• HTTP/HTTPS focused blocking
• Uses TurkTelekom IP (government) to present the page stating the domain is blocked.

DNS

• ISP's DNS server resolves government IPs for blocked domains.
• Won't manipulate 3rd party DNS servers.

Exceptions

• ISP DNS will resolve the real IP address for privateinternetaccess.com despite being a blocked domain.

HTTP

• If a blocked domain appears on host header, it will reset the connection.

$ curl -vik --header "Host: xvideos.com" 85.117.236.90
*   Trying 85.117.236.90:80...
* TCP_NODELAY set
* Connected to 85.117.236.90 (85.117.236.90) port 80 (#0)
> GET / HTTP/1.1
> Host: xvideos.com
> User-Agent: curl/7.68.0
> Accept: */*
>
* Recv failure: Connection reset by peer
* Closing connection 0
curl: (56) Recv failure: Connection reset by peer

• ISP does not block the government IP address with blocked domain to present the page stating the domain is blocked.

  Government's Statement of the Blocked Domains

Exceptions

• It just gets stuck for privateinternetaccess.com. It gets stuck for government IP address as well.

$ curl -vik privateinternetaccess.com -m 2
*   Trying 92.123.16.68:80...
* TCP_NODELAY set
* Connected to privateinternetaccess.com (92.123.16.68) port 80 (#0)
> GET / HTTP/1.1
> Host: privateinternetaccess.com
> User-Agent: curl/7.68.0
> Accept: */*
>
* Operation timed out after 2001 milliseconds with 0 bytes received
* Closing connection 0
curl: (28) Operation timed out after 2001 milliseconds with 0 bytes received

HTTPS

• If a blocked domain appears on SNI, it will reset the connection without looking at the IP address.

$ curl -vik --resolve xvideos.com:443:85.117.236.90 <https://xvideos.com>
* Added xvideos.com:443:85.117.236.90 to DNS cache
* Hostname xvideos.com was found in DNS cache
*   Trying 85.117.236.90:443...
* TCP_NODELAY set
* Connected to xvideos.com (85.117.236.90) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* OpenSSL SSL_connect: Connection reset by peer in connection to xvideos.com:443
* Closing connection 0
curl: (35) OpenSSL SSL_connect: Connection reset by peer in connection to xvideos.com:443

Exceptions

• It just gets stuck for privateinternetaccess.com.

$ curl -vik <https://privateinternetaccess.com> -m 2
*   Trying 92.123.16.68:443...
* TCP_NODELAY set
* Connected to privateinternetaccess.com (92.123.16.68) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* Operation timed out after 2001 milliseconds with 0 out of 0 bytes received
* Closing connection 0
curl: (28) Operation timed out after 2001 milliseconds with 0 out of 0 bytes received