I just read this article in the SANS reading room called "Detecting and Preventing Anonymous Proxy Usage" http://www.sans.org/reading_room/whitepapers/detection/32943.php