Ubuntu
network-manager package

"VPN Service failed to start" and Deep Packet Inspection (DPI)

Asked by Geek

"PPTP VPN Service failed to start"
"VPN Service Failed to start"

This should help many people if you’re having constant disconnects with VPN on Ubuntu. :)
some countries use advanced firewall ( Deep packet inspection ) to Censorship the Internet ( in this scenario, disconnect VPN ) and instead of block traffics directly use simple and powerful tricks such as DNS Interception ( redirect or block queries for specific domains ) or DNS filtering so that resemble it is an old bug. indeed, Deep packet inspection technology has the ability to decrypt on the fly, perform SSL session inspection , Once a match is detected the connection is disconnected and the user gets a ‘403’ forbidden page or ‘page not found’ and one is important for us disconnect VPNs regularly.

what's your opinion?

thank you
G ( from Iran )

some useful links and resources:

http://swimminginthought.com/encryption-type-matters-deep-packet-inspection-solved/

https://blog.torproject.org/category/tags/deep-packet-inspection

http://www.vpnmag.co.uk/internet-censorship-now-relying-deep-packet-inspection-vpn-blocks/

http://www.symantec.com/connect/articles/firewall-evolution-deep-packet-inspection

https://techlib.barracuda.com/display/bngv54/how+to+configure+dns+interception

forums.whirlpool.net.au/archive/2268274

ieeexplore.ieee.org/search/searchresult.jsp?newsearch=true&queryText=deep+packet+inspection

https://sites.google.com/site/deeppacketinspectiondpi/

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu network-manager Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#1

If you get an SSH server outside of your country then make an SSH tunnel to that server, you can then use that as a proxy for web access.

Bit easier

Revision history for this message
Geek (goodbye-bluesky90) said : 		#2

@ andrew-woodhead666
thank you for response, but this isn't a strong way against DPI.

Revision history for this message
er ete (gkdfd44) said : 		#3

Port 443 is commonly used for HTTPS traffic (secure web browsing), and it's often not blocked in China since it's essential for regular web browsing. Some VPN providers offer OpenVPN connections through port 443, which can help avoid detection. See more detail here https://topfreevpns.net/

Can you help with this problem?

Provide an answer of your own, or ask Geek for more information if necessary.

To post a message you must log in.