Ask HN: How would you tunnel through GFW?

Re:Ask HN: How would you tunnel through GFW? by est on Friday October 02, 2009 @03:00AM (#856582)

All bypass methods can be categorized into two:

1. Methods that requires a 3rd-party server

2. Methods that do NOT requires a 3rd-party server

Currently mainland underground hackers focus on methods #2, and as far as I know 3 POC works fine through GFW on OSI level 3, 4, and 7, unless the target is an IP ban.

[ Parent | on HN ]

Re:Ask HN: How would you tunnel through GFW? by trevelyan on Friday October 02, 2009 @10:35AM (#857080)

There is also now DNS poisoning of high profile sites like Facebook and Twitter. So be sure to use a DNS proxy that is outside China.

[ Parent | on HN ]

Re:Ask HN: How would you tunnel through GFW? by est on Friday October 02, 2009 @10:57AM (#857141)

> So be sure to use a DNS proxy that is outside China.

This is where many people think wrong. GFW hijacks all UDP port 53 data, and OpenDNS fails like others. You MUST use a clean DNS server inside China or on localhost. Query DNS via IPv6/SSH/VPN/Socks/TOR/TCP.

[ Parent | on HN ]

Re:Ask HN: How would you tunnel through GFW? by juvenn on Friday October 02, 2009 @11:38AM (#857262)

Yes, I use OpenDNS now, but it fails like others.

[ Parent | on HN ]

Re:Ask HN: How would you tunnel through GFW? by SickAnimations on Friday October 02, 2009 @05:44AM (#856693)

What does "3 POC" mean? I'm interested in learning about methods that don't require a 3rd party.

[ Parent | on HN ]

Re:Ask HN: How would you tunnel through GFW? by est on Friday October 02, 2009 @06:10AM (#856717)

3 proofs-of-concept. The idea is simple, use garbled protocol to make GFW confused but destination servers understand. And inject designed low TTL packets to GFW.

[ Parent | on HN ]