diwenx

Going through the block list above, one domain `ocsp.int-x3.letsencrypt.org` stands out: it belongs to an ocsp server operated by let's encrypt. I confirmed this domain received injection when querying Turkmenistan...

My apologies as I may have missed some discussion about this earlier, but I was under the impression that the recent blocking targets only TLS-based circumvention tools. Is shadowsocks also...

> Thanks for your report. Are your servers located within one of those big name VPS providers? Or are you hosting them at some residential or institutional IP addresses that...

@gfw-report Thank you for your detailed report! From someone with limited knowledge about GFW: My impression was that a variety of Google services have been unavailable in China for decades....

> fcm用的主域名 mtalk.google.com mtalk4.google.com 被污染了，但其它几个备用的好像没事，所以fcm依然是正常工作的，只是连的会慢一些 请问你尝试的是哪个备用域名呢？从我这里看，所有fcm的域名（https://firebase.google.com/docs/cloud-messaging/concept-options）都可以触发SNI的TCP RST. ``` mtalk.google.com mtalk4.google.com mtalk-staging.google.com mtalk-dev.google.com alt1-mtalk.google.com alt2-mtalk.google.com alt3-mtalk.google.com alt4-mtalk.google.com alt5-mtalk.google.com alt6-mtalk.google.com alt7-mtalk.google.com alt8-mtalk.google.com android.apis.google.com device-provisioning.googleapis.com firebaseinstallations.googleapis.com ``` ---- > *The main domain names...

> **根据 https://t.me/xhqcankao/6131 ，刚刚 https://1.1.1.1 已被中国 GFW 全面封锁，所有省份均不可访问。** > > 前几天我用 Chrome 116 测试 ECH 时，它预设的那几个安全 DNS 只有 1.1.1.1 能直接在中国使用，ECH 测试成功，但显然这一过程和结果在今天已无法复现。虽然仅封锁一个 DoH 并不能完全封锁 ECH，但对于 GFW 的 [目标](https://github.com/net4people/bbs/issues/281#issuecomment-1705401108) 而言，它已经迈出了第一步。 > >...