[tor-bugs] #7141 [Censorship analysis]: How is Iran blocking Tor?

[Tor Bug Tracker & Wiki]

#7141: How is Iran blocking Tor?
--------------------------------+------------------------------------------
     Reporter:  phw             |      Owner:  phw
         Type:  task            |     Status:  new
     Priority:  normal          |  Milestone:
    Component:  Censorship      |    Version:
  analysis                      |   Keywords:  dpi, censorship, block, iran
   Resolution:                  |  Parent ID:
Actual Points:                  |
       Points:                  |
--------------------------------+------------------------------------------

Comment (by cda):

 FYI, I can now reproduce this after hearing of other cases, however, GNU
 TLS seems to be the common client stepping on the DPI rule. It seems as
 though there is a whitelisting occurring on the SNI (for possibly non-
 Browser connectivity).  For example, git to Github is failing, despite the
 fact that one can browse to Github fine.  Sending a Google-related SNI to
 Github negotiates properly up to the mismatch names, but the reciprocal of
 Github/arbitrary SNIs to Google fails. Something at the international
 gateway is sending a FIN/ACK and then a RST.  So, something to keep in
 mind.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7141#comment:15>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online