whatsapp not blocked on smartphone

Comments

5 comments

  • Avatar
    rotblitz (Edited )

    “Does someone know if the smartphone application is using another domain (than whatsapp.com or .net) ?”

    Yes, you got the right domains. But theoretically the WhatsApp app could use another DNS service or IP addresses if it sees that domains may be blocked.

    0
    Comment actions Permalink
  • Avatar
    54789123

    Digging more into the phone I discovered that Android is adding a second DNS to smartphone IP config which is a Google DNS (8.8.4.4.) as my wi-fi router is distributing only one DNS. As my NATed network is 10.0.0.0 I modifyed the network mask to avoid routing to 8.8.4.4 (mask /6 instead of mask /8). But whatsapp is still managing to connect despite this trick. It does not seem to be an IPv6 access so the last hypothesis is that there is a hardcoded DNS address in whatsapp. Unfortunately I do not have a monitor capable wi-fi card to sniff the wifi network and the access port is old and ... basic, it does not allow logging.

    If someone knows the whatsapp DNS adresses I'm interssested in.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    You go through your domain stats and raise an nslookup for those.

    By the way, the network mask does not have impact on the DNS server addresses which can be any.

    0
    Comment actions Permalink
  • Avatar
    54789123

    There are blocked requests to whatsapp domains in the stats (but phone application still workings). I guess that I have to set un a network tap and sniff all the traffic between the wi-fi AP and router. 

    > By the way, the network mask does not have impact on the DNS server addresses which can be any. 

    Not as a DNS but you can trick the IPs. Assume that computer IP is 10.0.0.1 and mast is 252.0.0.0.

    In that case the IP number 8.8.4.4. will appear as being on the local network to the PC. Then it will attemp to communicate directly without routing. It is a dirty networking trick. Not to use unless you know what you are doing.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Ah good, I understand.

    0
    Comment actions Permalink

Please sign in to leave a comment.