20 pts.
 Detecting reverse proxy
I am trying to enforce an Army policy to ensure all .mil websites are behind a reverse proxy. Is there any way to see if the site is behind a proxy? Thanks!

Software/Hardware used:
ASKED: March 24, 2009  1:36 PM
UPDATED: March 31, 2009  8:19 PM

Answer Wiki:
How are you trying to enforce this policy? Group policy, ACL (access rules) on a firewall, router, etc.? Once you defined what is your policy enforcement, we can try to pinpoint the direction to see if a policy is in play either by a simple traceroute, etc.
Last Wiki Answer Submitted:  March 24, 2009  2:21 pm  by  Aguacer0   8,120 pts.
All Answer Wiki Contributors:  Aguacer0   8,120 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _


 

We are trying to write a program to check if the site is using a proxy. We want to make sure that the site owners are doing what they say they will.

 20 pts.

 

If you have access to the backend server log files, you can check if all HTTP request to that server is coming from the proxy address. Externally, it is very hard to identify a well implemented reverse proxy.

 27,310 pts.

 

You may be able to use a local Web proxy or network analyzer to analyze HTTP requests and responses and see if/how they’re being manipulated.

 10,860 pts.