detect access denied, use proxy