MTProtoProxy Not Working in Iran

[A2116]

mtproto connect from ADSL but not from the 4G network

[DanialNikbin]

I'm facing the same problem. It's not working on mobile network at all.

[HirbodBehnam]

Iran blocks MTproto proxy on fly.
Not related to script issue as said in the issue template.

[HirbodBehnam]

I thought to myself that maybe I should change the title and pin this issue in order to allow people to discuss this issue in only one thread.

[sinascorpion]

Is there any way to hide packet connections?

[DanialNikbin]

How did they block? I thought because of random padding they are not able to block.

[FaridAghili]

Anything new?

[HirbodBehnam]

I did some work on how Iran blocks Fake TLS and I found some interesting things.
It looks like that Iran blocks certain browser fingerprints in order to block proxies. Possibly if there is a lot of requests using a old or maybe specific browser fingerprint, it enables whitelister on server.
Whitlelister blocks all of the HTTPS traffic that is from old browsers. I have an server that has whitelister on it. I tried connecting to a legit HTTPS server on it with Chrome 76 (witch is the browser that Cloak mimics) and I couldn't connect to it; However Chrome 85 and 64, Firefox 80 and cURL 7.55.1 were completely fine. Probably only some old browser signatures are blocked. It's also good to note that Fake TLS and OpenVPN are not working.
This also could explain why a lot of uses have problems connecting with iOS devices because this file that is probably the one that have the fingerprints, is not updated in a while.

I don't think anything is possible from server side to defeat this, because client hello is important. Maybe just maybe updating the Client Hello fingerprint regularly in clients helps users to bypass the whitelister. Also, another good (but more complex) approach is to randomly use a fingerprint. Also there is no need to say that using a real TLS connection will fix most of these problems.

Update: It looks like that fake tls is working fine on windows and android. I started a netcat listener on port 443; Telegram iOS didn't transmit any packet but windows and android were fine. I checked windows version fake tls fingerprint using wireshark and it is this

[alty-ir]

Maybe a possible way is that host mtproxy in iran server and tunneling the income traffics of proxy server to another server in other nations like germany via openvpn or other solutions.

[FaridAghili]

@alty-ir
There's a solution already, check this out.

[MoSi8160]

there is no way to use ?