Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

section Censorship #4050

Open
mehdifirefox opened this issue Oct 16, 2022 · 16 comments
Open

section Censorship #4050

mehdifirefox opened this issue Oct 16, 2022 · 16 comments

Comments

@mehdifirefox
Copy link

Hello good time
First thank you for your support for the Iranian people
I write my comments in a short period of time I worked with your app

This period of protests Mullvad works very well and And it crosses the strong Iranian firewall

The appearance of your app is old
Does not have the right user interface
More information can give the user

This section Shadowsocks + VPN is great too
(In the training sector I think this part should be modified
C:\Program Files\OpenVPN >> C:\Program Files\OpenVPN Connect )

If you can add the new section of the Wireguard+ Trojan

My main offer is to add a new panel Or segment for technical users Limited countries
Users can use their strong and strong configurations
trojan-go vless vmess Work with v2ray sin-box

@mehdifirefox
Copy link
Author

Unfortunately Mullvad in Iran it broke down
I also made different settings. Shadowsocks tcp

@GibMeMyPacket
Copy link

Things have got complicated!
At the same time, China has done changes.

WireGuard obfuscation has been doing good in Mullvad 2022.5 for a few days as you may know.
Shadowsocks is getting detected and there was an attempt to fix Shadowsocks so it don't get detected like this. It has been seemingly tested in Iran but didn't made any changes and the results has been just like it is in Mullvad's WireGuard obfuscation.

By now, you cannot connect Mullvad just by it's application! OpenVPN, WireGuard and Shadowsocks all getting detected via DPI.

There are two other VPN provider that i did tested their Stealth mode and is working. one is using STunnel i guess and i don't know about the other provider. It is a bit disappointing that we have such a situation with Mullvad.

Temporary solution

I am currently finding shared v2ray servers (VMess/Trojan) and connecting them via v2rayN then execute mullvad bridge set custom local 10808 <DEVICE IP> 10808 command line so i can connect to OpenVPN over v2rayN's socks. I bet i will die if it continues to be like that for a few days more. The speed is awful and the connection is way unstable because of the shared v2ray servers.


Side Notes

I did searched a few hours for causes and solutions, there are a few links that might be helpful for @mullvad to better figure it.

  • I had issues fetching Github/GitRaw/FastGit links in Matsuri, found that forcing TLS 1.3 fixed it. Read more...
  • There are likely blocked TLS fingerprints, one example of the cause is working vmess in Windows but not Android. Read more...

@faern
Copy link
Member

faern commented Oct 18, 2022

I'm sorry to hear it is harder and harder to connect using our app. Thanks for the links.

Try reading our guide on this topic: https://mullvad.net/en/help/connecting-to-mullvad-vpn-from-restrictive-locations/

@GibMeMyPacket
Copy link

GibMeMyPacket commented Oct 18, 2022

I'm sorry to hear it is harder and harder to connect using our app. Thanks for the links.

Try reading our guide on this topic: https://mullvad.net/en/help/connecting-to-mullvad-vpn-from-restrictive-locations/

Thanks for that blog post.
I tried shadowsocks as guided in the blog, no luck, tried different options of it and still no luck in both Android and Windows. Tried both Shadowsocks and Shadowsocks and v2ray.

But the SSH method does work, however, some parts of the guide could be better.
Like where it says:

You will need to use standalone OpenVPN instead of the Mullvad VPN app

That is not totally correct, mullvad bridge set custom local 1234 127.0.0.1 1234 fails with an error, but it does work with mullvad bridge set custom local 1234 <DEVICE_LOCAL_IP> 1234 where <DEVICE_LOCAL_IP> of mine is 192.168.1.2
Also, your Putty will get disconnected if you try to connect via mullvad app itself, but it will not happen if you add putty.exe executable to the split tunneling (Lockdown mode is disabled).

the SSH guide also didn't mention that this method is usable in Android too which it is.
Using the Matsuri app you can create SSH and make the app to create a proxy and not VPN. You can copy the line below and import from Clipboard in Matsuri:
sn://ssh?eNpjYGBgMLQ01jM0ttAzMrTQM98oBhTJLc3JKUt8wohgNoLYjUDMAAANBQtL


Things are not going to change, these are not temporary changes made to our Internet. This is just censorship that has been here for many years. but they can now better detect the VPN packets which is a win-win for them.
I can definitely say i can download nothing with the speeds of OpenVPN-over-SSH. the speed is hell.
Speed test with OpenVPN-over-SSH:
https://i.imgur.com/uA7bnWb.gif
Speed test with OpenVPN-over-VMess(Xray), which is a free and shared proxy server:
https://i.imgur.com/PPrYnXI.gif

the working vmess example:
https://i.imgur.com/jp59tU2.png

So I'm really asking you to find a solution for us which gives us almost the same speed we had previously. This is a lifetime block.

@mehdifirefox
Copy link
Author

I'm sorry to hear it is harder and harder to connect using our app. Thanks for the links.

Try reading our guide on this topic: https://mullvad.net/en/help/connecting-to-mullvad-vpn-from-restrictive-locations/

None of the methods worked
There have been new filtering in China and Iran for a few days
As well as the rest of the restricted Internet countries are doing the same

And you no longer have any use of these countries
Please think of post 1 offer

New panel with new features
Or change the program and work on proxies up to VPN

@jbjorkang
Copy link
Member

I'm sorry to hear it is harder and harder to connect using our app. Thanks for the links.
Try reading our guide on this topic: https://mullvad.net/en/help/connecting-to-mullvad-vpn-from-restrictive-locations/

Thanks for that blog post. I tried shadowsocks as guided in the blog, no luck, tried different options of it and still no luck in both Android and Windows. Tried both Shadowsocks and Shadowsocks and v2ray.

But the SSH method does work, however, some parts of the guide could be better. Like where it says:

You will need to use standalone OpenVPN instead of the Mullvad VPN app

That is not totally correct, mullvad bridge set custom local 1234 127.0.0.1 1234 fails with an error, but it does work with mullvad bridge set custom local 1234 <DEVICE_LOCAL_IP> 1234 where <DEVICE_LOCAL_IP> of mine is 192.168.1.2 Also, your Putty will get disconnected if you try to connect via mullvad app itself, but it will not happen if you add putty.exe executable to the split tunneling (Lockdown mode is disabled).

the SSH guide also didn't mention that this method is usable in Android too which it is. Using the Matsuri app you can create SSH and make the app to create a proxy and not VPN. You can copy the line below and import from Clipboard in Matsuri: sn://ssh?eNpjYGBgMLQ01jM0ttAzMrTQM98oBhTJLc3JKUt8wohgNoLYjUDMAAANBQtL

Things are not going to change, these are not temporary changes made to our Internet. This is just censorship that has been here for many years. but they can now better detect the VPN packets which is a win-win for them. I can definitely say i can download nothing with the speeds of OpenVPN-over-SSH. the speed is hell. Speed test with OpenVPN-over-SSH: https://i.imgur.com/uA7bnWb.gif Speed test with OpenVPN-over-VMess(Xray), which is a free and shared proxy server: https://i.imgur.com/PPrYnXI.gif

the working vmess example: https://i.imgur.com/jp59tU2.png

So I'm really asking you to find a solution for us which gives us almost the same speed we had previously. This is a lifetime block.

Thank you for your feedback on the guide. Most appreciated.

@GibMeMyPacket
Copy link

GibMeMyPacket commented Oct 19, 2022

I've tried OpenVPN-over-STunnel and it also works in Iran, however, is again another method that Mullvad doesn't support.
Tested the speed and reliability, results are almost 3x better than OpenVPN-over-SSH, looking like as it was with OpenVPN-over-Shadowsocks (been using that time to time since late 2020).

@mehdifirefox
Copy link
Author

من OpenVPN-over-STunnel را امتحان کردم و در ایران نیز کار می کند، با این حال، باز هم روش دیگری است که مولود از آن پشتیبانی نمی کند. با آزمایش سرعت و قابلیت اطمینان، نتایج تقریباً 3 برابر بهتر از OpenVPN-over-SSH هستند، به نظر مانند OpenVPN-over-Shadowsocks (از اواخر سال 2020 از آن زمان به زمان استفاده می شود).

It didn't work for me

@GibMeMyPacket
Copy link

It didn't work for me

Mullvad doesn't provide STunnel and that was just a suggestion to @mullvad.

The only option you have with Mullvad, is OpenVPN-over-SSH. The guide is missing Android's section, for android you just need to simply connect to SSH via Matsuri and configure it's socks5 port.
Currently using SSH in both Windows and Android, no issues so far except the speed.

@cornzzy
Copy link

cornzzy commented Oct 20, 2022

I followed the 19 October update of the article. It connects but still causes Putty to disconnect which makes it not work. I added putty.exe to split tunnel exclusions and it looks like it's not working. Kept on going to exclude every .exe in Putty folder and still no luck.

The OpenVPN instructions are not useable since the config generator link is blocked. Are the config files available here?

Using version 2022.5, tried 2022.4 too.

@GibMeMyPacket
Copy link

I followed the 19 October update of the article. It connects but still causes Putty to disconnect which makes it not work. I added putty.exe to split tunnel exclusions and it looks like it's not working. Kept on going to exclude every .exe in Putty folder and still no luck.

The OpenVPN instructions are not useable since the config generator link is blocked. Are the config files available here?

Using version 2022.5, tried 2022.4 too.

  1. Disable Lockdown mode in Mullvad.
  2. Disconnect and stop it from connecting.
  3. Connect to the bridge via putty (and make sure to have the port forwarded as guided in the blog post)
  4. execute mullvad bridge set state on
  5. execute mullvad bridge set custom local 1234 192.168.1.100 1234
  6. Connect Mullvad.

@GibMeMyPacket
Copy link

GibMeMyPacket commented Nov 10, 2022

Almost been a month since then but still no real-world solution by Mullvad.
There has been other providers that had working protocols since the start or made some at the very start of new GFW detections but Mullvad just provided SSH bridges which makes the speed awful.

@faern We would really appreciate it if you make only one or two bridge servers with the working proxy protocols such as vless or anything else that works and gives better speeds than SSH!

@mehdifirefox
Copy link
Author

mehdifirefox commented Nov 10, 2022 via email

@GibMeMyPacket
Copy link

GibMeMyPacket commented Dec 7, 2022

My friend, forget about vpns, it will all be disabled in a few minutes.

Well, I did paid for it to work not to forget about.

@faern Any news or progress? SSH is throttled by a lot that i cannot even open two websites at the same time because the connection drops, SSH disconnects and OpenVPN disconnects too.
You guys have been way slow or careless on this and I didn't expected it from Mullvad! been almost two months and absolutely nothing from Mullvad on this.
Blocks did increased at the very first days of my yearly subscription and you just provided an slow, temporary solution (SSH) and now that doesn't work too. I would like to have a refund, really! 10 months is left.

@mehdifirefox
Copy link
Author

mehdifirefox commented Dec 7, 2022 via email

@GibMeMyPacket
Copy link

GibMeMyPacket commented Dec 7, 2022

There are already a lot resources and information on this for Mullvad, but I would like to add that I tried Windscribe's WSTunnel protocol and that works FAST, I mean that is the fastest working protocol I've seen since. Thanks to @mehdifirefox for mentioning.
Would be great to see that in Mullvad.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants