Search Mailing List Archives


Limit search to: Subject & Body Subject Author
Sort by: Reverse Sort
Limit to: All This Week Last Week This Month Last Month
Select Date Range     through    

[liberationtech] Images of Blocking in Different Countries?

KheOps kheops at ceops.eu
Wed Aug 15 14:31:25 PDT 2012


Hello,

On 08/15/2012 11:20 PM, Jacob Appelbaum wrote:
> Eric S Johnson:
>> Yes-they stopped doin packet inspection in about 2008, near as I can tell.
> 
> Philipp Winter and Stefan Lindskog's work from FOCI demonstrates their
> deep packet inspection is current and ongoing:
> 
> https://www.usenix.org/conference/foci12/how-great-firewall-china-blocking-tor

Reading quickly this paper's paragraph regarding obfsproxy and the fact
that the GFC sends a spoofed RST to the client (Chinese-side) in order
to make it disconnect from the obfsproxy-tor bridge, it makes me
remember what a friend of mine told me he was doing when he was in China
some time ago: he had a VPN which got disconnected with this same
spoofed RST technique, and he just added an iptables rule to block RST
packets coming from his VPN endpoint's IP, and it works. It's a bit
dirty but apparently gave a satisfactory result.

Sorry is this contribution is totally useless :)

KheOps



More information about the liberationtech mailing list