Not connected, Your IP: 216.73.216.170
Online: 47818 users - 666926 Mbit/s total BWAll Activity
This stream auto-updates
- Yesterday
-
-
-
-
-
-
-
-
-
-
-
-
@Tech Jedi Alex I've not yet found someone that has ported Airvpn or Eddie to SFOS. I'll keep looking as I am reluctant to us the AAP on SFOS just yet. Principally because I am trying to avoid the upcoming Google 'shutdown of FOSS (Keep Android open
-
.thumb.png.8be84fd39f94c1640ac8c5456fbf3449.png)
Problems With UK Server Bubup
Staff replied to LastGoodNameLeft's topic in Troubleshooting and Problems
Hello! Yes, the previous answer includes this option. Read it. Kind regards -
Problems With UK Server Bubup
LastGoodNameLeft replied to LastGoodNameLeft's topic in Troubleshooting and Problems
I don’t use Eddie. Use wireguard app or sometimes OpenVPN's app ( need control for countries prone to blocking. -
Problems With UK Server Bubup
Staff replied to LastGoodNameLeft's topic in Troubleshooting and Problems
Hello! We have tested Bubup: the server works correctly. The problem is on Windy's side: their service refuses one of Bubup's exit IP addresses (it answers with HTTP 403 "Forbidden"), and your connections through Bubup leave from that address. Bubup's other exit addresses and the other UK servers are not affected. The solution is simple: add Bubup to the blacklist in Eddie, and you will always be connected to the other five UK servers in London and Manchester, without any delay. If you use a WireGuard configuration file instead, generate it in the Configuration Generator for a specific UK server other than Bubup. Offering several servers in each country is meant exactly for situations like this one, when a third-party service blocks a single address. Kind regards -
Update: restrictions lifted Hello! The PHP project released the fixed versions earlier than scheduled, and we have installed them on every system of our infrastructure. The temporary restrictions described above have now been removed: The forum is writable again: you can post new topics and replies, edit posts, upload attachments,date your profile. The support ticket area works normally: you can open new tickets and reply to existing ones from the website. Password recovery works again. The customer API (https://airvpn.org/api/) accepts multipart/form-data requests again. If you wrote to support@airvpn.org in the meantime, there is no need to open a ticket as well: we will answer you there. If any of the functions above still fails for you, please clear your browser cache and try again; if the problem persists, open a ticket or write to support@airvpn.org. VPN connections, Eddie and the AirVPN Suite were not affected at any time. Thank you for your patience and understanding. AirVPN Staff
-
Measured 2026-10-21 from a residential HiNet connection in Taipei. WireGuard, port 1637. No leak and no tunnel defect found — exit address was always the server's and DNS stayed inside the tunnel. Two other things, though: 1. ROUTING. tw3 (103.230.144.102) is reached from Taipei via Hong Kong: 220-128-7-106.tpdt-4013.hinet.net 5.8 ms ae-14.r28.tkokhk01.hk.bb.gin.ntt.net 55.4 ms <- Hong Kong ae-5.r25.taiptw01.tw.bb.gin.ntt.net 61.1 ms <- back to Taipei 103.4.28.1 60.8 ms NTT hands off in Taipei, so the server is clearly there — this looks like a missing domestic interconnect with HiNet. It costs the server its whole geographic advantage: tw3 47-50 ms your Tokyo 38 ms (jp2/jp3/jp4) Taipei refs 5 ms (168.95.1.1, 1.1.1.1) A Taipei customer is better off on your Tokyo servers than your Taipei one, which seems worth a look regardless of anything below. 2. DISCLOSURE. RDAP for that block: 103.230.144.0/22 DCNL-HK country HK Data Center Network Limited, Hong Kong versus your Tokyo ranges (37.120.210.0/24, 146.70.76.0/24), both M247-LTD-TOKYO, country JP. Registering a block in one place and deploying it in another is routine, and I'm not suggesting the machine is anywhere but Taipei. But customers choosing by jurisdiction are choosing where the plaintext endpoint sits and who can be compelled over it, and for tw3 that spans two jurisdictions while the listing shows one. "Taipei, HK-registered addressing" would have told me everything. Single vantage, single point in time. Your numbered aliases also rotate — jp3 gave me two different addresses ten minutes apart — so specific IPs may differ at your end. -
-
Hello! Two critical vulnerabilities in PHP, the language that powers our website, forum and support system, became public before an official fix was available (CVE-2026-109618 and CVE-2026-109619). They affect every PHP version in existence and allow an attacker to run code on a web server by sending a specially crafted request. The PHP project has scheduled fixed versions for today, 21 October, at 14:00 UTC, and attacks exploiting the flaws have already been reported by several security firms. The flaws are triggered by a specific kind of web request, the one browsers use to submit forms with file uploads, and they act before any application code runs. Until the fix is installed, the only effective protection is to refuse that kind of request at the web server. EDIT: this sentence was not accurate. We have done so on all our systems. What this means for you, starting now and until further notice: The forum is read-only. You can read and search everything, but you cannot post new topics or replies, edit posts, upload attachments, send private messages or change your profile. The support ticket area is read-only as well. You can read your tickets and our replies, but you cannot open a new ticket or reply to an existing one from the website. We keep answering existing tickets, and you will keep receiving email notifications for our replies. The customer API (https://airvpn.org/api/) keeps working, but it rejects requests sent as multipart/form-data: if your script posts that way, send the parameters url-encoded or as JSON instead. Support remains available by email: write to support@airvpn.org and we will assist you as usual. Everything else works normally: VPN connections, Eddie and the AirVPN Suite, login, registration, purchases and the client area. These restrictions will be lifted as soon as the official patches are available and applied to every affected component of our infrastructure. We expect most of this to happen within hours of the release; if any component takes longer, we will update this announcement. We apologize for the inconvenience and thank you for your patience. AirVPN Staff
-
Whenever my phone connects through UK Bubup server (Wireguard) the Windy.com app stops working reporting "WOW it appears you are offline :-(" Repeatedly disconnect from UK servers and reconnect (keeps not working) until it eventually selects a different UK server and it all works fine again. This has happened repeatedly and it's now at the point where I can no longer accept it (something I do frequently taking 5+ mins rather than a few seconds). Needs sorting or I'm jumping ship as it's just madness to keep enduring this issue).
-
-
-
-
Thank you for the assistance. I ended up having to run both of the mentioned commands to get Eddie to work: icacls "%SystemRoot%\System32" /grant:r "*S-1-15-2-1:(OI)(CI)(RX)" and icacls "%SystemRoot%\System32" /grant:r "*S-1-3-0:(OI)(CI)(IO)(GA)"
-
This was quite helpful. It does seem this DNS behavior is from changing the wireguard connection *after* starting the VM. When the initial wireguard connection is untouched, there is on DNS issue on the guest. Thank you!!!
- Last week
-
-
Several certificates managed by a company called eMudhra have been compromised recently, making it possible for an attacker to fake SSL certificates without the user noticing, assuming of course they are on an outdated browser or system. Is AirVPN affected by this?
-
New 10 Gbit/s server available (US)
Tech Jedi Alex replied to Staff's topic in News and Announcement
This makes no sense; all servers since the beginning of the service are configured like that (meaning, entry/exit are separate). What makes you think they're the same on the CA servers? ❯ dig a in +short kornephoros.airservers.org 198.44.157.11 ❯ dig a in +short kornephoros_exit.airservers.org 198.44.157.34 . -
ANSWERED DNS Leak on VM Guest
Tech Jedi Alex replied to Knechtj's topic in Troubleshooting and Problems
On the guest the DNS servers are not touched, so whatever is configured there is used over the VPN line – or completely outside of it, in case your router (= the default gateway of the host) is the DNS server. Also maybe interesting to mention that whatever DNS is configured on the host at VM start is passed to the VM, if I'm understanding the docs right. So maybe connect Wireguard first, then start the VM to ensure the correct DNS servers are passed to the VM. Also, while we're at it, beware of testing with browsers: Some have "Secure DNS" or similar enabled, which means DoH/DoT and similar, completely bypassing your configured DNS servers. Test DNS with dig or nslookup which print the DNS server they used. -
Desperately needed on the .ca servers, please! Kornepheros etc. The entry is same as exit which makes it probably very trivial for an ISP to monitor
-
-
I believe tried that and it hasn't worked -
I've connected to an AirVPN wireguard server on my host computer. I'm using wireguard configuration files and connecting through the command line on the host (wg-quick). I'm using VirtualBox with a NAT network; VirtualCable is selected. On the host, ipleak.net doesn't reveal any DNS leaks (Mullvad, Brave, chromium) On the guest, ipleak.net indicates a DNS leak, on all browsers I've tried (Mullvad, Brave, chromium). This is while the host wireguard connection is established on the host, which has already indicated no DNS leaks (on the host computer). Yes-- the guest browser indicates a leak through the host wireguard network even when the guest shows a correct public wireguard ip. Any ideas what in the world could be going on? I'm starting to wonder if this is an issue with VirtualBox networking or a bug with wireguard itself....
-
An IP from Israel(77.91.71.99) has been casing AirVPN servers on port 8096 over the forwarding service. I was not aware that Mossad was "in dire need" of our video files. Those that have Jellyfin or EMBY running be aware of this. Last attempt: 10/16/26
-
@gtrman Hello! Thank you, the backup file shows the remaining cause. The backup was saved before step 2, so it still shows the old ALL APPLICATION PACKAGES entry (AC) with FA; that is expected. The second entry that blocks Eddie is this one: (A;OICIIO;FA;;;CO) It is the CREATOR OWNER entry, which the normal icacls output shows as CREATOR OWNER:(OI)(CI)(IO)(F). On a default installation it is stored as (A;OICIIO;GA;;;CO). GA (generic all) and FA (explicit full access) grant the same permissions in practice, but Eddie's check reads the stored value as it is: it accepts GA and rejects FA. Because icacls displays both as (F), the difference was not visible in the first output. This entry does not give anyone access to System32 itself, only to files created there later, and only for their owner. Eddie's check does not make this distinction yet, and we will report it to the developers. Please open a Command Prompt as administrator again and run the following commands. 1. Save a backup of the current permissions: icacls "%SystemRoot%\System32" /save "%USERPROFILE%\system32-acl-backup2.txt" 2. Store the CREATOR OWNER entry in its default form: icacls "%SystemRoot%\System32" /grant:r "*S-1-3-0:(OI)(CI)(IO)(GA)" S-1-3-0 is the fixed identifier of CREATOR OWNER, so the command works with any Windows language. As before, it may take a minute; wait until it reports "Successfully processed 1 files". 3. Save the new permissions to a second file, to check them:Open icacls "%SystemRoot%\System32" /save "%USERPROFILE%\system32-acl-check.txt" system32-acl-check.txt with your favorite text editor. It should contain (A;OICIIO;GA;;;CO) and (A;OICI;0x1200a9;;;AC), and no entry ending with FA;;;CO or FA;;;AC. Then start Eddie. If it still shows the same error, please post the content of system32-acl-check.txt here. To undo only today's change, you can run: icacls "%SystemRoot%" /restore "%USERPROFILE%\system32-acl-backup2.txt" Kind regards
-
Unfortunately setting the permissions did not work; Eddie threw the same error. Please see the requested exported acl backup permissions below:
-
-
-
@gtrman Hello! Thank you, the output confirms the cause. This is the entry that blocks Eddie: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(F) It gives Full control of System32 to every Store (UWP) app on the system. On a default installation this group can only read and execute files in System32. The other entries do not need to be changed for Eddie. Please open a Command Prompt as administrator (right-click Command Prompt, then "Run as administrator") and run the following commands. 1. Save a backup of the current permissions of the folder: icacls "%SystemRoot%\System32" /save "%USERPROFILE%\system32-acl-backup.txt" 2. Replace the Full control entry with the default read and execute permission: icacls "%SystemRoot%\System32" /grant:r "*S-1-15-2-1:(OI)(CI)(RX)" S-1-15-2-1 is the fixed identifier of ALL APPLICATION PACKAGES, so the command works with any Windows language. Please do not simply remove the entry: Store apps, including parts of the Start menu and Settings, need read access to System32. Windows also applies the change to the files and subfolders that inherit from System32, so the command may take a minute. Wait until it reports "Successfully processed 1 files". 3. Run icacls "%SystemRoot%\System32" again. The ALL APPLICATION PACKAGES line should now end with (OI)(CI)(RX). Then start Eddie. If Eddie still shows the same error, please open system32-acl-backup.txt in your user folder with Notepad and post its content here. It is a single line that shows the exact permission values, which the normal icacls output does not show. If you ever need to undo the change, this command restores the saved permissions: icacls "%SystemRoot%" /restore "%USERPROFILE%\system32-acl-backup.txt" Eddie does not check wuauclt.exe and wuaueng.dll, so the ownership change on those two files is not related to this error. And when you move to Linux, Eddie is available there as well. Kind regards
-
-
Been a happy member for about 5 years! Thank you for reliable and private service! You guys are a godsend!!! 😁
-
Thank you for taking a look at this. Please see the output below: Your explanation reminded me that I did take ownership of wuauclt.exe and wuaueng.dll (I was getting tired of windows auto updating without my say so; so I ended up crippling it until I felt ready to receive updates when other methods to stop it failed). Now that Windows 10 is in end of life/extended service, I'd be comfortable reverting back to 'defaults'. I've resorted to the exported OpenVPN settings as a work around, but would like to continue using Eddie if possible. Eventually I'll move to Linux, as I refuse to use Windows 11.
-
-
-
Until Eddie is equipped with split tunneling, i'll gladly use wiresock, it's quite easy to set up, doesn't require creating tunnels and messing with routing like openvpn.
-
Thanks, On openSUSE Slowroll, no issues at first glance. Thanks.
-
-
-
-
Thank AirVPN team for cheap, stable VPN, another 3 years from me 😉
.thumb.jpg.5bd31468a6a8f541c91128e47339cf7b.jpg)
