26 April 2008 @ 12:26 pm
Evidence that Bezeqint (Israel) may be forging RSTs to block P2P  
This is in reply to your blog post (Hebrew, which I do not read) which I found referred to in English on another mailing list.

Benhamo, Sir

Please excuse the English post on your blog.  I am digging into some of the Vuze data.  It does appear that Bezeqint addresses do have an interference source.  

I will be posting my Wireshark capture on my website in case you would like to examine it.  The file being shared is Ubuntu Hardy Haron.  Of particular note in this capture is that the IP TTL from the real peer is 114 and the forged, injected RSTs is 48.  This fact proves that the RSTs do not come from the peer itself.

I hope this helps all freedom-loving Bezeqint users fight this unwarranted man-in-the-middle attack.

Note: without comparison of logs on both sides of the peer connection, this evidence is not completely conclusive.  I collected this information on my Verizon DSL account, which I believe to be free of this type of interference. 

Sincerely,

Robb Topolski
 
 
Current Location: Hillsboro, Oregon USA