The first technical report by the IRGFW team, titled Understanding Iran's Great Firewall, is now available. The report provides a comprehensive analysis of the infrastructure and operations of Iran's Great Firewall.
Key topics covered in the report include the status of DNS servers, UDP and QUIC status, IP status, active scanners, the DPI system, and an overview of protocols.
You can view or download the PDF file below. For the Persian version, please click <a href="https://mahsanet.com/fa/blog/6/understanding-the-iranian-great-firewall">here</a>.

A brief history of Iran`s Great Firewall

IP address status

Active probes

Deep packet inspection system

Protocol overview

Key topics covered in the report include the status of DNS servers, UDP and QUIC status, IP status, active scanners, the DPI system, and an overview of protocols.

Understanding The Iranian Great Firewall

A user named GFW-knocker, well-known for their work on Fragment, believes that working collaboratively to bypass filtering feels like a recreational activity for them.
This user expressed surprise at the level of support for the Mahsa app (or MahsaNG), designed to provide less-privileged individuals with access to VPNs. They credited the initiative's success to people like Segaro and emphasized their own sincere intention to help the public.
In response to a question about how far they can go without financial support or ties to political parties and activists, they stated that while opposition slogans about fighting internet censorship or ensuring free internet access have been largely hollow so far, their outlook remains positive. They believe technology will always have the upper hand against censorship.
They added that the next step for the Mahsa project is launching a multi-platform app, which will advance with the contributions of various participants and continue with or without them, even if some individuals leave. They also expressed pride in being able to stand alongside those who have sacrificed so much in the Mahsa movement, both financially and personally.

This user expressed surprise at the level of support for the Mahsa app (or MahsaNG), designed to provide less-privileged individuals with access to VPNs.

Technology will always have the upper hand against censorship

The Xray-core project is a fork of the original Xray core, optimized and customized to adapt to the specific conditions in Iran. Developed as an open-source initiative by GFW-knocker, this project introduces advanced features for circumventing internet restrictions, providing users with access to more robust and sophisticated protocols resistant to censorship.
<h2>The Role of the Mahsa App and Future Prospects</h2>
The Mahsa application, a practical implementation of GFW-knocker's ideas, serves as the primary testing and deployment platform for this customized version. Designed to meet the needs of Iranian users, especially during periods of severe internet restrictions, this app offers an effective tool for accessing an open internet. The developer has also indicated that, upon achieving sufficient stability, these modifications may be proposed for merging with the main Xray core, enabling their integration into popular clients like v2rayNG.
<img src="/content/blog/4/xray-core-warp.jpg" alt="xray-core">
<h2>Vision and Impact</h2>
The release of this customized version has the potential to significantly improve the experience of Iranian users facing internet restrictions. By combining innovative configurations with support for diverse protocols, it enhances user flexibility and paves the way for the development of similar open-source tools.

The release of this customized version has the potential to significantly improve the experience of Iranian users facing internet restrictions.

Customized Xray-Core for Iran

In today’s world, unrestricted access to the internet has become a fundamental necessity. However, in many countries, including Iran, internet restrictions and censorship prevent users from accessing free and open information. The <code>MahsaNG</code> app, a VPN platform, offers a solution to bypass these limitations.
MahsaNG is a customized fork of v2rayNG, designed to provide free and resilient access to the internet. This application leverages advanced technologies such as DNS over HTTPS, TLS packet splitting, rotating configurations, and random subdomains to ensure a secure and stable online experience for users.
One of the standout features of MahsaNG is the ability for users to share server configurations. This empowers individuals to contribute to the accessibility of free internet by sharing their configurations, helping others bypass censorship effectively.
The app is developed under the "Sogaro Dream" project, a collaborative effort by a team of experts. The primary goal of this project is to create a free and decentralized VPN service, offering those with restricted internet access the opportunity to connect to open online resources.
MahsaNG employs various security techniques to provide a safe platform for its users. Additionally, users can verify the app's integrity through online services such as <code>VirusTotal</code> to ensure its security.
This application is especially suited for individuals seeking a robust solution against censorship and a gateway to unrestricted internet access. With its advanced features, MahsaNG not only serves as a tool to overcome limitations but also as a social initiative to support underprivileged individuals in accessing open information.
If you are looking for a secure and free tool to access the uncensored internet, the MahsaNG app can be an ideal choice for you. You can download it from <a href="https://github.com/GFW-knocker/Xray-core/releases/latest">GitHub Page</a> or <a href="https://play.google.com/store/apps/details?id=com.MahsaNet.MahsaNG&#x26;hl=en">Google Play</a>.

With its advanced features, MahsaNG not only serves as a tool to overcome limitations but also as a social initiative to support underprivileged individuals in accessing open information.

MahsaNG App: A Bridge to Free Internet Access

The "Dream of Segaro" project is an effort to provide free access to unrestricted internet for 20 million people, especially those who are deprived of such access due to financial constraints or lack of technical knowledge.
This project aims to overcome existing barriers and make the internet accessible to everyone by leveraging innovative technologies and ad-based economic models to create widespread, free access to open internet.
<h2>Proposed Solutions in This Project:</h2>
<ul>
<li>
Ad-Based Economic Model for v2ray:
By integrating advertisements into v2ray, similar to Telegram proxies, users can access free VPN services. This reduces issues related to monetary payments and lack of trust.
</li>
<li>
Reducing Service Provider Costs:
Leveraging technologies such as Fragment, CDN, and random subdomains, this approach mitigates concerns about IP and domain blocking while lowering costs.
</li>
<li>
Simplifying Configurations and Updates:
Inspired by P2P networks like Torrent, this method simplifies the process of obtaining and updating configurations. Users can even acquire settings via Telegram channels or friends during internet outages.
</li>
</ul>
<h2>Core Modules of the Project:</h2>
<ol>
<li>
Ads Module:
Displays notifications with links when users connect, shifting the economic model to ad-based and enabling free usage.
</li>
<li>
Update Module:
Handles automatic retrieval and application of update files, including a list of configurations, clean CDN IPs, Fragment settings, and other essential data.
</li>
<li>
DNS Module:
By using DNS-over-HTTPS (DoH) and Fragment technology, users can directly access sites like YouTube without being affected by domain or IP blocking.
</li>
<li>
Fragment Module:
Facilitates internet access and reduces service provider costs by routing traffic through Fragment and using CDNs.
</li>
<li>
Security Module:
Ensures user safety by verifying the authenticity of update files and preventing sensitive domains from being added to offline DNS.
</li>
<li>
Reporting Module:
Monitors the status of configurations and services, gathering user feedback to enhance service quality.
</li>
</ol>

This project aims to overcome existing barriers and make the internet accessible to everyone by leveraging innovative technologies and ad-based economic models to create widespread, free access to open internet.