News for hackers. Stuff that matters.
Re:VPN access being disabled in China by sneak on Sunday December 23, 2012 @12:21PM (#4959958)
...and by "Cisco IPSec" you mean "IPSec", right?

I would assume, based on the various anecdotal reports I've read, that IPSec tunnels are blocked under this new program, along with PPTP and L2TP.

They're using machine learning packet classifiers to identify the traffic running over tcp and udp, as well.

Re:VPN access being disabled in China by kaptain on Sunday December 23, 2012 @12:47PM (#4960042)
I'm using IPSec now without any problems. OpenVPN is blocked.

China has the power to be more selective about what it blocks. For example, Wikipedia is not blocked here (yet). But trying to access an article within Wikipedia on Tiananmen results in a dropped connection. Why China completely blocks entire blocks of ip addresses (like YouTube, Blogger, Wordpress) is not clear to me. There are a number of easy heuristics you could use to block most of what you don't want.

It is ironic to me that a government that preaches a belief in rationality (eg I received a text message last week urging citizens to believe in science and not the end of the world reports) would use censorship instead of rational debate/discussion to counter viewpoints it doesn't agree with.

Re:VPN access being disabled in China by stock_toaster on Sunday December 23, 2012 @04:53PM (#4960817)

  > OpenVPN is blocked.
Are just the standard ports blocked? Or are they doing some type of traffic analysis to differentiate openvpn traffic over any port, be it tcp or udp (as openvpn can of course be configured for any port over tcp or udp)?
Re:VPN access being disabled in China by Fivesheep on Sunday December 23, 2012 @06:23PM (#4961106)
GFW is getting more advanced. It doesn't simply block you by ports anymore, but by your accessing patterns.