除了代理之外，如何绕过 IP 定位器？
我需要简要介绍一下基于 IP 地址将内容限制到特定国家/地区背后的弱点。
除了使用位于另一个国家的代理服务器之外，您还能想出另一种方法来规避这样的系统吗？
I need to put together a small brief about the weaknesses behind limiting content to specific countries based on IP address.
Besides using proxy server located in another country, can you think of another way to circumvent such a system?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（7）
由于您的 IP 地址位于通过网络传输的每个 IP 数据包中，并且您需要获取响应，因此您无法阻止服务器检测到您的真实 IP 地址（除非在中间放置代理） 。
您可能感兴趣的一些链接：
瑞典和挪威之间关于监视的冲突< /a>（瑞典无法可靠地识别挪威 IP 流量并将其排除在监控之外）
Herdict.com（我们构建的，我很高兴报告）
Since your IP address is in each IP packet that goes over the network, and it is required for you to get the response back, you cannot prevent your real IP address from being detected at the server (other than by putting a proxy in between).
Some links that may be of interest to you:
Conflict between Sweden and Norway about surveillance (Sweden cannot reliably identify Norway IP traffic and exclude it from surveillance)
Herdict.com (which we built, I am happy to report)
这取决于您检查 IP 的 IP 堆栈的级别，但在更高级别上，您甚至不需要代理服务器即可显示不同的 IP 地址。 例如，如果您要检查的内容是 TCP 标头，则修改 TCP 标头即可实现此目的。
以下是讨论欺骗的链接：http://www.securityfocus.com/infocus/1674
It depends on what level of the IP stack you are checking the IP, but on higher levels, you wouldn't need to even have a proxy server to have a different IP address show up. For example, modifying the TCP header would do it if that is what you are checking against.
Here's a link discussing spoofing: http://www.securityfocus.com/infocus/1674
如果服务使用基于 Web 的地理 IP 查找，则成功的 MITM 攻击可能会欺骗服务认为该 IP 地址是有效的。 当然，这涉及更多，但绝对可行。
If the service is using a web based Geo IP lookup, then a successful MITM attack could trick the service into thinking that the IP address is valid. Of course this is much more involved, but definitely doable.
不要忘记 VPN（当然还有 NAT）。 我想这也可以被归类为代理。 它还需要在另一个国家/地区使用合适的机器。
Don't forget VPNs (and, admittedly, NAT). I guess that could be classed as a proxy, too. It also requires having access to a suitable machine in another country.
基本上，任何使用中介的解决方案都是代理。 时期。
所有“匿名冲浪”网站都是代理，即使它们使用自己的软件。
您可以使用 SSH 和隧道，但这实际上也是一种代理，只是一种隧道代理。 与 VPN 相同。
唯一不需要代理的是源地址欺骗，并且仅适用于单向攻击，因为没有返回数据能够到达您。
另外，请考虑地理定位并非 100% 准确。 我在加拿大的 IP 地址显示为美国地址，并且我的美国地址显示为加拿大。 我确信这在世界其他地方更常见。
Basically, any solution that uses an intermediary is a proxy. Period.
All the "surf anonymously" sites are proxies, even if they use their own software.
You can use SSH and tunneling, but that is, in effect, a proxy as well, just a tunneled one. Same with VPN.
The only thing that doesn't require a proxy is source address spoofing, and that only works with one-way attacks, because no return data will be able to get to you.
Also, consider that Geo-Locating is not 100% accurate. I have IP addresses in Canada that show up as US addresses, and I've had US addresses that show up as Canada. I'm sure this is more common in other parts of the world.
您可以购买阻止您广播 IP 地址的软件。 我确信它有效，我看到它在到处的横幅广告中做广告:)
更严重的是，绕过这个的一种方法是使用缓存服务器（谷歌缓存，回程机）。
You could buy that software that prevents you from broadcasting your IP address. I'm sure it works, I see it advertised in banner ads all over the place :)
On a more serious note, one way of bypassing this would be by using a caching server (google cache, wayback machine).
我认为你不能。 与你交谈的机器必须知道将其回复发送到哪里； 那是你的IP地址。 隐藏这一点的唯一方法是让它回复给不是你的人，也就是将其传递给你的人。 代理。
Tor 总体而言是实现匿名的好方法，尽管它不适合规避您所使用的系统类型正在谈论。
I don't think you can. The machine you're talking to has to know where to send it's reply to; that's your IP address. The only way to hide that is to have it reply to someone that's not you who passes it on to you - ie. a proxy.
Tor is a good way of achieving anonymity in general, although it's not appropriate for circumventing the type of system you're talking about.