Try the new -5 mode, which is default now when you start the program without options. It should work on overwhelming majority of DPI systems out of the box.
New censorship circumvention method:
- Fake Packet with wrong SEQ/ACK numbers (
--wrong-seq)
New features:
--blacklistoption now also applies to TLS (HTTPS websites)- Automatic TTL value picker for set-ttl Fake Packet mode (
--auto-ttl) ← very convenient - New modern mode sets (more stable, more compatible, faster):
-5(now default) with native reversed fragmentation and fake packet auto-ttl, and-6with wrong-seq instead of auto-ttl.
Other changes:
- Fake Packet mode (
--set-ttl,--wrong-chksum,--wrong-seq) now applies each method to each packet separately, and doesn't combine all methods for a single packet.