> To be clear, this won't actually let you get to any blocked server, since there are IP layer blocks in place too, but at least DNS will be correct. :) (Actual

> To be clear, this won't actually let you get to any blocked server, since there are IP layer blocks in place too, but at least DNS will be correct. :) (Actually, detecting such blocks could allow someone to build a middlebox which used VPN only when needed and otherwise used normal upstream. Hm...) That's more or less what ChinaDNS/Shadowsocks does[1], though I think the DNS list is maintained by hand, not automatically generated (?). [1]: https://github.com/shadowsocks/ChinaDNS https://github.com/shadowsocks/ChinaDNS