Re:Ask HN: How would you tunnel through GFW?
by trevelyan on Friday October 02, 2009 @10:35AM
(#857080)
There is also now DNS poisoning of high profile sites like Facebook and Twitter. So be sure to use a DNS proxy that is outside China.
[ Parent
| on HN ]
> So be sure to use a DNS proxy that is outside China.
This is where many people think wrong. GFW hijacks all UDP port 53 data, and OpenDNS fails like others. You MUST use a clean DNS server inside China or on localhost. Query DNS via IPv6/SSH/VPN/Socks/TOR/TCP.