Re:Identifying IP address of filtering devices in the Great ...
by kyllo on Monday December 17, 2012 @12:02PM
(#4933120)
They can block SSH now? Wow.
SSH tunneling to a proxy server worked flawlessly for me when I was living in China back in 2006. I guess the GFW has gotten a bit more sophisticated since then.
Re:Identifying IP address of filtering devices in the Great ...
by aneth4 on Tuesday December 18, 2012 @02:01AM
(#4936389)
They have some way of detecting long running ssh proxies. Your connection will degrade and then disconnect. No idea how they do it. For all I know, they break your key and figure out it's just a proxy.
They've recently launched a major upgrade that is also taking down most of the major VPNs popular with expats, and warning expats that unauthorized VPNs are illegal and encouraging the use of "local" providers.
It's a little ridiculous. Expats would be severely hampered without access to man of the sites that are blocked.
Re:Identifying IP address of filtering devices in the Great ...
by hunvreus on Tuesday December 18, 2012 @10:43AM
(#4937954)
We actually are setting up IPsec between our LAN and a Linode box in Japan (we love Linode, especially for things we know will be bandwidth intensive). But this is not necessarily possible for everybody.
As for SSH tunneling: no issue so far. A few years back, my tunnels used to be reset on a regular basis but not recently.
If you use a proper VPN, e.g. PPTP, you'll have much better luck. All of my traffic is routed through an ec2 instance, which unfortunately means I can't access stackoverflow or some other sites since they've blocked ec2.
The lag is hardly noticeable. Actually I think encrypted traffic is faster since it can't be scanned.