全球主机交流论坛

 找回密码
 注册

QQ登录

只需一步,快速开始

CeraNetworks网络延迟测速工具IP归属甄别会员请立即修改密码
查看: 6844|回复: 25

V.P.N在中国被全面攻破, 中国的高大上防火墙荣誉升级, 好...

[复制链接]
发表于 2015-1-23 14:11:32 | 显示全部楼层 |阅读模式
Foreign 扶墙 service unavailable in China
Great Firewall has been upgraded for cyberspace sovereignty: source
By Cao Siqi
Cyber security analysts on Thursday defended China's Internet management after an overseas 扶墙 (virtual private network) company on Wednesday announced some of its users in China have been unable to use the service since an upgrade of the Great Firewall, China's Internet infrastructure.
Cyber services should observe the network governance of the country for safety, analysts urged.
Astrill claimed in a Wednesday notice that since this year, 扶墙 protocols used on iOS devices, including IPSec, L2TP/IPSec and PPTP, are not accessible in China in almost real-time.
An anonymous service support employee said Thursday that only iOS devices were affected while other devices like Macbook worked fine as they use different protocols.
"It is because of the Great Firewall upgrade, and unfortunately, we can't tell you the exact time [about how long it will last]," said the employee, adding that the company has other solutions.
Many iPhone users were shocked to find that they could not log into their FB and 推特 accounts although they have bought Astrill's 扶墙 service.
Whether to block 扶墙 services and how to block them are closely related to the country's ability of network governance, Qin An, a cyber security expert at the China Institute for Innovation and Development Strategy, told the Global Times Thursday.
"Authorities apparently cannot ignore those services as they affect our cyberspace sovereignty. For instance, a shortcut has to be blocked since it could be used for some ulterior purposes although it might affect others who use it in a right way," said Qin.
A cyber security analyst previously pointed out that companies running a 扶墙 business in China must register with the Ministry of Industry and Information Technology, and unregistered 扶墙 service providers are not protected by Chinese laws.
A free 扶墙 provider fqrouter also said on its official 推特 account on January 8 that the service of fqrouter has officially closed.
Separately, 扶墙 Tech Runo announced on January 5 that many of its IP addresses and users in some areas with L2TP protocol have not been accessible in China since December 31.
"The Great Firewall is blocking the 扶墙 on the protocol level. It means that the firewall does not need to identify each 扶墙 provider and block its IP addresses. Rather, it can spot 扶墙 traffic during transit and block it," one of the founders of an overseas website which monitors the Internet in China told the Global Times Thursday via e-mail.
In recent years, more and more Chinese Net users are seeking alternatives to surf the Internet outside the Great Firewall by using mirror websites or 扶墙s.
Some Astrill 扶墙 users reached by the Global Times Thursday said that the firewall update has also led to a price increase of 扶墙 services. One said Thursday that another 扶墙 service he bought a week ago increased its price by 60 yuan ($9.6) Wednesday to 240 yuan per year.

来源:英文版人民网http://en.people.cn/n/2015/0123/c90882-8840092.html
发表于 2015-1-23 15:36:50 | 显示全部楼层
本帖最后由 雨宫音羽 于 2015-1-23 15:38 编辑
hostvps 发表于 2015-1-23 15:30
SSTP也被干扰了,而且安卓和ios还不能用,SigmaV.P.N很久没有更新了,我感觉ocser架设Cisco AnyConnect( ...


“等等”好东西我才不想说出去。。

SSTP被干扰那么HTTPS就完蛋了,主要是架设的问题吧,例如证书自签名等。也可能是墙的Probe
发表于 2015-1-23 14:12:20 | 显示全部楼层
可以翻译一下吗,
发表于 2015-1-23 14:13:24 | 显示全部楼层
By Cao Siqi

国人写的。。。
发表于 2015-1-23 14:16:11 | 显示全部楼层
假消息,刚才我还泰国V P N登录本站呢
发表于 2015-1-23 14:20:46 | 显示全部楼层
本帖最后由 雨宫音羽 于 2015-1-23 14:28 编辑

针对L2TP和L2TP/IPSec的干扰早就有了。。

纯L2TP不加密 因此连上并访问被墙网站 就会被中断连接

L2TP/IPsec同服务器的尝试连接次数到达一定程度也会干扰新连接的握手

这是迟早的事情 谁让这些协议特征太明显。。目前的方向都是在往无特征或者伪装特征发展的...
================
看了下来源。。我才发现来源是亮点。。尼玛人民网...

全面被封还不至于 虽然现在确实不少老协议都不同程度的不好使了 但是还有很多新生协议非常坚挺
发表于 2015-1-23 14:22:17 来自手机 | 显示全部楼层
本帖最后由 爱国者捣蛋 于 2015-1-23 14:24 编辑

不就是一家卖扶墙的公司的服务器跪了么……这不正常么……
看出错了,不只一家
发表于 2015-1-23 14:59:42 | 显示全部楼层
  1. 【中国屏蔽外国扶墙服务!】《环球时报》报道,中国已开始屏蔽外国扶墙服务。扶墙供应商Astrill通知用户,因防火长城升级,使用IPSec、L2TP/IPSec和PPTP协议的设备无法访问它的服务,受影响的主要是iOS设备。中国工信部曾规定,在中国提供扶墙服务的公司必须登记,否则将"不受中国法律的保护"。
复制代码
发表于 2015-1-23 15:10:22 来自手机 | 显示全部楼层
雨宫音羽 发表于 2015-1-23 14:20
针对L2TP和L2TP/IPSec的干扰早就有了。。

纯L2TP不加密 因此连上并访问被墙网站 就会被中断连接

新生的有哪些?
发表于 2015-1-23 15:15:28 | 显示全部楼层
hostvps 发表于 2015-1-23 15:10
新生的有哪些?


SSTP SigmaV.P.N等等。。。
发表于 2015-1-23 15:19:18 | 显示全部楼层
用Open的会被干扰,G.F.W.的原则就是我分析不了的就block,反而用不加密的PPTP还很正常,反正不做违法的事,翻翻上上网他们是不会管你的。
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Archiver|手机版|小黑屋|全球主机交流论坛

GMT+8, 2024-5-12 06:07 , Processed in 0.132435 second(s), 14 queries , Gzip On, MemCache On.

Powered by Discuz! X3.4

© 2001-2023 Discuz! Team.

快速回复 返回顶部 返回列表