[tor-bugs] #20348 [Metrics/Censorship analysis]: cyberoam assists bloody dictatorships.

Fri Dec 16 16:59:21 UTC 2016

#20348: cyberoam assists bloody dictatorships.
-----------------------------------------+-------------------------
 Reporter:  dcf                          |          Owner:
     Type:  project                      |         Status:  closed
 Priority:  Medium                       |      Milestone:
Component:  Metrics/Censorship analysis  |        Version:
 Severity:  Normal                       |     Resolution:  invalid
 Keywords:  censorship block kz          |  Actual Points:
Parent ID:                               |         Points:
 Reviewer:                               |        Sponsor:
-----------------------------------------+-------------------------

Comment (by dcf):

 kzblocked posted more information in IRC.

 The firewall changed its method of website blocking in November. Sites are
 blocked by DNS and HTTP. Blocked sites are redirected to
 !http://92.63.88.128/?NTDzLZ, which in turn redirects to a nonexistent
 !http://90.263.11.193/. The `NTDzLZ` part is important; without it, the
 first server redirects somewhere else. It could be an encoding of the
 destination address. The redirect happens across different KZ ISPs. The
 server (90.263.11.193?) was used long ago as a crawler with User-Agent
 `Mozilla/4.0 (compatible; MSIE 5.0; Windows 99; BBOT 1.0)`. kzblocked also
 says that the server is about some malware they used to redirect to.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20348#comment:145>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online