GoodbyeDPI icon indicating copy to clipboard operation
GoodbyeDPI copied to clipboard

GoodbyeDPI support for Turkey

Open Animeliqite opened this issue 1 year ago • 19 comments

I've made sure there's no existing feature request / Я убедился, что такой функциональности еще никто не предлагал

  • [x] I've made sure there's no existing feature request / Я убедился, что такой функциональности еще никто не предлагал

Describe your feature / Опишите ваше предложение

In the past few days, multiple sites were blocked in Turkey (Instagram, Roblox and most likely Tiktok in the next few days) and this has created a concern among people due to the possibility of more and more VPNs being blocked by the Turkish government, therefore limiting bypassing methods even more.

There is a fork of this repository that is designed to work for Turkish users, but the last commit was from 2022 and it had never been updated since then. I would really appreciate it if any of the contributors were to make a special version for GoodbyeDPI like Russia.

Animeliqite avatar Aug 08 '24 12:08 Animeliqite

What exactly do you want to see in that special version? Domains?

EgorWeders avatar Aug 08 '24 12:08 EgorWeders

Domains. There's a command file that retrieves all the blocked sites in Russia and saves them into a .txt file, but it's only made for the Russian version. Most of the times I tried GoodbyeDPI, it didn't work well for certain sites. I can't remember which ones were not working for certain, but as the list for these blocked sites expand pretty much every day, there is a growing possibility of recently-blocked sites not being on the list of "blacklist-russia.txt", therefore I need to manually add them myself.

Not to mention that Russia has over 100.000+ blocked sites (according to "blacklist-russia.txt") while Turkey has over 1.000.000+, so the chances are pretty likely.

Animeliqite avatar Aug 08 '24 12:08 Animeliqite

You need to have url which gives you all domains. I dont know anything like it for turkey.

EgorWeders avatar Aug 08 '24 12:08 EgorWeders

I'll try to search for one. I'll put it here if I find one.

Animeliqite avatar Aug 08 '24 12:08 Animeliqite

You can fork it for turkey and include your cmd.

EgorWeders avatar Aug 08 '24 12:08 EgorWeders

If the only issue with the current solution is in the blacklist file not being up-to-date with Turkish restrictions, why wouldn't you just ignore the blacklist and use GoodbyeDPI on all traffic?

AppleVegas avatar Aug 08 '24 14:08 AppleVegas

It works in Turkey, just tried it. Using any_dns file plus yandex.dns set up in windows with dns over https link from yandex dns, it works.

zelosleone avatar Aug 08 '24 16:08 zelosleone

Most of the times I tried GoodbyeDPI, it didn't work well for certain sites.

Personally tested and confirm it works for all sites with Turkcell and Millenicom(Türk Telekom), you need to experiment with configuration and as @zelosleone said, use DoH.

It even partially works for KYK dorms (they have even more aggressive approaches like ~~TLS downgrade~~ making user install certificates) with correct config.

I can't remember which ones were not working for certain but as the list for these blocked sites expand pretty much every day, there is a growing possibility of recently-blocked sites not being on the list

A) Just run it without a blacklist. Performance impact is negligible and there is configs that circumvent DPI without breaking sites. B) Make a blacklist yourself and contribute.

Turkey has over 1.000.000+, so the chances are pretty likely.

Nonsense, you can get away with 100-1000 custom domains in worst case. As majority of those blocked sites are phishing ones that you shouldn't even bother.

Where dis you even get that number anyway? https://www.usom.gov.tr/adres says 337k.

cnyrr avatar Aug 09 '24 08:08 cnyrr

If somebody will make a direct link with the list of blocked domains (as it is for russia script), I will include .cmd files with the list in next release.

ValdikSS avatar Aug 09 '24 15:08 ValdikSS

Where dis you even get that number anyway? https://www.usom.gov.tr/adres says 337k.

USOM only blocks domains for cyber security concerns, which is mostly irrelevant for what most people are going to use something like GoodbyeDPI for. It doesn't provide a list of domains blocked for other reasons.

If for some reason you wanted to access these domains, the list can be found at https://www.usom.gov.tr/url-list.txt.

I'm not aware of a quick and easy way to obtain a list like this for domains censored on non-security related grounds.

Namarot avatar Aug 09 '24 16:08 Namarot

As someone who has been using goodbyeDPI for a long time, I also complain about this situation. I don't know much about cyber or security, but while I could use goodbyeDPI until 3-4 months ago, now I can't access banned sites when I run the .bat file.

With the recent banning of the sites with the most user traffic in Turkey (such as instagram.com, roblox.com, wattpad.com), using goodbyeDPI will be very useful. Please help regarding this issue.

@ValdikSS There is a list of blocked domains here: https://www.usom.gov.tr/url-list.txt

Thanks

CanArslanDev avatar Aug 10 '24 16:08 CanArslanDev

Have you tried different settings (command-line arguments) for the executable? This tool essentially provides multiple common techniques to byepass DPI, so generally speaking you need to find those which works for your particular case. You can also try any GUI-wrapper for GDPI like https://github.com/Virenbar/GDPIControl for easier tests of various combinations (* I haven't tested this tool myself, just as a reference)

Amegatron avatar Aug 10 '24 20:08 Amegatron

As someone who has been using goodbyeDPI for a long time, I also complain about this situation. I don't know much about cyber or security, but while I could use goodbyeDPI until 3-4 months ago, now I can't access banned sites when I run the .bat file.

With the recent banning of the sites with the most user traffic in Turkey (such as instagram.com, roblox.com, wattpad.com), using goodbyeDPI will be very useful. Please help regarding this issue.

@ValdikSS There is a list of blocked domains here: https://www.usom.gov.tr/url-list.txt

Thanks

That is a list of malicious websites and, if you search through the file, it does not include any of the legitimate websites blocked by the relevant Turkish authorities (i.e. BTK). It is better to keep those blocked. Creating a list yourself or somehow scraping the BTK's website query system, or any other way to obtain the block list from BTK can be the better option.

MuXodious avatar Aug 11 '24 10:08 MuXodious

It works in Turkey, just tried it. Using any_dns file plus yandex.dns set up in windows with dns over https link from yandex dns, it works.

The last time I tried, some sites didn't seem to open. I'm not sure if it's because of the version of the .bat file I'm using but from my experience, that's what happens on my case.

Animeliqite avatar Aug 15 '24 14:08 Animeliqite

The last time I tried, some sites didn't seem to open. I'm not sure if it's because of the version of the .bat file I'm using but from my experience, that's what happens on my case.

Same way in my case, and I don't think the problem is dns related.

That is a list of malicious websites and, if you search through the file, it does not include any of the legitimate websites blocked by the relevant Turkish authorities (i.e. BTK). It is better to keep those blocked. Creating a list yourself or somehow scraping the BTK's website query system, or any other way to obtain the block list from BTK can be the better option.

Even when I create and edit a blacklist text and .bat file for myself, I still cannot access banned sites.

In Turkey, DNS or IP ban varies depending on internet service providers. We can access the website we want with some telecommunication companies, Netspeed, Turkney (non-governmental) ISPs and DNS. But most of the remaining ISPs (Turk Telekom, Superonline, Turksat) ban sites by IP address.

I don't know much about networking, but I wanted to add it in case it could help speed things up.

CanArslanDev avatar Aug 15 '24 14:08 CanArslanDev

Simply running goodbyedpi with --set-ttl 7 and no other options (with or without a blacklist) works in my experience. ISP: Superonline

I've noticed some interesting inconsistencies between different browsers, curl, etc., but the above configuration has worked for me universally.

Namarot avatar Aug 15 '24 14:08 Namarot

Simply running goodbyedpi with --set-ttl 7 and no other options (with or without a blacklist) works in my experience. ISP: Superonline

I've noticed some interesting inconsistencies between different browsers, curl, etc., but the above configuration has worked for me universally.

My ISP: Turkcell And goodbyedpi has not been working for about 4-5 months. (Default settings)

CanArslanDev avatar Aug 15 '24 23:08 CanArslanDev

I have been actively pursuing BTK and ESB to gain access to the block list that is provided to ISPs. No successful outcome expected.

kero3009destiny avatar Aug 25 '24 14:08 kero3009destiny

I think maybe someone could contact freewebturkey.com ? According to this article they have a pretty detailed tracking of censored websites and URLs

bt2901 avatar Oct 13 '24 22:10 bt2901