search

ValdikSS / GoodbyeDPI

GoodbyeDPI — Deep Packet Inspection circumvention utility (for Windows)
https://ntc.party/c/community-software/goodbyedpi
Apache License 2.0
10.75k stars 912 forks source link

1.1.1.1 DNS has blocked ''http://archive.is/'' #115

Closed metapea closed 5 years ago

metapea commented 5 years ago

For some time now, CloudFlare's DNS 1.1.1.1 has blocked the site web archive site ''http://archive.is/''. I'm wondering, if you could bypass the DNS with goodbyeDPI while using it or check if the DNS is even blocking it in the first place.

http://archive.is/y5JBA (https://twitter.com/archiveis/status/1081276424781287427) https://community.cloudflare.com/t/archive-is-error-1001/18227 (i tried archiving it, but it was left blank: http://archive.fo/g0epf)

r4sas commented 5 years ago

huh? How DNS server can block site? Use other DNS server instead if CloudFlare gives incorrect record. GDPI cant help here.

metapea commented 5 years ago

Alright, just asking here since the site's userbase was mad and censured and the site wasn't working for me recently (with the DNS, and i still wanted to use since it was the one of fastest DNS around).

ValdikSS commented 5 years ago

This is not a GoodbyeDPI issue, and CloudFlare DNS does not block archive.is.

$ dig archive.is @1.1.1.1 +short
no-ecs.archive.is.
104.27.170.40
104.27.171.40
Atavic commented 5 years ago

From Twitter:

Please do not use archive.IS mirror for linking, use others mirrors [.TODAY .FO .LI .VN .MD .PH]. .IS might stop working soon.

metapea commented 5 years ago

From Twitter:

Please do not use archive.IS mirror for linking, use others mirrors [.TODAY .FO .LI .VN .MD .PH]. .IS might stop working soon.

none of the mirrors worked, that why i asked.

r4sas commented 5 years ago

How you tested them? I've checked all of TLD in @Atavic post, all seems works.

daveio commented 5 years ago

The authoritative DNS for archive.is (and other TLDs) actively refuses to respond to queries initiated by recursive resolvers which don't send EDNS Client Subnet. Cloudflare is one of these resolvers, citing privacy concerns. Resolvers which send Client Subnet must be used to access archive.* domains. Yes, really: https://twitter.com/archiveis/status/1018691421182791680

daveio commented 5 years ago

@ValdikSS see previous comment for why this is a legit ticket and something this project can address.

ValdikSS commented 5 years ago

@daveoi, I know that archive.is and several other websites block Cloudflare resolvers, but I don't see this as a GoodbyeDPI issue. GoodbyeDPI only DNS function is DNS redirection, and by default it uses Yandex.DNS 77.88.8.8.