[tor-bugs] #20348 [Metrics/Censorship analysis]: Allot Communications blocking of vanilla Tor, obfs4, and meek in Kazakhstan, starting 2016-06

Fri Jun 16 00:37:16 UTC 2017

#20348: Allot Communications blocking of vanilla Tor, obfs4, and meek in
Kazakhstan, starting 2016-06
-----------------------------------------+--------------------------
 Reporter:  dcf                          |          Owner:
     Type:  project                      |         Status:  reopened
 Priority:  Medium                       |      Milestone:
Component:  Metrics/Censorship analysis  |        Version:
 Severity:  Normal                       |     Resolution:
 Keywords:  censorship block kz          |  Actual Points:
Parent ID:                               |         Points:
 Reviewer:                               |        Sponsor:
-----------------------------------------+--------------------------

Comment (by dcf):

 Replying to [comment:159 dcf]:
 > Replying to [comment:156 cypherpunks]:
 > > Redirect generated by KZ box for blocked site:
 > > https://paste.debian.net/plainh/39d8508f
 > > (can't paste here for spam filter block)
 >
 > {{{
 > HTTP/1.1 302 Found\r\n
 > Content-Length: 210\r\n
 > Location: http://92.63.88.128/?NTDzLZ\r\n
 > Content-Type: text/html; charset=UTF-8\r\n
 > \r\n
 > <HTML><HEAD><meta http-equiv="content-type"
 content="text/html;charset=utf-8">\n
 > <TITLE>302 Found</TITLE></HEAD><BODY>\n
 > <H1>302 Found</H1>\n
 > The document has moved\n
 > <A HREF="http://92.63.88.128/?NTDzLZ">here</A>\n
 > </BODY></HTML>\r\n
 > \r\n
 > }}}

 I just noticed something weird about this response. The `Content-Length:
 210` header is ''wrong''. The body is actually 224 bytes.

 You can see the same when you open attachment:youporn.com.pcap in
 Wireshark. The "Line-based text data: text/html" is cut off after `</BO`.
 The remaining "File Data: 14 bytes" appears as
 `44593e3c2f48544d4c3e0d0a0d0a`.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20348#comment:202>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online