search

mullvad / mullvadvpn-app

The Mullvad VPN client app for desktop and mobile
https://mullvad.net/
GNU General Public License v3.0
4.95k stars 336 forks source link

section Censorship #4050

Open mehdifirefox opened 1 year ago

mehdifirefox commented 1 year ago

Hello good time First thank you for your support for the Iranian people I write my comments in a short period of time I worked with your app

This period of protests Mullvad works very well and And it crosses the strong Iranian firewall

The appearance of your app is old Does not have the right user interface More information can give the user

This section Shadowsocks + VPN is great too (In the training sector I think this part should be modified C:\Program Files\OpenVPN >> C:\Program Files\OpenVPN Connect )

If you can add the new section of the Wireguard+ Trojan

My main offer is to add a new panel Or segment for technical users Limited countries Users can use their strong and strong configurations trojan-go vless vmess Work with v2ray sin-box

mehdifirefox commented 1 year ago

Unfortunately Mullvad in Iran it broke down I also made different settings. Shadowsocks tcp

GibMeMyPacket commented 1 year ago

Things have got complicated! At the same time, China has done changes.

WireGuard obfuscation has been doing good in Mullvad 2022.5 for a few days as you may know. Shadowsocks is getting detected and there was an attempt to fix Shadowsocks so it don't get detected like this. It has been seemingly tested in Iran but didn't made any changes and the results has been just like it is in Mullvad's WireGuard obfuscation.

By now, you cannot connect Mullvad just by it's application! OpenVPN, WireGuard and Shadowsocks all getting detected via DPI.

There are two other VPN provider that i did tested their Stealth mode and is working. one is using STunnel i guess and i don't know about the other provider. It is a bit disappointing that we have such a situation with Mullvad.

Temporary solution

I am currently finding shared v2ray servers (VMess/Trojan) and connecting them via v2rayN then execute mullvad bridge set custom local 10808 <DEVICE IP> 10808 command line so i can connect to OpenVPN over v2rayN's socks. I bet i will die if it continues to be like that for a few days more. The speed is awful and the connection is way unstable because of the shared v2ray servers.

Side Notes

I did searched a few hours for causes and solutions, there are a few links that might be helpful for @Mullvad to better figure it.

faern commented 1 year ago

I'm sorry to hear it is harder and harder to connect using our app. Thanks for the links.

Try reading our guide on this topic: https://mullvad.net/en/help/connecting-to-mullvad-vpn-from-restrictive-locations/

GibMeMyPacket commented 1 year ago

I'm sorry to hear it is harder and harder to connect using our app. Thanks for the links.

Try reading our guide on this topic: https://mullvad.net/en/help/connecting-to-mullvad-vpn-from-restrictive-locations/

Thanks for that blog post. I tried shadowsocks as guided in the blog, no luck, tried different options of it and still no luck in both Android and Windows. Tried both Shadowsocks and Shadowsocks and v2ray.

But the SSH method does work, however, some parts of the guide could be better. Like where it says:

You will need to use standalone OpenVPN instead of the Mullvad VPN app

That is not totally correct, mullvad bridge set custom local 1234 127.0.0.1 1234 fails with an error, but it does work with mullvad bridge set custom local 1234 <DEVICE_LOCAL_IP> 1234 where of mine is 192.168.1.2 Also, your Putty will get disconnected if you try to connect via mullvad app itself, but it will not happen if you add putty.exe executable to the split tunneling (Lockdown mode is disabled).

the SSH guide also didn't mention that this method is usable in Android too which it is. Using the Matsuri app you can create SSH and make the app to create a proxy and not VPN. You can copy the line below and import from Clipboard in Matsuri: sn://ssh?eNpjYGBgMLQ01jM0ttAzMrTQM98oBhTJLc3JKUt8wohgNoLYjUDMAAANBQtL

Things are not going to change, these are not temporary changes made to our Internet. This is just censorship that has been here for many years. but they can now better detect the VPN packets which is a win-win for them. I can definitely say i can download nothing with the speeds of OpenVPN-over-SSH. the speed is hell. Speed test with OpenVPN-over-SSH: https://i.imgur.com/uA7bnWb.gif Speed test with OpenVPN-over-VMess(Xray), which is a free and shared proxy server: https://i.imgur.com/PPrYnXI.gif

the working vmess example: https://i.imgur.com/jp59tU2.png

So I'm really asking you to find a solution for us which gives us almost the same speed we had previously. This is a lifetime block.

mehdifirefox commented 1 year ago

I'm sorry to hear it is harder and harder to connect using our app. Thanks for the links.

Try reading our guide on this topic: https://mullvad.net/en/help/connecting-to-mullvad-vpn-from-restrictive-locations/

None of the methods worked There have been new filtering in China and Iran for a few days As well as the rest of the restricted Internet countries are doing the same

And you no longer have any use of these countries Please think of post 1 offer

New panel with new features Or change the program and work on proxies up to VPN

jbjorkang commented 1 year ago

I'm sorry to hear it is harder and harder to connect using our app. Thanks for the links. Try reading our guide on this topic: https://mullvad.net/en/help/connecting-to-mullvad-vpn-from-restrictive-locations/

Thanks for that blog post. I tried shadowsocks as guided in the blog, no luck, tried different options of it and still no luck in both Android and Windows. Tried both Shadowsocks and Shadowsocks and v2ray.

But the SSH method does work, however, some parts of the guide could be better. Like where it says:

You will need to use standalone OpenVPN instead of the Mullvad VPN app

That is not totally correct, mullvad bridge set custom local 1234 127.0.0.1 1234 fails with an error, but it does work with mullvad bridge set custom local 1234 <DEVICE_LOCAL_IP> 1234 where of mine is 192.168.1.2 Also, your Putty will get disconnected if you try to connect via mullvad app itself, but it will not happen if you add putty.exe executable to the split tunneling (Lockdown mode is disabled).

the SSH guide also didn't mention that this method is usable in Android too which it is. Using the Matsuri app you can create SSH and make the app to create a proxy and not VPN. You can copy the line below and import from Clipboard in Matsuri: sn://ssh?eNpjYGBgMLQ01jM0ttAzMrTQM98oBhTJLc3JKUt8wohgNoLYjUDMAAANBQtL

Things are not going to change, these are not temporary changes made to our Internet. This is just censorship that has been here for many years. but they can now better detect the VPN packets which is a win-win for them. I can definitely say i can download nothing with the speeds of OpenVPN-over-SSH. the speed is hell. Speed test with OpenVPN-over-SSH: https://i.imgur.com/uA7bnWb.gif Speed test with OpenVPN-over-VMess(Xray), which is a free and shared proxy server: https://i.imgur.com/PPrYnXI.gif

the working vmess example: https://i.imgur.com/jp59tU2.png

So I'm really asking you to find a solution for us which gives us almost the same speed we had previously. This is a lifetime block.

Thank you for your feedback on the guide. Most appreciated.

GibMeMyPacket commented 1 year ago

I've tried OpenVPN-over-STunnel and it also works in Iran, however, is again another method that Mullvad doesn't support. Tested the speed and reliability, results are almost 3x better than OpenVPN-over-SSH, looking like as it was with OpenVPN-over-Shadowsocks (been using that time to time since late 2020).

mehdifirefox commented 1 year ago

من OpenVPN-over-STunnel را امتحان کردم و در ایران نیز کار می کند، با این حال، باز هم روش دیگری است که مولود از آن پشتیبانی نمی کند. با آزمایش سرعت و قابلیت اطمینان، نتایج تقریباً 3 برابر بهتر از OpenVPN-over-SSH هستند، به نظر مانند OpenVPN-over-Shadowsocks (از اواخر سال 2020 از آن زمان به زمان استفاده می شود).

It didn't work for me

GibMeMyPacket commented 1 year ago

It didn't work for me

Mullvad doesn't provide STunnel and that was just a suggestion to @mullvad.

The only option you have with Mullvad, is OpenVPN-over-SSH. The guide is missing Android's section, for android you just need to simply connect to SSH via Matsuri and configure it's socks5 port. Currently using SSH in both Windows and Android, no issues so far except the speed.

cornzzy commented 1 year ago

I followed the 19 October update of the article. It connects but still causes Putty to disconnect which makes it not work. I added putty.exe to split tunnel exclusions and it looks like it's not working. Kept on going to exclude every .exe in Putty folder and still no luck.

The OpenVPN instructions are not useable since the config generator link is blocked. Are the config files available here?

Using version 2022.5, tried 2022.4 too.

GibMeMyPacket commented 1 year ago

I followed the 19 October update of the article. It connects but still causes Putty to disconnect which makes it not work. I added putty.exe to split tunnel exclusions and it looks like it's not working. Kept on going to exclude every .exe in Putty folder and still no luck.

The OpenVPN instructions are not useable since the config generator link is blocked. Are the config files available here?

Using version 2022.5, tried 2022.4 too.

  1. Disable Lockdown mode in Mullvad.
  2. Disconnect and stop it from connecting.
  3. Connect to the bridge via putty (and make sure to have the port forwarded as guided in the blog post)
  4. execute mullvad bridge set state on
  5. execute mullvad bridge set custom local 1234 192.168.1.100 1234
  6. Connect Mullvad.
GibMeMyPacket commented 1 year ago

Almost been a month since then but still no real-world solution by Mullvad. There has been other providers that had working protocols since the start or made some at the very start of new GFW detections but Mullvad just provided SSH bridges which makes the speed awful.

@faern We would really appreciate it if you make only one or two bridge servers with the working proxy protocols such as vless or anything else that works and gives better speeds than SSH!

mehdifirefox commented 1 year ago

@GibMeMyPacket My friend, forget about vpns, it will all be disabled in a few minutes. The best way to prepare a server and clash, for a few days, v2ray is also malfunctioning

On Thu, 10 Nov 2022, 13:38 GibMeMyPacket, @.***> wrote:

Almost been a month since then but still no real-world solution by Mullvad. There has been other providers that had working protocols since the start or made some at the very start of new GFW detections but Mullvad just provided an SSH bridge which makes the speed awful.

@faern https://github.com/faern We would really appreciate it if you make only one or two bridge servers with the working proxy protocols such as vless or anything else that works and gives better speeds than SSH!

— Reply to this email directly, view it on GitHub https://github.com/mullvad/mullvadvpn-app/issues/4050#issuecomment-1310050207, or unsubscribe https://github.com/notifications/unsubscribe-auth/AF26MY7GO2RVJYTWIN356T3WHTCQLANCNFSM6AAAAAARGHPL7U . You are receiving this because you authored the thread.Message ID: @.***>

GibMeMyPacket commented 1 year ago

My friend, forget about vpns, it will all be disabled in a few minutes.

Well, I did paid for it to work not to forget about.

@faern Any news or progress? SSH is throttled by a lot that i cannot even open two websites at the same time because the connection drops, SSH disconnects and OpenVPN disconnects too. You guys have been way slow or careless on this and I didn't expected it from Mullvad! been almost two months and absolutely nothing from Mullvad on this. Blocks did increased at the very first days of my yearly subscription and you just provided an slow, temporary solution (SSH) and now that doesn't work too. I would like to have a refund, really! 10 months is left.

mehdifirefox commented 1 year ago

single vpn It works well these days windscribe

On Wed, 7 Dec 2022, 11:52 GibMeMyPacket, @.***> wrote:

My friend, forget about vpns, it will all be disabled in a few minutes. Well, I did paid for it to work not to forget about.

@faern https://github.com/faern Any news or progress? SSH is throttled by a lot that i cannot even open two websites at the same time because the connection drops, SSH disconnects and OpenVPN disconnects too. You guys have been way slow or careless on this and I didn't expected it from Mullvad! been almost two months and absolutely nothing from Mullvad on this. Blocks did increased at the very first days of my yearly subscription and you just provided an slow, temporary solution (SSH) and now that doesn't work too. I would like to have a refund, really! 10 months is left.

— Reply to this email directly, view it on GitHub https://github.com/mullvad/mullvadvpn-app/issues/4050#issuecomment-1340572218, or unsubscribe https://github.com/notifications/unsubscribe-auth/AF26MY5TYKBTFDADU7RVUQ3WMBCNTANCNFSM6AAAAAARGHPL7U . You are receiving this because you authored the thread.Message ID: @.***>

GibMeMyPacket commented 1 year ago

There are already a lot resources and information on this for Mullvad, but I would like to add that I tried Windscribe's WSTunnel protocol and that works FAST, I mean that is the fastest working protocol I've seen since. Thanks to @mehdifirefox for mentioning. Would be great to see that in Mullvad.