ReQrypt does not work!

[liveonloan]

ReQrypt does not work! Probably a problem in the server.
Will this problem be solved?

[basil00]

The server was down briefly, but appears to be working again. So the problem should now be fixed.

[liveonloan]

The server does not work for 2 days! and now the server is unavailable too
http://funkyimg.com/i/2C4Wp.jpg

[basil00]

The server is configured to ignore ping traffic, since this conflicts with ReQrypt's ping tunneling mode. So the server will always appear to be "down", at least according to ping.

I can verify that the server is up and working fine -- at least from my network. It may be that the server has been blacklisted by your ISP? I will reopen the issue in case others are having problems.

[liveonloan]

Basil00
I think that my ISP blocked the server - close issues
It is sad :(
sorry

[basil00]

Unfortunately this is the flaw with anti-censorship systems that rely on external servers. ReQrypt was designed to support a network of servers, making it more difficult to block (or at least be a cat-and-mouse game), but the project/community is currently too small.

Anyway, I'll see what I can do.

[ValdikSS]

@liveonloan Where are you from?

[liveonloan]

@basil00 thank you, I will also try to find out why my ISP blocked access to the server.
tracert results (just in case): http://funkyimg.com/i/2C5mM.jpg
@ValdikSS hello, we are a little acquainted, talked in anticensority - a problem with piscee.net :)
ValdikSS привет, мы с тобой немного знакомы, общались в антицензорити - проблема с piscee.net :)
Im from Russia - Podolsk :) & I have a very evil ISP

[jasonliul]

@basil00
... but the project/community is currently too small.

That's not true. i recommend this project to european users, to those user living in EU censorship country, this maybe the best solution ever since.

Keep go on, sir.

[WPMGPRoSToTeMa]

@liveonloan are you using the Active-Highest option in Hiding mode?

[basil00]

@liveonloan According to your trace, the packets leave your ISP and end up somewhere in Lithuania, where they are dropped for some reason. It is hard to say what is going wrong, but could just be some network issue en route to the server, in which case it should probably resolve eventually. It could still be the ISP blocking traffic, e.g., by shortening the number of hops ( TTL).

One thing to try is running tracert for IP addresses next to the server IP, e.g., *.*.180.78 instead of *.*.180.77. Is the trace the same or different?

@jasonliul Thanks :-) -- Of course the community size is relative, and it is true that it is way bigger than one year ago (zero), so I am grateful that my software is being used. ValdikSS deserves most of the credit for helping reviving the project.

That said, it would be nice to have more servers and dev power. I have an idea and will post as a separate issue.

[liveonloan]

@WPMGPRoSToTeMa yep (Active-Highest)!
http://funkyimg.com/i/2C8xb.jpg

@basil00 traсert results .....180.78 & ...76 + ...77:
...78 http://funkyimg.com/i/2C8xf.jpg With this IP address everything is ok
...76 http://funkyimg.com/i/2C8xn.jpg With this IP address everything is ok
...77 http://funkyimg.com/i/2C8xs.jpg With this IP address, everything is BAD
Maybe I should write to the technical support of my ISP and find out why there is no access to the server ..... 180.77. I do not know whether this will be right and will not harm your project?
Please advise what to do!

[basil00]

@liveonloan Something fishy is going on. Since only the *.*.180.77 IP is affected this does indicate it is being selectively blocked.

Interestingly, it is being "blocked" on the last hop. It may be that your ISP blocking packets where the source address is *.*.180.77.

Whether or not it is a good idea to contact your ISP, @ValdikSS should advise.

I will reopen as this is an active issue.

[liveonloan]

@basil00 Thanks, I'll wait for the answer @ValdikSS
Now the psiphon3 program helps me - but I'm not sure about this program.
And psiphon3 does not unblock everything.
(& there are strong delays, and low speed).
Such a feeling that my ISP also tries to block it

[liveonloan]

@basil00 Maybe I need to look for a new ISP.
Because my current ISP is incredibly evil. :)
Its prices are the lowest, other ISPs have very expensive tariffs

[ValdikSS]

With https://ping-admin.ru/free_test/ and it's traceroute service I can see that currently only Simferopol's ISP either blocks or has connectivity problems to this IP address.

@liveonloan do you use Realcom? Can you contact their techsupport?

[basil00]

We have a new server set up. If anyone is affected by this bug then please contact me (basil at reqrypt dot org) and I can email you a tunnel URL.

[liveonloan]

@ValdikSS Hello! Yes, I use Rialcom and can easily contact technical support. I can do this by writing a letter to support at rialcom dot ru
Asked a friend from another city and with another ISP to hold a tracert server
(Nizhny Novgorod region, Dzerzhinsk city, ISP Rostelecom):
Here are the results: http://funkyimg.com/i/2C9rg.jpg He also has problems!
Specify please, I can send technical support to my results tracert ... 180.77?
(Привет! Да, я использую Rialcom и могу без проблем связаться с технической поддержкой. Могу это сделать написав им письмо на support at rialcom dot ru
Попросил друга из другого города и с другим провайдером провести tracert сервера
(Нижегородская область, город Дзержинск, провайдер Ростелеком):
Вот его результаты: http://funkyimg.com/i/2C9rg.jpg У него тоже проблемы!
Уточните пожалуйста, мне можно отправить технической поддержке мои результаты tracert ...180.77 ?)

@basil00 I wrote to you by e-mail! Thx.

[ValdikSS]

@liveonloan yes, just tell them that 191.101.180.77 is unavailable, as can be seen with traceroute. Ask them to check if anything is wrong on their side.

[liveonloan]

@ValdikSS Did everything exactly as you said, the result will be reported when they answer.
Thank you.

[liveonloan]

@ValdikSS
@basil00
I just received an answer from the technical support of my ISP:
"Hello. Judging by the results of the tracing on our side, there are no problems. IP ....180.77 for security reasons is most likely hidden from pinging in the server settings, so it does not ping and the trace looks like this."

I asked them a clarifying question:
"Clearly, this is the problem with the transit provider?
You do not block access?
Just before that the server was available and now there is not ...
About a week ago everything worked."

Аnswer from ISP:
"No, we do not block."

[ValdikSS]

@liveonloan let me write them.

[ValdikSS]

@liveonloan try to access http://191.101.180.77/. It should instantly return "Unable to connect" or similar error. Does it work like that for you? Does it instantly return an error, and not after some timeout?

[liveonloan]

@ValdikSS Write to them! Technical support address:
support at rialcom dot ru
http://funkyimg.com/i/2Cbq8.jpg
I think all the staff are Russian-speaking (maybe there are those who understand in English)

@basil00
http://funkyimg.com/i/2Cbqd.jpg
http://funkyimg.com/i/2Cbqc.jpg

[ValdikSS]

@liveonloan you get this error message instantly, right after clicking on the URL? If so, it's rather strange. Maybe they really don't block this host and the problem is somewhere else.
Do you have an antivirus or firewall? Make sure this IP address is not blocked on your side. Even better to try ReQrypt on another computer with the same internet connection.

We can talk privately via email. I'll write you.

[liveonloan]

@ValdikSS
@basil00
Forgive me my English bad I use translate.google to communicate with you :)
After clicking on the URL ... the page appears immediately (half a second)
I have two more computers both connected to one ISP, one connected via Wi-fi, and the other by cable. Now I check ReQrypt on them.
Please wait 15 minutes.

[basil00]

@liveonloan Based on the evidence above, it appears that the server is not blocked. Actually, you should be able to see under the "Tunnels" tab of the ReQrypt UI, is the server listed under "OPEN TUNNELS"? If so, then ReQrypt has connected to the server. So it seems the tracert results were a red herring, and the problem is something else.

Another thing to try is directly connecting to your modem and bypass the wifi router (assuming this is possible, i.e., your modem and router are separate). If ReQrypt works then it is likely the NAT implementation is incompatible with ReQrypt.

Edit: if you really want to debug and have some technical knowledge, then wireshark might help figure out whats going on. Note however that wireshark traces with ReQrypt running are nearly indecipherable, but we can help.

[liveonloan]

@basil00
Yes tunnels active in the tab! And ReQrypt seems to connect to them.
I made a video recording from the screen for @ValdikSS and threw it in on the mail. He even contacted the technical support of my ISP.
My computer is connected to the router by a cable (not WI-Fi)
I'll try to connect directly to the connection (bypassing the router).
I'll write about the results.
It is necessary to wait for the answer @ValdikSS

I can try wirehark but I do not know how to use it.

[liveonloan]

@basil00
@ValdikSS
The problem was in my router!
I connected the cable directly to the network card bypassing the router and ReQrypt earned!
Forgive me, please, I did not think to do it right away and tortured you!
I'm very embarrassed.

[ValdikSS]

@basil00, I'm not sure what's the problem, but for me it looks like something is wrong with either ReQrypt/WinDivert or network configuration, not the ISP. Videos which @liveonloan sent me show that ReQrypt successfully connects to the server (both old and new) and sends and receives some packets, but no websites are working. He mentioned that he tried it on 3 different PCs and the videos have been recorded on a clean Windows 10 installation.

[ValdikSS]

Oh, @liveonloan, I see. It could be that your router NAT implementation is incompatible with ReQrypt, especially if it has hardware NAT acceleration. Your TP-Link model has hardware NAT, so it's possible there's some sort of incompatibility.

Another problem I can think about is DNS servers "inside LAN", provided by your router DNS caching server. Try to change DNS servers to some public ones like 8.8.8.8 directly on your PC, not on the router, and see if it works.

[liveonloan]

@ValdikSS Ok, I'll try to do what you advise.
Here is the emulator of my router:
http://www.tp-link.com/resources/simulator/TL-WR1043ND/Index.htm
I did not change the settings in it for more than six months.
ReQrypt worked and suddenly stopped.
I think my ISP did something all the same ...
Is it possible to change something in the settings so that everything would work through the router?

p.s.
the result of tracert ....180.77 is the same as before (connection bypassing the router)
but ReQrypt works.

[liveonloan]

Addition!
Now I connected again through the router and ReQrypt also works!
Probably ValdikSS's competent treatment to my ISP worked.
And they corrected the problem.
@ValdikSS
@basil00
Thank you very much for your help! You are best 🥇 👍

[basil00]

I am glad the issue is resolved. The exact cause is still a mystery, but if it happens again, probably just need to turn the router off and on again. The good news is that the server is not blocked...for now.

[liveonloan]

@basil00
Now everything works perfectly! Thank you!
I rebooted my router before, it did not help. (But I'll take this into account, if the problem again appears I will reboot the router many times)
Yesterday, after @ValdikSS turned to the technical support of my ISP, everything unexpectedly began to work.

I wonder what response he received from technical support?
Was the problem in the router or ISP?

I wish your project prosperity and development without problems!

[ValdikSS]

@liveonloan I haven't got any reply yet. I think I'll write that the problem is resolved.

[liveonloan]

@ValdikSS
OK! 👍