[Chrysalis]

The reason why ntl proxies get caught out by anti ddos measures is because most common way of reading the src ip address is via firewall level be it a software firewall or hardware firewall, it will only read the actual ip of the connection and not bother to dig deeper in the packets for a refferal ip. When doing anti ddos the key to it is to minimise the impact of blocking ddos and if you start looking in all the incoming packets then a ddos is going to much more effective since the extra processing is been applied to many thousands of packets per second in that case. So to be fair to the hosts that end up catching out ntl proxies its not that simple to avoid doing it other then applying a whitelist for the ip range.

I wonder if NTL really think its that essential to have proxies (only isp I know of in uk still using them), almost daily I read of an issue concerning proxy servers now. Images get cached locally on user's pcs by default so bandwidth used by web browsing really is quite small.