From: Eric Abrahamsen <eric@ericabrahamsen.net>
To: emacs-orgmode@gnu.org
Subject: Re: [OFF TOPIC] almost giving up on emacs email..looking for advice?
Date: Thu, 13 Aug 2015 10:10:04 +0800 [thread overview]
Message-ID: <87pp2sq6pv.fsf@ericabrahamsen.net> (raw)
In-Reply-To: 87zj1wxh6i.fsf@gmx.us
Rasmus <rasmus@gmx.us> writes:
> Hi,
>
> Eric Abrahamsen <eric@ericabrahamsen.net> writes:
>
>> Rasmus <rasmus@gmx.us> writes:
>>
>>> Eric Abrahamsen <eric@ericabrahamsen.net> writes:
>>>
>>>> It's not trivial when you live in China :)
>>>>
>>>> I can make it work, between alternate IP addresses and ssh tunnels, but
>>>> it involves a lot of cursing and grinding my teeth. In a hostile network
>>>> environment any client will face the same problems, but the lack of
>>>> threading becomes pretty apparent here.
>>>
>>> I don't know what the great firewall is like, but for "hostile networks"
>>> around here (universities blocking git, airports blocking smtp/imap etc),
>>> I use openvpn. Are commercial openvpn provides blocked in China?
>>
>> Both commercial providers, and non-commercial providers! I set up my own
>> OpenVPN server on a US server, and that worked for a couple of years.
>> Then they caught it, and I switched to a non-standard port. That worked
>> for another four months or so, and now it doesn't work on any port. I'm
>> sure OpenVPN traffic is pretty easily sniffable.
>
> But what if you use TCP 443? That should be hard to detect, though speed
> might not be great... I guess https is OK in China.
>
> First link from startpage.com:
>
> https://www.bestvpn.com/blog/5919/how-to-hide-openvpn-traffic-an-introduction/
Oh, interesting! Let me fire up my ssh tunnel so I can open the link...
Okay, that's really useful, I'll try some of these solutions, thank you.
I'll admit I'm often too impatient to sit down and do the research.
startpage.com is nice, but it looks like they've already found that. I'm
using search.disconnect.me, which is great, and so far open.
>> My next project is ipsec (another broken-leg project). But I figure, if
>> I can google up these solutions, so can they, and the packet signatures
>> of all these different systems must be quite identifiable.
>
> Isn't ipsec as less popular version of Tor? BTW: I tried Tor again in the
> weekend since a relative was asking about it. Speed seems to have gotten
> a lot better (I'm in EU).
I don't think it's like Tor, as in I don't think it's P2P. I tried Tor a
couple of years ago and it was unusably slow -- maybe it's time again.
>> Using vanilla ssh seems fairly reliable: for the time being, I don't
>> think they'd go so far as to block ssh across the board. That would
>> really be declaring war on the internet. So sshuttle, tunnels, and the
>> built-in ssh SOCKS proxy are serving me well. Using dnscrypt-proxy
>> actually solves many of the problems -- in years past, it would have
>> solved everything, but they've started hell-banning IP ranges, and of
>> course that includes gmail. My own dumb fault for using gmail, I guess.
>
> The problem for me with socks is that it doesn't allow arbitrary port
> connections (I mostly deal with bad network configs, e.g. closed XMPP or
> git ports).
I only use socks for sending email, so it works fine. I've ended up with
multiple concurrent solutions, which doesn't bother me too much. But if
I could get openvpn back online, I'd like to just use that. If I could
set up some sort of selective tunneling, based on a whitelist of hosts,
that would be nice...
>> How off-topic can we get? :)
>
> It's interesting. And +30°C. It's fineeee! Thanks for sharing!
Fun stuff! I'll report back with any surprising news.
next prev parent reply other threads:[~2015-08-13 2:10 UTC|newest]
Thread overview: 33+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-08-06 12:43 [OFF TOPIC] almost giving up on emacs email..looking for advice? Xebar Saram
2015-08-06 12:50 ` Peter Davis
2015-08-06 13:56 ` Eric S Fraga
2015-08-06 14:31 ` John Kitchin
2015-08-06 16:50 ` Titus von der Malsburg
2015-08-06 17:21 ` Xebar Saram
2015-08-06 20:45 ` Suvayu Ali
2015-08-06 15:59 ` Jorge A. Alfaro-Murillo
2015-08-06 23:51 ` Ramon Diaz-Uriarte
2015-08-08 3:38 ` Peter Salazar
2015-08-11 10:04 ` Fabrice Popineau
2015-08-11 12:23 ` Peter Davis
2015-08-11 12:30 ` Fabrice Popineau
2015-08-11 12:38 ` Rasmus
2015-08-11 12:35 ` Nicolas Richard
2015-08-11 13:20 ` Suvayu Ali
2015-08-11 13:53 ` Scott Randby
2015-08-11 14:16 ` Peter Davis
2015-08-11 14:38 ` Xebar Saram
2015-08-11 14:51 ` Scott Randby
2015-08-12 3:13 ` Peter Salazar
2015-08-12 4:30 ` Eric Abrahamsen
2015-08-12 8:34 ` Rasmus
2015-08-12 9:09 ` Eric Abrahamsen
2015-08-12 9:35 ` Rasmus
2015-08-12 13:36 ` Eric Abrahamsen
2015-08-12 22:42 ` Rasmus
2015-08-13 2:10 ` Eric Abrahamsen [this message]
2015-08-11 13:22 ` Matt Lundin
2015-08-15 7:37 ` Bastien Guerry
2015-08-15 12:35 ` Matt Lundin
2015-08-18 16:36 ` Bastien
2015-08-11 14:00 ` Gerald Wildgruber
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
List information: https://www.orgmode.org/
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=87pp2sq6pv.fsf@ericabrahamsen.net \
--to=eric@ericabrahamsen.net \
--cc=emacs-orgmode@gnu.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
Code repositories for project(s) associated with this public inbox
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).