--- title: "Turkey Censorship Megapost" description: "i love censorship +50 social credit" author: "slonkazoid" created_at: 2025-03-19T12:00:00+03:00 tags: - censorship - security - turkey - meta --- # turkish internet censorship ## providers | isp | dns blocking | dns modification | ip blocking | wireguard blocking | |-|-|-|-|-| | turknet | yes | yes | no | no | | turkcell | yes | ? | yes | sometimes\*\* | | turktelekom | yes | no | yes | no | | kablonet (turksat) | yes | ? | yes | no | | vodafone | yes | ? | yes | yes | | [gıbırnet](https://gibir.net.tr/) | yes | uhh\* | no | no | \*: only seems to do it with cloudflare's dns at 1.1.1.1 \*\*: not for residential connections? ## circumvention - use a secure and private VPN, such as [Mullvad](https://mullvad.net/) - if that's not possible, avoid known honeypots such as Nord or Proton VPN - do not use free VPNs. if you cannot afford/cannot pay for a private VPN, use [TOR Browser](https://www.torproject.org/download/) - if you're a journalist, take extra caution. we all know this country's track record when it comes to journalism. do not use any VPNs, instead: - utilize [the TOR project](https://www.torproject.org/), use Tor Browser for any activities - boot [Tails OS](https://tails.net/) for maximum anonymity - your phone is not secure. install a secure ROM such as [GrapheneOS](https://grapheneos.org/). as much as i hate to promote them, your safety is of utmost priority - check out the [No Trace Project](https://www.notrace.how/) ### DoH (DNS-over-HTTPS) #### android 1. go to settings -> Network & Internet -> Private DNS 2. set it to Something Other Than "Off" or download 1.1.1.1 from the play store and use it #### ios download 1.1.1.1 from the app store and use it. no custom DoH for you lololol --- ## 2025-03-19: total social media censorship after [Ekrem Imamoglu's arrest](https://apnews.com/article/turkey-istanbul-mayor-police-search-ead3dd38aa547ecd13bc336e7d6c4d58), almost all (popular) social media sites including but not limited to: - YouTube - Instagram - Faceboom - Twitter were blocked country-wide, to prevent the people from speaking up. ## the discord incident i have no idea if the allegations are true but it's something that happens on every platform. you can not stop child exploitation by blocking a messaging app that mostly normal people use. --- ## circumvention (advanced) ### vodafone you could use a VPN with builtin circumvention like mullvad, alongside encrypted DNS. for self-hosters, read below. dm me if you are on vodafone. i have yet to come up with a general enough solution to this that an Ordinary Person can pull off. currently i do selfhosted wireguard running on my laptop at home (which is turknet), which both acts as a tunnel and DoT proxy. i use socat and DTLS to create a connectionless obfuscation channel without losing tcp congestion control and connect to it using termux on my phone (which uses vodafone for LTE) with battery savings disabled. server: ```sh socat openssl-dtls-server:4080,reuseaddr,fork,cert=server.pem,cafile=client.crt,verify=1 UDP:127.0.0.1:51337 ``` client: ```sh socat UDP-LISTEN:51337,reuseaddr,fork openssl-dtls-client:4.slonk.ing:4080,cert=client.pem,cafile=server.crt,verify=0 ``` another option is to compile wireguard with different magic numbers. both server and client. ### turknet use encrypted DNS. see [the DNS section](#dns) for more info. ### kablonet, turkcell and turktelekom use a VPN with encrypted DNS. i recommend mullvad though others will work. if you have a mate on turknet that can host a wireguard server for you, you might want to consider that as well. ### gıbırnet just change your dns to 8.8.8.8 or 9.9.9.9 thanks [yigib](https://altinay.tr/) for telling me about gıbırnet. ### DNS #### DoT (DNS-over-TLS) ##### systemd-resolved enable it in `resolved.conf`. i don't think you need to be told how ### notes cloudflare warp no longer works as even their exit nodes are blocked from accessing discord.