Yer, I used Rethink DNS in F-Droid to test this already. Basically it’s fine when the DNS is encrypted.

Edit: I was wrong. It was just working again generally.Even with DoH DNS, I still see “Access denied” going to duckdns.org and my sites still don’t work. Direct IP works. Not sure how this block is working yet.

I’ve tried it with F-Droid’s Rethink DNS already and everything is fine then.

Pretty sure they are doing DNS packet inspection. If the DNS is to duckdns (and no doubt other Dynamic DNS), then port 80 has their block page, and not sure what they are doing with 443, but it’s not accepted.

Boringly, it’s not being messed with right now. It’s done this before. Coming and going. It’s one of the things that stopped me working it out before.

Edit: I was wrong. It was just working again generally.Even with DoH DNS, I still see “Access denied” going to duckdns.org and my sites still don’t work. Direct IP works. Not sure how this block is working yet.

I tried their help chat bot and it just said to install their app after a few exchanges. My phone is de-googled, so good chance their app won’t work. Plus, I avoid installing closed apps as it is unhygienic. Each one seams to demand access to contacts and location and won’t work if you deny it. Dystopian present, let alone future.

Pretty sure they are working via DNS packet inspection.

It’s not the DNS server. I’m sure of this because Termux uses a different DNS server but does the same. I also tried setting my phone to use OpenDNS directly. I’m pretty sure they are inspecting the DNS traffic. Exactly so changing DNS server doesn’t help.

I don’t see a problem when using IP directly. I mean the IP is static, so I could must buy a domain, but I’d also have to piss about with my setup.

I’ve emailed them. See what they come back with. I mean unless they block SSH, Wireguard and Tor, I’ve got to hand work arounds. I just doesn’t like them fighting me.

If you’re not in the UK, try a UK proxy?

O2 didn’t until recently. EE does’t currently (wife’s network)

I’ve been doing some investigating. It’s not just DNS. Termux doesn’t use the system DNS, it uses Google. But there is still a interference with SSL on 443 and a different page on port 80.

Edit: oh and the IP address is current with ping.

“This page has been blocked for either a legal or technical reason.”

But you can see the block page used yourself at: http://shieldcf.o2.co.uk/blacklist

Oh I know some ports are ok. My SSH and WireGuard get through. Port 80 is redirected to a block page place holder and 443 is interfered with so SSL fails.