Seeing the IP behind the proxy 2

[Delameko]

The website I work for currently have a problem where the site only reads peoples proxies, this is a major problem because we block by IP and there are currently 60 people trying to post using the same proxy web cache server, and if any of them swear the system automatically blocks their IP.

I'm not a web developer (I'm content), but I'm sick of this and have decided to find the solution.

Is it hard to do? The servers all use JSP. Is it a matter of altering the http headers or is it deeper than that?

Thanks for your time.

 

[sedj]

ASFAIK, The point of a proxy is that the proxy is making the request to your server - not the actual true user's IP ... so I don't think its possible.

--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk

 

[Diancecht]

I think it depends on the proxy. Some of them offer anonymous surfing, so I don't think it will be possible, but AFAIK some other don't totally hide the original IP.

Cheers,
Dian

 

[Delameko]

some other don't totally hide the original IP.

Yeah, its this. I have users who, if they log onto

http://www.whatsmyip.com

get a reading that says "Your Ip is ###.###, your proxy is ###.###."


The problem you see is that there's one ISP (NTL) that forces all its users to use proxy web cache servers to access the net. So we often have groups of around 60 NTL users using the site at the same time with the same IP address.

Thanks for your assistance all the same.

 

[sedj]

Check the header info then - it might be in that ...
This will iterate all the headers in the HTTP request object :

     for (Enumeration e = request.getHeaderNames() ; e.hasMoreElements() ;) {
         String value = (String)e.nextElement();
         System.out.println(value +"=" +request.getHeader(value));
     }

--------------------------------------------------
Free Java/J2EE Database Connection Pooling Software

http://www.primrose.org.uk

 

[Diancecht]

If not, debug it, inspect the request object and dive there. There must be a way.

Cheers,
Dian