Edit: Since my post got reported by some moral gestapo, i change the narrative la:

Lets say, one day you wake up and suddenly can't access your favorite Linux distro site. Turned out some guy at ISP got drunk and accidentally categorize your distro with other blocked porn site, like pornhub or hamster... and you can't live your life properly without downloading a Linux ISO every hour. Its a live or death matter. we must do something!

Im not supposed to teach this, but since /k so many buta it one and start opening many bodo tered (signs of insanity from excessive Windows ) I give some humanitarian aid la.

Edit: this should be adequate to bypass blanket censorship. If you looking to bypass targeted censorship like pornhub specifically, refer to edit below.

Simply changing dns is not enough because isp can still read your query and keep you out from your favourite distro site. You need secured dns to patch this weak link.


If you are using phone, simplest way is use Cloudflare's 1.1.1.1 app. Go to play store look for cloudflare dns.
This will make a dns tunnel to Cloudflare's DoH dns without additional real vpn overhead. So you candownload Linux ISO as fast as your internet allow. For udang hub, turn on warp. This puts you on real vpn mode and just let you bypass specific ip block.

If you are on desktop, enable dns over https on browser. If you are using firefox, go to options at network settings, tick enable DNS over https and ok. If u use chrome idk la but look for something like 'secure dns' or 'dns over https (or tls)'. No need to to tinker anything outside browser. No need overkill vpn. Just fix where it is needed. For udang hub specifically, refer edit below.

Anyway i recommend to turn on this setting all the time whether you want to bypass censorship or not. Plain dns you are using is 80s protocol which is extremely insecure by today's standard.


This will work on all home connection (unless you live in some shitty managed network building that incorporates DPI/block 1.1.1.1. Mobile network digi work. Not so sure about celcom/maxis; some reported it doesn't)

----
edit: while this work for me and some other, many don't, for some reason.
Another workaround is my hardcoding the hostname as described by bro rizvanrp and reported working too:

more:
xv - 185.88.181.18
xh - 104.18.156.3

easiest way to do this is by downloading this batch file and run as admin. this covers 3 most visited udang place. (I can't simply paste the content here because LYN's overachieving content firewall refuse to let me post anything resembling cli command )
https://send.firefox.com/download/a04c64020...EJlEv2HMdWO4f2w

https://pastebin.com/MAGYVLis
paste into CMD admin mode, one line at a time,

restart

This post has been edited by failed.hashcheck: May 25 2020, 03:34 PM

here, i change the narrative la.

Lets say, one day you wake up and suddenly can't access your favorite Linux distro site. Turned out some guy at ISP got drunk and accidentally categorize your distro with other blocked porn site, like pornhub or hamster... and you can't live your life properly without downloading a Linux ISO every hour.

Im not supposed to teach this, but since /k so many buta it one and start opening many bodo tered (signs of insanity from excessive Windows ) I give some humanitarian aid la.

Simply changing dns is not enough because isp can still read your query and keep you out from your favourite distro site. You need secured dns to patch this weak link.


If you are using phone, simplest way is use Cloudflare's 1.1.1.1 app. Go to play store look for cloudflare dns.
This will make a dns tunnel to Cloudflare's DoH dns without additional real vpn overhead. So you candownload Linux ISO as fast as your internet allow.

If you are on desktop, enable dns over https on browser. If you are using firefox, go to options at network settings, tick enable DNS over https and ok. If u use chrome idk la but look for something like 'secure dns' or 'dns over https (or tls)'. No need to to tinker anything outside browser. No need overkill vpn. Just fix where it is needed.

This will work on all home connection (unless you live in some shitty managed network building that incorporates DPI)

This post has been edited by failed.hashcheck: Mar 24 2020, 03:51 PM

I use digi

Means you got isp with DPI lor

God knows what else they siff from ur connection

could be. but pornsites runs on CDN so they can't simply block IP without taxing some big collateral damages.

they might also directly block 1.1.1.1 but that can simply be mitigated by using other DoH providers out there.

in windows you are just switching between plain dns.

in browser you have the option to incorporate dns over 443. work wonder when your isp do some dns fuckery routing every port 53 requests no matter to which provider, to their own server.

If you ask about literally install warp client on router then no.

Idk digi is okay. I can hd fap without having it stuck buffering at male actor's butthole.

My gf left me last month because apparently im not attentive enough to her 🤷

Ye at this time i can spawn wireguard server on one of my vps and make goyang kaki profit haha.

On consumer perspective DoH is objectively superior compared to DoT.

Unless you are network admin there are no reason to promote use of the latter.

This post has been edited by failed.hashcheck: Mar 24 2020, 10:09 PM

If you not into specific country then Cloudflare's warp. They run big chunk of internet. their servers are fast and everywhere. Plus they use wireguard instead of openvpn. lot less overhead compared to other ovpn providers out there.
It term of safety/privacy, as long you dont do super illegal stuff, CF considered lot more trustworthy compared to google.

try 104.18.156.3

download this and run as admin
https://send.firefox.com/download/a04c64020...EJlEv2HMdWO4f2w

weird. working fine for me. this is just 'gateway' ip that will redirect to mirrors.

Just drag it to desktop, edit, drag it back to original place and replace existing file

Oh ya. Warp only available on phones for now.

I stick to nordvpn. Mainly because that have ikev2 support. Openvpn sucks.

https://pastebin.com/MAGYVLis

paste into CMD admin mode, one line at a time,

restart

the exact purpose of hosts file is so you can edit it to make your networking job easier.

your antivirus is fucking stupid if they interfere with your work. please uninstall it.