mtprotoproxy icon indicating copy to clipboard operation
mtprotoproxy copied to clipboard

Today TLS FAKE has blocked in Iran

Open amidsh1988 opened this issue 4 years ago • 21 comments

Today TLS FAKE has blocked in Iran, and we can't connect to telegram proxy. Also, another VPN that worked with the TLS protocol doesn't work. What's your solution for that?

amidsh1988 avatar May 10 '20 12:05 amidsh1988

My proxy uses latest stable version and it works.

erfantkerfan avatar May 10 '20 13:05 erfantkerfan

My proxy uses latest stable version and it works.

From which source you installed?

amidsh1988 avatar May 10 '20 13:05 amidsh1988

@erfantkerfan Can you please share your config.py

Mine doesn't work on ADSL internet, it works on Mobile Data thu.

FaridAghili avatar May 11 '20 05:05 FaridAghili

@erfantkerfan Can you please share your config.py

Mine doesn't work on ADSL internet, it works on Mobile Data thu.

i have same problem, some body help please!!

mimzand avatar May 11 '20 14:05 mimzand

I'm not really sure about what I'm going to say but this problems might be because of something called "The Whitelister". So what is it? In nutshell, it's a service that allows only some specific packets to reach the server. To be more specific, it allows HTTP, HTTPS and DNS. Also this thing whitelists specific servers. For example hetzner servers. Here is my source: https://geneva.cs.umd.edu/posts/iran-whitelister/

The fake tls mode of mtproto proxy used to actually bypass the whitelister but it seems that they have patched it recently to drop fake tls connection.

Once again I'm not sure about this theory.

P.S: I don't know if there is a solution to bypass the whitelister.

Edit: Just to give you an example, I can connect to my own mtproto server on Eonix Corporation, but I could not do it on Hetzner servers.

HirbodBehnam avatar May 11 '20 15:05 HirbodBehnam

I'm not really sure about what I'm going to say but this problems might be because of something called "The Whitelister". So what is it? In nutshell, it's a service that allows only some specific packets to reach the server. To be more specific, it allows HTTP, HTTPS and DNS. Also this thing whitelists specific servers. For example hetzner servers. Here is my source: https://geneva.cs.umd.edu/posts/iran-whitelister/

The fake tls mode of mtproto proxy used to actually bypass the whitelister but it seems that they have patched it recently to drop fake tls connection.

Once again I'm not sure about this theory.

P.S: I don't know if there is a solution to bypass the whitelister.

Edit: Just to give you an example, I can connect to my own mtproto server on Eonix Corporation, but I could not do it on Hetzner servers.

So, if we run the Mtproto on Eonix or another datacenter, it works??

amidsh1988 avatar May 12 '20 15:05 amidsh1988

I'm not sure which data centers are ok, but I can confirm MTproto will work on Eonix at least right now.

HirbodBehnam avatar May 12 '20 15:05 HirbodBehnam

@HirbodBehnam Thank you, looks interesting :|

What's the website of Eonix? Couldn't find it in Google!

FaridAghili avatar May 13 '20 04:05 FaridAghili

I bought my server with Bitcoin via virmach

HirbodBehnam avatar May 13 '20 04:05 HirbodBehnam

I'm not sure which data centers are ok, but I can confirm MTproto will work on Eonix at least right now.

dear Hirbod, you connect by which ISP? our proxy is working by MCI (4G - HamraheAval) only now. I mean you test it by all ISPs?

amidsh1988 avatar May 13 '20 10:05 amidsh1988

Tested it on pars online, Irancell and Rightel

HirbodBehnam avatar May 13 '20 10:05 HirbodBehnam

Tested it on pars online, Irancell and Rightel

OK, is the Eonix safe? I visit Virmach website for buying VPS, they need personal information such as mobile phone and so on. you take them real info & phone number?

amidsh1988 avatar May 13 '20 11:05 amidsh1988

I entered my real address and phone. Been using it for 2 years I guess.

HirbodBehnam avatar May 13 '20 11:05 HirbodBehnam

It has been suggested that you should use the fake TLS hostname equal to your actual server hostname. One proposed solution is documented here: https://github.com/freejohn123/mtproto-tls-server

ghost avatar Oct 06 '20 01:10 ghost

@freejohn123 Thanks, got a server running as you explained, let's see how long it survives.

FaridAghili avatar Oct 06 '20 07:10 FaridAghili

@freejohn123 Thanks, got a server running as you explained, let's see how long it survives.

You're welcome. There is also a discussion and test server for this technique https://t.me/joinchat/CDAbzUY_DnYc3cxsokkikg

ghost avatar Oct 06 '20 19:10 ghost

@freejohn123 ~~Unfortunately MTProto traffic got blocked in less than 24 hours.~~ ~~Server is still accessible via SSH and browser (nginx html page) but MTProto Proxy doesn't connect.~~

Well, my bad, it's still working!

FaridAghili avatar Oct 07 '20 00:10 FaridAghili

Sorry to hear that. Thank you for testing.

ghost avatar Oct 07 '20 00:10 ghost

@freejohn123 Sorry, just updated my previous comment!

FaridAghili avatar Oct 07 '20 04:10 FaridAghili

@freejohn123 @FaridAghili Hi, Are you still running the same server and has it survived?

masoudelete avatar Jan 07 '22 19:01 masoudelete

@masoudelete No, ofc not. don't have any live server atm.

FaridAghili avatar Jan 08 '22 05:01 FaridAghili