t101

內地ISP未必可以時時刻刻檢查到你海外記錄，但較簡單直接嘅做法係落地實名制證明你不是內地人或解釋理由 ...
evantkh 發表於 2026-6-11 12:30

要roaming對方operator配合，所以，只有香港邊operators先會配合，其他國家未必會。

好有可能，以後，只有簽約的主要operators係國內先可以roaming，不知名的，你就買local sim，用wechat吧啦。

t101

我意思係，哩個可能係打擊經營資貭同走水貨問題，多過為要全漫遊都要落GFW的問題。 ...
evantkh 發表於 2026-6-11 12:33

要睇政策目的，可能範圍唔係咁小。
你要明白，其中一個重要理由，係國家機密問題。唔係你一般平民翻牆問題。

evantkh

要睇政策目的，可能範圍唔係咁小。
你要明白，其中一個重要理由，係國家機密問題。唔係你一般平民翻牆問 ...
t101 發表於 2026-6-11 12:37

真係太重要嘅人可以禁你出境，否則，如果你正正常常有海外活動有外國電話，暫時唔見得佢會禁你，水貨SIM才是漏洞。

张无忌

All the AmneziaWG setting both server/client from Glinet,  I just make sure the WG router server was ...
freshtomato 發表於 2026-6-6 14:34

In past posts about mainland Chinese or overseas VPS (including Hong Kong), we discussed that if WireGuard data packets pass through the GFW, they get modified—such as changing the original port 51820 to other values. However, if the destination is a residential site, the GFW normally does not modify the port number, meaning WireGuard can function normally as long as the port numbers are adjusted accordingly.

Now, regarding AmneziaWG, it is essentially WireGuard plus obfuscation. GL.iNet's new firmware (4.9.0) for models like the GL-BE9300, GL-MT6000 (op24), and GL-MT3000 (op24) now includes this WireGuard obfuscation option. I tested this by using AmneziaVPN on my iPhone 16e and a Tokyo, Japan VPS. After entering the IP, root account, and password, AmneziaVPN automatically installed AmneziaWG on the Tokyo VPS remotely. Within a few minutes, the setup was complete, and I could just press "Connect" to get started. The AmneziaWG connection between my iPhone in mainland China and the Japan VPS has been running continuously for several days without any packet loss.

freshtomato

唔科學上網前提

我的經驗，Router set 有DNSSEC DNS SERVER IP, resolve 內地IP慢但比較安全
Router set Ali / Tencent / 114 / ISP DNS, resolve 內地IP快但比較不安全

想問一下，在大陸不連WireGuard 或 AmneziaWG 之前, 唔科學上網前提

你的Router 用那一個DNS IP?

Just for reference！

kennylam777

唔科學上網前提

我的經驗，Router set 有DNSSEC DNS SERVER IP, resolve 內地IP慢但比較安全
Router set A ...
freshtomato 發表於 2026-6-14 12:25

中國乖乖哋用返ISP DNS都冇咩嘢, 一係用ali, 你set 1.1.1.1/8.8.8.8冇加密嘅就俾中國ISP攔截搶答, 有加密就唔通, 有得揀用國際DNS?


    其實翻牆黎講DNS係死症黎, 本來request又細但仲要blocking, 一定要DNS resolve做完先可以下一步...... 所以一係要local有cache, 但有啲網站例如Facebook咁用好多sub-domain都係要等

所以v2ray一類翻牆方案點解要用proxy為主, tun為副, 係因為broswer support proxy果陣會將resolve派出去俾proxy完成埋, 慳一轉RTT來回嘅時間