I am from iran and some websites are blocked for iranian ips (like nvidia and intel and so on). there is this website that advertise that I can access those domains buy just changing my dns to theirs. so I tried and I saw this:
me@laptop ~> drill devtalk.nvidia.com @188.8.131.52 devtalk.nvidia.com. 300 IN CNAME uk4.shecan.ir. uk4.shecan.ir. 134 IN A 184.108.40.206
the shecan.ir the the the site that advertise that.
now legality of what their doign aside how this works? do they just redirect traffic to those sites from a non-iranian ip (uk4.shecan.ir 220.127.116.11) so in effect it is just a proxy. but they dont proxy all the domains just the blocked one.
I am asking this because I wanted to do this for my self on my router but whatever https transparent proxy that I tried cant differentiate between domains. Do they do this with ips? so when I use their dns service they give me a dns answer and I connect to that I send my request to that but how do they diff between the domains? do they use different IPs for all those blocked domains? is that feasible?
can I do this on my own router?
basically I am trying to test this: use my dnsmasq to give local IP for the blocked sites(blocked by my isp) then use iptable on that lan machine to transparently proxy all the traffic via tor. but my issue is does this work with me giving local destination for blocked domains?
I am doing all this so that I don't have to proxy all my traffic and just proxy the needed domains.