← Back to context

Comment by encipriano

9 months ago

I think the cloudflare issue only happens with movistar/digi. At least in my case I couldnt use github yesterday

Orange and Vodafone are also implementing the blocking but users are not noticing because they are doing it wrong: instead of blackholing the IPs or only blocking when connecting through ECH, they are blocking by DPI the access when using the IP address as the SNI/Host header.

  # curl http://104.21.16.1
  <META HTTP-EQUIV="Pragma" CONTENT="no-cache"><META HTTP-EQUIV="Expires" CONTENT="-1"><html>Por causas ajenas a Vodafone, esta web no est� disponible</html>
  # curl http://104.21.16.1 --header "Host: blockedsite.com"
  error code: 1001

(1001 is the expected output from Cloudflare)

Which is really useless, but I guess fulfills the court order (pandereta meets undefined specifications).

They've been routinely blocking GitHub, I think because there are several repos tracking lists of IPTV streams? I often have to VPN to the US just to access my open-source repos.

So "only" the biggest broadband provider in the country :)

I've seen reports that Orange may have imposed the block as well, which is the #2 provider. Definitely a nontrivial slice of the population