ANSWERED Guide - Fix for TAP adapter in Windows

[Flx 76]

Hello,

Ever wonder why Windows 10 automatically logs you off??

Inactivity or so they say...Ya right!

That is connected or not connected to the/a VPN server.

The file is uploaded.

tap.zip

Regards,

Flx

[Flx 76]

Any concerns/comments/suggestion(s) you have?

Do reply,

Regards,

Flx

[Flx 76]

timeout2.zip file/script for those that want/need to use it....for Windows 10.

Details:

1.tap.zip file/script.

restores/keeps tap/VPN adapters in DHCP mode. Keep your VPN connected @ all times(keep-alive).

2.timeout2.zip file/script.

You can now use this timeout2.bat file/keep it running(small window/background/minimized)..when VPN is connected or NOT.

for me IT DOES STOP/PREVENT Windows 10 from automatic log off.

Regards,

Flx

[Flx 76]

For the tap.ipv4.ipv6.bat here is an easier/updated one->tap.ipv4.ipv6.version2.bat.

CHANGES:

-timeout value now set to A RANDOM VALUE-

-NO NEED FOR USER INPUT(Display Value).

tap.ipv4.ipv6.version2.bat.zip

Enjoy,

Flx

[Flx 76]

ERRORS THAT YOU MAY RUN INTO:
 

The specified service does not exist as an installed service.

The application was unable to start correctly.

If you have the .bat of  file on your Desktop for example and get the above "error(s)" when you right click Run as Admin.

How to solve that:

Open Task Manager->File->Run New Task->cmd.exe with admin privileges.

Navigate where the .bat is located on your computer.--->cd %userprofile%\Desktop

Type the name of the file tap.bat/tap.ipv4.ipv6.version2.bat.

Hit Enter.

Hope this helps,

Regards,

Flx

[Flx 76]

Hello,

This file/script dedicated to AirVPN community/members.

File uploaded.

tap.v3.bat.zip

Enjoy,

Flx

[Flx 76]

Comodo Rules-----stunnel.exe-------

Two examples:

1.Connect from main LAN interface to global.servers to SSL.port(s)(destination ports)

2.Connect NOT from airvpn-iprange or tap.mac.ipv6.link.local.fe80 to global.servers to SSL.ports(destination.ports)

Enjoy,

Flx

[Flx 76]

Comodo Rule---to allow IPV6(FDE)----Windows Operating System(pid 0) NOT System(pid 4)---Example(image below)

Enjoy,

Flx

[Flx 76]

This file/script....will help those that run Windows 10 and get that DISK 100% Error(s)....or related to Overloading CPUs etc.

Watch out for the Backup service which I find to be one of the reason(s) to cause this.

Most affected are laptops. In that case go to the Power options->Processor power management->

1.System cooling policy->set On battery and Plugged it as Passive

2.Maximum processor state->set On battery to 90% and Plugged in to 20-40%

P.S.THAT IS HOW i FIXED/RESOLVED this "problem(s)" ON THE 2 LAPTOPS I HAVE RUNNING WINDOWS 10 PRO OS.

Modify the script below to your own Config to Suspend/Disable the services that you don't need (e.g. Cortana/others.)

disable.PID.services.bat.zip

[Flx 76]

Second Generation AirVPN servers.

Windows 10

to allow IPv6(FDE)

Windows System Operating (PID 0) set it as such ->  local.IPv6

System (PID 4) set it as local

Windows 7

to allow IPv6(FDE) turns out that BOTH

Windows System Operating (PID 0) AND System (PID 4) need to be set as local.IPv6

Enjoy,

Flx

[Flx 76]

Update for ---------svchost.exe-----------to allow IPV6(fde6)------------

Enjoy,

Flx

[Flx 76]

Comodo-----Global Rules-----

Global.Rules

Part1.

Part2....(continued)

You'll notice I left icmpv4 out of my Global Rules--->to Block icmpv4.

Enjoy,

Flx

[Flx 76]

OpenVPN app/process

If for openvpn.exe and openvpn-gui.exe you set openvpn rule as this--->>> https://airvpn.org/index.php?app=core&module=attach&section=attach&attach_rel_module=post&attach_id=26294

1. Your first connection ----

client to AirVPN server your first connection is established.(LAN.IP ------> AIRVPN SERVER1)....ASSIGNED IP 10.9.X.X.

2. Your second connection ---

ALLOW 1-2 MINUTES FOR COMODO FIREWALL TO "REGULATE" IT. YOU CAN SEE THIS IN THE "vIEW CONNECTIONS"--

INITIALLY WILL BE "ASSIGNED IP 10.9.X.X." -----> AIRVPN.SERVER2.

WHICH WILL CHANGE/MODIFY INTO (LAN.IP-----> AIRVPN.SERVER2).

Regards,

Flx

[Flx 76]

Windows 10

to allow IPv6(FDE) it looks that in Comodo->Application Rules->

WIndows System Operating (PID 0) set it as such ->  local.IPv6

System (PID 4) set it as local

Windows 10 OS-->Some of you will find that IPV6-ICMP is blocked by the System.

In that case set System(PID 4) and Windows Operating System(PID 0) as local.IPv6 

And now it will work.

Happy browsing,

Flx

[Flx 76]

Thanks for this post... this does describe the problem I've been having. My tunnel seems to collapse at 11:59 am and pm with at lest one more random time during the day.

Check your ISP modem(status). Maybe your ISP is doing a reboot at that time @11:59 am pm. In my area they reboot @3:00am to 5:00am. It depends.

Better yet check the logs in your modem(ISP)....you'll see when they reboot. Normal operation of an ISP. I know it is frustrating...

[Flx 76]

I see they updated https://airvpn.org/topic/3405-windows-comodo-prevent-leaks/

[Flx 76]

Quote

FOR------------svchost.exe----------------

where svc.block contains the blocked ports 80/443/others

---------------------------------------------------

1.Add to svc.block aka svc.blocked.ports the ports you wish to block.

Block svchost.exe process to send/receive data on the ports you specify.(image below)

2.In case you consider you do not need this-->then set svchost.exe-->>"Outgoing Only/Allowed" and see what happens.

Regards,

Flx

[Flx11 10]

svchost.exe-->>"Outgoing Only/Allowed"

Eddie app

Set airvpn.exe and svchost.exe-->>"Outgoing Only".

Add to svc.block aka svc.blocked.ports the ports you wish to block.

Do not include port 53 in the list.

[Flx 76]

Best way/scenario-->IP-Shifting(Not MAC shifting).

1. SSL Connect to an AirVPN First Generation Server.(IPv4 only)

2. UDP Connect to an AirVPN Second Generation Server.(IPv4 and IPv6 address)-->>TLS-Crypt Entry 3 or 4.

IP-Shifting--2 IPv4(10.50.1.x 10.9.x.x) and 1 IPv6 address(fde6:).

Let Comodo "regulate" the 1. and 2. (explained above).

Regards,

Flx

[Flx11 10]

1. SSL Connect to an AirVPN First Generation Server.(IPv4 only)

Sure you can SSL connect to a Second Generation AirVPN server if that is your choice.

Make sure "Assigned IP" for Server 1 and Server 2 are not on the same "segment" for IPv4-->>e.g. 10.9.1.x 10.9.244.x.

You want them both to work at the same time-->>e.g 10.7.x.x 10.9.x.x

2. UDP Connect to an AirVPN Second Generation Server.(IPv4 and IPv6 address)

The second IPv4 & IPv6 "Assigned IP" will be provided by Server 2(Generation 2).

[Flx 76]

Those of you that want to achieve the BEST speed.

Use 2 UDP connected AirVPN Generation 2 servers-->>Entry 3 or Entry 4.

Use the examples/facts/scripts/suggestions.

Enjoy,

Flx

[Flx 76]

Quote

Make sure "Assigned IP" for Server 1 and Server 2 are not on the same "segment" for IPv4-->>e.g. 10.9.1.x 10.9.244.x.

"Segmenting" the Network Zones->airvpn.ip-range zone--example image---

 Eventually you will have to.(2 or more connections/sessions from the same device.)

[Flx 76]

tap.bat UPDATE - intended for new members but anyone can make use of it.

tap.update.output.to.file.bat.zip

Changes/Details:

3 new files .txt by the name:

1.interfaces.txt

2.routing.table.txt

3.tap.file.run.check.txt.

CREATED in the same directory where tap.update.output.to.file.bat resides.

PURPOSE:TROUBLESHOOTING/STATUS.

Enjoy,

Flx

[Flx 76]

GENERATION 2 SERVERS - DNS UPDATE/INFO

Warning: on "Generation 2" servers only 10.4.0.1 will be available as DNS server address in addition to the VPN gateway address (which can also be reached with DNS queries).

 

10.5.0.1 is no more reachable.

 

Kind regards

[Flx 76]

Remote Operations/Apps---RealVNC---image example---
Server:

Viewer:

Follow this and make your own Comodo Firewall rule depending on the app choice(e.g. Remote Desktop etc.).

VNC Server and Viewer now only work over/behind an/the AirVPN server.

Any other third party connection such as 165.x.x.x/188.x.x.x from NTT Merck & Co. networks etc. is blocked/dropped.

-------------------------------------------------------

vnc.servers.allowed==AirVPN servers(define it by IP range->184.75.0.0-184.75.255.255 or single server IP->184.75.221.170)

portz.allowed.443.80.53==port 443 is the intended blocked port.

------------------------------------------------------

Enjoy,

Flx