Foreign VPN service unavailable in China

homeinns

Foreign VPN service unavailable in China

(Global Times)    09:06, January 23, 2015

By Cao Siqi

Cyber security analysts on Thursday defended China s Internet management after an overseas VPN (virtual private network) company on Wednesday announced some of its users in China have been unable to use the service since an upgrade of the Great Firewall, China s Internet infrastructure.

Cyber services should observe the network governance of the country for safety, analysts urged.

Astrill claimed in a Wednesday notice that since this year, VPN protocols used on iOS devices, including IPSec, L2TP/IPSec and PPTP, are not accessible in China in almost real-time.

An anonymous service support employee said Thursday that only iOS devices were affected while other devices like Macbook worked fine as they use different protocols.

It is because of the Great Firewall upgrade, and unfortunately, we cannot tell you the exact time [about how long it will last], said the employee, adding that the company has other solutions.

Many iPhone users were shocked to find that they could not log into their Facebook and Twitter accounts although they have bought Astrill s VPN service.

Whether to block VPN services and how to block them are closely related to the country's ability of network governance, Qin An, a cyber security expert at the China Institute for Innovation and Development Strategy, told the Global Times Thursday.

Authorities apparently cannot ignore those services as they affect our cyberspace sovereignty. For instance, a shortcut has to be blocked since it could be used for some ulterior purposes although it might affect others who use it in a right way, said Qin.

A cyber security analyst previously pointed out that companies running a VPN business in China must register with the Ministry of Industry and Information Technology, and unregistered VPN service providers are not protected by Chinese laws.

A free VPN provider fqrouter also said on its official Twitter account on January 8 that the service of fqrouter has officially closed.

Separately, VPN Tech Runo announced on January 5 that many of its IP addresses and users in some areas with L2TP protocol have not been accessible in China since December 31.

The Great Firewall is blocking the VPN on the protocol level.
It means that the firewall does not need to identify each VPN provider and block its IP addresses.
Rather, it can spot VPN traffic during transit and block it, one of the founders of an overseas website which monitors the Internet in China told the Global Times Thursday via e-mail.

In recent years, more and more Chinese Net users are seeking alternatives to surf the Internet outside the Great Firewall by using mirror websites or VPNs.

Some Astrill VPN users reached by the Global Times Thursday said that the firewall update has also led to a price increase of VPN services. One said Thursday that another VPN service he bought a week ago increased its price by 60 yuan ($9.6) Wednesday to 240 yuan per year.

firefly

回復  firefly

是的.
雯雯 發表於 2015-2-8 19:18

Thank you

咁我買 2120n 用住先，價錢平 2925n 一半啊。2925 除咗可以 support 多些 VPN user 外，其他功能我好似用唔到。。

雯雯

回復 34# firefly

是的.

firefly

再請教下各位師兄。我見 Draytek 2120n 同埋 2925n 個 VPN 咁寫：

2120n: 2 VPN Tunnels (including SSL VPN)
2925n: SSL VPN (Up to 25 Tunnels)

其實個 "tunnel" 係代表什麼？2120n 最多容納2個user連 VPN，2925n 就可以25個 user?

雯雯

回復 32# tomleehk

第2式是PPTP VPN來的, 還是我那3式好用:
http://www.telecom-cafe.com/foru ... =6535&pid=40466

tomleehk

再封 VPN? 教你 2015 最新 4 式中國工作應急翻牆術
http://unwire.hk/2015/01/28/4_gfw_bypass/top-news/


How to hide OpenVPN traffic – an introduction
https://www.bestvpn.com/blog/591 ... ic-an-introduction/

Tunneling OpenVPN through stunnel
http://kyl191.net/2012/12/tunneling-openvpn-through-stunnel/

Firefox 翻墙方案索引大全[电脑翻墙、安卓翻墙、MAC翻墙工具合集
http://www.firefoxfan.com/firefox-gaogent/firefox-all-proxy.html

PPlam

如果要破网翻墙，还有很多种方法，只要我们的VPN的工具和水平提升才可以。 ...
角色 發表於 2015-1-31 11:40

認同！

角色

如果要破网翻墙，还有很多种方法，只要我们的VPN的工具和水平提升才可以。

PPlam

用routerboard 才是王道！

homeinns

當然是 Site to Site 的 IPSec 是最好 （達到商業用VPN 的水平）

但要小心，IPSec VPN 是很難駕馭的，要有很高的網絡知識水平才能夠懂得把（鐵幕）後面的數據，Route 去自由世界的 Gateway， 享受沒有 Censorship 的網絡自由。

你懂不懂得高檔次的網絡技術：（更改 Route Table） 才建議你使用 IPSec 這些商用 VPN

firefly

我諗住買個 Draytek 2120n 試下佢個 SSL VPN。友台 ching 話仲 OK，家人在大陸連 HK 都無問題。

有人話用兩隻 Draytek 做 IPSEC site to site 速度更快，ching 點睇？

homeinns

看來，阿爺這一次 Upgrade 是 “智能化” 的升級。

能夠 Memorize 那些未經批准的 IP 而有一些 VPN traffic going through 的 Account.

雖然不能夠永久 Ban 死該 IP 的 VPN Traffic

但臨時罰停賽幾個小時（或者 1，2 天）也是十分煩擾的，

雖然家庭用的浮動IP 很容易走鬼，但給你玩一會 VPN，又罰停賽，就太無癮啦

但我看來，是地區性的，中國真是一個地域遼闊的國家。很難做到同步封殺的。

港燦集中的珠三角地區， VPN 破網翻牆簡直多如螞蟻和蝗蟲，達到法不治眾的階段，
因此阿爺沒辦法，才用這個下三流，極爲卑劣的串擾辦法，讓你自己無癮，自動退場。

但我在長三角的農村地區，一切正常。
因爲在該等土農的落後地區，我是唯一的一位港燦而已，還沒有達到螞蟻和蝗蟲的地步。因此當地人還沒有出現反蝗的情緒。

原來，遮天蔽日的蝗蟲，是會引發當地本地人的反蝗情緒的，
怪不得香港人要光復上水，
深圳人要串擾港蝗的 VPN 破網翻牆，因爲會引發精神的污染，和平地轉化老百姓的腦袋，危害到共產黨的萬年傳承的獨裁基業。

角色

估计你在大陆的IP已经成为重点监控。

Shenzhen_on9

我是用L2TP/IPSec, PPTP 和OpenVPN.
OpenVPN 根本不能用.
L2TP 和PPTP 只能用很短的时间.
I can use it after one/two days. 我想我的IP地址被GFW封了.

Qnewbie

It is just a cyber-fight(war?) out there.

Remember when the States declared that Huawei&ZTE were spy for China after  investigation with "warning for risk" and banned for sales of backbone products in States? It was just a matter of time to China for counter-reaction.

After snowden's leackage, the States loses the moral high ground.

We are just innocent man whom is affected by this cyber-fight.