While your IT department won't be able to see that you accessed, say, http://www.elitefitness.com while you were at work, they will be able to see that you accessed http://util.anonymizer.com/cgi-bin/freeaction.cgi?go=go&url=http://www.elitefitness.com.

Busted.

-Warik

------------------

Ideally you find a free one in another country, then you just set your browser up to go through that proxy server. Then what happens is your computer talks to that computer, that computer then talks to elitefitness, gets the data you wanted, and then it relays it back to you. so if you look at your traffic, you are only talking to the proxy, and if you look at elitefitness, it doesn't know that you were there, it only knows the proxy was.

ideally, the connection between you and the proxy would be ssl as well.

if he's at work then the proxy may not work. He'd still have to leave the company's network through their router and enter another one.....and another...etc. until he reached his destination.....

I'm not saying that makes it untracable - it just makes it harder for them to argue against you in court. yes he was using the proxy server, and yes the proxy server hit EF, but they can't prove that he hit EF through the proxy.
Obviously if the proxy has more detailed records and want to help, then they could help pinpoint what IPs went where - but I was mainly just trying to give more options.

The safest way to never get found out, is to never go to the site.

quote:

---

Originally posted by rimmer:
You don't think the proxy passess the client ip to the web server? I mean they don't see both the proxy ip and your client ip?

---

I'm positive it doesn't pass it on - that is the entire point of proxy software. if you look at the access logs for many websites, I guarentee (esp porn sites) that a whole shitload of hits are coming from one IP address - if you look that IP up, it will turn out to be a proxy. it isn't just one guy looking at a lot of stuff, but lots and lots of people looking at it all via that one computer.

it is one way to hide, but if someone really really wants to get you, they can eventually. if you want to use a proxy, use one that doen't have good relations with the US - that way if they are going to try to trace you down, they will need the records from that proxy server, and that server is in... wherever - some country that doens't give a shit about the states, so they ignore the request for the logs.