BleepingComputer.com: Refusing proxy connectinos

Oh wow, it has been a while since I have been here. I like the redesigned forum!



Anyways, I have been working for a small gaming network and we currently are having a problem with a user that keeps creating new accounts and then going in game and spamming scam mails to members. We have banned this used multiple times and have added an ip ban too him. However, he is still able to get it and create new accounts. We are figuring this is due too website based proxy services that are allowing him too access it from a certain IP address. Is their any notable signature that we can refuse a connection from too start restricting access from proxy websites?


edit: whoops. I mispelled the topic title.

This post has been edited by xXAlphaXx: 22 October 2010 - 09:02 AM

Nope.

You can try filtering by IP address of known open proxies, but since the address list of available open proxies changes pretty much hourly, it is a waste of time. And as far as 'some sort of signature', the server has no idea what is happening on the other end, so there is no signature to look for. An open proxy is just a computer that is allowing network traffic to flow through it. It isn't anything special at all.

Groovy is, like usual, quite right. I block any IP that appears on StopForumSpam more than 2 times, for example, and yet only some of the web proxies I tested got blocked by my script.

There are many DNSBL (DNS based ip address block list) available over the internet which list IP addresses used by spammers. You can query them before allowing a person to use your network, site, service etc. I personally like Spamhaus and SORBS. As previously stated, they cannot block 100% of spammers. But (in my opinion) still are very highly effective.