I have a url shortening/redirect service. A person has been using my site to shorten links to domains that are soliciting prescription drugs without prescriptions. Ok, high spam rate for that kind of content. The last thing I need is to get shut down because my domain gets attached to these sites.

I know it is one person with several, like at least a dozen so far, domains.

I cant IP deny because the person is using random proxies to access my site, so IP deny is useless, could never keep up.

The person uses domainsbyproxy.com to hide personal registration info.

All the sites I have looked up that I have found are all hosted at SoftLayer.com. I wrote emails, no response. I called and got the buck passed 3 times within 30 seconds of conversation to end up at a dead end with voice mail. I was hoping that they might have been cooperative and give me a list of the domains this person has so I could create a blacklist of all the domains.

I hate to have to keep a constant watch on what URLs people are shortening. I would like to leave for the weekend and not have to worry!

Right now I am left to just watching for links this person shortens, build my list of the domains, and build a blacklist of those domains.

If I miss any of the domains this person posts to my site, and I leave for the weekend, I could come back to find my site shut down because of this rogue druggie!

Are there any other alternatives, or a php class or snippet out there that I can just right up front block access to my site from any proxy server?

I need a quick fix!

I would check the URIs presented for various words then redirect them somewhere else


Or is that just my warped sense of humour??

Check your webserver logs for their browser string, if you're talking about one or two individuals. If it's unique enough, you could redirect them to the Interpol website every time they connect :-)
If the string isn't unique enough, you could go through the trouble of blocking the "IP blocks" of every dedicated hosting provider, as that seems to be where the majority of open proxies are residing.

there's also fail2ban, which can block an IP that pops up too frequently in a logfile, or one that has too many 404 requests, or whatever.

http://www.include-im.com/blog/?p=68

could also run something that looks up the domain somewhere to see if it's spam and just silently dies if it is. (entry, that is.)

You could use PHP to display a 403 Forbidden error using the spammer's Browser Header, but only if it's static.

There are several problems with proxies.

1. There are several different types(HTTP, web, Tor, VPNs)
2. They are created everyday
3. They may not always directly appear as a proxy

It's a never ending game of whack-a-mole.