Recent White List issues

[bash99]

As we know, some ISP use white list (port and more?) recently, and the logic is:

TCP handshake --> pass Server First Return packet --> pass Client first packet --> filtered

As they need to white-list some site, so if the Server First Return packet match pattern and port of white-list site, maybe they'll let client first packet pass.

[peinhu]

quote: ISP starts using whitelist

[cokebar]

Whitelist mode now is minority. But Many IPs are being blocked temporarily or permanently. Does everyone has a study on GFW's blocking policy?

[Mygod]

Do you have any evidence/source to back up the logic you claimed?

[bash99]

@Mygod

a few tcpdump file on both side for a ssr tls1.2 obfs.

and in that time, telnet server ssh port (high port other than 22), I can got ssh hello (server version ...), but can not login.