jetlib.sec » Full Disclosure » Iran is doing ip-and-port filtering of SSL

Feeds

133098 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 08, 2012
• 

  Iran is doing ip-and-port filtering of SSL

  Posted: February 8th, 2012, 6:06pm PST

  Tags:   

  Posted by Sai on Feb 08

  I have pretty definitive proof that Iran is doing ip-and-port based
  filtering of SSL.
  
  Filtering is being done by 217.218.154.250 after a hop through
  217.219.96.120 / 217.219.96.132. This hop is after my source's ISP,
  and all three IPs are owned by ITC, Iran's central telco.
  
  Filtering targets all google.com IPs, some but not all torproject.org
  IPs, probably more. Haven't attempted a broad scan. It's a simple
  connection drop;...