防止ISP DNS劫持 -- mobile-network 领域 android 相关的问题

Prevent ISP DNS Hijacking

问题

中文

我住在一个reddit等一些网站被阻止的国家。在WiFi上，我可以将DNS更改为CloudFlare（1.1.1.1）并能够访问这些网站，但在移动网络上，我的ISP似乎允许我这样做。我所看到的所有解决方案都适用于非生根设备，只影响WiFi网络。我的设备恰好是rooted android 10，有什么我可以做的能够在没有wifi的情况下访问reddit吗？

谢谢你的时间。

english

I live in a country where some sites such as Reddit are blocked. On wifi I can change my DNS to Cloudflare (1.1.1.1) and be able to access those sites, but on mobile network my ISP doesn't seem to allow me to do so. All the solutions I see are for non-rooted devices and only affect wifi networks. My device happens to be rooted Android 10, is there anything I can do to be able to access Reddit without wifi?

Thank you for your time.

404 Name Not Found 2020-06-05 16:44:10Z

为什么不使用VPN或TOR / ORBOT？如果您有Firefox，您也可以使用Switchyomega addon使用代理reddit。您需要提供一个公共代理地址课程。请注意，公共代理不值得信赖。但是，他们合理地善于访问被阻止的内容。 Firelord 2020-06-05 17:03:53Z, License: CC BY-SA 4.0

DNS不是阻止网站的唯一方法。存在端口阻塞，IP阻塞和协议阻塞（具有DPI）。但是，如果您确定它只是您的ISP正在拦截的DNS，请使用加密的DNS。我解释了整个过程 Irfan Latif 2020-06-05 17:05:29Z, License: CC BY-SA 4.0

@irfanlatif在云IP阻止时段不再工作了。请参阅“俄罗斯vs.电报” - 一次在云服务器上阻止电报IP，电报刚刚移动到下一个IP /云节点。被阻止的唯一服务是偶然在相同的公共IP上运行时的服务。 Robert 2020-06-05 18:56:47Z, License: CC BY-SA 4.0

@robert正确。但是，我说，肯定有些MNO（至少在我国）仍然阻止与其他技术相结合的IP地址，通常是DPI。阻止色情网站和VPN。我还看到ISPS白名单IP范围，由亚马逊和谷歌等更大的云服务使用。但白名单/黑名单经常出错，发现用户被发现报告奇怪情况。 Irfan Latif 2020-06-05 19:02:10Z, License: CC BY-SA 4.0

@irfan latif谢谢！ 404 Name Not Found 2020-06-16 07:50:52Z, License: CC BY-SA 4.0

Why not use a VPN or Tor/Orbot? If you have Firefox you can also use SwitchyOmega addon to use a proxy for Reddit. You'd need to provide a public proxy address of course. Be aware, public proxies are not trustworthy. But they are reasonably good to access blocked content though Firelord 2020-06-05 17:03:53Z, License: CC BY-SA 4.0

DNS is not the only way to block sites. There is port blocking, IP blocking and protocol blocking (with DPI). But if you are sure it's only the DNS your ISP is intercepting, use encrypted DNS. I explained the whole process for Irfan Latif 2020-06-05 17:05:29Z, License: CC BY-SA 4.0

@IrfanLatif In the age of cloud IP blocking isn't working anymore. See "Russia vs. Telegram" - one time they were blocking Telegram IP on cloud server and Telegram was just moving to the next IP/cloud node. The only services(s) that were blocked were those that by chance were running on the same public IP like Telegram servers Robert 2020-06-05 18:56:47Z, License: CC BY-SA 4.0

@Robert correct. But I'm saying that for sure that some MNOs (at least in my country) are still blocking IP addresses combined with other techniques, usually DPI e.g. for blocking porn sites and VPNs. I have also seen that ISPs whitelist IP ranges used by bigger cloud services like Amazon and Google. But whitelisting/blacklisting often goes wrong and users are found reporting odd situations Irfan Latif 2020-06-05 19:02:10Z, License: CC BY-SA 4.0

@Irfan Latif Thanks! 404 Name Not Found 2020-06-16 07:50:52Z, License: CC BY-SA 4.0

回答列表

最佳答案

DN不是阻止站点的唯一方法。还有端口阻塞，IP地址阻塞（云在云时代而不是非常可行和有效，因为@ robert 说）和协议阻止（使用 dpi ）。请参阅审查技术的简要说明这里。但如果您确定它只是您的ISP正在拦截的DNS，则可以使用加密DNS：

Android 9引入了私有DNS（DOT）（下面的网络设置），它加密WiFi和移动数据的整个DNS流量。热点流量是一个例外。
如果您仅关注Web浏览器，Firefox会有内置设置 for doh。
如果您有一个rooted设备，并且您想要更多控制或想做日志记录，黑名单等，或者也想要为热点网络使用加密的DNS， dnscrypt-proxy 是一个更好的选择。它支持DOH和DOT。查看如何设置 dnscrypt-proxy 作为 abcdefghijklmninit 在Android上的服务privileges

DNS is not the only way to block sites. There is also port blocking, IP address blocking (though not very feasible and effective in the age of cloud as @Robert said) and protocol blocking (with DPI). See a brief description of censorship techniques here. But if you are sure it's only the DNS your ISP is intercepting, you can use encrypted DNS:

Android 9 introduced Private DNS (DoT) (under Network Setings) which encrypts whole DNS traffic both for WiFi and Mobile Data. Hotspot traffic is an exception though.
If you are concerned about web browser only, Firefox does have built-in settings for DoH.
If you have a rooted device and you want more control or want to do logging, blacklisting etc. or want to use encrypted DNS for hotspot network too, dnscrypt-proxy is a better option. It supports both DoH and DoT. See how to set up dnscrypt-proxy as an init service on Android with least privileges.

Irfan Latif 2020-06-16 05:46:41Z

更多防止ISP DNS劫持的答案请点击这里

防止ISP DNS劫持 -- mobile-network 领域 android 相关的问题

Prevent ISP DNS Hijacking

问题

回答列表

相关问题

相关问题

防止ISP DNS劫持 -- mobile-network 领域 android 相关 的问题

Prevent ISP DNS Hijacking

问题

回答列表

相关问题

相关问题

防止ISP DNS劫持 -- mobile-network 领域 android 相关的问题