i tried it before but just for playing with it not real work was done so i am not sure how stable it is

Thanks

How can you test which IPs javascript and flash are returning to the webserver? Is there a certain service you use to test this?
Thanks