proxy icon indicating copy to clipboard operation
proxy copied to clipboard

Does not work in China

Open Christer-Ekholm opened this issue 2 years ago • 5 comments

I needed VPN to make my proxy work. Architecture would need to be redesigned so that all traffic goes through port 443.

Christer-Ekholm avatar Jan 09 '23 01:01 Christer-Ekholm

In the about section, this proxy only supports the default connection + chat. Currently media and VoIP are not supported through the proxy.

slawlor avatar Jan 09 '23 16:01 slawlor

Whatsapp cannot connect successfully to proxy in China at all. Not related to media or Voip.

Christer-Ekholm avatar Jan 09 '23 16:01 Christer-Ekholm

+1 In Iran the same. Any Idea how they recognize and block it? Maybe we can change some parameter to get it functional. With a new subject for selfsigned cert and new port, I've testet without any success.

Since it is working with VPN I guess China and Iran are somehow blocking the traffic.

Any Idea how they can block it?

ydagnhienil avatar Jan 09 '23 16:01 ydagnhienil

I would redesign so that all data is routed via port 443. I do not think there is any easy fixes to this. I think currently blocking is easy because Whatsapp tries use other ports than 80 and 443.

Christer-Ekholm avatar Jan 09 '23 16:01 Christer-Ekholm

I guess you are correct. I suppose somebody from WhatsApp should say his opinion about it too.

ydagnhienil avatar Jan 09 '23 16:01 ydagnhienil

Are my proxies also blocked? https://whatsapp-proxy.com (Besure to copy-paste the IP with the port)

Would love to try find something to make them accessible

GewoonJaap avatar Jan 09 '23 18:01 GewoonJaap

Thanks lot. Seems that specifying port will help. I tested these with ios and worked without VPN

141.148.228.97:82 68.183.8.87:80 51.14.190.56:5222

Christer-Ekholm avatar Jan 09 '23 18:01 Christer-Ekholm

Niceee! This works in Iran or any other country that blocks whatsapp?

GewoonJaap avatar Jan 09 '23 18:01 GewoonJaap

@Christer-Ekholm @ydagnhienil, curious if you guys set up your proxies in China and Iran respectively, or outside those countries?

gary-RR avatar Jan 09 '23 18:01 gary-RR

Mine are from The Netherlands and UK

GewoonJaap avatar Jan 09 '23 18:01 GewoonJaap

I don't think you can setup one in Iran, because then the proxy server can't reach whatsapp

GewoonJaap avatar Jan 09 '23 18:01 GewoonJaap

@GewoonJaap Yes, that's what I wanted to verify. Curious how they detect that it is a WhatsApp proxy because the traffic especially on ports 80 and 443 should look like ordinary traffic and for sure they wouldn't know the proxy IP addresses.

gary-RR avatar Jan 09 '23 18:01 gary-RR

Niceee! This works in Iran or any other country that blocks whatsapp?

I am asking a few people to test and report back.

xidnif avatar Jan 09 '23 18:01 xidnif

@gary-RR That's very strange indeed. Because both ports are the standard for web traffic.. And traffic on both ports should be encrypted by WhatsApp + the local proxy SSL cert (prob only on 443??)

GewoonJaap avatar Jan 09 '23 18:01 GewoonJaap

I guess it's just TCP traffic right? No http(s) traffic. Because I wanted to try hide my proxy behind a Cloudflare Tunnel/setup a Cloudflare worker, but only possible with http(s) traffic afaik

GewoonJaap avatar Jan 09 '23 18:01 GewoonJaap

I set my proxy to Azure cloud north Europe. It worked when I enabled VPN but did not work without it. So I am pretty sure that China great firewall block it.

Christer-Ekholm avatar Jan 09 '23 18:01 Christer-Ekholm

If it is not SSL (443) perhaps they eavesdrop and something in the payload gives it away (perhaps some reference to WhatsApp).

gary-RR avatar Jan 09 '23 18:01 gary-RR

I set my proxy to Azure cloud north Europe. It worked when I enabled VPN but did not work without it. So I am pretty sure that China great firewall block it.

What happens if you start a little webserver, can you reach that one or also blocked? Maybe the block Azure IPs?

GewoonJaap avatar Jan 09 '23 18:01 GewoonJaap

Interestingly enough, out of the following 3, two worked in Iran. (one user, mobile data, no VPN)

YES 141.148.228.97:82 NO 68.183.8.87:80 YES 51.14.190.56:5222

I am surprised because port 80 should be more likely to work. Is it the DO server that's blocked? Will add more observations as they come in.

xidnif avatar Jan 09 '23 18:01 xidnif

@xidnif how about 443?

gary-RR avatar Jan 09 '23 19:01 gary-RR

Is there any public proxy with port 443 for testing?

Christer-Ekholm avatar Jan 09 '23 19:01 Christer-Ekholm

Interestingly enough, out of the following 3, two worked in Iran. (one user, mobile data, no VPN)

YES 141.148.228.97:82 NO 68.183.8.87:80 YES 51.14.190.56:5222

I am surprised because port 80 should be more likely to work. Is it the DO server that's blocked? Will add more observations as they come in.

Very Interesting! 68.xxx is indeed DigitalOcean. The first is Oracle Cloud and I don't know about 51.xxx

Does this one work: 64.227.75.24:82 It's also digitalocean

GewoonJaap avatar Jan 09 '23 19:01 GewoonJaap

@gary-RR Can you give me a working server that offers 443? I haven't gotten around to set up one yet.

xidnif avatar Jan 09 '23 19:01 xidnif

@GewoonJaap I am having 64.227.75.24:82 tested.

xidnif avatar Jan 09 '23 19:01 xidnif

68.183.8.87:443 is up and running @xidnif it has a custom CN name

GewoonJaap avatar Jan 09 '23 19:01 GewoonJaap

68.183.8.87:443 and 68.183.8.87 works China. I start doubting me first tests. I cannot verify my own server now

Christer-Ekholm avatar Jan 09 '23 19:01 Christer-Ekholm

141.148.228.97:443 now also supports SSL

GewoonJaap avatar Jan 09 '23 19:01 GewoonJaap

141.148.228.97:443 does not work

Christer-Ekholm avatar Jan 09 '23 19:01 Christer-Ekholm

Ah okay, I guess that is because I haven't change the CN name. Gonna change it now.

GewoonJaap avatar Jan 09 '23 19:01 GewoonJaap

@Christer-Ekholm can you try again?

GewoonJaap avatar Jan 09 '23 19:01 GewoonJaap