4

I have Sonicwall firewall i gonna block psiphon app in mobile and pc i deny access this port 51,5242,4244,5243,9785,1701,47,443,500,4500,1080 most vpn are closed but psiphon app still work how i can block it.

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 12 '17 at 18:34
3

I'm quoting what is posted on the Psiphon page:

You can only establish connections via Psiphon by using the following ports: 53, 80, 443, 554, 1935, 7070, 8000, 8001, 6971-6999.

  1. If you block these ports, you will also be blocking a lot of services in your network.

  2. You need to do Deep Packet Inspection if you want your really block Psiphon.

https://psiphon.ca/es/faq.html

| improve this answer | |
  • i tried to block all this port the web page failed to access internet but psiphon connected successfully :D – Hani Sep 30 '15 at 5:42
2

If you want to block this appli, you will must to block all VPN which are not yours.

Psiphon can mount proxy HTTP/SOCKS via tunnels. All the traffic of this aplli will pass by the port TCP 80 by default.So you must to have a firewall capable to inspect yours packets to see which packets are reals HTTP packets and HTTP proxy packet.

You can't block this appli only with the ports numbers.

| improve this answer | |
2

I work with a High School and some of the students are using Psiphon to get around our web filter. So I believe we were having a similar issue. We found that A third party managed firewall and web filter filled our needs better than closing so many ports that have important services running on them. We used iboss for our web filter and firewall and we were able to curtail the problem with Psiphon.

| improve this answer | |
  • thank you for your replying , can you explain more about iboss – Hani Sep 30 '15 at 5:38
  • I will post a link to their site but I dont want to violate forum rules so I.ll just say they are a paid for firewall, web and spam filter. You can find out more information and contact them through this site link – James Studer Oct 2 '15 at 8:50
0

To be Honest, with my experience using and testing Psiphon, As long as the user has any kind of internet, no matter the block (even if though), Psiphon seems to manage it's way in anyway. It's lightweight setup make you able to use on a flashdrive (so it doesn't need to be installed on the PC at all, just need to plug in thumbdrive) and versatility makes it very hard to block, even temporally. not to mention that if it even get a ping from any open sever, it automatically updates itself, makes a backup copy, and gets new sever list. The reason why it's like this is because, it's designed to allow you access even in a another country where blocks are really strict... Basically, you're trying to march though the jungle but, up against an army that specializes in guerrilla warfare...

| improve this answer | |
0

If you want to block this application, you will must to block all VPN which are not yours. You may check this detailed guide on Psiphon here or just follow the steps below to unblock the app:--

  1. Enable DPI-SSL Client Inspection by going to DPI-SSL | Client SSL and selecting Enable SSL Client Inspection. Ensure that IPS, GAV, Spyware, and Application Firewall are selected.
  2. Enable all Psiphon application signatures by going to Firewall | App Control Advanced. Select the category PROXY-ACCESS and application Psiphon. Configure the application to be blocked and logged.
  3. Also block Encrypted Key Exchange TCP Random Traffic (SID 5).
  4. Enable blocking of SSH app signature (SID 10097) "SSH -- Client Request Outbound", (or make access rule to block outbound TCP/22 SSH Service from LAN->WAN).
| improve this answer | |
0

Ok folks, so here it is. After fighting this monster for about 9 months, I finally figured out how to stop PSiphon from running on my computers. PSiphon is a standalone program, because it does not install itself to the computer, there are no hash's or certificates to manipulate. I finally google'd how to stop .exe files from running and low and behold there it was. You have to set up a GPO to prevent psiphon3.exe from running. You will create this rule under the user configuration\administrative templates\system\Don't run specified windows application. From here you can figure out the rest. Now I have tried to run it on the computer, from the website and from a drive stick and they all failed to run. Can't wait for morning to get here so I can implement this on the computers at work. Hope this helps.

| improve this answer | |
  • You should accept your answer so that the question doesn't keep popping up forever, looking for an answer. – Ron Maupin Aug 30 '18 at 3:57
0

I never had any problems with connection speeds or buffers with Psiphon. Maybe it should be tested again this year as it has improved a lot.

Note: the Psiphon is blocking for only devices in which we install the self-sign certificate.

| improve this answer | |
  • This does not seem to answer the question how to block Psiphon. – Teun Vink Jan 18 '19 at 14:58
0

I have managed to do this by blocking the file path of the temp exe it creates when connecting. This removes the ability to rename the original exe and it works again (or having duplicates in downloads, i.e. "Psiphon3 (1).exe").

Use User or Computer policy,

Policies/Windows Settings/Security Settings/Software Restriction Polices/Additional Rules

New Path Rule -> %userprofile%\AppData\Local\Temp\psiphon-tunnel-core.exe

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.