121–130 of 151 posts
I haven't checked yet whether they're using layer 7 filtering or just blocking ports, but assuming it was a lame combination of the two, you can try tunneling through HTTP on port 80. Download proxytunnel and follow this guide to set up Apache (or whatever server you prefer) to http proxy ssh connections to port 22: http://dag.wieers.com/howto/ssh-http-tunneling/ Then run ssh with proxytunnel as the ProxyCommand (as…
https://blog.torproject.org/blog/iran-partially-blocks-encry...
Regarding HTTPS, it appears they detect and disrupt the SSL handshake.
For those who can't access TOR's site, it may be useful to quote their post in full:
“Over the past two days we've been hearing from, and working with, a number of Iranians having difficulty using Tor from inside Iran. It seems the Iranian government has ramped up censorship in three ways: deep packet inspection (dpi) of SSL traffic, selective blocking of IP Address and TCP port combinations, and some keyword filtering. For instance, they have partially blocked access to Tor's website, torproject.org, via IP address (such as 86.59.30.36) and port 443 (which is the HTTPS port). The third level of blocking is by keywords, such as searching for the word 'tor' via regular, non-encrypted search engine websites.
The blocks on SSL are not complete and not nationwide. Where blocking is in place, initial investigations show they are identifying the beginning of the SSL handshake and simply interrupting the handshake. We continue to research and investigate solutions with the assumption that SSL will eventually be blocked nationwide inside Iran. Our goal is to defeat their dpi signatures and allow tor to work by default.
The Iran Media Program has posted their thoughts on what is happening from a journalist's perspective.
So far, it seems the majority of Tor users are not affected by these blocks. Iran is still the #2 country based on direct usage, https://metrics.torproject.org/users.html?graph=direct-users.... This number is on the decline, however.
More details to follow as we have them.”
I haven't checked yet whether they're using layer 7 filtering or just blocking ports, but assuming it was a lame combination of the two, you can try tunneling through HTTP on port 80. Download proxytunnel and follow this guide to set up Apache (or whatever server you prefer) to http proxy ssh connections to port 22: http://dag.wieers.com/howto/ssh-http-tunneling/ Then run ssh with proxytunnel as the ProxyCommand (as…
I'll have to find the paper and clean it up a bit, but e-mail me and i'll send it when I find it and i'll post it on here. It's not amazing or anything, mostly just a talk with references to tools and articles and common flaws in captive portals.
I live in Iran. The fact about the shut down is correct. I would also add that secure connection to servers inside Iran is possible. I've tried some, and they work. But trying to connect to services like Github and PivotalTracker, which we relay on in our starup, results in no response. Also I will note that the ssh protocol is the same. I can ssh into my university machine (inside Iran) but I can't access my rackspa…
How do you know this?
To download Hotspot Shield, TOR or Ultrasurft
Visit http://www.unblocker.co.nr or http://www.proxysoftwares.co.nr
As it so happens, I've spent the last day trying to break in through the technical restrictions of a regime from the outside. There is a country with a very oppressive government that prevents outsiders from observing them. It's a tiny island monarchy that doesn't matter much in the grand scheme of things, but you may have heard of them; it's called the "United Kingdom" or "Great Britain" or whatever. If you don't li…
True, but wouldn't you expect a repressive regime to be able to afford such equipment? The original post talks about Iran, which probably places more emphasis on blocking traffic than the UK.
As it so happens, I've spent the last day trying to break in through the technical restrictions of a regime from the outside. There is a country with a very oppressive government that prevents outsiders from observing them. It's a tiny island monarchy that doesn't matter much in the grand scheme of things, but you may have heard of them; it's called the "United Kingdom" or "Great Britain" or whatever. If you don't li…
You mean you don't pay for the TV license since you're not in the UK and you complain that you can't watch their tv? Shocking...
I really don't understand your approach to this - propaganda? restrictions of a regime? very oppressive? There are some things I disagree with in the UK, but you're trying to watch a TV channel they want to get paid for. It's that simple - there's no point in dragging politics into this one. I'm definitely against silly country filtering using geoip on services that don't allow other means of access, but in the context of what's happening in other countries, let's not call it "oppressive", please.