wearemahsaamini / freeinternet Goto Github PK

hey, I hope you're doing great. Apple id is locked again, please check it out.
thanks for your support, mashti hastin.

Is there any way to use any other cloud accessible from Iran? Any cloud in Turkey, Dubai, or somewhere else. I really don't wanna use their service when they are one of the most helpful arms of the regime.

Hi guys,
During last 2 years, we tested many technologies to bypass Internet filtering and I believe we all had a good teamwork and could made it. Thanks to @hiddify-com, xray, v2ray ...etc.
But have you ever thought about the time that they shut down all mobile operators in sensitive situations? (I'm saying this because this happened in 2018 & 2020)
I believe we all should think about it.
Will be pleased to hear your opinions.

Did anyone manage to use the v2ray method on windows or mac clients?

My server config is correct as it works on iOS and Android.

Also, other Shadowsocks configs which do not use the v2ray plugin, work fine for me.

None of the iPhone servers are working since yesterday and all of them are down. Please check.

What on earth you propose to use Arvancloud for bypassing Iran's internet censorship? what are you? stupid?
there are a million other VPS providers in Iran which does not sabotage the user privacy. why did you use the main suspect for this?

Hi all,

For the list of the providers specially for the shadowsocks+v2ray-tls solution that currently is working. Please share your experinece with the VPS provider that you are using.

Are you using any VPS with unlimited traffic? Is it good? How's the pricing look like?

Thanks

Hamed has put a checklist with very good references here :
https://github.com/hameds/security-checklist-fa

I think it is a good idea to dedicate a part of this project or use it in landings

Please unlock the apple id

This is not an issue. Just instructions and bash scripts to force docker to use (HTTP) proxy. Based on this StackOverflow answer:

https://stackoverflow.com/a/28093517/11927768

Run this to start using proxy:

#!/bin/bash
sudo mkdir /etc/systemd/system/docker.service.d
echo "[Service]
Environment=HTTP_PROXY=http://127.0.0.1:1080
Environment=HTTPS_PROXY=http://127.0.0.1:1080" | sudo tee /etc/systemd/system/docker.service.d/http-proxy.conf
sudo systemctl daemon-reload
sudo systemctl restart docker

** change 1080 to match your HTTP proxy port.

Run this to stop using proxy:

#!/bin/bash
sudo rm /etc/systemd/system/docker.service.d/http-proxy.conf
sudo touch /etc/systemd/system/docker.service.d/http-proxy.conf
sudo systemctl daemon-reload
sudo systemctl restart docker

I can provide servers. But I need domain and Ar-cloud account If you can provide these let me know.

I think this apple ID it is not active anymore and deactivated again

My apple id is locked, I don't have access to its email, what should I do now?

Hi, Apple id has been locked.
I appreciate your help.

All the configs are broken on android and IOS. please add new ones. Thanks in advance.

I'm using Windows client app, it works perfectly on browser.
But since this protocol don't work on the terminal and other type of connections.
For example, I can not ping twitter or connect to my GitLab account.

Is there any solution for it?

Apple id locked and not work

I can provide a server and domain for this project and configuring initial things like DNS, just tell me which linux distro you fell more comfortable with, also suggest a domain.

All servers in android not working but ForSarina .
How we can input more servers
Please update servers!

https://github.com/MB-KING/Bypassing-Iran-s-intranet-by-using-traffic-transfer-from-Iranian-server-to-abroad

Hi Farnood Massoudi,
please check the apple ID and password to activate it again.
thanks

Thanks, guys for this nice solution!
I installed the VPN on my android phone last week. It's so nice. But I have installed it on my windows that don't work.

Can anyone help me?

Hey, thanks for the repository. However,
the list of domains link is not found(404 error)
The link:
https://github.com/WeAreMahsaAmini/FreeInternet/blob/main/protocols/shadowsocks-v2ray-tls/CONFIGS.md

از این کانفیگ هایی که گذاشته شده میخواستم بدونم چطور در لینوکس میشه استفاده کرد من در qv2ray خواستم استفاده کنم ولی نشد ارور داد؟

I tried many VPN and proxies, but I just found Shadowsocks to be working on Android it would be great if you add a tutorial on how to set it up on Linux as well , thanks a lot.

It says you must unlock your acc before signing in.

I deployed a server on Vultr and used the shadow socks v2ray instructions. I can verify my config works, using devices outside of Iran. However when friends in Iran use the config they cannot connect. I followed the instructions and have verified my settings match that on the guide (I assume that this would be some config error with Arvancloud), and everything seems to be correct (see attached image).

Any idea on how to start troubleshooting this or what might be the cause of this malfunction?

سلام، وقت بخیر
اپل ایدی لاک شده، میشه اطف کنین درستش کنین منم بتونم استفاده کنم؟
ممنون

          Cheers, maybe you can help me find what to look for - here are some parts of the log:

ss-server_1 | 2022-10-27 07:19:33 INFO: enable TCP no-delay ss-server_1 | 2022-10-27 07:19:33 INFO: plugin "v2ray-plugin" enabled ss-server_1 | 2022-10-27 07:19:33 INFO: UDP relay enabled ss-server_1 | 2022-10-27 07:19:33 INFO: enable TCP no-delay ss-server_1 | 2022-10-27 07:19:33 INFO: initializing ciphers... aes-256-gcm ss-server_1 | 2022-10-27 07:19:33 INFO: using nameserver: 1.1.1.1,1.0.0.1,2606:4700:4700::1111,2606:4700:4700::1001 ss-server_1 | 2022-10-27 07:19:33 INFO: tcp server listening at 127.0.0.1:51517 ss-server_1 | 2022-10-27 07:19:33 INFO: tcp port reuse enabled ss-server_1 | 2022-10-27 07:19:33 INFO: udp server listening at 0.0.0.0:8080 ss-server_1 | 2022-10-27 07:19:33 INFO: udp port reuse enabled ss-server_1 | 2022/10/27 07:19:33 V2Ray 4.44.0 (V2Fly, a community-driven edition of V2Ray.) Custom (go1.17.9 linux/amd64) ss-server_1 | 2022/10/27 07:19:33 A unified platform for anti-censorship. ss-server_1 | 2022/10/27 07:19:33 [Warning] V2Ray 4.44.0 started ss-server_1 | 2022/10/27 07:39:23 tcp:49.186.38.18:0 accepted tcp:127.0.0.1:0

there are several repeats of the following:

ss-server_1 | 2022-10-27 21:18:11 ERROR: remote recv: Connection reset by peer

and

ss-server_1 | 2022-10-27 21:21:41 ERROR: unable to resolve appsupport.abc-prod.net.au

ss-server_1 | 2022-10-27 21:23:56 ERROR: getpeername: Socket not connected ss-server_1 | 2022/10/27 21:23:57 tcp:172.18.0.4:43092 accepted tcp:127.0.0.1:0

ss-server_1 | 2022/10/27 22:17:12 [Warning] transport/internet/websocket: failed to serve http for WebSocket > accept tcp [::]:8080: use of closed network connection

For nginx I get many repeats of the following

ss-nginx-frontend | Waiting for certificate /etc/nginx/cert/limooamani.online.cer before starting nginx... ss-nginx-frontend | /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration ss-nginx-frontend | /docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/ ss-nginx-frontend | /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh ss-nginx-frontend | 10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf ss-nginx-frontend | 10-listen-on-ipv6-by-default.sh: info: Enabled listen on IPv6 in /etc/nginx/conf.d/default.conf ss-nginx-frontend | /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh ss-nginx-frontend | 20-envsubst-on-templates.sh: Running envsubst on /etc/nginx/templates/default.conf.template to /etc/nginx/conf.d/default.conf ss-nginx-frontend | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh ss-nginx-frontend | /docker-entrypoint.sh: Configuration complete; ready for start up ss-nginx-frontend | 2022/10/27 07:19:43 [emerg] 1#1: cannot load certificate "/etc/nginx/cert/limooamani.online.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE) ss-nginx-frontend | nginx: [emerg] cannot load certificate "/etc/nginx/cert/limooamani.online.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE) ss-nginx-frontend | /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration ss-nginx-frontend | /docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/ ss-nginx-frontend | /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh ss-nginx-frontend | 10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf ss-nginx-frontend | 10-listen-on-ipv6-by-default.sh: info: /etc/nginx/conf.d/default.conf differs from the packaged version ss-nginx-frontend | /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh ss-nginx-frontend | 20-envsubst-on-templates.sh: Running envsubst on /etc/nginx/templates/default.conf.template to /etc/nginx/conf.d/default.conf ss-nginx-frontend | /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh ss-nginx-frontend | /docker-entrypoint.sh: Configuration complete; ready for start up

Then a lot like this:

2022/10/27 07:26:42 [notice] 1#1: using the "epoll" event method
ss-nginx-frontend | 2022/10/27 07:26:42 [notice] 1#1: nginx/1.23.1
ss-nginx-frontend | 2022/10/27 07:26:42 [notice] 1#1: built by gcc 10.2.1 20210110 (Debian 10.2.1-6) 
ss-nginx-frontend | 2022/10/27 07:26:42 [notice] 1#1: OS: Linux 5.15.0-52-generic
ss-nginx-frontend | 2022/10/27 07:26:42 [notice] 1#1: getrlimit(RLIMIT_NOFILE): 65535:65535
ss-nginx-frontend | 2022/10/27 07:26:42 [notice] 1#1: start worker processes
ss-nginx-frontend | 2022/10/27 07:26:42 [notice] 1#1: start worker process 35
ss-nginx-frontend | ***.187.187.59 - - [27/Oct/2022:07:37:19 +0000] "GET / HTTP/1.1" 404 0 "-" "python-requests/2.25.1" "***.45.90.36"

and then
ss-nginx-frontend | 2022/10/31 06:03:09 [crit] 35#35: *3165 SSL_do_handshake() failed (SSL: error:14201044:SSL routines:tls_choose_sigalg:internal error) while SSL handshaking, client: ***.241.218.246, server: 0.0.0.0:443

As I mentioned, I can connect to the server from outside of Iran, but no-one inside can use it. Any help or advice would be appreciated.

Cheers

Originally posted by @singingtransparency in #69 (comment)

in python ss link to json :
with Zsh -- no matches found ss://.....
but it's okay in sh or bash

Hi. all of ss-v2ray configs has been broken.

Tried the following methods but none of them works

• https://github.com/shadowsocks/ShadowsocksX-NG
• https://github.com/shadowsocks/shadowsocks-libev + https://github.com/shadowsocks/v2ray-plugin

Has anyone been able to set it up on Mac OS?

I have configured vmess with this architecture:

non-iranian server < ---- > iranian server < ------ > arvan cloud <-----> client

my problem is that v2rayN doesn't connect to iranian server over wss://domain:v2rayport but it can connect to ws://iranian-ip-address:v2rayport . I suppose there is a problem with Arvan CDN for websockets but I can't figure it out. Is there any way to fix this?

.

I runned the docker files of v2ray method in my cloud server and they are running. But since I'm a beginner, I don't now how to generate an shadowsocks url (the ones looking like ss://.... ) for the clients to connect to. Can anyone help me with this? It would also be a good idea to make the dockers generate the shadowsocks url automatically.

I can set up lots of servers on Azure. I don't have AravanCloud account and cannot create one.
If you have Arvancloud or any other DNS provider in iran, I can send the IP addresses for you to add DNS record to my servers IP addresses.

روی اپل آیدی تایید دو مرحله‌ای گذاشتن!

سلام همه کانفینگ های اندروید از کار افتادن،اگه براتون ممکن بود کد جدید بفرستید

Hi there,
How can I generate new config in my own VPS?
Thanks

i think it is not active anymore

Hi,
I've done all the listed steps but I think there is a problem with certs
it's not working and I'm getting this logs on a loop

[Mon Oct  3 13:57:36 UTC 2022] code='200'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:36 UTC 2022] Processing, The CA is processing your order, please just wait. (28/30)
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:36 UTC 2022] sleep 2 secs to verify again
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:38 UTC 2022] checking
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:38 UTC 2022] url='https://acme.zerossl.com/v2/DV90/chall/jvbV0V6IOwhGejLv7zEtvQ'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:38 UTC 2022] payload
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:38 UTC 2022] POST
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:38 UTC 2022] _post_url='https://acme.zerossl.com/v2/DV90/chall/jvbV0V6IOwhGejLv7zEtvQ'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:38 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header  -L '
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:42 UTC 2022] _ret='0'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:42 UTC 2022] code='200'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:42 UTC 2022] Processing, The CA is processing your order, please just wait. (29/30)
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:42 UTC 2022] sleep 2 secs to verify again
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:44 UTC 2022] checking
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:44 UTC 2022] url='https://acme.zerossl.com/v2/DV90/chall/jvbV0V6IOwhGejLv7zEtvQ'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:44 UTC 2022] payload
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:44 UTC 2022] POST
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:44 UTC 2022] _post_url='https://acme.zerossl.com/v2/DV90/chall/jvbV0V6IOwhGejLv7zEtvQ'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:44 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header  -L '
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:47 UTC 2022] _ret='0'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:47 UTC 2022] code='200'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:47 UTC 2022] inima.site:Timeout
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:47 UTC 2022] Skip for removelevel:
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:47 UTC 2022] pid='1196'
shadowsocks-v2ray-tls-acme.sh-1  | [Mon Oct  3 13:57:47 UTC 2022] No need to restore nginx, skip.

nekoray is Qt based cross-platform GUI proxy configuration manager (backend: v2ray / sing-box). Support Windows / Linux / macOS amd64 out of the box now.

https://github.com/MatsuriDayo/nekoray/releases/

I tested it and works like a charm. Doesn't need any installation, just download and extract. Servers can be added easily and System Proxy and Vpn Mode can be enabled just by one click. If you can, please test it and after that we can add it to shadowsocks-v2ray-tls/how-to-connect.md.

NOT AN ISSUE

Helpful info you may not have (tl;dr your stuff).

In the US there is a movement referred to as Preppers (search for it).

I am in the process of writing about MeshNets and Cantennas (hardware) using a computer like the RaspberryPi (search for each) powered by micro and mini FuelCells (search for a company in Latham, NY) and 12VDC deep discharge batteries with solar panel trickle chargers. Also a lot of 12VDC appliances and accessories (search RV and Boating electronics and electrical suppliers for ideas)

1st - this builds an Intra-net (LAN) with low leakage point to point connections ~5 miles line of sight, using any mobile phone or computer, locally standard coverage applies (no cantenna). Man in the middle attacks are minimized with Cantennas (and Woktennas). Off the grid power from 12VDC batteries. Stationary hotspots (Raspberry Pi computers) fill in signal gaps. May attach camera module for remote surveillence (Search for baby monitor projects using RaspberryPi or Adruino)

https://www.arduino.cc/

https://www.raspberrypi.com/

2nd avoid inserting SIMs in mobile phones, with reliance on 'carriers', vs VOIP and IP texting, and IP video chat. No Internet required but will work over inet if available. No radio noise from SIM (carrier data plans) with airplane mode turned on. Also longer battery life with airplane mode turned on.

3rd any one or more hotspots (tethered) connecting to the Internet enables all devices on the mesh-net to access the Internet. If techi enough set up each mesh-net as a LAN with LAN DHCP/DNS servers and one or more network bridges with NAT to the Internet. Tor/Orbot will encrypt traffic and exit node you in Norway, etc.

Connecrions to the Inet may include satelite phone, dish antennas, stealing (distant) public WiFi signals (with cantenna).

Learn Tor/Orbot and Orbot-friendly apps.

Search my repositories for OpSec, a markdown (md) file with Android app info and web services info.

Good Luck!