anonymous......multiproxy......huh?

Ok, I'm kinda drunk now, but this has defeated me all day....
I was searching another web site today, which had a tutorial on hiding your internet address. The author recommended an anonymous multiproxy website(http://www.multiproxy.org/). The tutorial was well written and appeared like it was a knowledgable person writing the piece. So I went to the site, downloaded the program(including the "proxy list"). Loaded the proxy list to the folder I was going to use because....."(you will need to manually import this list into MultiProxy through Options|Server List|Import List)",(BUT IT DOESN"T SAY WHY.), then downloaded and installed the program. I went to my internet settings, activated proxy user, dutifully typed in 127.0.0.1 as the....well hell, I quote, "Use Proxy Server box-- enter proxy address (127.0.0.1) and port (8088), click OK, click on the next OK. ", went to the advanced tab, and....... "You must also uncheck the "Use HTTP 1.1" and "Use HTTP 1.1 through proxy connections" checkboxes in the Advanced tab of Internet Options."
This is pretty much my way of completely cutting myself off of the internet. I lose all connection. So what am I doing wrong? I have windows xp - internet explorer 5. It simply doesn't work. The websites FAQ's and troubleshooting/problems address nothing along these lines. I lose all connection to the internet if I select proxy.
And why do they give me a long list of proxy servers? I tried those IPs for my proxy and still no connection. But the guy stressed that I you only needed to type in 127.0.0.1 for an IP. Why do I need that list of proxys?
Thank you for any ideas on what I may be screwing up.
OWW :booty:

If you type 127.0.0.1 into the box as the proxy address then whats gonna hapen is you computers gonna go through your computer to get to the internet. lol. In other words 127.0.0.1 is and IP address of your computer. You can't do anything with that IP address other than make sure your NIC is working.

If I want to use a proxy I go to www.google.com and type public proxies, then I go to a web page. ON that web page it will give me a list of IP's which are the proxy servers, along with a port number that the proxy server is on for instance xxx proxy IP 192.168.0.1 Port 8080. Then what you do is go to Properties in Internet explorer---connections--lan setinngs---then check use a proxy. At that point you type the IP of the proxy server and the port number in. Then ok and ok. Connect to the internet however you normally do. Whenever you pull up a web page it will have to go throught the proxy.

In other words. type in 127.0.0.1 wont do anything to help you connect to the net.

I think I got that right. corect me if I'm wrong

one thing about those lists of "public" proxy servers...

ideally you should get permission from the administrators before using them. some of them may indeed be intended for public use, but many of them are open to the public because of incorrectly configured config files. if an admin sees your ip address in the logs accessing his proxy, he may fire off some angry emails to your isp...

just a heads up...

*sigh* Look, I know that 127.0.0.1 is supposed to be every pc's natural IP. That didn't make sense to me, but the website(and I provided a link to it for people to check out) said several times to use that IP.
Also, most proxy servers are not anonymous. They will simply forward your IP to wherever you go, thereby defeated the entire point. So why would I search for proxies on Google?
What I need to know is:
Why would that website stress several times to use the generic 127.0.0.1 IP?
Why does it provide and tell you to manually import their list of anonymous proxies but not explain why?
AND has anyone gone to this website and made it work?
Thanks,
OWW

Quote:

---

127.0.0.1 is reserved for the loopback function.

It is a good idea to configure your server to ignore all packets sent to it from localhost or 127.0.0.1, so as to protect it from DOS attacks.

---

Source: Chapter 5 Page 74 The Unofficial Guide To Ethical Hacking. Ankit Fadia

as an addition:

127.0.0.1 is a loopback address (but we already know that) It's used to test the network adapter (aka NIC/eth0) basically if you cannot connet to the network the first thing you should do is "ping 127.0.0.1"

To FrameWork:

what you quoted doesn't make any sense to me how can blocking the 127.0.0.1 save you from DOS ... if anyone out there tires to DOS 127.0.0.1 (which is non-routable) they gonna basically DOS their own NIC (it will be kind of hard w/ ICMP packets because NIC's are fast; try to ping 127.0.0.1 - I get 0.0 ms...BUT it guess it could be done w/ TCP by flooding the connection cue for a particular service (because of the timeout wait))

can anyone try to block 127.0.0.1 on their Linux IPchains... i got only windows from where i'm typing this post

If i'm correct, Fadia was referring to spoofing that address. Someone correct me if im wrong.

I couldn't tell why he said to use 127.0.0.1 as the IP. I was able to pull the web page up but There was only 3 messages about updating the page, a new server, and a new version. Nothing else. I didn't see any links for information.\

Also if you go to www.freepublicproxies.com There is a list of proxies there.

It tells you if the proxy is transparent, or anonymous, and where they are located.

Thanks cheyenne1212! That was helpful. I've read the instructions on older posts about IPs to use but they didn't work. But the link you gave me actually have ones that work. My webserver thinks I'm in Germany and sent me to Google.de with all german language. Plus all the IP checkers on the internet can't determine my real IP.
Much appreciation.
OWW

No problem.

Welll...u r right ONE WHO WATCHES....Multiproxy says the same...coz it says that this is a standing application between ur borwser and internet...where u can select any proxy service n do that...127.0.0.1 might be satisfying that stand alone application myth between browse and internet...By the way...MULTIPROXY does not do that...Does anyone know bout any other application that does multiproxies work....tool that is offered by multi proxy does not work for browsers .....if tehre are any tools just let us all know...]

Bye
have fun
ommy

Multiproxy is not the proxy, it's just a program to help you manage them. it runs locally on your PC on port 8088 (default) and you point your browser to it. When it receives a request from your browser it forwards it to one of the proxies in your multiproxy list.

PC-->multyproxy(127.0.0.1:8088)-->Proxy-->webpage

The extra features in multiproxy mean it can rotate proxies every x minutes or use different proxies for differnet sites.

And yes your right most proxies are not even 50% anonymous and 99% are probably misconfigured servers so are probably illegal to use anyway.

For other proxy tools try jap, Steganos Internet Privacy suite or ProxyRama (can't remember the sites - google it)

cheers
Pr0t0type

Quote:

---

I couldn't tell why he said to use 127.0.0.1 as the IP.

---

I can tell you exactly why he asked you to do this.

All of you know what the loopback is used for by definition, however, all of you overlooked how the TCP/IP stack can be used in conjunction with the loopback address. Let me explain:

You can add LSPs (layered Service Provider) to the stack that act as a shim. Basically, you funnel all traffic down to the localhost and this shim grabs the traffic and routes it out to the internet or wherever it is supposed to. Many VPN clients work this way including one developed by V-One corporation.

Hope this helps you guys.

--TH13

Unhappy: Can you cause a Dos with IP 127.0.0.1? I believe you could on a *nix machine that is improperly configured, (chargen and echo functioning). Sent the victim a TCP packet to chargen, (port 19), with the IP address spoofed to 127.0.0.1 and a source port of echo, (port 7). The chargen port will respond with a random(?) character string to the echo port which will bounce it back as it is supposed to do causing the chargen port to generate another string and so on..... On older hardware this was capable of DoSing the machine. On newer hardware I don't know if this would be the case.

How to make multiproxy actually work by (elitehackers)USER/ComputerNerd22(antionline). You probably seen this on www.elitehackers.com forum this is me, So I do not want anyone saying oh he *copied it* or plagorized this.

r207.3.119-18.adinet.com.uy:80
164.58.28.250:80
194.muja.pitt.washdctt.dsl.att.net:80
865host1.starwoodbroadband.com:80
web.khi.is:80
customer-148-223-48-114.uninet.net.mx:80
163.24.133.117:80
paubrasil.mat.unb.br:8080
164.58.18.25:80
bpubl014.hgo.se:3128
bpubl007.hgo.se:3128
www.reprokopia.se:8000
193.188.95.146:8080
193.220.32.246:80
AStrasbourg-201-2-1-26.abo.wanadoo.fr:80
gennet.gennet.ee:80
pandora.teimes.gr:8080
mail.theweb.co.uk:8000
mail.theweb.co.uk:8888
194.6.1.219:80
194.79.113.83:8080
ntbkp.naltec.co.il:8080
195.103.8.10:8080
sun.k2.surfinn.com:8080
sun.h.surfinn.com:8080
sun.s.surfinn.com:8080
pools1-31.adsl.nordnet.fr:80
pools1-98.adsl.nordnet.fr:80
195.167.64.193:80
server.sztmargitgimi.sulinet.hu:80
los.micros.com.pl:80
195.47.14.193:80
mail.voltex.co.za:8080
196.23.147.34:80
196.40.43.34:80
lvsweb.lasvegasstock.com:8000
musalemnt.notariamusalem.cl:80
ip-36-018.guate.net.gt:80
200.13.199.35:80
200.135.246.2:80
ntserver1.comnt.com.br:80
200-204-182-137.terra.com.br:80
200.21.225.82:8080
200.211.98.5:80
isdn02201.cultura.com.br:80
isdn02204.cultura.com.br:80
isdn03021.cultura.com.br:80
adao.dei.unicap.br:80
gateway.andromaco.cl:80
mail.care.org.gt:80
p75-90.cmet.net:8080
jaamsa.com:3128
host031210.ciudad.com.ar:80
host071052.arnet.net.ar:8000
200.46.109.82:80
200.52.4.82:80
correo.cfired.org.ar:80
200.61.6.50:8080
202.103.6.178:3128
202.104.189.20:8080
202.104.20.181:80
202.105.138.19:8080
202.105.230.226:80
202.106.139.88:80
202.108.122.38:80
202.110.204.18:80
202.110.220.14:80
mail.jjs.or.id:80
cair.res.in:80
smtp2.info.com.ph:80
202.9.136.40:8080
202.99.225.45:8080
203.113.34.239:80
203.117.67.122:8080
203.123.240.112:80
proxy.nida.ac.th:8080
203.151.40.4:80
203.155.16.130:80
203.155.172.60:80
aworklan003105.netvigator.com:3128
esjv.com.hk:80
203.200.75.165:80
cp.chollian.net:80
yuluma.wa.edu.au:80
203.69.244.194:80
223-mail.internet.ve:8080
mail.bravocorp.com:8080
206.49.33.250:8080
207.61.38.67:8000
h209-17-147-1.gtconnect.net:80
209.47.38.116:8000
cr2098859123.cable.net.co:80
mail.unisol.com.ar:80
210.12.86.181:80
210.204.118.194:8080
210.21.93.141:3128
210.219.227.52:8080
210.242.164.150:80
210.8.92.2:80
210.82.40.243:8080
210.92.128.194:8080
210.96.65.4:80
host211000070226.kagaku-k.co.jp:80
www.kan-shoku.co.jp:80
ns.toyoriko.co.jp:80
211.114.116.60:80
211.165.192.8:80
211.21.111.227:8080
211.233.21.166:8080
211.45.21.165:8080
dns1.daiken-c.co.jp:80
dns.lpgc.or.jp:80
211.93.108.113:8080
212.12.157.130:8000
enteleca-2.dsl.easynet.co.uk:80
TK212017066196.teleweb.at:80
212.251.36.62:80
adslb-98-18.cytanet.com.cy:80
212.38.132.122:80
212.49.87.254:3128
212.60.65.206:8080
is2.isys.no:8000
213.121.248.138:80
213.16.133.130:80
213.176.28.6:80
acode-u.org:8080
213.25.170.98:8080
213.25.29.12:80
213.25.43.242:80
213.25.43.242:8080
p038-30.netc.pt:80
xirus.com:8080
adsl-216-158-25-110.cust.oldcity.dca.net:80
normandintransit.com:80
216-238-112-40.dsl.ct.thebiz.net:80
216.72.196.21:80
216.72.63.198:80
216.72.63.198:8080
217-127-248-37.uc.nombres.ttd.es:3128
217.153.114.66:8080
host217-34-153-161.in-addr.btopenworld.com:8080
host217-34-194-49.in-addr.btopenworld.com:80
host217-37-205-177.in-addr.btopenworld.com:8080
host182-44.pool21758.interbusiness.it:8000
host162-51.pool21759.interbusiness.it:80
217.66.203.82:3128
218.5.133.146:80
2.magicbird.co.jp:80
h0040f6a4e019.ne.client2.attbi.com:8080
4.22.156.10:80
61.11.26.150:80
61.131.48.219:80
61.133.63.129:80
61.138.130.229:8080
cm61-15-14-187.hkcable.com.hk:80
61.159.224.11:80
61.159.235.36:8080
61.180.73.66:8080
61.185.255.4:3128
61.32.11.130:8080
www.flab.fr:8080
adsl-63-192-134-107.dsl.snfc21.pacbell.net:8080
ftp.aparizona.com:80
64-132-153-94.gen.twtelecom.net:8000
proxy.ia2.marketscore.com:80
ensait19.ensait.fr:80
ado.com.mx:80
AS7000_1B.sfn.co.jp:8080
ns.cyberlinks-jp.com:80
211.15.62.123:8000
210.163.167.162:80
h64-5-220-82.gtcust.grouptelecom.net:80
204.196.104.27:80
ftp.orange.uk.com:8000
maq241i.advance.com.ar:80
mertennt.merten.hu:80
61.142.169.98:80
ns.proserv.co.jp:80
ns.tcj-t.co.jp:80
www.nisshin-syouji.co.jp:80
202.9.136.40:80
210.254.8.52:8000
www.qdh.or.jp:80
207.167.236.137:80
210.74.254.35:80
219.163.108.18:8080
mail.koibuchi.ac.jp:80
dns1.koibuchi.ac.jp:80

Copy and paste all these proxy servers into notepad then go to file and Save As proxy servers (example) then you open up multiproxy click on the shield icon, then go to the proxy list tab then go down to options now you see 3 tabs general options, Proxy server list, Advanced options now click the proxy server list click menu at the bottom, go to files then import proxy server list, now open the file that had all the proxy server list, now click ok now click check all proxies then it will say waiting to get online then it will start testing remote proxies, when its done click the proxy list go back down to options click the proxy server list tab then you will see that 95 % of them are now green. Let me know how it turns out

Shark,

There were DoS attacks a few years back that involved conditions like the ones you have provided. Many have since been patched but yes, you used to be able to get a box to enter into an endless loop and deny services to legit users. I have to say that it wouldn't surprise me to see more attacks like this again. I was certain that with raw socket support in XP that we'd see many more issues but surprisingly, the avalanche has not happened - yet ;)