[Micronet] Restricted Internet Access from other countries

classic Classic list List threaded Threaded
10 messages Options
Reply | Threaded
Open this post in threaded view
|

[Micronet] Restricted Internet Access from other countries

Beth Muramoto
A faculty person here is traveling to China and other countries where there are restrictions/firewalls to accessing the internet so that she often can't access bMail reliably.

How have all of you handled these situations? Have you set up special VPN access? Or are people just at the mercy of the county's restrictions?

This is my first experience with someone who is having these issues (believe it or not) so forgive my "naiveté in the questions I'm asking. I'm not sure how to advise.

Thanks as always for any guidance you can provide.

Beth

--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  (510) 643-0203 
Fax:  (510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

jon kuroda-2
Some notes from a faculty member who did a sabbatical in China not too long ago:

* The Campus VPN was usable from China - the current situation may differ now.
* Download, install, and test the client software before leaving the US.
* Consider using the "Full Tunnel" for sites that may be blocked in that country.
* Use the VPN Server(s)' IP address, not the DNS name of ucbvpn.berkeley.edu.

The last one's a non-obvious gotcha.  I'll leave the reasoning behind why to
do this as an exercise for the readers of Micronet.

For info on using the VPN:

* http://ist.berkeley.edu/node/591
* http://www.net.berkeley.edu/vpn/
* https://software.berkeley.edu/cisco-vpn

--Jon

On Tue, Oct 21, 2014 at 11:20:27AM -0700, Beth Muramoto wrote:

> A faculty person here is traveling to China and other countries where there
> are restrictions/firewalls to accessing the internet so that she often
> can't access bMail reliably.
>
> How have all of you handled these situations? Have you set up special VPN
> access? Or are people just at the mercy of the county's restrictions?
>
> This is my first experience with someone who is having these issues
> (believe it or not) so forgive my "naiveté in the questions I'm asking. I'm
> not sure how to advise.
>
> Thanks as always for any guidance you can provide.

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

Sean McMahon
Hi Beth,

Another way we have advised customers at the CSSIT Service Desk to be able to access their bMail accounts in China is to set up email forwarding on their account to an email service provider that is accessible in China for the duration of their stay, customers can set up email forwarding at calmail.berkeley.edu , clicking Manage Your Account , then Forwarding ,  after Authenticating in with their Calnet ID and passphrase.

Regards,

Sean

On Tue, Oct 21, 2014 at 11:38 AM, jon kuroda <[hidden email]> wrote:
Some notes from a faculty member who did a sabbatical in China not too long ago:

* The Campus VPN was usable from China - the current situation may differ now.
* Download, install, and test the client software before leaving the US.
* Consider using the "Full Tunnel" for sites that may be blocked in that country.
* Use the VPN Server(s)' IP address, not the DNS name of ucbvpn.berkeley.edu.

The last one's a non-obvious gotcha.  I'll leave the reasoning behind why to
do this as an exercise for the readers of Micronet.

For info on using the VPN:

* http://ist.berkeley.edu/node/591
* http://www.net.berkeley.edu/vpn/
* https://software.berkeley.edu/cisco-vpn

--Jon

On Tue, Oct 21, 2014 at 11:20:27AM -0700, Beth Muramoto wrote:
> A faculty person here is traveling to China and other countries where there
> are restrictions/firewalls to accessing the internet so that she often
> can't access bMail reliably.
>
> How have all of you handled these situations? Have you set up special VPN
> access? Or are people just at the mercy of the county's restrictions?
>
> This is my first experience with someone who is having these issues
> (believe it or not) so forgive my "naiveté in the questions I'm asking. I'm
> not sure how to advise.
>
> Thanks as always for any guidance you can provide.


-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.



--

Sean McMahon

IT Service Desk Analyst



University of California, Berkeley 

Campus Shared Services - IT

1608 4th Street

Berkeley, CA 94710-7600

Office: 510.664.9303

sharedservices.berkeley.edu



-----BEGIN PGP PUBLIC KEY BLOCK-----

Version: Mailvelope v0.8.2

Comment: Email security by Mailvelope - http://www.mailvelope.com


xsBNBFOE450BB/9CEmJt3zt9B+Xn/IHH6U6qpxcbf8z54X6dXZ+38KRV1Ab3

cAli8saROa0AwBa4p7pD/xLMy/gfELedE816NArkz0GRFDg83H17x8c82ATT

ky9ch0VciUahrfOEvgX9YDNEth6MvdBcE6AdGbOdifmLILI+cvEIlDiJyeST

82xL/opwlCYfahpmH1mRpCqi0Y+Qll/ko/T+S1LFZb1l1GTyDiU4CXltpVaE

w1VviyehGLagljIaehsaVeK632+LvGKme0iCrzhHqz6M0EFpJyi+yCN09PlI

VSiRTjVpp1/Wz0uR7hgrfbXEo0ttVOmbQ3HmvqDLj0CjQ+4ACJv1nc7PABEB

AAHNKiJTZWFuIE0uIE1jTWFob24iIDxzZWFubW1jbWFob25AZ21haWwuY29t

PsLAcgQQAQgAJgUCU4TjngYLCQgHAwIJEALYNWHk+gaHBBUIAgoDFgIBAhsD

Ah4BAADcFAf9HB8zhQCc3Ps4lA+vse2rpYgMQqUug4GpfN2TAzdEssz/hztq

thB0NFgDD3eQqihoIIg6IvcF3pEWWKNIB9CxfH+y7napXv4pIlx6HPQoVL85

CWryShNoRqafafdkxK+7jmnYkEpvddg/rO2wtIxD9Pb66P0wbFPvC7dPDVIg

Jz6+UGxEaI8djIxNhjCI8mBL7CyN2AveTadt0Mf2t8zsxSbwhIGu3x2Rh355

pBzAeA5pgj5re+tT4g3pAK9wZzO61DaxkAF+rB5jFCIVgFnrUFd6okcAzLRk

bWGCRlz+Dx3gORLfSPMastIZmH0JECHUWAUJczRIl66IP6hIYqPJfM7ATQRT

hOOeAQgA6WZjAW2k2Uq1yIHCc6t4z/IIgqZZJeKuGCo1LlPrtmJhS+Ibcw7m

yB9WqdnL3NaguHWAhPwttE1jl/hGsjnaQC+2fLG4DwRv/D1ZoybVJoA2osmK

hQO6GrD74aDRe3bauBhcgcmgBRT+boh0+zA9tUMa+uuqf37b5nd45MBWnZIG

xhiFxkxky3bbHpp1y6h+kgr32FVeDTQiqJI8O1JBrLj5S9y8A3YHNOqQJgH0

mQlSUEjztf+If1xIE33SC3GJ3Oa1zy75rPYma7XXkP+tdarHcvky16NQgbQG

3VCKTry/lGqr8MUazliUqjL0S4h+UMQomhGI3VYkkmzlg2wglwARAQABwsBf

BBgBCAATBQJThOOiCRAC2DVh5PoGhwIbDAAAPlEH/RREVZSIVZThMQpTRTZW

vKu1XUxTW4EU9ZXlfYSVQuudbwpNmlUb0GXVYuKaeEp+JQTFaj1OCOfP7wXt

qHRzy0k2OCI+mf3fqRF1Hwr20iHadPwTHjw4Vy3zUotvQvurEdRMSnkRNUwb

miTZlSjLM11FseIvB6qk/tbS8OFheTYMHzskMfbdDny3JuWweKXPQQ5ILcZz

HHeAkB0RvjGHuvigRyJBwzH/trdYYf0G7gg6Y/ET+fDsuwq8jErpVcFZjGu9

GwW6zzCflyQkp6nWWcOijOauWDGhoZsn6vA8imRPfxO2wPTWbNQhtyrtsFzj

vcQHen38kRCFriPmQTNQYC8=

=u4Ct

-----END PGP PUBLIC KEY BLOCK-----



 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

Bernie Rossi
In reply to this post by jon kuroda-2
I've heard one report from a user who was not able to use the VPN in China.

UCSB told me none of their users can use VPN.

Bernie

On 10/21/14 11:38 AM, jon kuroda wrote:

> Some notes from a faculty member who did a sabbatical in China not too long ago:
>
> * The Campus VPN was usable from China - the current situation may differ now.
> * Download, install, and test the client software before leaving the US.
> * Consider using the "Full Tunnel" for sites that may be blocked in that country.
> * Use the VPN Server(s)' IP address, not the DNS name of ucbvpn.berkeley.edu.
>
> The last one's a non-obvious gotcha.  I'll leave the reasoning behind why to
> do this as an exercise for the readers of Micronet.
>
> For info on using the VPN:
>
> * http://ist.berkeley.edu/node/591
> * http://www.net.berkeley.edu/vpn/
> * https://software.berkeley.edu/cisco-vpn
>
> --Jon
>
> On Tue, Oct 21, 2014 at 11:20:27AM -0700, Beth Muramoto wrote:
>> A faculty person here is traveling to China and other countries where there
>> are restrictions/firewalls to accessing the internet so that she often
>> can't access bMail reliably.
>>
>> How have all of you handled these situations? Have you set up special VPN
>> access? Or are people just at the mercy of the county's restrictions?
>>
>> This is my first experience with someone who is having these issues
>> (believe it or not) so forgive my "naiveté in the questions I'm asking. I'm
>> not sure how to advise.
>>
>> Thanks as always for any guidance you can provide.
>
>
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
>


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

paul rivers

28% of the unique IPs that connected to the Campus VPN in the last 3
months were from China, give or take the accuracy of our geolocation
data feed (10,099 of 36,192).

It's possible that some areas of China may be blocked, but clearly a lot
of people are getting through.

Regards,
Paul



On 10/21/2014 12:00 PM, Bernie Rossi wrote:

> I've heard one report from a user who was not able to use the VPN in China.
>
> UCSB told me none of their users can use VPN.
>
> Bernie
>
> On 10/21/14 11:38 AM, jon kuroda wrote:
>> Some notes from a faculty member who did a sabbatical in China not too long ago:
>>
>> * The Campus VPN was usable from China - the current situation may differ now.
>> * Download, install, and test the client software before leaving the US.
>> * Consider using the "Full Tunnel" for sites that may be blocked in that country.
>> * Use the VPN Server(s)' IP address, not the DNS name of ucbvpn.berkeley.edu.
>>
>> The last one's a non-obvious gotcha.  I'll leave the reasoning behind why to
>> do this as an exercise for the readers of Micronet.
>>
>> For info on using the VPN:
>>
>> * http://ist.berkeley.edu/node/591
>> * http://www.net.berkeley.edu/vpn/
>> * https://software.berkeley.edu/cisco-vpn
>>
>> --Jon
>>
>> On Tue, Oct 21, 2014 at 11:20:27AM -0700, Beth Muramoto wrote:
>>> A faculty person here is traveling to China and other countries where there
>>> are restrictions/firewalls to accessing the internet so that she often
>>> can't access bMail reliably.
>>>
>>> How have all of you handled these situations? Have you set up special VPN
>>> access? Or are people just at the mercy of the county's restrictions?
>>>
>>> This is my first experience with someone who is having these issues
>>> (believe it or not) so forgive my "naiveté in the questions I'm asking. I'm
>>> not sure how to advise.
>>>
>>> Thanks as always for any guidance you can provide.
>>
>>
>> -------------------------------------------------------------------------
>> The following was automatically added to this message by the list server:
>>
>> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>>
>> http://micronet.berkeley.edu
>>
>> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
>>
>
>
>  
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
>

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

jon kuroda-2
In reply to this post by Bernie Rossi
Not surprising - nations that actively restrict network access,
China most notably, also actively search out the means by which
people attempt to circumvent these network access restrictions.

It's constant network-access arms race that's been going on for
over a decade now in China.

--Jon

On Tue, Oct 21, 2014 at 12:00:09PM -0700, Bernie Rossi wrote:

> I've heard one report from a user who was not able to use the VPN in China.
>
> UCSB told me none of their users can use VPN.
>
> Bernie
>
> On 10/21/14 11:38 AM, jon kuroda wrote:
> > Some notes from a faculty member who did a sabbatical in China not too long ago:
> >
> > * The Campus VPN was usable from China - the current situation may differ now.
> > * Download, install, and test the client software before leaving the US.
> > * Consider using the "Full Tunnel" for sites that may be blocked in that country.
> > * Use the VPN Server(s)' IP address, not the DNS name of ucbvpn.berkeley.edu.
> >
> > The last one's a non-obvious gotcha.  I'll leave the reasoning behind why to
> > do this as an exercise for the readers of Micronet.
> >
> > For info on using the VPN:
> >
> > * http://ist.berkeley.edu/node/591
> > * http://www.net.berkeley.edu/vpn/
> > * https://software.berkeley.edu/cisco-vpn
> >
> > --Jon
> >
> > On Tue, Oct 21, 2014 at 11:20:27AM -0700, Beth Muramoto wrote:
> >> A faculty person here is traveling to China and other countries where there
> >> are restrictions/firewalls to accessing the internet so that she often
> >> can't access bMail reliably.
> >>
> >> How have all of you handled these situations? Have you set up special VPN
> >> access? Or are people just at the mercy of the county's restrictions?
> >>
> >> This is my first experience with someone who is having these issues
> >> (believe it or not) so forgive my "naiveté in the questions I'm asking. I'm
> >> not sure how to advise.
> >>
> >> Thanks as always for any guidance you can provide.
> >
> >
> > -------------------------------------------------------------------------
> > The following was automatically added to this message by the list server:
> >
> > To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
> >
> > http://micronet.berkeley.edu
> >
> > Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
> >
>
>
>  
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

jon kuroda-2
In reply to this post by paul rivers
It's entirely possible that China has gotten better at selectively
blocking access, say blocking access just to known VPN servers.

--Jon

On Tue, Oct 21, 2014 at 12:54:08PM -0700, Paul Rivers wrote:

>
> 28% of the unique IPs that connected to the Campus VPN in the last 3
> months were from China, give or take the accuracy of our geolocation
> data feed (10,099 of 36,192).
>
> It's possible that some areas of China may be blocked, but clearly a lot
> of people are getting through.
>
> Regards,
> Paul
>
>
>
> On 10/21/2014 12:00 PM, Bernie Rossi wrote:
> > I've heard one report from a user who was not able to use the VPN in China.
> >
> > UCSB told me none of their users can use VPN.
> >
> > Bernie
> >
> > On 10/21/14 11:38 AM, jon kuroda wrote:
> >> Some notes from a faculty member who did a sabbatical in China not too long ago:
> >>
> >> * The Campus VPN was usable from China - the current situation may differ now.
> >> * Download, install, and test the client software before leaving the US.
> >> * Consider using the "Full Tunnel" for sites that may be blocked in that country.
> >> * Use the VPN Server(s)' IP address, not the DNS name of ucbvpn.berkeley.edu.
> >>
> >> The last one's a non-obvious gotcha.  I'll leave the reasoning behind why to
> >> do this as an exercise for the readers of Micronet.
> >>
> >> For info on using the VPN:
> >>
> >> * http://ist.berkeley.edu/node/591
> >> * http://www.net.berkeley.edu/vpn/
> >> * https://software.berkeley.edu/cisco-vpn
> >>
> >> --Jon
> >>
> >> On Tue, Oct 21, 2014 at 11:20:27AM -0700, Beth Muramoto wrote:
> >>> A faculty person here is traveling to China and other countries where there
> >>> are restrictions/firewalls to accessing the internet so that she often
> >>> can't access bMail reliably.
> >>>
> >>> How have all of you handled these situations? Have you set up special VPN
> >>> access? Or are people just at the mercy of the county's restrictions?
> >>>
> >>> This is my first experience with someone who is having these issues
> >>> (believe it or not) so forgive my "naiveté in the questions I'm asking. I'm
> >>> not sure how to advise.
> >>>
> >>> Thanks as always for any guidance you can provide.
> >>
> >>
> >> -------------------------------------------------------------------------
> >> The following was automatically added to this message by the list server:
> >>
> >> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
> >>
> >> http://micronet.berkeley.edu
> >>
> >> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
> >>
> >
> >
> >  
> > -------------------------------------------------------------------------
> > The following was automatically added to this message by the list server:
> >
> > To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
> >
> > http://micronet.berkeley.edu
> >
> > Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
> >
>
>  
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

Michael Sinatra-3
In reply to this post by jon kuroda-2
On 10/21/2014 11:38, jon kuroda wrote:
> * Use the VPN Server(s)' IP address, not the DNS name of ucbvpn.berkeley.edu.
>
> The last one's a non-obvious gotcha.  I'll leave the reasoning behind why to
> do this as an exercise for the readers of Micronet.

Maybe, maybe not.  I was in China in 2011 and was able to do DNSSEC
validation *on my hotel-room wireless* for zones that were signed and
had valid DS records, using my Mac laptop as its own caching resolver
(BIND build from MacPorts).  There was no blocking or stripping of DNS
records.  Now, if you use a resolver operated by China, you might get
some other result.

Shortly thereafter, I went to an oppressive third-world country known as
"Denver," where all DNS was blocked/stripped/messed with so that DNSSEC
validation consistently failed, even when using the same setup as in China.

I'll similarly leave it to the readers of Micronet to draw conclusions.
 Make no mistake, the Great Firewall often made its presence known.
It's also worth pointing out that the stuff that's blocked appears to be
constantly changing.  There were riots in London at the time, and some
expats that I talked to noted that suddenly, many more Western news
agencies were reachable from China.

michael


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

John McChesney-Young
In reply to this post by Beth Muramoto
I passed along Beth's query to several people in our department I
thought would be likely to have relevant information, and a grad
student who's spent quite a bit of time in China sent me this
response:

Access to the "non-Chinese" internet is a huge problem in China. The
way I have dealt with it is by using the Berkeley VPN, but usually
this has to be set up before one arrives on Chinese soil, so if this
faculty member has not done this yet and is here already, he or she
may not be able to do so now. Another option, in that case, would be
to purchase a private VPN. Basically all of my non-academically
affiliated friends use these. I don't have personal experience with
them and don't have any specific product recommendations, but there
are tons out there. I get the sense they are faster than the Berkeley
VPN, but generally VPNs slow down any connection considerably. Since
the Hong Kong protests some pages have been blocked even on a VPN,
which is a new development. In my experience, Beijing internet is
slower than other cities'.

Of course there's no published list of blocked sites, but in my
experience these big ones are always blocked: Twitter, Facebook,
Google Docs, and NY Times, as well as usually any page that mentions a
"sensitive" issue, which sometimes includes things like air quality.
Gmail and google (even google.hk) are usually so slow that they're
effectively blocked. Since the HK protests this list also includes
Instagram and others. Skype is not blocked, including its file sharing
function (which I have used a lot). The tabloid website
Shanghaiist.com aggregates news on local and emergent issues in
English is not blocked. A semi-trustworthy air quality monitor that is
not blocked is Aqicn.org. Quora is not blocked (yet). BBC and Al
Jazeera are usually okay. Yahoo and Hotmail are still okay.

When I can't log on to the VPN, I use Bing as an alternative search
engine. Baidu, the big Chinese Google lookalike, is usually only
helpful for looking up Chinese-language content or a map of something
in China. To access email, I log onto Hotmail, where all of my Gmail
is forwarded, and which lets me send email from my gmail address. This
forwarding can be set up in China without a VPN, and has saved me a
lot of frustration.

A final thing I'd add is that VPNs do not prevent surveillance.

All this said, things change here all the time. When things get really
dysfunctional, simply walking away from the computer has sometimes
worked best for me.

Hope this helps!

***

Is it true that VPNs don't prevent surveillance? I thought that unless
the VPN provider keeps and surrenders logs, not only content but IP
addresses are hidden.

John

On Tue, Oct 21, 2014 at 11:20 AM, Beth Muramoto <[hidden email]> wrote:

> A faculty person here is traveling to China and other countries where there
> are restrictions/firewalls to accessing the internet so that she often can't
> access bMail reliably.
>
> How have all of you handled these situations? Have you set up special VPN
> access? Or are people just at the mercy of the county's restrictions?
>
> This is my first experience with someone who is having these issues (believe
> it or not) so forgive my "naiveté in the questions I'm asking. I'm not sure
> how to advise.
>
> Thanks as always for any guidance you can provide.
>
> Beth
>
> --
> ***********************************************
> Beth Muramoto
> Computer Resource Specialist
> Graduate School of Education
> University of California, Berkeley
> 1650 Tolman Hall
> Berkeley, CA 94720
> Email:  mailto:[hidden email]
> Phone:  (510) 643-0203
> Fax:  (510) 643-6239
>
> “Finish each day and be done with it. You have done what you could. Some
> blunders and absurdities have crept in – forget them as soon as you can.
> Tomorrow is a new day. You shall begin it serenely and with too high a
> spirit to be encumbered with your old nonsense.”
>                             -Emerson
>
> This is the essence of forgiveness. You can't change what happened but you
> can make sure it doesn't have the power to prevent you from being happy
> tomorrow.
>
>                              -Paul Boese
>
> “Kind words do not cost much yet they accomplish much.”
>
>                             -Blaise Pascal
>
>
> ***********************************************
>
>
>
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe
> from its mailing list and how to find out about upcoming meetings, please
> visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and
> the list's archives can be browsed and searched on the Internet.  This means
> these messages can be viewed by (among others) your bosses, prospective
> employers, and people who have known you in the past.
>



--
John McChesney-Young, Administrative Assistant
History of Art Department, 416 Doe MC6020
U. C. Berkeley, Berkeley CA 94720-6020
[hidden email] // voice 1-510-642-5511 // fax 1-510-643-2185

 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.
Reply | Threaded
Open this post in threaded view
|

Re: [Micronet] Restricted Internet Access from other countries

Beth Muramoto
John,

Wow, this was very enlightening, insightful and not surprising. I've passed this on to the faculty member who is already in Beijing and so she may be out of luck, but at least this and the suggestions from others gives her things to try and your email gives her a reality check for the future.

Beth

On Wed, Oct 22, 2014 at 8:33 AM, John McChesney-Young <[hidden email]> wrote:
I passed along Beth's query to several people in our department I
thought would be likely to have relevant information, and a grad
student who's spent quite a bit of time in China sent me this
response:

Access to the "non-Chinese" internet is a huge problem in China. The
way I have dealt with it is by using the Berkeley VPN, but usually
this has to be set up before one arrives on Chinese soil, so if this
faculty member has not done this yet and is here already, he or she
may not be able to do so now. Another option, in that case, would be
to purchase a private VPN. Basically all of my non-academically
affiliated friends use these. I don't have personal experience with
them and don't have any specific product recommendations, but there
are tons out there. I get the sense they are faster than the Berkeley
VPN, but generally VPNs slow down any connection considerably. Since
the Hong Kong protests some pages have been blocked even on a VPN,
which is a new development. In my experience, Beijing internet is
slower than other cities'.

Of course there's no published list of blocked sites, but in my
experience these big ones are always blocked: Twitter, Facebook,
Google Docs, and NY Times, as well as usually any page that mentions a
"sensitive" issue, which sometimes includes things like air quality.
Gmail and google (even google.hk) are usually so slow that they're
effectively blocked. Since the HK protests this list also includes
Instagram and others. Skype is not blocked, including its file sharing
function (which I have used a lot). The tabloid website
Shanghaiist.com aggregates news on local and emergent issues in
English is not blocked. A semi-trustworthy air quality monitor that is
not blocked is Aqicn.org. Quora is not blocked (yet). BBC and Al
Jazeera are usually okay. Yahoo and Hotmail are still okay.

When I can't log on to the VPN, I use Bing as an alternative search
engine. Baidu, the big Chinese Google lookalike, is usually only
helpful for looking up Chinese-language content or a map of something
in China. To access email, I log onto Hotmail, where all of my Gmail
is forwarded, and which lets me send email from my gmail address. This
forwarding can be set up in China without a VPN, and has saved me a
lot of frustration.

A final thing I'd add is that VPNs do not prevent surveillance.

All this said, things change here all the time. When things get really
dysfunctional, simply walking away from the computer has sometimes
worked best for me.

Hope this helps!

***

Is it true that VPNs don't prevent surveillance? I thought that unless
the VPN provider keeps and surrenders logs, not only content but IP
addresses are hidden.

John

On Tue, Oct 21, 2014 at 11:20 AM, Beth Muramoto <[hidden email]> wrote:
> A faculty person here is traveling to China and other countries where there
> are restrictions/firewalls to accessing the internet so that she often can't
> access bMail reliably.
>
> How have all of you handled these situations? Have you set up special VPN
> access? Or are people just at the mercy of the county's restrictions?
>
> This is my first experience with someone who is having these issues (believe
> it or not) so forgive my "naiveté in the questions I'm asking. I'm not sure
> how to advise.
>
> Thanks as always for any guidance you can provide.
>
> Beth
>
> --
> ***********************************************
> Beth Muramoto
> Computer Resource Specialist
> Graduate School of Education
> University of California, Berkeley
> 1650 Tolman Hall
> Berkeley, CA 94720
> Email:  mailto:[hidden email]
> Phone:  (510) 643-0203
> Fax:  (510) 643-6239
>
> “Finish each day and be done with it. You have done what you could. Some
> blunders and absurdities have crept in – forget them as soon as you can.
> Tomorrow is a new day. You shall begin it serenely and with too high a
> spirit to be encumbered with your old nonsense.”
>                             -Emerson
>
> This is the essence of forgiveness. You can't change what happened but you
> can make sure it doesn't have the power to prevent you from being happy
> tomorrow.
>
>                              -Paul Boese
>
> “Kind words do not cost much yet they accomplish much.”
>
>                             -Blaise Pascal
>
>
> ***********************************************
>
>
>
> -------------------------------------------------------------------------
> The following was automatically added to this message by the list server:
>
> To learn more about Micronet, including how to subscribe to or unsubscribe
> from its mailing list and how to find out about upcoming meetings, please
> visit the Micronet Web site:
>
> http://micronet.berkeley.edu
>
> Messages you send to this mailing list are public and world-viewable, and
> the list's archives can be browsed and searched on the Internet.  This means
> these messages can be viewed by (among others) your bosses, prospective
> employers, and people who have known you in the past.
>



--
John McChesney-Young, Administrative Assistant
History of Art Department, 416 Doe MC6020
U. C. Berkeley, Berkeley CA 94720-6020
[hidden email] // voice 1-510-642-5511 // fax 1-510-643-2185



--
***********************************************
Beth Muramoto
Computer Resource Specialist
Graduate School of Education
University of California, Berkeley
1650 Tolman Hall
Berkeley, CA 94720
Email:  mailto:[hidden email]
Phone:  (510) 643-0203 
Fax:  (510) 643-6239

“Finish each day and be done with it. You have done what you could. Some blunders and absurdities have crept in – forget them as soon as you can. Tomorrow is a new day. You shall begin it serenely and with too high a spirit to be encumbered with your old nonsense.”
                            -Emerson

This is the essence of forgiveness. You can't change what happened but you can make sure it doesn't have the power to prevent you from being happy tomorrow.
                           
                             -Paul Boese

“Kind words do not cost much yet they accomplish much.” 

                            -Blaise Pascal


***********************************************


 
-------------------------------------------------------------------------
The following was automatically added to this message by the list server:

To learn more about Micronet, including how to subscribe to or unsubscribe from its mailing list and how to find out about upcoming meetings, please visit the Micronet Web site:

http://micronet.berkeley.edu

Messages you send to this mailing list are public and world-viewable, and the list's archives can be browsed and searched on the Internet.  This means these messages can be viewed by (among others) your bosses, prospective employers, and people who have known you in the past.