←back to thread

A story about bypassing air Canada's in-flight network restrictions

(ramsayleung.github.io)
137 points samray | 1 comments | 10 Oct 25 07:50 UTC | HN request time: 0s | source
Show context
ajd555 ◴[10 Oct 25 11:52 UTC] No.45537856[source]▶
If a ping to a specific IP times out, I wouldn't say the IP is blocked. It could be that ICMP specifically is blocked, following some network rules on the firewall. This is pretty common in entreprise networks to not allow endpoint discovery. I could be missing something and happy to be corrected here, but I was surprised to read that.
replies(5): >>45537931 #>>45538067 #>>45538538 #>>45538647 #>>45540200 #
1. ogurechny ◴[10 Oct 25 12:13 UTC] No.45538067[source]▶
Yes, you need to test the exact protocol you want to use. This means tcping/curl, TLS with proper certificates and SNI domains, etc.

However, just as you make sure that the power supply actually supplies power before dismantling something that refuses to work down to the last washer, repairing network problems should start with the basics. Simple test that does not work, or shows something nonsensical, is a great hint that you forgot something, or should start digging elsewhere.