On Wed, Feb 10, 2016 at 11:09 AM, Joseph Lorenzo Hall <[email protected]> wrote:

> Do we have any indication as to how they are blocking (e.g., given Iran's
> past history, I'd tend to think it involves fingerprinting circumvention
> tech protocols). best, Joe
>

I don't believe its traffic classification on circumvention tools; the
proliferation of obfsproxy-style and meek transports beyond Tor seems to
made this more difficult. For the particular tools that I have checked, it
appeared to be enumeration of network entry points through the censors
running the tool or collecting aggregated network statistics from users,
and then blocking found addresses. In certain cases, this layer three
blocking and in others through in-line blocking on the application layer.
In the latter scenario, the intention seems though to simply block SSL
connection for addresses, and nothing more fine grain, e.g.
whitelisting/blacklisting.

Would be happy to test any tools, maybe FreeGate is next.
-- 
*Collin David Anderson*
averysmallbird.com | @cda | Washington, D.C.
-- 
Liberationtech is public & archives are searchable on Google. Violations of 
list guidelines will get you moderated: 
https://mailman.stanford.edu/mailman/listinfo/liberationtech. Unsubscribe, 
change to digest, or change password by emailing moderator at 
[email protected].

Reply via email to