FemWiki - User contributions [en]

Known Configurations/en

2025-11-14T20:25:23Z

FuzzyBot: Updating to match new version of source page

<languages />

== Known ISP configurations tested by us ==
{{Warning|These settings are either tried by a Femboy Group member or someone close to us. As ISPs' DPI methods change, these methods may not work over time.}}

=== Türk Telekom ===
{{Info|Since many ISPs use Türk Telekom as their backbone, bypass methods may be similar. Try Türk Telekom configurations if yours isn't listed here.}}

==== ByeDPI(Android) ====
Version: 1.2.0
[[File:TurkTelekom ByeDPI.png|thumb|left]]
 

==== DPI Tunnel ====
[[File:DPI Tunnel Configuration.png|thumb|left]]
 

==== zapret ====
On Türk Telekom, some sites(that I'm aware of) like f95zone, coomer and kemono don't work with basic fake packets. I have no clue why but zapret supports multiple profiles so we can add a separate one just for these broken ones. This configuration is used on a router connected directly to the ONT. You may need to change TTLs. 
<code>PROFILE="--dpi-desync=fake --dpi-desync-fooling=md5sig --dpi-desync-fake-tls=0x00000000 --dpi-desync-split-pos=2 --hostspell=hoSt --hostlist=/opt/zapret/profile1.txt" 
NFQWS_OPT="--dpi-desync=fake --dpi-desync-ttl=2 --hostspell=hoSt --hostlist-exclude=/opt/zapret/exclude.txt --new $PROFILE"</code> 
exclude.txt:
<pre>
microsoft.com
google.com
twitter.com
x.com
live.com
youtube.com
office365.com
outlook.office365.com
outlook.com
steamcommunity.com
gov.tr
com.tr
net.tr
org.tr
edu.tr
kemono.su
kemono.party
coomer.su
coomer.party
f95zone.to
pttavm.com
whatsapp.com
whatsapp.net
media-otp1-1.cdn.whatsapp.net
</pre>
 
profile1.txt:
<pre>
cock.li
kemono.su
f95zone.to
kemono.party
coomer.party
coomer.su
</pre>

==== GoodbyeDPI ====
<code>goodbyedpi.exe -5 --set-ttl 3 --native-frag --dns-addr 77.88.8.8 --dns-port 1253 --dnsv6-addr 2a02:6b8::feed:0ff --dnsv6-port 1253</code>

Translations:Known Configurations/5/en

2025-11-14T20:24:55Z

FuzzyBot: Importing a new version from external source

==== zapret ====
On Türk Telekom, some sites(that I'm aware of) like f95zone, coomer and kemono don't work with basic fake packets. I have no clue why but zapret supports multiple profiles so we can add a separate one just for these broken ones. This configuration is used on a router connected directly to the ONT. You may need to change TTLs. 
<code>PROFILE="--dpi-desync=fake --dpi-desync-fooling=md5sig --dpi-desync-fake-tls=0x00000000 --dpi-desync-split-pos=2 --hostspell=hoSt --hostlist=/opt/zapret/profile1.txt" 
NFQWS_OPT="--dpi-desync=fake --dpi-desync-ttl=2 --hostspell=hoSt --hostlist-exclude=/opt/zapret/exclude.txt --new $PROFILE"</code> 
exclude.txt:
<pre>
microsoft.com
google.com
twitter.com
x.com
live.com
youtube.com
office365.com
outlook.office365.com
outlook.com
steamcommunity.com
gov.tr
com.tr
net.tr
org.tr
edu.tr
kemono.su
kemono.party
coomer.su
coomer.party
f95zone.to
pttavm.com
whatsapp.com
whatsapp.net
media-otp1-1.cdn.whatsapp.net
</pre>
 
profile1.txt:
<pre>
cock.li
kemono.su
f95zone.to
kemono.party
coomer.party
coomer.su
</pre>

Translations:Known Configurations/2/en

2025-11-14T20:24:55Z

FuzzyBot: Importing a new version from external source

=== Türk Telekom ===
{{Info|Since many ISPs use Türk Telekom as their backbone, bypass methods may be similar. Try Türk Telekom configurations if yours isn't listed here.}}

Known Configurations/en

2025-11-14T20:24:51Z

FuzzyBot: Updating to match new version of source page

<languages />

== Known ISP configurations tested by us ==
{{Warning|These settings are either tried by a Femboy Group member or someone close to us. As ISPs' DPI methods change, these methods may not work over time.}}

=== Türk Telekom ===

==== ByeDPI(Android) ====
Version: 1.2.0
[[File:TurkTelekom ByeDPI.png|thumb|left]]
 

==== DPI Tunnel ====
[[File:DPI Tunnel Configuration.png|thumb|left]]
 

==== zapret ====
On Türk Telekom, some sites(that I'm aware of) like f95zone, coomer and kemono don't work with basic fake packets. I have no clue why but zapret supports multiple profiles so we can add a separate one just for these broken ones. 
<code>PROFILE="--dpi-desync=fake --dpi-desync-fooling=md5sig --dpi-desync-fake-tls=0x00000000 --dpi-desync-split-pos=2 --hostspell=hoSt --hostlist=/opt/zapret/profile1.txt" 
NFQWS_OPT="--dpi-desync=fake --dpi-desync-ttl=2 --hostspell=hoSt --hostlist-exclude=/opt/zapret/exclude.txt --new $PROFILE"</code> 
exclude.txt:
<pre>
microsoft.com
google.com
twitter.com
x.com
live.com
youtube.com
office365.com
outlook.office365.com
outlook.com
steamcommunity.com
gov.tr
com.tr
net.tr
org.tr
edu.tr
kemono.su
kemono.party
coomer.su
coomer.party
f95zone.to
pttavm.com
whatsapp.com
whatsapp.net
media-otp1-1.cdn.whatsapp.net
</pre>
 
profile1.txt:
<pre>
cock.li
kemono.su
f95zone.to
kemono.party
coomer.party
coomer.su
</pre>

==== GoodbyeDPI ====
<code>goodbyedpi.exe -5 --set-ttl 3 --native-frag --dns-addr 77.88.8.8 --dns-port 1253 --dnsv6-addr 2a02:6b8::feed:0ff --dnsv6-port 1253</code>

Translations:Known Configurations/3/en

2025-11-14T20:09:16Z

FuzzyBot: Importing a new version from external source

==== ByeDPI(Android) ====
Version: 1.2.0
[[File:TurkTelekom ByeDPI.png|thumb|left]]

Known Configurations/en

2025-11-14T20:08:27Z

FuzzyBot: Updating to match new version of source page

<languages />

== Known ISP configurations tested by us ==
{{Warning|These settings are either tried by a Femboy Group member or someone close to us. As ISPs' DPI methods change, these methods may not work over time.}}

=== Türk Telekom ===

==== ByeDPI(Android) ====
[[File:TurkTelekom ByeDPI.png|thumb|left]]
 

==== DPI Tunnel ====
[[File:DPI Tunnel Configuration.png|thumb|left]]
 

==== zapret ====
On Türk Telekom, some sites(that I'm aware of) like f95zone, coomer and kemono don't work with basic fake packets. I have no clue why but zapret supports multiple profiles so we can add a separate one just for these broken ones. 
<code>PROFILE="--dpi-desync=fake --dpi-desync-fooling=md5sig --dpi-desync-fake-tls=0x00000000 --dpi-desync-split-pos=2 --hostspell=hoSt --hostlist=/opt/zapret/profile1.txt" 
NFQWS_OPT="--dpi-desync=fake --dpi-desync-ttl=2 --hostspell=hoSt --hostlist-exclude=/opt/zapret/exclude.txt --new $PROFILE"</code> 
exclude.txt:
<pre>
microsoft.com
google.com
twitter.com
x.com
live.com
youtube.com
office365.com
outlook.office365.com
outlook.com
steamcommunity.com
gov.tr
com.tr
net.tr
org.tr
edu.tr
kemono.su
kemono.party
coomer.su
coomer.party
f95zone.to
pttavm.com
whatsapp.com
whatsapp.net
media-otp1-1.cdn.whatsapp.net
</pre>
 
profile1.txt:
<pre>
cock.li
kemono.su
f95zone.to
kemono.party
coomer.party
coomer.su
</pre>

==== GoodbyeDPI ====
<code>goodbyedpi.exe -5 --set-ttl 3 --native-frag --dns-addr 77.88.8.8 --dns-port 1253 --dnsv6-addr 2a02:6b8::feed:0ff --dnsv6-port 1253</code>

Known Configurations/tr

2025-11-14T20:02:32Z

FuzzyBot: Updating to match new version of source page

<languages />

<div class="mw-translate-fuzzy">
== Bizim tarafımızdan test edilen İSS ayarları ==
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
=== Türk Telekom ===
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
==== ByeDPI(Android) ====
[[File:TurkTelekom ByeDPI.png|thumb|left]]
 
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
==== DPI Tunnel ====
[[File:DPI Tunnel Configuration.png|thumb|left]]
 
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
==== zapret ====
On Türk Telekom, some sites(that I'm aware of) like f95zone, coomer and kemono don't work with basic fake packets. I have no clue why but zapret supports multiple profiles so we can add a separate one just for these broken ones. 
<code>PROFILE="--dpi-desync=fake --dpi-desync-fooling=md5sig --dpi-desync-fake-tls=0x00000000 --dpi-desync-split-pos=2 --hostspell=hoSt --hostlist=/opt/zapret/profile1.txt" 
NFQWS_OPT="--dpi-desync=fake --dpi-desync-ttl=2 --hostspell=hoSt --hostlist-exclude=/opt/zapret/exclude.txt --new $PROFILE"</code> 
exclude.txt:
<pre>
microsoft.com
google.com
twitter.com
x.com
live.com
youtube.com
office365.com
outlook.office365.com
outlook.com
steamcommunity.com
gov.tr
com.tr
net.tr
org.tr
edu.tr
kemono.su
kemono.party
coomer.su
coomer.party
f95zone.to
pttavm.com
whatsapp.com
whatsapp.net
media-otp1-1.cdn.whatsapp.net
</pre>
 
profile1.txt:
<pre>
cock.li
kemono.su
f95zone.to
kemono.party
coomer.party
coomer.su
</pre>
</div>

<div lang="en" dir="ltr" class="mw-content-ltr">
==== GoodbyeDPI ====
<code>goodbyedpi.exe -5 --set-ttl 3 --native-frag --dns-addr 77.88.8.8 --dns-port 1253 --dnsv6-addr 2a02:6b8::feed:0ff --dnsv6-port 1253</code>
</div>

Translations:Known Configurations/6/en

2025-11-14T20:02:28Z

FuzzyBot: Importing a new version from external source

==== GoodbyeDPI ====
<code>goodbyedpi.exe -5 --set-ttl 3 --native-frag --dns-addr 77.88.8.8 --dns-port 1253 --dnsv6-addr 2a02:6b8::feed:0ff --dnsv6-port 1253</code>

Translations:Known Configurations/5/en

2025-11-14T20:02:28Z

FuzzyBot: Importing a new version from external source

==== zapret ====
On Türk Telekom, some sites(that I'm aware of) like f95zone, coomer and kemono don't work with basic fake packets. I have no clue why but zapret supports multiple profiles so we can add a separate one just for these broken ones. 
<code>PROFILE="--dpi-desync=fake --dpi-desync-fooling=md5sig --dpi-desync-fake-tls=0x00000000 --dpi-desync-split-pos=2 --hostspell=hoSt --hostlist=/opt/zapret/profile1.txt" 
NFQWS_OPT="--dpi-desync=fake --dpi-desync-ttl=2 --hostspell=hoSt --hostlist-exclude=/opt/zapret/exclude.txt --new $PROFILE"</code> 
exclude.txt:
<pre>
microsoft.com
google.com
twitter.com
x.com
live.com
youtube.com
office365.com
outlook.office365.com
outlook.com
steamcommunity.com
gov.tr
com.tr
net.tr
org.tr
edu.tr
kemono.su
kemono.party
coomer.su
coomer.party
f95zone.to
pttavm.com
whatsapp.com
whatsapp.net
media-otp1-1.cdn.whatsapp.net
</pre>
 
profile1.txt:
<pre>
cock.li
kemono.su
f95zone.to
kemono.party
coomer.party
coomer.su
</pre>

Translations:Known Configurations/4/en

2025-11-14T20:02:28Z

FuzzyBot: Importing a new version from external source

==== DPI Tunnel ====
[[File:DPI Tunnel Configuration.png|thumb|left]]

Translations:Known Configurations/3/en

2025-11-14T20:02:28Z

FuzzyBot: Importing a new version from external source

==== ByeDPI(Android) ====
[[File:TurkTelekom ByeDPI.png|thumb|left]]

Translations:Known Configurations/2/en

2025-11-14T20:02:28Z

FuzzyBot: Importing a new version from external source

=== Türk Telekom ===

Translations:Known Configurations/1/en

2025-11-14T20:02:28Z

FuzzyBot: Importing a new version from external source

== Known ISP configurations tested by us ==
{{Warning|These settings are either tried by a Femboy Group member or someone close to us. As ISPs' DPI methods change, these methods may not work over time.}}

Known Configurations/en

2025-11-14T19:29:29Z

FuzzyBot: Updating to match new version of source page

<languages />

== Known ISP configurations tested by us ==

Translations:Known Configurations/1/en

2025-11-14T19:29:22Z

FuzzyBot: Importing a new version from external source

== Known ISP configurations tested by us ==

Translations:Known Configurations/Page display title/en

2025-11-14T19:29:22Z

FuzzyBot: Importing a new version from external source

Known Configurations

Internet Censorship/en

2024-10-07T20:30:07Z

FuzzyBot: Updating to match new version of source page

<languages />
As we all know, there's all sorts of censorship online. This page is focused on the censorship enforced by governments or ISPs(Internet Service Provider) to block websites. Nothing in this post has been tested on apple products as they're unusable garbage.

== Methods ==

=== IP Address Based Filtering ===
This method is pretty simple, IP addresses associated with the website get banned. This method is not commonly used due to IPv4 addresses being shared in a lot of cases.

=== DNS Level Filtering ===
A DNS server simply gives you the IP address of a website. Without a DNS server, your computer can't understand where to connect. In this method, ISP's DNS server refuses to give you the correct IP address of a website.

=== Deep Packet Inspection ===
The most intrusive and hard to bypass in all methods. ISPs inspect your web requests and do the filtering based on the [https://en.wikipedia.org/wiki/Server_Name_Indication SNI]. More on that later.

== How to test what filtering method your ISP uses ==
If your ISP does IP based filtering(which is pretty unlikely), you can't do much about it except using proxies. In other scenarios, you can check for DNS level filtering very easily, see the bypass section below. DPI is way harder but we'll get to that. To see what filtering system they use, first test the DNS filtering bypass method. If it doesn't work, it's DPI.
{{Warning|Your ISP may be (and probably is) using multiple filtering methods like DNS and DPI combined.}}

== Bypassing the filters ==

=== Proxies/VPNs ===
This method might be the most known of all. Everyone knows how to download a free VPN and use it. However, this method is not recommended since almost all of those VPNs are insecure and slow. If you have a trusted VPN or proxy service, you can use that. I won't give any names since I don't know any.

=== DNS Changing ===
To evade DNS based filtering, you can change your DNS address or even better, use DNS over HTTPS. Cloudflare's DNS servers are pretty good. Their address is 1.1.1.1(one.one.one.one for DoH). There is no standard way to change your DNS servers so you'll have to check online for your operating system or browser.
{{Info|There is usually no need to use ISP's DNS servers. You won't lose anything by switching your DNS servers from ISP's to something else. Even if your ISP doesn't apply DNS filtering, it's still a good idea to change it for performance reasons.}}

=== DPI Bypassing ===
This part is the most complicated by far. You can use some programs to trick your ISP to allow your packets. This method is hard compared to others so be prepared to spend a few hours at worst but it pays off. There is no silver bullet for this method. Each setting changes from ISP to ISP, meaning you'll have to experiment with it if you're unlucky. Let's start with some tools. Some of these tools have prebuilt settings that will most likely work.

==== [https://github.com/ValdikSS/GoodbyeDPI GoodbyeDPI] (Windows) ====
This is the most useful tool for Windows. You can download it and use 2_any_country_dnsredir.cmd. GoodbyeDPI also has premade settings that you can try by editing the .cmd file. At line 7 you can change the number at the end. It can be anything from 1 to 9. Try them all and see if they work.

==== [https://github.com/krlvm/PowerTunnel PowerTunnel] (Windows/Linux/Android) ====
This might be the least working program of all. It's pretty simple to use and doesn't have a lot to offer compared to the alternatives. Works on my machine™.

==== [https://github.com/xvzc/SpoofDPI SpoofDPI] (Linux) ====
Even simpler than PowerTunnel, this either just works or not. Give it a try, it'll take less than 2 minutes.

==== [https://github.com/hufrea/byedpi/ ByeDPI] ([https://github.com/dovecoteescapee/ByeDPIAndroid Android]/Linux/Windows) ====
ByeDPI is a pretty simple program but doesn't have any premade settings. Android one is pretty easy to use but on computers it can be complicated.

==== [https://github.com/nomoresat/DPITunnel-android DPI Tunnel] (Android) ====
By far the best solution for android. Offers stuff like an auto tester and multiple profiles. However this program requires root access. If you don't know what that means, you can't run it.

==== [https://github.com/bol-van/zapret/ zapret] (OpenWRT/Linux/Windows/OpenBSD/FreeBSD) ====
The most complicated of all. Supports Linux and other operating systems like OpenWRT for network wide bypass. Zapret has its own method checker and is complicated to use compared to others. I'm currently using this for network wide bypass. You can [https://matrix.to/#/@emilia_the_goddess:matrix.org DM me on Matrix] for help.

== Important notes ==
There are some important things you should keep in mind for your own safety and convenience.
* Do NOT install a certificate authority(CA) if you don't know what you're doing!
* Generally, stay away from random VPN services. If you absolutely must use a VPN, choose something well known.
* DPI Bypass tools may break some sites, especially government sites in some countries. You'll need to temporarily disable your proxy to use these sites.

== Helper tools ==
Most of the DPI bypass tools work by giving you a proxy endpoint and expects you to set up your machines accordingly. On most browsers you can use [https://getfoxyproxy.org/ FoxyProxy] to easily switch proxies or make rules to switch automatically.

== Confirmed bypasses ==
This is a list of ISPs and firewalls we managed to bypass successfully. This list is merely here so you can be certain there is a way to bypass DPI if you're dealing with one of these. If your enemy isn't listed here, that doesn't mean it's impossible to bypass. We just don't have access to it to try for ourselves. Feel free to reach us if you need any help.

=== ISPs ===
* Türk Telekom(and derivatives)
* Kablonet
* TürkNet
* Türkcell

=== Firewalls ===
* XLOG with Eduroam

Translations:Internet Censorship/21/en

2024-10-07T15:51:19Z

FuzzyBot: Importing a new version from external source

=== Firewalls ===
* XLOG with Eduroam

Translations:Internet Censorship/20/en

2024-10-07T15:51:19Z

FuzzyBot: Importing a new version from external source

=== ISPs ===
* Türk Telekom(and derivatives)
* Kablonet
* TürkNet
* Türkcell

Translations:Internet Censorship/19/en

2024-10-07T15:51:19Z

FuzzyBot: Importing a new version from external source

== Confirmed bypasses ==
This is a list of ISPs and firewalls we managed to bypass successfully. This list is merely here so you can be certain there is a way to bypass DPI if you're dealing with one of these. If your enemy isn't listed here, that doesn't mean it's impossible to bypass. We just don't have access to it to try for ourselves. Feel free to reach us if you need any help.

Main Page/tr

2024-10-05T15:51:07Z

FuzzyBot: Updating to match new version of source page

FemWiki'ye hoşgeldiniz!

Burası [[Femboy Group]] tarafından bazı bilgiler ve açıklamalar için oluşturulmuş ufak bir wikidir. Genelde hem İngilizce hem de Türkçe sayfalarımız olsa da bu wiki genelde İngilizce odaklıdır.

== Başlangıç ==
* [[Internet Censorship|İnternet sansürlerini geçme yöntemleri]]
* [[Femboy Group|Femboy Group nedir?]]

== İletişim ==
Herhangi bir sorunuz varsa bize Matrix'ten [https://matrix.to/#/@astolfo:femboy.group @astolfo:femboy.group] adıyla ulaşabilirsiniz.

Main Page/en

2024-10-05T14:53:40Z

FuzzyBot: Updating to match new version of source page

Welcome to FemWiki!

This is a small wiki for some tutorials and info created by [[Femboy Group]]. We usually have pages both in English and Turkish but the wiki itself is mainly targeted for English speaking audiences.

== Getting started ==
* [[Internet Censorship|Bypassing internet censorship]]
* [[Femboy Group|What is Femboy Group?]]

== Contacts ==
If you have any questions you can reach us at Matrix with the name [https://matrix.to/#/@astolfo:femboy.group @astolfo:femboy.group]

Main Page/en

2024-10-05T14:46:39Z

FuzzyBot: Updating to match new version of source page

<languages />
Welcome to FemWiki!

This is a small wiki for some tutorials and info created by [[Femboy Group]]. We usually have pages both in English and Turkish but the wiki itself is mainly targeted for English speaking audiences.

== Getting started ==
* [[Internet Censorship|Bypassing internet censorship]]
* [[Femboy Group|What is Femboy Group?]]

== Contacts ==
If you have any questions you can reach us at Matrix with the name [https://matrix.to/#/@astolfo:femboy.group @astolfo:femboy.group]

Translations:Main Page/4/en

2024-10-05T14:41:15Z

FuzzyBot: Importing a new version from external source

== Contacts ==
If you have any questions you can reach us at Matrix with the name [https://matrix.to/#/@astolfo:femboy.group @astolfo:femboy.group]

Translations:Main Page/3/en

2024-10-05T14:41:15Z

FuzzyBot: Importing a new version from external source

== Getting started ==
* [[Internet Censorship|Bypassing internet censorship]]
* [[Femboy Group|What is Femboy Group?]]

Translations:Main Page/2/en

2024-10-05T14:41:15Z

FuzzyBot: Importing a new version from external source

This is a small wiki for some tutorials and info created by [[Femboy Group]]. We usually have pages both in English and Turkish but the wiki itself is mainly targeted for English speaking audiences.

Translations:Main Page/1/en

2024-10-05T14:41:15Z

FuzzyBot: Importing a new version from external source

Welcome to FemWiki!

Translations:Main Page/Page display title/en

2024-10-05T14:41:15Z

FuzzyBot: Importing a new version from external source

Main Page

Internet Censorship/en

2024-10-05T14:22:06Z

FuzzyBot: Updating to match new version of source page

Translations:Internet Censorship/9/en

2024-10-05T14:18:44Z

FuzzyBot: Importing a new version from external source

=== DNS Changing ===
To evade DNS based filtering, you can change your DNS address or even better, use DNS over HTTPS. Cloudflare's DNS servers are pretty good. Their address is 1.1.1.1(one.one.one.one for DoH). There is no standard way to change your DNS servers so you'll have to check online for your operating system or browser.
{{Info|There is usually no need to use ISP's DNS servers. You won't lose anything by switching your DNS servers from ISP's to something else. Even if your ISP doesn't apply DNS filtering, it's still a good idea to change it for performance reasons.}}

Translations:Internet Censorship/6/en

2024-10-05T14:18:44Z

FuzzyBot: Importing a new version from external source

== How to test what filtering method your ISP uses ==
If your ISP does IP based filtering(which is pretty unlikely), you can't do much about it except using proxies. In other scenarios, you can check for DNS level filtering very easily, see the bypass section below. DPI is way harder but we'll get to that. To see what filtering system they use, first test the DNS filtering bypass method. If it doesn't work, it's DPI.
{{Warning|Your ISP may be (and probably is) using multiple filtering methods like DNS and DPI combined.}}

Internet Censorship/en

2024-08-13T22:18:46Z

FuzzyBot: Updating to match new version of source page

<languages />
As we all know, there's all sorts of censorship online. This page is focused on the censorship enforced by governments or ISPs(Internet Service Provider) to block websites. Nothing in this post has been tested on apple products as they're unusable garbage.

== Methods ==

=== IP Address Based Filtering ===
This method is pretty simple, IP addresses associated with the website get banned. This method is not commonly used due to IPv4 addresses being shared in a lot of cases.

=== DNS Level Filtering ===
A DNS server simply gives you the IP address of a website. Without a DNS server, your computer can't understand where to connect. In this method, ISP's DNS server refuses to give you the correct IP address of a website.

=== Deep Packet Inspection ===
The most intrusive and hard to bypass in all methods. ISPs inspect your web requests and do the filtering based on the [https://en.wikipedia.org/wiki/Server_Name_Indication SNI]. More on that later.

== How to test what filtering method your ISP uses ==
If your ISP does IP based filtering(which is pretty unlikely), you can't do much about it except using proxies. In other scenarios, you can check for DNS level filtering very easily, see the bypass section below. DPI is way harder but we'll get to that. To see what filtering system they use, first test the DNS filtering bypass method. If it doesn't work, it's DPI.

== Bypassing the filters ==

=== Proxies/VPNs ===
This method might be the most known of all. Everyone knows how to download a free VPN and use it. However, this method is not recommended since almost all of those VPNs are insecure and slow. If you have a trusted VPN or proxy service, you can use that. I won't give any names since I don't know any.

=== DNS Changing ===
To evade DNS based filtering, you can change your DNS address or even better, use DNS over HTTPS. Cloudflare's DNS servers are pretty good. Their address is 1.1.1.1(one.one.one.one for DoH). There is no standard way to change your DNS servers so you'll have to check online for your operating system or browser.

=== DPI Bypassing ===
This part is the most complicated by far. You can use some programs to trick your ISP to allow your packets. This method is hard compared to others so be prepared to spend a few hours at worst but it pays off. There is no silver bullet for this method. Each setting changes from ISP to ISP, meaning you'll have to experiment with it if you're unlucky. Let's start with some tools. Some of these tools have prebuilt settings that will most likely work.

==== [https://github.com/ValdikSS/GoodbyeDPI GoodbyeDPI] (Windows) ====
This is the most useful tool for Windows. You can download it and use 2_any_country_dnsredir.cmd. GoodbyeDPI also has premade settings that you can try by editing the .cmd file. At line 7 you can change the number at the end. It can be anything from 1 to 9. Try them all and see if they work.

==== [https://github.com/krlvm/PowerTunnel PowerTunnel] (Windows/Linux/Android) ====
This might be the least working program of all. It's pretty simple to use and doesn't have a lot to offer compared to the alternatives. Works on my machine™.

==== [https://github.com/xvzc/SpoofDPI SpoofDPI] (Linux) ====
Even simpler than PowerTunnel, this either just works or not. Give it a try, it'll take less than 2 minutes.

==== [https://github.com/hufrea/byedpi/ ByeDPI] ([https://github.com/dovecoteescapee/ByeDPIAndroid Android]/Linux/Windows) ====
ByeDPI is a pretty simple program but doesn't have any premade settings. Android one is pretty easy to use but on computers it can be complicated.

==== [https://github.com/nomoresat/DPITunnel-android DPI Tunnel] (Android) ====
By far the best solution for android. Offers stuff like an auto tester and multiple profiles. However this program requires root access. If you don't know what that means, you can't run it.

==== [https://github.com/bol-van/zapret/ zapret] (OpenWRT/Linux/Windows/OpenBSD/FreeBSD) ====
The most complicated of all. Supports Linux and other operating systems like OpenWRT for network wide bypass. Zapret has its own method checker and is complicated to use compared to others. I'm currently using this for network wide bypass. You can [https://matrix.to/#/@emilia_the_goddess:matrix.org DM me on Matrix] for help.

== Important notes ==
There are some important things you should keep in mind for your own safety and convenience.
* Do NOT install a certificate authority(CA) if you don't know what you're doing!
* Generally, stay away from random VPN services. If you absolutely must use a VPN, choose something well known.
* DPI Bypass tools may break some sites, especially government sites in some countries. You'll need to temporarily disable your proxy to use these sites.

== Helper tools ==
Most of the DPI bypass tools work by giving you a proxy endpoint and expects you to set up your machines accordingly. On most browsers you can use [https://getfoxyproxy.org/ FoxyProxy] to easily switch proxies or make rules to switch automatically.

Translations:Internet Censorship/18/en

2024-08-13T18:43:55Z

FuzzyBot: Importing a new version from external source

==== [https://github.com/bol-van/zapret/ zapret] (OpenWRT/Linux/Windows/OpenBSD/FreeBSD) ====
The most complicated of all. Supports Linux and other operating systems like OpenWRT for network wide bypass. Zapret has its own method checker and is complicated to use compared to others. I'm currently using this for network wide bypass. You can [https://matrix.to/#/@emilia_the_goddess:matrix.org DM me on Matrix] for help.

Internet Censorship/en

2024-08-04T21:49:13Z

FuzzyBot: Updating to match new version of source page

<languages />
As we all know, there's all sorts of censorship online. This page is focused on the censorship enforced by governments or ISPs(Internet Service Provider) to block websites. Nothing in this post has been tested on apple products as they're unusable garbage.

== Methods ==

=== IP Address Based Filtering ===
This method is pretty simple, IP addresses associated with the website get banned. This method is not commonly used due to IPv4 addresses being shared in a lot of cases.

=== DNS Level Filtering ===
A DNS server simply gives you the IP address of a website. Without a DNS server, your computer can't understand where to connect. In this method, ISP's DNS server refuses to give you the correct IP address of a website.

=== Deep Packet Inspection ===
The most intrusive and hard to bypass in all methods. ISPs inspect your web requests and do the filtering based on the [https://en.wikipedia.org/wiki/Server_Name_Indication SNI]. More on that later.

== How to test what filtering method your ISP uses ==
If your ISP does IP based filtering(which is pretty unlikely), you can't do much about it except using proxies. In other scenarios, you can check for DNS level filtering very easily, see the bypass section below. DPI is way harder but we'll get to that. To see what filtering system they use, first test the DNS filtering bypass method. If it doesn't work, it's DPI.

== Bypassing the filters ==

=== Proxies/VPNs ===
This method might be the most known of all. Everyone knows how to download a free VPN and use it. However, this method is not recommended since almost all of those VPNs are insecure and slow. If you have a trusted VPN or proxy service, you can use that. I won't give any names since I don't know any.

=== DNS Changing ===
To evade DNS based filtering, you can change your DNS address or even better, use DNS over HTTPS. Cloudflare's DNS servers are pretty good. Their address is 1.1.1.1(one.one.one.one for DoH). There is no standard way to change your DNS servers so you'll have to check online for your operating system or browser.

=== DPI Bypassing ===
This part is the most complicated by far. You can use some programs to trick your ISP to allow your packets. This method is hard compared to others so be prepared to spend a few hours at worst but it pays off. There is no silver bullet for this method. Each setting changes from ISP to ISP, meaning you'll have to experiment with it if you're unlucky. Let's start with some tools. Some of these tools have prebuilt settings that will most likely work.

==== [https://github.com/ValdikSS/GoodbyeDPI GoodbyeDPI] (Windows) ====
This is the most useful tool for Windows. You can download it and use 2_any_country_dnsredir.cmd. GoodbyeDPI also has premade settings that you can try by editing the .cmd file. At line 7 you can change the number at the end. It can be anything from 1 to 9. Try them all and see if they work.

==== [https://github.com/krlvm/PowerTunnel PowerTunnel] (Windows/Linux/Android) ====
This might be the least working program of all. It's pretty simple to use and doesn't have a lot to offer compared to the alternatives. Works on my machine™.

==== [https://github.com/xvzc/SpoofDPI SpoofDPI] (Linux) ====
Even simpler than PowerTunnel, this either just works or not. Give it a try, it'll take less than 2 minutes.

==== [https://github.com/hufrea/byedpi/ ByeDPI] ([https://github.com/dovecoteescapee/ByeDPIAndroid Android]/Linux/Windows) ====
ByeDPI is a pretty simple program but doesn't have any premade settings. Android one is pretty easy to use but on computers it can be complicated.

==== [https://github.com/nomoresat/DPITunnel-android DPI Tunnel] (Android) ====
By far the best solution for android. Offers stuff like an auto tester and multiple profiles. However this program requires root access. If you don't know what that means, you can't run it.

== Important notes ==
There are some important things you should keep in mind for your own safety and convenience.
* Do NOT install a certificate authority(CA) if you don't know what you're doing!
* Generally, stay away from random VPN services. If you absolutely must use a VPN, choose something well known.
* DPI Bypass tools may break some sites, especially government sites in some countries. You'll need to temporarily disable your proxy to use these sites.

== Helper tools ==
Most of the DPI bypass tools work by giving you a proxy endpoint and expects you to set up your machines accordingly. On most browsers you can use [https://getfoxyproxy.org/ FoxyProxy] to easily switch proxies or make rules to switch automatically.

Translations:Internet Censorship/17/en

2024-08-04T21:40:17Z

FuzzyBot: Importing a new version from external source

== Helper tools ==
Most of the DPI bypass tools work by giving you a proxy endpoint and expects you to set up your machines accordingly. On most browsers you can use [https://getfoxyproxy.org/ FoxyProxy] to easily switch proxies or make rules to switch automatically.

Translations:Internet Censorship/16/en

2024-08-04T21:40:17Z

FuzzyBot: Importing a new version from external source

== Important notes ==
There are some important things you should keep in mind for your own safety and convenience.
* Do NOT install a certificate authority(CA) if you don't know what you're doing!
* Generally, stay away from random VPN services. If you absolutely must use a VPN, choose something well known.
* DPI Bypass tools may break some sites, especially government sites in some countries. You'll need to temporarily disable your proxy to use these sites.

Translations:Internet Censorship/16/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

Translations:Internet Censorship/15/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

==== [https://github.com/nomoresat/DPITunnel-android DPI Tunnel] (Android) ====
By far the best solution for android. Offers stuff like an auto tester and multiple profiles. However this program requires root access. If you don't know what that means, you can't run it.

Translations:Internet Censorship/14/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

==== [https://github.com/hufrea/byedpi/ ByeDPI] ([https://github.com/dovecoteescapee/ByeDPIAndroid Android]/Linux/Windows) ====
ByeDPI is a pretty simple program but doesn't have any premade settings. Android one is pretty easy to use but on computers it can be complicated.

Translations:Internet Censorship/13/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

==== [https://github.com/xvzc/SpoofDPI SpoofDPI] (Linux) ====
Even simpler than PowerTunnel, this either just works or not. Give it a try, it'll take less than 2 minutes.

Translations:Internet Censorship/12/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

==== [https://github.com/krlvm/PowerTunnel PowerTunnel] (Windows/Linux/Android) ====
This might be the least working program of all. It's pretty simple to use and doesn't have a lot to offer compared to the alternatives. Works on my machine™.

Translations:Internet Censorship/11/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

==== [https://github.com/ValdikSS/GoodbyeDPI GoodbyeDPI] (Windows) ====
This is the most useful tool for Windows. You can download it and use 2_any_country_dnsredir.cmd. GoodbyeDPI also has premade settings that you can try by editing the .cmd file. At line 7 you can change the number at the end. It can be anything from 1 to 9. Try them all and see if they work.

Translations:Internet Censorship/10/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

=== DPI Bypassing ===
This part is the most complicated by far. You can use some programs to trick your ISP to allow your packets. This method is hard compared to others so be prepared to spend a few hours at worst but it pays off. There is no silver bullet for this method. Each setting changes from ISP to ISP, meaning you'll have to experiment with it if you're unlucky. Let's start with some tools. Some of these tools have prebuilt settings that will most likely work.

Translations:Internet Censorship/9/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

Translations:Internet Censorship/8/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

=== Proxies/VPNs ===
This method might be the most known of all. Everyone knows how to download a free VPN and use it. However, this method is not recommended since almost all of those VPNs are insecure and slow. If you have a trusted VPN or proxy service, you can use that. I won't give any names since I don't know any.

Translations:Internet Censorship/7/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

== Bypassing the filters ==

Translations:Internet Censorship/6/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

Translations:Internet Censorship/5/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

=== Deep Packet Inspection ===
The most intrusive and hard to bypass in all methods. ISPs inspect your web requests and do the filtering based on the [https://en.wikipedia.org/wiki/Server_Name_Indication SNI]. More on that later.

Translations:Internet Censorship/4/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

=== DNS Level Filtering ===
A DNS server simply gives you the IP address of a website. Without a DNS server, your computer can't understand where to connect. In this method, ISP's DNS server refuses to give you the correct IP address of a website.

Translations:Internet Censorship/3/en

2024-08-04T20:42:37Z

FuzzyBot: Importing a new version from external source

=== IP Address Based Filtering ===
This method is pretty simple, IP addresses associated with the website get banned. This method is not commonly used due to IPv4 addresses being shared in a lot of cases.