Connection reset. That is the famous response shown to web users in China when they are trying to access one of the over 2600 websites and searches that have been blocked by the authorities. But what is actually blocked and what is causing the connection disruption? Our research suggests that the Great Firewall (GFW) does not filter any incoming data, but only the outgoing traffic.
It is often said that the GFW imposes three types of censorship. The first one is DNS poisoning. For example, this happens when users in China attempt to access facebook.com. The name servers return an incorrect IP address which doesn't work. The browser tries to load the website for a certain period of time until the whole exercise 'times out'.
The second type of censorship is keyword-based. For example, if one tries to search on Google for facebook, freedom or some of the other 250+ blocked searches, the connection is immediately reset. In addition, users are restricted from accessing any content on the same website for a minute or so.
The third type is supposed to be content based. Regardless of what was searched for or the address that was entered, if the content contains certain keywords, it is supposed to be blocked. This is where our findings become relevant. They suggest that the GFW doesn't interfere at all with the content that is sent back to the web user in China.