[liberationtech] Important Iranian Filternet Changes

Griffin Boyce griffinboyce at gmail.com
Sun May 5 04:37:20 PDT 2013


Do you think it's practical for circumvention tools to mimic traffic
sources known to the Iranian filternet?

~Griffin

On Sun, May 5, 2013 at 6:57 AM, Collin Anderson
<collin at averysmallbird.com>wrote:

> Readers of Libtech may be interested in the changes to the filtering
> regime that were imposed a few hours ago. Currently traffic streams, at
> least unknown streams if not all, are being dropped after exactly sixty
> seconds, terminating the connection. It appears this is based on protocol
> rather than port, implying DPI, and thus likely to disrupt nearly every
> anti-filtering tool, including those that leverage obfsproxy.
>
> tcpdump screenshot, need to clean pcap:
> https://twitter.com/CDA/status/330996371677130752
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20130505/350ab9c9/attachment.html>


More information about the liberationtech mailing list