Try the new -5 mode, which is default now when you start the program without options. It should work on overwhelming majority of DPI systems out of the box.

New censorship circumvention method:

• Fake Packet with wrong SEQ/ACK numbers (--wrong-seq)

New features:

• --blacklist option now also applies to TLS (HTTPS websites)
• Automatic TTL value picker for set-ttl Fake Packet mode (--auto-ttl) ← very convenient
• New modern mode sets (more stable, more compatible, faster): -5 (now default) with native reversed fragmentation and fake packet auto-ttl, and -6 with wrong-seq instead of auto-ttl.

Other changes:

• Fake Packet mode (--set-ttl, --wrong-chksum, --wrong-seq) now applies each method to each packet separately, and doesn't combine all methods for a single packet.