[split] Chinese firewall
10-27-2010, 08:26 PM, (This post was last modified: 05-02-2011, 10:44 PM by RichardGv.)
#9
RE: [split] Chinese firewall
(10-27-2010, 04:38 PM)Vanilla Wrote: Well, it's definitely an interesting project. But you mentioned befor that it was super-unstable, why is that? How well does it work in praxis? I mean, wouldn't it miss some of the first packets when ie. browsing youtube (end up getting a corrupted video), or is that taken into account for?

Edit:
Quote:Huh, yeah, this is off-topic, but I have no permissions to split them to another thread (or I did not find the correct button?).
@Moderator/Admin Please split all replies since post #7 to a new thread. Thanks.
[Thread Splitted]
- The moderation option tools are at the bottom ;)

The reasons that is unstable include:
  1. There isn't a full list of IPs that needs special treatments available. Sites like YouTube uses too many different IPs.
  2. Fingerprints of the fake DNS responses can change (and do change) frequently, so the anti-DNS-poisoning component may often break.
  3. There could be other technical limitations that I don't know.
And the project has some major limitations, too, which I forgot to mention in the last reply:
  1. It cannot bypass a direct IP block. No technique can be used to bypass it, except for proxies. And a great of number of sites are blocked in this way, including Twitter.
  2. If the server does not explicitly follow RFC standards, it will possibly break connections. (Which is the reason the developers decided to use a predefined IP list for "zhang" and "cui".

In practice, at least at the time I tried it (10 months ago or so), it's not really practically usable, unless you can bear meeting a connection reset every some 20 seconds. Other people seems able to access Facebook, YouTube, and Blogger with it, moderately well, but I was not so lucky. I never successfully watched a YouTube video with it, since there's always something broken on the page. Probably it's caused by an incomplete IP blacklist.

By the way, the mod tools are invisible for me, somehow...
[Image: niftyhost-nomodtools.png]
Gentoo Linux User (w/ fvwm) / Loyal Firefox User / Owner of a Stupid Old Computer - My PGP Public Key

No man is an island, entire of itself; every man is a piece of the continent, a part of the main; if a clod be washed away by the sea, Europe is the less, as well as if a promontory were, as well as if a manor of thy friends or of thine own were; any man's death diminishes me, because I am involved in mankind; and therefore never send to know for whom the bell tolls; it tolls for thee.
-- Devotions Upon Emergent Occasions (1624), John Donn
Reply


Messages In This Thread
[split] Chinese firewall - by Vanilla - 10-27-2010, 12:21 AM
RE: [split] Chinese firewall - by Vanilla - 10-27-2010, 04:38 PM
RE: [split] Chinese firewall - by karthikcric - 10-27-2010, 07:56 PM
RE: [split] Chinese firewall - by RichardGv - 10-27-2010, 08:26 PM
RE: [split] Chinese firewall - by HiddenKnowledge - 10-27-2010, 10:17 PM
RE: [split] Chinese firewall - by RichardGv - 10-27-2010, 11:25 PM
RE: Web block confuse - by RichardGv - 10-27-2010, 01:20 AM
RE: Web block confuse - by Vanilla - 10-27-2010, 01:26 AM
RE: Web block confuse - by RichardGv - 10-27-2010, 01:34 AM
RE: Web block confuse - by Vanilla - 10-27-2010, 01:39 AM
RE: Web block confuse - by RichardGv - 10-27-2010, 12:25 PM

Forum Jump: