Re: [Openvpn-users] Bypassing censorship devices
Hi > Sent: Wednesday, December 13, 2023 at 2:42 AM > From: "Peter Davis" > To: "Stella Ashburne" > Cc: openvpn-users@lists.sourceforge.net > Subject: Re: [Openvpn-users] Bypassing censorship devices > > > > Hello, > Tor and all its modes like meek and snowflake are blocked, even bridges are > blocked because you can easily find a list of bridges. > Is it possible to hide OpenVPN in something like ICMP, DNS or SSH? > I don't know where you got the information from but my European friends living in China are able to use meek and snowflake to correspond securely. There are many types of Tor bridges and not all of them are made public. I suggest that you surf to https://tb-manual.torproject.org/zh-CN/ to read more about what Tor Browser can and can't do for you. There are many talented IT people in China who are able to help you build secure VPN tunnels that bypass deep packet inspection and are undetectable by Chinese government machinery. They mostly offer their services on Weibo or WeChat and some of them work for the Chinese authorities in charge of censorship. There's no free lunch in this world and you are expected to pay for their service. This will be my final reply to you on this topic. Good luck! Stella ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Bypassing censorship devices
From: Peter Davis Sent: Wednesday, December 13, 2023 10:52 AM To: Witvliet, J, Ing. Cc: rewe...@gmx.com; openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] Bypassing censorship devices > On Wednesday, December 13th, 2023 at 12:13 AM, > j.witvl...@mindef.nl<mailto:j.witvl...@mindef.nl> > mailto:j.witvl...@mindef.nl>> wrote: From: "Peter Davis via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Tuesday, 12 December 2023 at 19:46:18 To: "Stella Ashburne" mailto:rewe...@gmx.com>> Cc: "openvpn-users@lists.sourceforge.net<mailto:openvpn-users@lists.sourceforge.net>" mailto:openvpn-users@lists.sourceforge.net>> Subject: Re: [Openvpn-users] Bypassing censorship devices > On Tuesday, December 12th, 2023 at 5:03 PM, Stella Ashburne via Openvpn-users > mailto:openvpn-users@lists.sourceforge.net>> > wrote: > Hi Peter > > > Sent: Tuesday, December 12, 2023 at 2:03 PM > > From: "Peter Davis via Openvpn-users" > > openvpn-users@lists.sourceforge.net<mailto:openvpn-users@lists.sourceforge.net> > > To: "Tincantech via Openvpn-users" > > openvpn-users@lists.sourceforge.net<mailto:openvpn-users@lists.sourceforge.net> > > Subject: [Openvpn-users] Bypassing censorship devices > > > > Hello, > > How to use OpenVPN in a country that uses internet censorship devices to > > block VPN services? Is there a way to hide OpenVPN or make it look like a > > normal internet connection? > > > You might like to surf to https://airvpn.org/, register an account for free > and ask for a free trial. > > Even if you aren't a subscriber of its services, you can still post your > questions in its various sub-forums (URL: https://airvpn.org/forums/) > > If you're unable to reach AirVPN using the above URL, you can use one of the > following: > > (1) airvpn.info > (2) airvpn.eu > (3) Onion address: > https://airvpn3epnw2fnsbx5x2ppzjs6vxtdarldas7wjyqvhscj7x43fxylqd.onion/ > > The second VPN vendor that you might like to try is Mullvad which is based in > Sweden (also one of the "14 Eyes" alliance). If you use Mullvad's proprietary > app, you may wish to connect to its servers in Japan or the USA. Again my > friends in China have reported very good download speeds when connecting to > its servers in Japan and the USA. > > Note #1: > > You must use Tor Brower with onion addresses. (If you're in a country that > blocks Tor, you can make use of Tor Browser's built-in features such as meek > or snowflake to bypass host governments' censorship of Tor. Or simply ask Tor > Browser to give you a private bridge to allow you to access Tor. My friends > in China have no problems with using Tor Browser to access the internet using > meek, snowflake or private bridges.) > > Note #2: > > I am not an employee of AirVPN (one of the "14 Eyes" alliance.) > > Besides AirVPN, I have tried other VPN providers/vendors as have my friends > in China. They told me that AirVPN works best because you are able to use > OpenVPN over SSL or SSH (cf. > https://airvpn.org/forums/topic/9149-how-to-use-advanced-airvpn-services-and-features/ > and read the sub-section in which it mentions OpenVPN over SSL or SSH.) > > Note #3: > > My friends in China are not ethnic Chinese but Caucasians and non-Chinese > nationals of Western countries. > > Note #4 (very important note) > > Using a VPN service provided by a VPN provider/vendor that isn't approved by > the Chinese government is illegal and if you're caught, you may face severe > punitive punishments, including jail time. So far no foreigner of a Western > country has been caught and punished for violating this Chinese law as > otherwise Reuters, AFP, etc. would have reported it. > > Best wishes. > > Stella > > P.S.: If you can, avoid posting to this mailing list using HTML format. The > traditional format for posting to mailing lists is plain text such as this > reply of mine. Many years ago posts that were in HTML format would be > automatically rejected or bounced by mailing lists' providers. > > > > ___ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.net<mailto:Openvpn-users@lists.sourceforge.net> > https://lists.sourceforge.net/lists/listinfo/openvpn-users Hello, Tor and all its modes like meek and snowflake are blocked, even bridges are blocked because you can easily find a list of bridges. Is it possible to hide OpenVPN in something like ICMP, DNS or SSH? Yes, you can also tunnel OpenVPN inside openssh. However, port 22 is also often blocked in firewalls. Hence my su
Re: [Openvpn-users] Bypassing censorship devices
> On Wednesday, December 13th, 2023 at 12:13 AM, j.witvl...@mindef.nl > wrote: >> From: "Peter Davis via Openvpn-users" >> Date: Tuesday, 12 December 2023 at 19:46:18 >> To: "Stella Ashburne" >> Cc: "openvpn-users@lists.sourceforge.net" >> >> Subject: Re: [Openvpn-users] Bypassing censorship devices >>> On Tuesday, December 12th, 2023 at 5:03 PM, Stella Ashburne via >>> Openvpn-users wrote: >> >>> Hi Peter >>> >>> > Sent: Tuesday, December 12, 2023 at 2:03 PM >>> > From: "Peter Davis via Openvpn-users" openvpn-users@lists.sourceforge.net >>> > To: "Tincantech via Openvpn-users" openvpn-users@lists.sourceforge.net >>> > Subject: [Openvpn-users] Bypassing censorship devices >>> > >>> > Hello, >>> > How to use OpenVPN in a country that uses internet censorship devices to >>> > block VPN services? Is there a way to hide OpenVPN or make it look like a >>> > normal internet connection? >>> >>> >>> You might like to surf to https://airvpn.org/, register an account for free >>> and ask for a free trial. >>> >>> Even if you aren't a subscriber of its services, you can still post your >>> questions in its various sub-forums (URL: https://airvpn.org/forums/) >>> >>> If you're unable to reach AirVPN using the above URL, you can use one of >>> the following: >>> >>> (1) airvpn.info >>> (2) airvpn.eu >>> (3) Onion address: >>> https://airvpn3epnw2fnsbx5x2ppzjs6vxtdarldas7wjyqvhscj7x43fxylqd.onion/ >>> >>> The second VPN vendor that you might like to try is Mullvad which is based >>> in Sweden (also one of the "14 Eyes" alliance). If you use Mullvad's >>> proprietary app, you may wish to connect to its servers in Japan or the >>> USA. Again my friends in China have reported very good download speeds when >>> connecting to its servers in Japan and the USA. >>> >>> Note #1: >>> >>> You must use Tor Brower with onion addresses. (If you're in a country that >>> blocks Tor, you can make use of Tor Browser's built-in features such as >>> meek or snowflake to bypass host governments' censorship of Tor. Or simply >>> ask Tor Browser to give you a private bridge to allow you to access Tor. My >>> friends in China have no problems with using Tor Browser to access the >>> internet using meek, snowflake or private bridges.) >>> >>> Note #2: >>> >>> I am not an employee of AirVPN (one of the "14 Eyes" alliance.) >>> >>> Besides AirVPN, I have tried other VPN providers/vendors as have my friends >>> in China. They told me that AirVPN works best because you are able to use >>> OpenVPN over SSL or SSH (cf. >>> https://airvpn.org/forums/topic/9149-how-to-use-advanced-airvpn-services-and-features/ >>> and read the sub-section in which it mentions OpenVPN over SSL or SSH.) >>> >>> Note #3: >>> >>> My friends in China are not ethnic Chinese but Caucasians and non-Chinese >>> nationals of Western countries. >>> >>> Note #4 (very important note) >>> >>> Using a VPN service provided by a VPN provider/vendor that isn't approved >>> by the Chinese government is illegal and if you're caught, you may face >>> severe punitive punishments, including jail time. So far no foreigner of a >>> Western country has been caught and punished for violating this Chinese law >>> as otherwise Reuters, AFP, etc. would have reported it. >>> >>> Best wishes. >>> >>> Stella >>> >>> P.S.: If you can, avoid posting to this mailing list using HTML format. The >>> traditional format for posting to mailing lists is plain text such as this >>> reply of mine. Many years ago posts that were in HTML format would be >>> automatically rejected or bounced by mailing lists' providers. >>> >>> >>> >>> ___ >>> Openvpn-users mailing list >>> Openvpn-users@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/openvpn-users >> >> Hello, >> Tor and all its modes like meek and snowflake are blocked, even bridges are >> blocked because you can easily find a list of bridges. >> Is it possible to hide OpenVPN in something like ICMP, DNS or SSH? > > Yes, you can also tunnel OpenVPN inside
Re: [Openvpn-users] Bypassing censorship devices
From: "Peter Davis via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Tuesday, 12 December 2023 at 19:46:18 To: "Stella Ashburne" mailto:rewe...@gmx.com>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>> Subject: Re: [Openvpn-users] Bypassing censorship devices > On Tuesday, December 12th, 2023 at 5:03 PM, Stella Ashburne via Openvpn-users > wrote: > Hi Peter > > > Sent: Tuesday, December 12, 2023 at 2:03 PM > > From: "Peter Davis via Openvpn-users" openvpn-users@lists.sourceforge.net > > To: "Tincantech via Openvpn-users" openvpn-users@lists.sourceforge.net > > Subject: [Openvpn-users] Bypassing censorship devices > > > > Hello, > > How to use OpenVPN in a country that uses internet censorship devices to > > block VPN services? Is there a way to hide OpenVPN or make it look like a > > normal internet connection? > > > You might like to surf to https://airvpn.org/, register an account for free > and ask for a free trial. > > Even if you aren't a subscriber of its services, you can still post your > questions in its various sub-forums (URL: https://airvpn.org/forums/) > > If you're unable to reach AirVPN using the above URL, you can use one of the > following: > > (1) airvpn.info > (2) airvpn.eu > (3) Onion address: > https://airvpn3epnw2fnsbx5x2ppzjs6vxtdarldas7wjyqvhscj7x43fxylqd.onion/ > > The second VPN vendor that you might like to try is Mullvad which is based in > Sweden (also one of the "14 Eyes" alliance). If you use Mullvad's proprietary > app, you may wish to connect to its servers in Japan or the USA. Again my > friends in China have reported very good download speeds when connecting to > its servers in Japan and the USA. > > Note #1: > > You must use Tor Brower with onion addresses. (If you're in a country that > blocks Tor, you can make use of Tor Browser's built-in features such as meek > or snowflake to bypass host governments' censorship of Tor. Or simply ask Tor > Browser to give you a private bridge to allow you to access Tor. My friends > in China have no problems with using Tor Browser to access the internet using > meek, snowflake or private bridges.) > > Note #2: > > I am not an employee of AirVPN (one of the "14 Eyes" alliance.) > > Besides AirVPN, I have tried other VPN providers/vendors as have my friends > in China. They told me that AirVPN works best because you are able to use > OpenVPN over SSL or SSH (cf. > https://airvpn.org/forums/topic/9149-how-to-use-advanced-airvpn-services-and-features/ > and read the sub-section in which it mentions OpenVPN over SSL or SSH.) > > Note #3: > > My friends in China are not ethnic Chinese but Caucasians and non-Chinese > nationals of Western countries. > > Note #4 (very important note) > > Using a VPN service provided by a VPN provider/vendor that isn't approved by > the Chinese government is illegal and if you're caught, you may face severe > punitive punishments, including jail time. So far no foreigner of a Western > country has been caught and punished for violating this Chinese law as > otherwise Reuters, AFP, etc. would have reported it. > > Best wishes. > > Stella > > P.S.: If you can, avoid posting to this mailing list using HTML format. The > traditional format for posting to mailing lists is plain text such as this > reply of mine. Many years ago posts that were in HTML format would be > automatically rejected or bounced by mailing lists' providers. > > > > ___ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-users Hello, Tor and all its modes like meek and snowflake are blocked, even bridges are blocked because you can easily find a list of bridges. Is it possible to hide OpenVPN in something like ICMP, DNS or SSH? Yes, you can also tunnel OpenVPN inside openssh. However, port 22 is also often blocked in firewalls. Hence my suggestion for https. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intend
Re: [Openvpn-users] Bypassing censorship devices
From: "Peter Davis via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Tuesday, 12 December 2023 at 19:37:47 To: "Stella Ashburne" mailto:rewe...@gmx.com>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>> Subject: Re: [Openvpn-users] Bypassing censorship devices > On Tuesday, December 12th, 2023 at > 5:13 PM, Stella Ashburne via > Openvpn-users wrote: > Attention: Peter Davis > > Hi Peter > > > Sent: Tuesday, December 12, 2023 at 3:15 PM > > From: "Hans via Openvpn-users" openvpn-users@lists.sourceforge.net > > To: peter.davis1...@proton.me, openvpn-users@lists.sourceforge.net > > Subject: Re: [Openvpn-users] Bypassing censorship devices > > > > > From: "Peter Davis via Openvpn-users" > > > mailto:openvpn-users@lists.sourceforge.net]> > > > Date: Tuesday, 12 December 2023 at 07:08:08 > > > To: "Tincantech via Openvpn-users" > > > mailto:openvpn-users@lists.sourceforge.net]> > > > Subject: [Openvpn-users] Bypassing censorship devices > > > Hello, > > > How to use OpenVPN in a country that uses internet censorship devices to > > > block VPN services? Is there a way to hide OpenVPN or make it look like a > > > normal internet connection? > > > > Besides that, one might also need to use onion routing (TOR), to hide your > > destination. (VPN-end-point) > > > I guess Han was referring to cascading (or double-hopping) Tor and a VPN > node, something like this: your device --> Tor --> VPN node --> internet. > > > Please don't try the above method if you are in country in which there is > heavy censorship of the internet. Do NOT try it in China; it will fail not > because of the method but because of you. You'll find it unbearably slow to > use the internet that you'll give up easily. > > Best wishes. > > Stella > > P.S.: If you can, avoid posting to > this mailing list using HTML format. The > traditional format for posting to mailing lists is plain text such as this > reply of mine. Many years ago posts that were in HTML format would be > automatically rejected or bounced by mailing lists' providers. > > > ___ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-users Hello, When there are Internet censorship devices, then the Tor does not work. Is it possible to hide OpenVPN in something like ICMP or DNS? Yes, you can hide OpenVPN inside ICMP-payload. You need Ptunnel for this. It works, but it is slow! ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Bypassing censorship devices
From: "Peter Davis" mailto:peter.davis1...@proton.me>> Date: Tuesday, 12 December 2023 at 19:29:03 To: "Witvliet, J, Ing." mailto:j.witvl...@mindef.nl>> Cc: "openvpn-users@lists.sourceforge.net" mailto:openvpn-users@lists.sourceforge.net>> Subject: Re: [Openvpn-users] Bypassing censorship devices > On Tuesday, December 12th, 2023 at 10:45 AM, > j.witvl...@mindef.nl > wrote: From: "Peter Davis via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Tuesday, 12 December 2023 at 07:08:08 To: "Tincantech via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Subject: [Openvpn-users] Bypassing censorship devices Hello, How to use OpenVPN in a country that uses internet censorship devices to block VPN services? Is there a way to hide OpenVPN or make it look like a normal internet connection? Cheers Yes, there are several ways to hide the fact that you are using OpenVPN. The first one, is using http encapsulation. That is considered easy, as it is a built-in option by OpenVPN. However, network analysis can show its contents. The other is using httpS encapsulation around OpenVPN. For that you need an extra program, like stunnel. In BOTH cases, the other end of the tunnel needs to support it. Besides that, one might also need to use onion routing (TOR), to hide your destination. (VPN-end-point) Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. Hello, 1- In any case, I need the OpenVPN Connect program or similar programs to connect to the OpenVPN server, and these programs are detected by Internet censorship devices. No problem with that. 2- Do you mean that in http encapsulation mode, an eavesdropper can see the contents of the packets? They can see THAT you are using OpenVPN (and start asking questions about that), but of course NOT the content of your OpenVPN packets! 3- Can you point me to an article about setting up OpenVPN with Stunnel? There are nice examples with all sorts of inner protocols, like telnet. https://wiki.teltonika-networks.com/index.php?title=Stunnel_configuration_example_using_Telnet=toggle_view_desktop Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Bypassing censorship devices
> On Tuesday, December 12th, 2023 at 5:03 PM, Stella Ashburne via Openvpn-users > wrote: > Hi Peter > > > Sent: Tuesday, December 12, 2023 at 2:03 PM > > From: "Peter Davis via Openvpn-users" openvpn-users@lists.sourceforge.net > > To: "Tincantech via Openvpn-users" openvpn-users@lists.sourceforge.net > > Subject: [Openvpn-users] Bypassing censorship devices > > > > Hello, > > How to use OpenVPN in a country that uses internet censorship devices to > > block VPN services? Is there a way to hide OpenVPN or make it look like a > > normal internet connection? > > > You might like to surf to https://airvpn.org/, register an account for free > and ask for a free trial. > > Even if you aren't a subscriber of its services, you can still post your > questions in its various sub-forums (URL: https://airvpn.org/forums/) > > If you're unable to reach AirVPN using the above URL, you can use one of the > following: > > (1) airvpn.info > (2) airvpn.eu > (3) Onion address: > https://airvpn3epnw2fnsbx5x2ppzjs6vxtdarldas7wjyqvhscj7x43fxylqd.onion/ > > The second VPN vendor that you might like to try is Mullvad which is based in > Sweden (also one of the "14 Eyes" alliance). If you use Mullvad's proprietary > app, you may wish to connect to its servers in Japan or the USA. Again my > friends in China have reported very good download speeds when connecting to > its servers in Japan and the USA. > > Note #1: > > You must use Tor Brower with onion addresses. (If you're in a country that > blocks Tor, you can make use of Tor Browser's built-in features such as meek > or snowflake to bypass host governments' censorship of Tor. Or simply ask Tor > Browser to give you a private bridge to allow you to access Tor. My friends > in China have no problems with using Tor Browser to access the internet using > meek, snowflake or private bridges.) > > Note #2: > > I am not an employee of AirVPN (one of the "14 Eyes" alliance.) > > Besides AirVPN, I have tried other VPN providers/vendors as have my friends > in China. They told me that AirVPN works best because you are able to use > OpenVPN over SSL or SSH (cf. > https://airvpn.org/forums/topic/9149-how-to-use-advanced-airvpn-services-and-features/ > and read the sub-section in which it mentions OpenVPN over SSL or SSH.) > > Note #3: > > My friends in China are not ethnic Chinese but Caucasians and non-Chinese > nationals of Western countries. > > Note #4 (very important note) > > Using a VPN service provided by a VPN provider/vendor that isn't approved by > the Chinese government is illegal and if you're caught, you may face severe > punitive punishments, including jail time. So far no foreigner of a Western > country has been caught and punished for violating this Chinese law as > otherwise Reuters, AFP, etc. would have reported it. > > Best wishes. > > Stella > > P.S.: If you can, avoid posting to this mailing list using HTML format. The > traditional format for posting to mailing lists is plain text such as this > reply of mine. Many years ago posts that were in HTML format would be > automatically rejected or bounced by mailing lists' providers. > > > > ___ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-users Hello, Tor and all its modes like meek and snowflake are blocked, even bridges are blocked because you can easily find a list of bridges. Is it possible to hide OpenVPN in something like ICMP, DNS or SSH? ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Bypassing censorship devices
> On Tuesday, December 12th, 2023 at > 5:13 PM, Stella Ashburne via > Openvpn-users wrote: > Attention: Peter Davis > > Hi Peter > > > Sent: Tuesday, December 12, 2023 at 3:15 PM > > From: "Hans via Openvpn-users" openvpn-users@lists.sourceforge.net > > To: peter.davis1...@proton.me, openvpn-users@lists.sourceforge.net > > Subject: Re: [Openvpn-users] Bypassing censorship devices > > > > > From: "Peter Davis via Openvpn-users" > > > mailto:openvpn-users@lists.sourceforge.net]> > > > Date: Tuesday, 12 December 2023 at 07:08:08 > > > To: "Tincantech via Openvpn-users" > > > mailto:openvpn-users@lists.sourceforge.net]> > > > Subject: [Openvpn-users] Bypassing censorship devices > > > Hello, > > > How to use OpenVPN in a country that uses internet censorship devices to > > > block VPN services? Is there a way to hide OpenVPN or make it look like a > > > normal internet connection? > > > > Besides that, one might also need to use onion routing (TOR), to hide your > > destination. (VPN-end-point) > > > I guess Han was referring to cascading (or double-hopping) Tor and a VPN > node, something like this: your device --> Tor --> VPN node --> internet. > > > Please don't try the above method if you are in country in which there is > heavy censorship of the internet. Do NOT try it in China; it will fail not > because of the method but because of you. You'll find it unbearably slow to > use the internet that you'll give up easily. > > Best wishes. > > Stella > > P.S.: If you can, avoid posting to > this mailing list using HTML format. The > traditional format for posting to mailing lists is plain text such as this > reply of mine. Many years ago posts that were in HTML format would be > automatically rejected or bounced by mailing lists' providers. > > > ___ > Openvpn-users mailing list > Openvpn-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/openvpn-users Hello, When there are Internet censorship devices, then the Tor does not work. Is it possible to hide OpenVPN in something like ICMP or DNS? ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Bypassing censorship devices
> On Tuesday, December 12th, 2023 at 10:45 AM, > j.witvl...@mindef.nl > wrote: >> From: "Peter Davis via Openvpn-users" >> Date: Tuesday, 12 December 2023 at 07:08:08 >> To: "Tincantech via Openvpn-users" >> Subject: [Openvpn-users] Bypassing censorship devices >> >> Hello, >> How to use OpenVPN in a country that uses internet censorship devices to >> block VPN services? Is there a way to hide OpenVPN or make it look like a >> normal internet connection? >> >> Cheers > > Yes, there are several ways to hide the fact that you are using OpenVPN. > The first one, is using http encapsulation. > That is considered easy, as it is a built-in option by OpenVPN. > > However, network analysis can show its contents. > > The other is using httpS encapsulation around OpenVPN. For that you need an > extra program, like stunnel. > > In BOTH cases, the other end of the tunnel needs to support it. > > Besides that, one might also need to use onion routing (TOR), to hide your > destination. (VPN-end-point) > Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet > de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt > u verzocht dat aan de afzender te melden en het bericht te verwijderen. De > Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die > verband houdt met risico's verbonden aan het elektronisch verzenden van > berichten. > > This message may contain information that is not intended for you. If you are > not the addressee or if this message was sent to you by mistake, you are > requested to inform the sender and delete the message. The State accepts no > liability for damage of any kind resulting from the risks inherent in the > electronic transmission of messages. Hello, 1- In any case, I need the OpenVPN Connect program or similar programs to connect to the OpenVPN server, and these programs are detected by Internet censorship devices. 2- Do you mean that in http encapsulation mode, an eavesdropper can see the contents of the packets? 3- Can you point me to an article about setting up OpenVPN with Stunnel?___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Bypassing censorship devices
Hi Peter >Sent: Tuesday, December 12, 2023 at 2:03 PM >From: "Peter Davis via Openvpn-users" >To: "Tincantech via Openvpn-users" >Subject: [Openvpn-users] Bypassing censorship devices > >Hello, >How to use OpenVPN in a country that uses internet censorship devices to block >VPN services? Is there a way to hide OpenVPN or make it look like a normal >internet connection? You might like to surf to https://airvpn.org/, register an account for free and ask for a free trial. Even if you aren't a subscriber of its services, you can still post your questions in its various sub-forums (URL: https://airvpn.org/forums/) If you're unable to reach AirVPN using the above URL, you can use one of the following: (1) airvpn.info (2) airvpn.eu (3) Onion address: https://airvpn3epnw2fnsbx5x2ppzjs6vxtdarldas7wjyqvhscj7x43fxylqd.onion/ The second VPN vendor that you might like to try is Mullvad which is based in Sweden (also one of the "14 Eyes" alliance). If you use Mullvad's proprietary app, you may wish to connect to its servers in Japan or the USA. Again my friends in China have reported very good download speeds when connecting to its servers in Japan and the USA. Note #1: You must use Tor Brower with onion addresses. (If you're in a country that blocks Tor, you can make use of Tor Browser's built-in features such as meek or snowflake to bypass host governments' censorship of Tor. Or simply ask Tor Browser to give you a private bridge to allow you to access Tor. My friends in China have no problems with using Tor Browser to access the internet using meek, snowflake or private bridges.) Note #2: I am not an employee of AirVPN (one of the "14 Eyes" alliance.) Besides AirVPN, I have tried other VPN providers/vendors as have **my friends in China**. They told me that AirVPN works best because you are able to use OpenVPN over SSL or SSH (cf. https://airvpn.org/forums/topic/9149-how-to-use-advanced-airvpn-services-and-features/ and read the sub-section in which it mentions OpenVPN over SSL or SSH.) Note #3: My friends in China are not ethnic Chinese but Caucasians and non-Chinese nationals of Western countries. Note #4 (very important note) Using a VPN service provided by a VPN provider/vendor that isn't approved by the Chinese government is illegal and if you're caught, you may face severe punitive punishments, including jail time. So far no foreigner of a Western country has been caught and punished for violating this Chinese law as otherwise Reuters, AFP, etc. would have reported it. Best wishes. Stella P.S.: If you can, avoid posting to this mailing list using HTML format. The traditional format for posting to mailing lists is plain text such as this reply of mine. Many years ago posts that were in HTML format would be automatically rejected or bounced by mailing lists' providers. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Bypassing censorship devices
Attention: Peter Davis Hi Peter >Sent: Tuesday, December 12, 2023 at 3:15 PM >From: "Hans via Openvpn-users" >To: peter.davis1...@proton.me, openvpn-users@lists.sourceforge.net >Subject: Re: [Openvpn-users] Bypassing censorship devices > > > >>From: "Peter Davis via Openvpn-users" >>mailto:openvpn-users@lists.sourceforge.net]> >>Date: Tuesday, 12 December 2023 at 07:08:08 >>To: "Tincantech via Openvpn-users" >>mailto:openvpn-users@lists.sourceforge.net]> >>Subject: [Openvpn-users] Bypassing censorship devices >>Hello, >>How to use OpenVPN in a country that uses internet censorship devices to >>block VPN services? Is there a way to hide OpenVPN or make it look like a >>normal internet connection? > > >Besides that, one might also need to use onion routing (TOR), to hide your >destination. (VPN-end-point) I guess Han was referring to cascading (or double-hopping) Tor and a VPN node, something like this: your device --> Tor --> VPN node --> internet. Please don't try the above method if you are in country in which there is heavy censorship of the internet. Do NOT try it in China; it will fail not because of the method but because of you. You'll find it unbearably slow to use the internet that you'll give up easily. Best wishes. Stella P.S.: If you can, avoid posting to this mailing list using HTML format. The traditional format for posting to mailing lists is plain text such as this reply of mine. Many years ago posts that were in HTML format would be automatically rejected or bounced by mailing lists' providers. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Bypassing censorship devices
From: "Peter Davis via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Date: Tuesday, 12 December 2023 at 07:08:08 To: "Tincantech via Openvpn-users" mailto:openvpn-users@lists.sourceforge.net>> Subject: [Openvpn-users] Bypassing censorship devices Hello, How to use OpenVPN in a country that uses internet censorship devices to block VPN services? Is there a way to hide OpenVPN or make it look like a normal internet connection? Cheers Yes, there are several ways to hide the fact that you are using OpenVPN. The first one, is using http encapsulation. That is considered easy, as it is a built-in option by OpenVPN. However, network analysis can show its contents. The other is using httpS encapsulation around OpenVPN. For that you need an extra program, like stunnel. In BOTH cases, the other end of the tunnel needs to support it. Besides that, one might also need to use onion routing (TOR), to hide your destination. (VPN-end-point) Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten. This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages. ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
[Openvpn-users] Bypassing censorship devices
Hello, How to use OpenVPN in a country that uses internet censorship devices to block VPN services? Is there a way to hide OpenVPN or make it look like a normal internet connection? Cheers.___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
