Prevent proxy chaining

[Siebenkaes Stefan <Stefan.Siebenkaes () itellium com>]

Hi there,

what actions do you take to prevent proxy-chaining?
Due to billing and security reasons we do not want 
to let people build own proxy servers to chain them
via our central proxy farm.
How can I identify wether the client is a client
or a proxy? Is there a best practice?

I could watch volume or hits/second, but AFAIK
theres no need for a proxy to identify as proxy...

Bye,
  Stefan



--
Stefan Siebenkaes
Systemingenieur
Security
Systemarchitektur & Plattformen

ITELLIUM 
Systems & Services GmbH
Hundingstrasse 11b
90431 Nuernberg
Germany

Tel.:   +49-911-14-20209
Fax.:   +49-911-14-26433
mailto:stefan.siebenkaes () itellium com

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards