Internet Censorship/en - Revision history

FuzzyBot: Updating to match new version of source page

2024-10-07T20:30:07Z

Updating to match new version of source page

← Older revision		Revision as of 20:30, 7 October 2024
Line 55:		Line 55:
	== Helper tools ==		== Helper tools ==
	Most of the DPI bypass tools work by giving you a proxy endpoint and expects you to set up your machines accordingly. On most browsers you can use [https://getfoxyproxy.org/ FoxyProxy] to easily switch proxies or make rules to switch automatically.		Most of the DPI bypass tools work by giving you a proxy endpoint and expects you to set up your machines accordingly. On most browsers you can use [https://getfoxyproxy.org/ FoxyProxy] to easily switch proxies or make rules to switch automatically.

			== Confirmed bypasses ==
			This is a list of ISPs and firewalls we managed to bypass successfully. This list is merely here so you can be certain there is a way to bypass DPI if you're dealing with one of these. If your enemy isn't listed here, that doesn't mean it's impossible to bypass. We just don't have access to it to try for ourselves. Feel free to reach us if you need any help.

			=== ISPs ===
			* Türk Telekom(and derivatives)
			* Kablonet
			* TürkNet
			* Türkcell

			=== Firewalls ===
			* XLOG with Eduroam

FuzzyBot: Updating to match new version of source page

2024-10-05T14:22:06Z

Updating to match new version of source page

← Older revision		Revision as of 14:22, 5 October 2024
Line 15:		Line 15:
	== How to test what filtering method your ISP uses ==		== How to test what filtering method your ISP uses ==
	If your ISP does IP based filtering(which is pretty unlikely), you can't do much about it except using proxies. In other scenarios, you can check for DNS level filtering very easily, see the bypass section below. DPI is way harder but we'll get to that. To see what filtering system they use, first test the DNS filtering bypass method. If it doesn't work, it's DPI.		If your ISP does IP based filtering(which is pretty unlikely), you can't do much about it except using proxies. In other scenarios, you can check for DNS level filtering very easily, see the bypass section below. DPI is way harder but we'll get to that. To see what filtering system they use, first test the DNS filtering bypass method. If it doesn't work, it's DPI.
			{{Warning\|Your ISP may be (and probably is) using multiple filtering methods like DNS and DPI combined.}}

	== Bypassing the filters ==		== Bypassing the filters ==
Line 23:		Line 24:
	=== DNS Changing ===		=== DNS Changing ===
	To evade DNS based filtering, you can change your DNS address or even better, use <strong>DNS over HTTPS</strong>. Cloudflare's DNS servers are pretty good. Their address is 1.1.1.1(one.one.one.one for DoH). There is no standard way to change your DNS servers so you'll have to check online for your operating system or browser.		To evade DNS based filtering, you can change your DNS address or even better, use <strong>DNS over HTTPS</strong>. Cloudflare's DNS servers are pretty good. Their address is 1.1.1.1(one.one.one.one for DoH). There is no standard way to change your DNS servers so you'll have to check online for your operating system or browser.
			{{Info\|There is usually no need to use ISP's DNS servers. You won't lose anything by switching your DNS servers from ISP's to something else. Even if your ISP doesn't apply DNS filtering, it's still a good idea to change it for performance reasons.}}

	=== DPI Bypassing ===		=== DPI Bypassing ===

FuzzyBot: Updating to match new version of source page

2024-08-13T22:18:46Z

Updating to match new version of source page

← Older revision		Revision as of 22:18, 13 August 2024
Line 41:		Line 41:
	==== [https://github.com/nomoresat/DPITunnel-android DPI Tunnel] (Android) ====		==== [https://github.com/nomoresat/DPITunnel-android DPI Tunnel] (Android) ====
	By far the best solution for android. Offers stuff like an auto tester and multiple profiles. However <strong>this program requires root access</strong>. If you don't know what that means, you can't run it.		By far the best solution for android. Offers stuff like an auto tester and multiple profiles. However <strong>this program requires root access</strong>. If you don't know what that means, you can't run it.

			==== [https://github.com/bol-van/zapret/ zapret] (OpenWRT/Linux/Windows/OpenBSD/FreeBSD) ====
			The most complicated of all. Supports Linux and other operating systems like OpenWRT for <strong>network wide bypass</strong>. Zapret has its own method checker and is complicated to use compared to others. I'm currently using this for network wide bypass. You can [https://matrix.to/#/@emilia_the_goddess:matrix.org DM me on Matrix] for help.

	== Important notes ==		== Important notes ==

FuzzyBot: Updating to match new version of source page

2024-08-04T21:49:13Z

Updating to match new version of source page

New page

<languages />
As we all know, there's all sorts of censorship online. This page is focused on the censorship enforced by governments or ISPs(Internet Service Provider) to block websites. Nothing in this post has been tested on apple products as they're unusable garbage.

== Methods ==

=== IP Address Based Filtering ===
This method is pretty simple, IP addresses associated with the website get banned. This method is not commonly used due to IPv4 addresses being shared in a lot of cases.

=== DNS Level Filtering ===
A DNS server simply gives you the IP address of a website. Without a DNS server, your computer can't understand where to connect. In this method, ISP's DNS server refuses to give you the correct IP address of a website.

=== Deep Packet Inspection ===
The most intrusive and hard to bypass in all methods. ISPs inspect your web requests and do the filtering based on the [https://en.wikipedia.org/wiki/Server_Name_Indication SNI]. More on that later.

== How to test what filtering method your ISP uses ==
If your ISP does IP based filtering(which is pretty unlikely), you can't do much about it except using proxies. In other scenarios, you can check for DNS level filtering very easily, see the bypass section below. DPI is way harder but we'll get to that. To see what filtering system they use, first test the DNS filtering bypass method. If it doesn't work, it's DPI.

== Bypassing the filters ==

=== Proxies/VPNs ===
This method might be the most known of all. Everyone knows how to download a free VPN and use it. However, this method is not recommended since almost all of those VPNs are insecure and slow. If you have a trusted VPN or proxy service, you can use that. I won't give any names since I don't know any.

=== DNS Changing ===
To evade DNS based filtering, you can change your DNS address or even better, use DNS over HTTPS. Cloudflare's DNS servers are pretty good. Their address is 1.1.1.1(one.one.one.one for DoH). There is no standard way to change your DNS servers so you'll have to check online for your operating system or browser.

=== DPI Bypassing ===
This part is the most complicated by far. You can use some programs to trick your ISP to allow your packets. This method is hard compared to others so be prepared to spend a few hours at worst but it pays off. There is no silver bullet for this method. Each setting changes from ISP to ISP, meaning you'll have to experiment with it if you're unlucky. Let's start with some tools. Some of these tools have prebuilt settings that will most likely work.

==== [https://github.com/ValdikSS/GoodbyeDPI GoodbyeDPI] (Windows) ====
This is the most useful tool for Windows. You can download it and use 2_any_country_dnsredir.cmd. GoodbyeDPI also has premade settings that you can try by editing the .cmd file. At line 7 you can change the number at the end. It can be anything from 1 to 9. Try them all and see if they work.

==== [https://github.com/krlvm/PowerTunnel PowerTunnel] (Windows/Linux/Android) ====
This might be the least working program of all. It's pretty simple to use and doesn't have a lot to offer compared to the alternatives. Works on my machine™.

==== [https://github.com/xvzc/SpoofDPI SpoofDPI] (Linux) ====
Even simpler than PowerTunnel, this either just works or not. Give it a try, it'll take less than 2 minutes.

==== [https://github.com/hufrea/byedpi/ ByeDPI] ([https://github.com/dovecoteescapee/ByeDPIAndroid Android]/Linux/Windows) ====
ByeDPI is a pretty simple program but doesn't have any premade settings. Android one is pretty easy to use but on computers it can be complicated.

==== [https://github.com/nomoresat/DPITunnel-android DPI Tunnel] (Android) ====
By far the best solution for android. Offers stuff like an auto tester and multiple profiles. However this program requires root access. If you don't know what that means, you can't run it.

== Important notes ==
There are some important things you should keep in mind for your own safety and convenience.
* Do NOT install a certificate authority(CA) if you don't know what you're doing!
* Generally, stay away from random VPN services. If you absolutely must use a VPN, choose something well known.
* DPI Bypass tools may break some sites, especially government sites in some countries. You'll need to temporarily disable your proxy to use these sites.

== Helper tools ==
Most of the DPI bypass tools work by giving you a proxy endpoint and expects you to set up your machines accordingly. On most browsers you can use [https://getfoxyproxy.org/ FoxyProxy] to easily switch proxies or make rules to switch automatically.