4 ms·

I am in Indonesia where Reddit, Vimeo, The Pirate Bay and other sites are blocked. I just enabled TRR in Firefox 60 (They mention best support is in 62) and now

I am in Indonesia where Reddit, Vimeo, The Pirate Bay and other sites are blocked. I just enabled TRR in Firefox 60 (They mention best support is in 62) and now I have full unblocked access to all those sites. Awesome.

dtech 8y ago
Using an alternative DNS resolver like 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare) could solve that already, and not only in Firefox.
- gsich 8y ago
  Or Quad9, but this could be intercepted.
  - xorcist 8y ago
    apt-get install unbound
- stordoff 8y ago
  It depends how the block is implemented. If it's done by intercepting DNS requests, it doesn't matter what server you _try_ to reach. There's also the Virgin (UK) approach of allowing the correct DNS response, but tampering with HTTP requests (though switching to DNS-over-HTTPS wouldn't help in that case).
- flamemyst 8y ago
  That will not work. Some ISP do DNS transparent proxy (forward all udp packet 53 to their own DNS server). You need DNSCrypt or VPN.
- eknkc 8y ago
  They generally inspect DNS packets and block hostnames from resolving correctly. Does not matter the destination.
- codewithcheese 8y ago
  I was already using 1.1.1.1, did not unblock. Would be very curious if the ISPs were actually proxying my DNS requests. Any tips on how I might test that on Ubuntu?
ksec 8y ago
Ok that is news to me, why Indonesia blocks it?
- flamemyst 8y ago
  porn, hate speech, and pirate related stuff is blocked by government
KwanEsq 8y ago
Be aware that using it in 60 you may run into frequent crashes from https://bugzilla.mozilla.org/show_bug.cgi?id=1441131 https://bugzilla.mozilla.org/show_bug.cgi?id=1441131
- codewithcheese 8y ago
  Thanks for the heads up, ill keep that in mind if i start seeing issues. So far so good.
tototomtoboro 8y ago
Reddit, Vimeo? What is their justification for blocking those?
sildur 8y ago
Well, shame on you. All the armchair experts at hacker news say that the implementation is really bad and you should feel really bad for using it. So please stop using it and make them happy.

dtech 8y ago

Using an alternative DNS resolver like 8.8.8.8 (Google) or 1.1.1.1 (Cloudflare) could solve that already, and not only in Firefox.

gsich 8y ago
Or Quad9, but this could be intercepted.
- xorcist 8y ago
  apt-get install unbound
stordoff 8y ago
It depends how the block is implemented. If it's done by intercepting DNS requests, it doesn't matter what server you _try_ to reach. There's also the Virgin (UK) approach of allowing the correct DNS response, but tampering with HTTP requests (though switching to DNS-over-HTTPS wouldn't help in that case).
flamemyst 8y ago
That will not work. Some ISP do DNS transparent proxy (forward all udp packet 53 to their own DNS server). You need DNSCrypt or VPN.
eknkc 8y ago
They generally inspect DNS packets and block hostnames from resolving correctly. Does not matter the destination.
codewithcheese 8y ago
I was already using 1.1.1.1, did not unblock. Would be very curious if the ISPs were actually proxying my DNS requests. Any tips on how I might test that on Ubuntu?

ksec 8y ago

Ok that is news to me, why Indonesia blocks it?

flamemyst 8y ago
porn, hate speech, and pirate related stuff is blocked by government

KwanEsq 8y ago

Be aware that using it in 60 you may run into frequent crashes from https://bugzilla.mozilla.org/show_bug.cgi?id=1441131 https://bugzilla.mozilla.org/show_bug.cgi?id=1441131

codewithcheese 8y ago
Thanks for the heads up, ill keep that in mind if i start seeing issues. So far so good.

tototomtoboro 8y ago

Reddit, Vimeo? What is their justification for blocking those?

sildur 8y ago

Well, shame on you. All the armchair experts at hacker news say that the implementation is really bad and you should feel really bad for using it. So please stop using it and make them happy.