How to bypass the lock at the Rostelecom school?

Question

Software and Internet Services

Good afternoon. I can't solve one problem. I really hope there is a solution. The school had the Internet, the provider Rostelecom. Absolute blocking of everything, do not go to VK, or to Steam, or to the game server in any game, or connect to a remote desktop, anywhere at all. Tried various programs: VPN, Proxy, Tor, etc. Nothing helps, the response program data is 0, as if the connection does not exist. When you try to access a prohibited site (and there are probably fewer of them allowed than prohibited ones), it redirects to the page Access for educational institutions is limited, a list of laws and other nonsense. But in the address bar, the site that I tried to go to remains. That is, the blocking is carried out inside something, it does not transfer to the warning.rt.ru page. Goodbye DPI doesn't help none of the programs helps (I've been trying to get around this lock for half a year and without success). When installing the Internet, a proxy server with port 3128 is installed, CA Roots certificates are also installed (when you try to access a forbidden site, something like check.cert flickers) maybe these certificates somehow block everything? Without them, the Internet does not work. I hope there is a hole in this system, thanks.

Answer 1

Well, this is what a proxy was invented for ... to allow access only to where you need it. 99% that you will not be able to get around it. Use the mobile Internet, since there are inexpensive unlimited tariffs for the same iota) In general, you need to study at school and not climb on VK and steams, there is free time for this.
Certificates are needed so that the browser does not swear when trying to open an https (encrypted) site ... therefore, the certificate is being replaced, otherwise the proxy will not work automatically on the device.
Apparently, a MiTM attack or similar is used (just what DPI uses, only everything is much more complicated there and much more traffic variables are analyzed)

Answer 2

Proxies with bumping - hence the inability to work without certificates
Complete prohibition of any traffic bypassing the proxy
White list for connection
The system is simple as an ax and just as reliable, no goodbyes will help here.