Client constantly switching servers.

[McLoEa 25]

Hi,

 

it seems Eddie will re-set to a different server every 20 or 30 minutes for me today.

 

Am I the only one experiencing this?

 

Thanks.

[me.moo@posteo.me 80]

I've not been re-set or noticed any disruption but I do have a lot of 'Updating systems & servers data ...' entries in the log which I have never noticed before. Thats it though
 

[McLoEa 25]

I've had a lot of connections today,as many as 3 in an hour then ok for 2 hours then 2 more new connections over the next hour.

[McLoEa 25]

it's unusual,normally I can have a connection open for 48 or 72 hours to the same server.

 

It's very jumpy today.

[me.moo@posteo.me 80]

It is unusual but I wouldn't worry for now, keep network lock on and keep an eye in here as I'm sure we will get an official announcement if there is some general problem. If the problem persists or if you think it is something else then get back of course.

[McLoEa 25]

I have a browser open with IP leak open in a tab and network lock enabled.

 

After a new connection is made if I refresh IP leak it shows my ISP's DNS as well as AirVPN's DNS but if I close and reopen the browser and re-fresh IP leak it only shows the AirVPN DNS.

[me.moo@posteo.me 80]

The DNS it shows will be Airs internal DNS as in 10.something not an external DNS

 

Has the constant switching stopped now

[McLoEa 25]

The DNS displayed was my ISP's DNS,the same ones I get without using eddie.

 

Switching seems to have stopped now.

[Khariz 109]

You probably have your router set up to use your ISP DNS.  Until the VPN tunnel is fully established, you are still pulling DNS settings both from the local adapter and the router.  I just went ahead and set my router to some really good DNS servers that don't log anything, then even if I have a momentary DNS leak, I don't get very concerned with it

[McLoEa 25]

Hi Khariz,

 

that makes sense.

 

What DNS do you set your router to,8.8.8.8  and 8.8.4.4?

[Khariz 109]

No, I'd rather die than use google.  I use these servers:

 

70.32.38.67

173.234.159.235

 

Those are two of CryptoStorm's "deepDNS" no-logging servers.  These servers are also available if you use a program like DNS-Crypt.  That's another way to do this, btw.  Install DNS-Crypt and then whenever you are NOT connected to the VPN, you are still encrypting your DNS to a non-logging secure DNS server.

[McLoEa 25]

Good info,thanks for that.

 

Does using that DNS cost you anything in terms of speed?

 

Maybe I'll give it a try myself.

 

Server switching is back big time for me again today.

[lukekjones 0]

What is happening to your IP address while Eddie is reconnecting?

 

Is it exposing your real IP?  I notice from the Logs that it resets your connection back to the original then reconnects.

[Khariz 109]

Cost?  No, it increases it in spades.  They have implemented what they are calling "Tracker Smacker" into their DNS, which prevents a lot of the malicious and obtrusively tracking ads and tracking services from resolving at the DNS level (which means that the data never even comes into your browser to be chewed up your adblock and anti-tracking plugins.  It has the net effect of making everything feel speedier.

 

To be clear, I'm only using these servers when I'm NOT on AirVPN.  I like the DNS on AirVPN.  But my router and all my devices use the CS DNS when I'm not hooked up to AirVPN.

[McLoEa 25]

I'm going to have a good look at that site,Khariz,thanks again.

 

 

 

Can you see my logs then lukejones?

 

It's not my IP appearing to be exposed but my local ISP DNS server.

[iwih2gk 93]

I wanted to join and help you guys but I never saw any switiching.  I am positive because my personal firewall will not allow Eddie to reconnect unless I manually intervene on a broken connection.  This config allows me to avoid any surprises or switches of servers at any time unless I permit it to happen.

 

I really wish I could see and get confirmation as to what is causing this to happen for just a handful of users.  Is it OS based, router config based, or what ????

[lukekjones 0]

 Can you see my logs then lukejones?

 

It's not my IP appearing to be exposed but my local ISP DNS server.

Sorry, poorly worded.

 

I can see from my Logs that when Eddie reconnects it reloads pf.conf back to the pre vpn state, disconnects from the vpn then resets the network adapter back to normal. It then reconnects before loading the new pf.conf.

 

I was worried that at the point between Eddie disconnecting then reconnecting my normal ISP was being used to make the connection to AirVPN.

[McLoEa 25]

I wanted to join and help you guys but I never saw any switiching.  I am positive because my personal firewall will not allow Eddie to reconnect unless I manually intervene on a broken connection.  This config allows me to avoid any surprises or switches of servers at any time unless I permit it to happen.

 

I really wish I could see and get confirmation as to what is causing this to happen for just a handful of users.  Is it OS based, router config based, or what ????

Thanks,

 

yes,me too.

 

I'll post the logs next time there's some activity on the server switching.

 

OS is Fedora 22,I know I should update but I have things in progress that mean I have avoided doing so, I am considering a switch to OpenSuse KDE too.

 

Router is an ASUS running Padavan firmware going to an ISP modem.

 

This set up has been running for a while with no problems.

 

It's irritating that it happens and it would be great if I could gain some understanding of the issue and why it occurs.

[McLoEa 25]

 

 Can you see my logs then lukejones?

 

It's not my IP appearing to be exposed but my local ISP DNS server.

Sorry, poorly worded.

 

I can see from my Logs that when Eddie reconnects it reloads pf.conf back to the pre vpn state, disconnects from the vpn then resets the network adapter back to normal. It then reconnects before loading the new pf.conf.

 

I was worried that at the point between Eddie disconnecting then reconnecting my normal ISP was being used to make the connection to AirVPN.

 

Yes,that is exactly what happens for me too.

The complete log off/log on cycle.

 

Network lock appear to stop the IP of the machine leaking okay but it also allows a browser I have open to connect to my ISP's DNS servers in the same instant as well.

[McLoEa 25]

Logs from the switches today.

 

! 2016.03.18 09:10:23 - Connecting to Ancha (Netherlands, Alblasserdam)

. 2016.03.18 09:10:23 - OpenVPN > OpenVPN 2.3.8 x86_64-redhat-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [iPv6] built on Aug 4 2015

. 2016.03.18 09:10:23 - OpenVPN > library versions: OpenSSL 1.0.2d-fips 9 Jul 2015, LZO 2.08

. 2016.03.18 09:10:23 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100

. 2016.03.18 09:10:23 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file

. 2016.03.18 09:10:23 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.03.18 09:10:23 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.03.18 09:10:23 - OpenVPN > Socket Buffers: R=[87380->262144] S=[16384->262144]

. 2016.03.18 09:10:23 - OpenVPN > Attempting to establish TCP connection with [AF_INET]213.152.162.164:443 [nonblock]

. 2016.03.18 09:10:24 - OpenVPN > TCP connection established with [AF_INET]213.152.162.164:443

. 2016.03.18 09:10:24 - OpenVPN > TCPv4_CLIENT link local: [undef]

. 2016.03.18 09:10:24 - OpenVPN > TCPv4_CLIENT link remote: [AF_INET]213.152.162.164:443

. 2016.03.18 09:10:24 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.162.164:443, sid=7075c34a 32e4240a

. 2016.03.18 09:10:24 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

. 2016.03.18 09:10:24 - OpenVPN > Validating certificate key usage

. 2016.03.18 09:10:24 - OpenVPN > ++ Certificate has key usage 00a0, expects 00a0

. 2016.03.18 09:10:24 - OpenVPN > VERIFY KU OK

. 2016.03.18 09:10:24 - OpenVPN > Validating certificate extended key usage

. 2016.03.18 09:10:24 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

. 2016.03.18 09:10:24 - OpenVPN > VERIFY EKU OK

. 2016.03.18 09:10:24 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

. 2016.03.18 09:10:25 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2016.03.18 09:10:25 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.03.18 09:10:25 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2016.03.18 09:10:25 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.03.18 09:10:25 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 AES128-GCM-SHA256, 4096 bit RSA

. 2016.03.18 09:10:25 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]213.152.162.164:443

. 2016.03.18 09:10:27 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

. 2016.03.18 09:10:28 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.5.0.1,comp-lzo no,route-gateway 10.5.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.5.0.134 255.255.0.0'

. 2016.03.18 09:10:28 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified

. 2016.03.18 09:10:28 - OpenVPN > OPTIONS IMPORT: LZO parms modified

. 2016.03.18 09:10:28 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified

. 2016.03.18 09:10:28 - OpenVPN > OPTIONS IMPORT: route options modified

. 2016.03.18 09:10:28 - OpenVPN > OPTIONS IMPORT: route-related options modified

. 2016.03.18 09:10:28 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

. 2016.03.18 09:10:28 - OpenVPN > ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=enp3s9 HWADDR=00:17:3f:d1:05:1e

. 2016.03.18 09:10:28 - OpenVPN > TUN/TAP device tun0 opened

. 2016.03.18 09:10:28 - OpenVPN > TUN/TAP TX queue length set to 100

. 2016.03.18 09:10:28 - OpenVPN > do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

. 2016.03.18 09:10:28 - OpenVPN > /usr/sbin/ip link set dev tun0 up mtu 1500

. 2016.03.18 09:10:28 - OpenVPN > /usr/sbin/ip addr add dev tun0 10.5.0.134/16 broadcast 10.5.255.255

. 2016.03.18 09:10:33 - OpenVPN > /usr/sbin/ip route add 213.152.162.164/32 via 192.168.1.1

. 2016.03.18 09:10:33 - OpenVPN > RTNETLINK answers: File exists

. 2016.03.18 09:10:33 - OpenVPN > ERROR: Linux route add command failed: external program exited with error status: 2

. 2016.03.18 09:10:33 - OpenVPN > /usr/sbin/ip route add 0.0.0.0/1 via 10.5.0.1

. 2016.03.18 09:10:33 - OpenVPN > /usr/sbin/ip route add 128.0.0.0/1 via 10.5.0.1

. 2016.03.18 09:10:33 - Starting Management Interface

. 2016.03.18 09:10:33 - OpenVPN > Initialization Sequence Completed

I 2016.03.18 09:10:33 - /etc/resolv.conf renamed to /etc/resolv.conf.airvpn as backup

I 2016.03.18 09:10:33 - DNS of the system updated to VPN DNS (Rename method: /etc/resolv.conf generated)

I 2016.03.18 09:10:33 - Flushing DNS

I 2016.03.18 09:10:33 - Checking route

I 2016.03.18 09:10:35 - Checking DNS

! 2016.03.18 09:10:35 - Connected.

. 2016.03.18 09:10:35 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100

. 2016.03.18 09:10:35 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info

. 2016.03.18 09:30:12 - Updating systems & servers data ...

. 2016.03.18 09:30:13 - Systems & servers data update completed

. 2016.03.18 09:46:51 - OpenVPN > [server] Inactivity timeout (--ping-restart), restarting

. 2016.03.18 09:46:51 - OpenVPN > SIGUSR1[soft,ping-restart] received, process restarting

. 2016.03.18 09:46:51 - OpenVPN > Restart pause, 5 second(s)

! 2016.03.18 09:46:51 - Disconnecting

. 2016.03.18 09:46:51 - Management - Send 'signal SIGTERM'

. 2016.03.18 09:46:51 - OpenVPN > MANAGEMENT: CMD 'signal SIGTERM'

. 2016.03.18 09:46:51 - OpenVPN > MANAGEMENT: Client disconnected

. 2016.03.18 09:46:51 - OpenVPN > Assertion failed at misc.c:779

. 2016.03.18 09:46:51 - OpenVPN > Exiting due to fatal error

. 2016.03.18 09:46:51 - Connection terminated.

I 2016.03.18 09:46:51 - DNS of the system restored to original settings (Rename method)

I 2016.03.18 09:47:35 - Checking authorization ...

! 2016.03.18 09:47:36 - Connecting to Atik (Netherlands, Alblasserdam)

. 2016.03.18 09:47:36 - OpenVPN > OpenVPN 2.3.8 x86_64-redhat-linux-gnu [sSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [iPv6] built on Aug 4 2015

. 2016.03.18 09:47:36 - OpenVPN > library versions: OpenSSL 1.0.2d-fips 9 Jul 2015, LZO 2.08

. 2016.03.18 09:47:36 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100

. 2016.03.18 09:47:36 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file

. 2016.03.18 09:47:36 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.03.18 09:47:36 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.03.18 09:47:36 - OpenVPN > Socket Buffers: R=[87380->262144] S=[16384->262144]

. 2016.03.18 09:47:36 - OpenVPN > Attempting to establish TCP connection with [AF_INET]213.152.161.9:443 [nonblock]

. 2016.03.18 09:47:37 - OpenVPN > TCP connection established with [AF_INET]213.152.161.9:443

. 2016.03.18 09:47:37 - OpenVPN > TCPv4_CLIENT link local: [undef]

. 2016.03.18 09:47:37 - OpenVPN > TCPv4_CLIENT link remote: [AF_INET]213.152.161.9:443

. 2016.03.18 09:47:37 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.9:443, sid=5c1ca20f 86775231

. 2016.03.18 09:47:37 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

. 2016.03.18 09:47:37 - OpenVPN > Validating certificate key usage

. 2016.03.18 09:47:37 - OpenVPN > ++ Certificate has key usage 00a0, expects 00a0

. 2016.03.18 09:47:37 - OpenVPN > VERIFY KU OK

. 2016.03.18 09:47:37 - OpenVPN > Validating certificate extended key usage

. 2016.03.18 09:47:37 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

. 2016.03.18 09:47:37 - OpenVPN > VERIFY EKU OK

. 2016.03.18 09:47:37 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

. 2016.03.18 09:47:39 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2016.03.18 09:47:39 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.03.18 09:47:39 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2016.03.18 09:47:39 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.03.18 09:47:39 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 AES128-GCM-SHA256, 4096 bit RSA

. 2016.03.18 09:47:39 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]213.152.161.9:443

. 2016.03.18 09:47:41 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

. 2016.03.18 09:47:41 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.5.0.1,comp-lzo no,route-gateway 10.5.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.5.1.97 255.255.0.0'

. 2016.03.18 09:47:41 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified

. 2016.03.18 09:47:41 - OpenVPN > OPTIONS IMPORT: LZO parms modified

. 2016.03.18 09:47:41 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified

. 2016.03.18 09:47:41 - OpenVPN > OPTIONS IMPORT: route options modified

. 2016.03.18 09:47:41 - OpenVPN > OPTIONS IMPORT: route-related options modified

. 2016.03.18 09:47:41 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

. 2016.03.18 09:47:41 - OpenVPN > ROUTE_GATEWAY 192.168.1.1/255.255.255.0 IFACE=enp3s9 HWADDR=00:17:3f:d1:05:1e

. 2016.03.18 09:47:41 - OpenVPN > TUN/TAP device tun0 opened

. 2016.03.18 09:47:41 - OpenVPN > TUN/TAP TX queue length set to 100

. 2016.03.18 09:47:41 - OpenVPN > do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

. 2016.03.18 09:47:41 - OpenVPN > /usr/sbin/ip link set dev tun0 up mtu 1500

. 2016.03.18 09:47:41 - OpenVPN > /usr/sbin/ip addr add dev tun0 10.5.1.97/16 broadcast 10.5.255.255

. 2016.03.18 09:47:46 - OpenVPN > /usr/sbin/ip route add 213.152.161.9/32 via 192.168.1.1

. 2016.03.18 09:47:46 - OpenVPN > RTNETLINK answers: File exists

. 2016.03.18 09:47:46 - OpenVPN > ERROR: Linux route add command failed: external program exited with error status: 2

. 2016.03.18 09:47:46 - OpenVPN > /usr/sbin/ip route add 0.0.0.0/1 via 10.5.0.1

. 2016.03.18 09:47:46 - OpenVPN > /usr/sbin/ip route add 128.0.0.0/1 via 10.5.0.1

. 2016.03.18 09:47:46 - Starting Management Interface

. 2016.03.18 09:47:46 - OpenVPN > Initialization Sequence Completed

I 2016.03.18 09:47:46 - /etc/resolv.conf renamed to /etc/resolv.conf.airvpn as backup

I 2016.03.18 09:47:46 - DNS of the system updated to VPN DNS (Rename method: /etc/resolv.conf generated)

I 2016.03.18 09:47:46 - Flushing DNS

I 2016.03.18 09:47:46 - Checking route

I 2016.03.18 09:47:47 - Checking DNS

! 2016.03.18 09:47:48 - Connected.

. 2016.03.18 09:47:48 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100

. 2016.03.18 09:47:48 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info

. 2016.03.18 10:00:16 - Updating systems & servers data ...

. 2016.03.18 10:00:16 - Systems & servers data update completed

[McLoEa 25]

. 2016.03.18 09:46:51 - OpenVPN > [server] Inactivity timeout (--ping-restart), restarting

. 2016.03.18 09:46:51 - OpenVPN > SIGUSR1[soft,ping-restart] received, process restarting

. 2016.03.18 09:46:51 - OpenVPN > Restart pause, 5 second(s)

! 2016.03.18 09:46:51 - Disconnecting

. 2016.03.18 09:46:51 - Management - Send 'signal SIGTERM'

. 2016.03.18 09:46:51 - OpenVPN > MANAGEMENT: CMD 'signal SIGTERM'

. 2016.03.18 09:46:51 - OpenVPN > MANAGEMENT: Client disconnected

. 2016.03.18 09:46:51 - OpenVPN > Assertion failed at misc.c:779

. 2016.03.18 09:46:51 - OpenVPN > Exiting due to fatal error

. 2016.03.18 09:46:51 - Connection terminated.

I 2016.03.18 09:46:51 - DNS of the system restored to original settings (Rename method)

I 2016.03.18 09:47:35 - Checking authorization ...

! 2016.03.18 09:47:36 - Connecting to Atik (Netherlands, Alblasserdam)

 

looks like that is why?

[Khariz 109]

"Assertion failed at misc.c:779" is mentioned in over 20 threads on this forum, just FYI.

[McLoEa 25]

Could you link me to the most relevant one please?

[me.moo@posteo.me 80]

Ever heard of using the search facility like @Khariz did?

[McLoEa 25]

What's happening here,one day helpful,the next not?

 

Of course I looked but there are a ton of threads there and if you have prior knowledge of the solution to the issue then is it not easier for you to just share that?