Why have I been directed here?

An open proxy has been found on the IP address you attempted to connect to IRC with. 38.103.63.59   This is not allowed by the software the IRC server is using to scan for open proxies.

What is a proxy?

A proxy is a piece of software that allows other computers to "bounce" connections through the computer it is installed on allowing other computers to access the internet through it. This can allow access to the internet from networks which do not have a direct internet connection.

So why aren't they allowed?

We have no problem with correctly configured proxies, they are sometimes the only way it is possible for someone to gain internet access. However when a proxy is misconfigured to allow access to anyone on the internet (often called an open proxy) it can be used by anyone on the internet to "bounce" their connections through your system! This type of misconfigured proxy is an annoyance to the internet community as a whole because they allow abusers to hide behind someone else's address. This can be abused by spammers to anonymously send unsolicitied email ("spam"), to anonymously connect to a chat network such as IRC or to access (and possibily abuse) websites in an anonymous fashion.

How does this affect IRC?

If you have been on IRC for any length of time, you have probably seen an attack using open proxies at least once. Hundreds of clients will enter a channel, often with random nick names, and start sending large amounts of coloured channel and CTCP messages. Commonly they will leave and join the channel rapidly in order to cause more disruption.

Without completely locking up the channel, there is no effective way to stop the flood. Even if the channel is locked up, the floods of text can be sent to individual users and will usually be enough to disconnect them.

Most of these types of attacks use open proxies because open proxies are relatively easy to come by.  Lists of them are readily available over the Internet. So this is why many IRC networks do not allow them. If you have to use a proxy, it should be configured correctly.

How can I fix it?

There are many different types of proxy software, in all cases you need to make sure that your proxy is configured to only allow the IP addresses within your own network access to it. A proxy which does not allow external access is considered secure. There are some types of proxy such as tor which have the express purpose of allowing anonymous access to services and as a result some IRC networks (but not all) choose to competely deny access to IP addresses running tor exit nodes.

If you are not using any kind of proxy software then it is likely a trojan or virus has infected your system. We recommend you perform a full virus scan with up-to-date virus defintions. If you do not have a virus scanner try AVG Anti-Virus Free.

If you are certain you do not have an open proxy or virus it is possible your IP address is on a list of previously comprimised machines (known as a DNSBL). You can check this at Openrbl. It is also possible your host will have automatically been submitted to one or more of these lists when you connected with an open proxy.

I want to contact someone about this!

You should contact the staff of the IRC network you were attempting to connect to when you were banned. Unless this network was AustIRC the staff at AustIRC cannot help you.

---

Fixing a Wingate server

Upgrade your Wingate server if version prior to 2.1 : http://www.deerfield.com/support/wingate/kb/index.htm?a=1314
Get help about Wingate at http://www.practicallynetworked.com/sharing/secureproxy.htm.

---

Fixing a Socks 4/5 server

If you run unix Socks 4 or Socks 5, check your ACL.
Following are a few URL which could help you fix your misconfigured proxy server on a Windows machine :
Socks Proxy server : http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnproxy/html/msdn_proxycase.asp
Upgrade and get help about your winproxy at : http://www.winproxy.com/
Upgrade your sygate server : http://www.sygate.com

---

Fixing a Squid server

Get help for Squid ACLs at : http://www.squid-cache.org/Doc/FAQ/FAQ-10.html#ss10.2
Get detailed help at : http://www.documents.cyberabuse.org/?page=vulnerabilities&doc=1
Upgrade your Squid 1.x server at : http://www.squid-cache.org/

---

Fixing a HTTP proxy server

Take a look at your manual for the ACL feature...
Vulnerable proxy servers can be of all types and brands. If your proxy server is not supported anymore and you are not sure about your configuration, firewall it so only your LAN can use it.
Get help about WinRoute at www.kerio.com. They have a manual in adobe format found under downloads/support.
Get detailed help about CacheFlow at : http://www.documents.cyberabuse.org/?page=vulnerabilities&doc=2

---

You can then check for a misconfiguration by using CyberAbuse Web Proxyscanner

---