October 2021 - anti-censorship-team

Microsoft announces shutting down domain fronting attempts in Azure
by Cecylia Bocovich 18 Nov '24

18 Nov '24

It looks like Azure is going to shutdown domain fronting: https://www.microsoft.com/security/blog/2021/03/26/securing-our-approach-to… There isn't a time frame listed in the article, and I haven't gotten any notifications through my Azure account yet. Cecylia

7 9

Reboot of Snowflake VPSes is needed
by David Fifield 28 Oct '21

28 Oct '21

I got an email saying that the snowflake bridge and broker VPSes need to be restarted to migrate them to a new storage backend. If we don't do it, it will happen automatically some time next week. Is there a better time to schedule the restart? ----- Forwarded message from "eclips.is" <support(a)eclips.is> ----- Date: Wed, 27 Oct 2021 11:52:08 +0000 From: "eclips.is" <support(a)eclips.is> Dear eclips.is user, We are performing an update on our virtualization platform, this requires a change in the configuration of the storage backend. Due to this update your VPS needs to be stopped/started. We will execute this for you next week. If you prefer to plan this on your own, please feel free to stop/start your VPS yourself. By doing so, the VPS will be moved to the updated platform. Note: A reboot from within the machine itself will not be sufficient. ----- End forwarded message -----

2 1

configure router NAT for snowflake proxy
by meskio 25 Oct '21

25 Oct '21

Hello, I thought I could host a snowflake standalone proxy in my home fiber. Following the instructions[0] it says that is "especially recommended": > A full-cone NAT (you can use this NAT behaviour tool to test what type of NAT > you have. The properties you are looking for are address-independent mapping > and either address-independent or address-dependent filtering) Using the "NAT behaviour tool" I get: * NAT mapping behavior: endpoint independent (good) * NAT filtering behavior: address and port dependent (bad) My home router is an openwrt on which I have total control, it gets the public IP from my ISP and provides NAT to my home network. I tried playing a bit with the NAT Rules and the firewall settings, but all that is magic for me. Any tips how to fix the NAT filtering in openwrt or what do I need to look into iptables for it? Thanks. [0] https://community.torproject.org/relay/setup/snowflake/standalone/ -- meskio | https://meskio.net/ -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- My contact info: https://meskio.net/crypto.txt -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Nos vamos a Croatan.

1 0