imanrahmati
Hi
I've seen many iranian users on this forum and elsewhere asking what is the problem with openvpn not being able to connect outside iran due to the famous 'tls handshake problem'.
I have setup a normal server with openvpn outside iran, and i'm getting the same error. I can prove its a problem with iranian govt. firewall, as if I use a simple pptp or l2tp vpn to connect outside iran, then try to connect with openvpn it works. Also it has no problem with static key configuration. But the only problem is with direct tcp/udp connections to my sever. I've tried connecting to different ports also, with no success.
Searching the web for any reason for this behavior i came across a reference stating :
" the Iranian national firewall inspects the Diffie-Hellman group of EDH-* TLS handshakes and blackholes those which use certain groups in an attempt to discriminate against certain applications. "
I'm not a security expert, but I guess openvpn uses the same kind of handshake at the beginning, so :
- could this be the possible reason for the problem ?
- is there anyway that we can use a different handshake, or use another protocol ?
- any other solutions to help ?
p.s. the main reason for using vpns & openvpns in iran is bypassing govt. filtering/blocking of websites.
Thanks,
Iman
