Live data from Hacker News

The Great Firewall of Yale

162.209.96.128

1–10 of 135 posts

Re: The Great Firewall of Yale

#3
I don't think blocking a specific set of IP addresses constitutes deep packet inspection. If they were reading the payload contents for strings matching the CourseTable site, that would qualify.

Still, this is a stupid move by Yale.

Re: The Great Firewall of Yale

#4
I'm sure no Yale student has ever heard of tethering and that blocking the site on the Yale network will effectively prevent very smart students from reaching this website.

You would think that the Yale administrators would know better than this.

Re: The Great Firewall of Yale

#6
post #3

I don't think blocking a specific set of IP addresses constitutes deep packet inspection. If they were reading the payload contents for strings matching the CourseTable site, that would qualify. Still, this is a stupid move by Yale.

If they were only blocking based on IP address then students wouldn't be able to ping the server. So they're blocking on at least the TCP layer.

... not that that constitutes DPI either.

Re: The Great Firewall of Yale

#9
I thought my school was bad but reading this makes the administration at my school look like angels. When I launched a similar service at UNC Chapel Hill, the IT dept blocked requests from my server to theirs for scraping latest data.

They claimed I was creating excess load, which is silly because if they really did the math, given how many people were using my service I was probably saving them resources.

Re: The Great Firewall of Yale

#10
post #3

I don't think blocking a specific set of IP addresses constitutes deep packet inspection. If they were reading the payload contents for strings matching the CourseTable site, that would qualify. Still, this is a stupid move by Yale.

If they were only blocking based on IP address then students wouldn't be able to ping the server. So they're blocking on at least the TCP layer. ... not that that constitutes DPI either.

This looks like the block page you get from a Palo Alto firewall. The feature set includes traffic inspection, among many other things. We've got a couple where I work, they are pretty great firewalls actually.
Post reply on HN