[tor-bugs] #9601 [Obfsproxy]: Cyberoam firewall blocks obfs2/3 bridge addresses

[Tor Bug Tracker & Wiki]

#9601: Cyberoam firewall blocks obfs2/3 bridge addresses
---------------------------+-----------------
     Reporter:  Sherief    |      Owner:  asn
         Type:  task       |     Status:  new
     Priority:  normal     |  Milestone:
    Component:  Obfsproxy  |    Version:
   Resolution:             |   Keywords:
Actual Points:             |  Parent ID:
       Points:             |
---------------------------+-----------------
Changes (by sysrqb):

 * cc: ioerror, asn (added)
 * owner:   => asn
 * component:  BridgeDB => Obfsproxy


Comment:

 We don't really have much/enough info, debug logs may provide a little
 insight, packet dumps will help too. I'm moving to Obfsproxy, but this may
 not be correct either. Also CCing ioerror and asn.

 I should also probably clarify "But according to sysrqb there is no ssl
 handshake to mitm. so something else was used.". It's not that there isn't
 a TLS handshake it can MITM, but it would require it to MITM the obfs2/3
 key exchange, or at least detect that is was occurring - and this is
 fairly expensive.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9601#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online