Shecan is an anti-sanction service offered by a group of researchers in Iran. It allows you to use a different DNS server and have a transparent proxy for the whitelisted domains.
Since Security and Privacy audits have no place in Iran, and Shecan obviously hasn't been through proper vetting, I decided to re-engineer something similar to it for personal use.
- Docker/podman(recommended)
- Included in
domainsfile inside the repository. "borrowed" from fod
- make sure ports 80, 443 and 53 are not used in your system (probably a good idea to disable
systemd-resolvdservice) - run the command in your server (remember to replace YOUR_PUBLIC_IP with you public facing IP address)
docker run -d -p 53:53/udp -p 443:443 -p 80:80 --net=host -e PUB_IP=YOUR_PUBLIC_IP --name some-private-shecan chosomeister/private-shecan:latest
Port 53 is used to recieve DNS and act as a DNS server. port 80 and 443 recieve HTTP traffic and handle the proxy side.
--net=host is needed because your Container engine will use NAT to push traffic to 443, and since your original IP will be masked from Nginx, it won't be able to handle proxy requests.