I'd like to prevent users from anonymous proxy servers accessing my site, to cut down on click fraud. Using environment variables in PHP: REMOTE_ADDR, HTTP_VIA, HTTP_X_FORWARDED, HTTP_X_FORWARDED_FOR, HTTP_CLIENT_IP ...I am able to detect legitimate transparent proxies and simple anonymous proxy servers, but Distorting and Elite Proxies will slip through the cracks. Are there any freely available lists of known Distorting and Elite Proxy addresses I can add to my .htaccess file? Or any other suggestions on how to counteract this?
You could disable POST requests from any other domains except your website's and one which you'd like to allow.
It's very unlikely that you'll be able to catch ALL of the anonymous proxies visiting your website because no blacklist can keep up to date all the time. If only want to block something like TOR, there are lists of TOR end nodes that you can add to your .htaccess.
Or you could stop being a little bitch. People in oppressive countries can only access the internet through proxies. Think about them. -Anon