Eddie 2.11beta available

[Staff 9972]

 

I reinstalled Ubuntu 16.10 today (alternative one via torrent), and ufw was disabled by default. IPtables empty:

 

 

The problem is currently not reproducible. Check the router, maybe you have some ICMP limit on the router packet filtering/inspection tool.

 

Kind regards

[Khariz 109]

This is on Windows 10.  With 2.11.7 I am experiencing DNS leaks when Network Lock is set to WFP (IPleak.net is showing ONLY my ISP DNS if I use Windows Filtering Platform)  .  If I set Network Lock to Windows Firewall, I have no leaks at all.   This was not happening in 2.11.3.

[Staff 9972]

This is on Windows 10.  With 2.11.7 I am experiencing DNS leaks when Network Lock is set to WFP (IPleak.net is showing ONLY my ISP DNS if I use Windows Filtering Platform)  .  If I set Network Lock to Windows Firewall, I have no leaks at all.   This was not happening in 2.11.3.

 

Please clarify, you say a thing and the opposite of it. Also post "ipconfig /all" output taken when the problem has just occurred.

 

Kind regards

[Khariz 109]

What do you mean I say the opposite?  I state that ipleak.net is showing my ISP DNS (which is a DNS leak).  WFP Network Lock isn't working for me in 2.11.7.  It was working in 2.11.3.  Windows Firewall Network Lock still works fine.

 

Here is my ipnconfig /all with WFP Network lock (where I have the leak):

 

 

Windows IP Configuration
 
   Host Name . . . . . . . . . . . . : SimmyPC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : lan
 
Ethernet adapter Ethernet:
 
   Connection-specific DNS Suffix  . : lan
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : 40-61-86-E6-1E-B0
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.55.204(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Sunday, November 20, 2016 2:12:01 PM
   Lease Expires . . . . . . . . . . : Monday, November 21, 2016 3:13:09 AM
   Default Gateway . . . . . . . . . : 192.168.55.1
   DHCP Server . . . . . . . . . . . : 192.168.55.1
   DNS Servers . . . . . . . . . . . : 10.4.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled
 
Ethernet adapter Ethernet 2:
 
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-2A-D1-03-2C
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.4.21.75(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Lease Obtained. . . . . . . . . . : Sunday, November 20, 2016 3:13:04 PM
   Lease Expires . . . . . . . . . . : Monday, November 20, 2017 3:13:09 PM
   Default Gateway . . . . . . . . . :
   DHCP Server . . . . . . . . . . . : 10.4.255.254
   DNS Servers . . . . . . . . . . . : 10.4.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

And here is my ipconfig /all with Windows Firewall Network Lock, where I do not have the leak:

 

 

 
Windows IP Configuration
 
   Host Name . . . . . . . . . . . . : SimmyPC
   Primary Dns Suffix  . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : lan
 
Ethernet adapter Ethernet:
 
   Connection-specific DNS Suffix  . : lan
   Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
   Physical Address. . . . . . . . . : 40-61-86-E6-1E-B0
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.55.204(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Sunday, November 20, 2016 2:12:01 PM
   Lease Expires . . . . . . . . . . : Monday, November 21, 2016 3:19:17 AM
   Default Gateway . . . . . . . . . : 192.168.55.1
   DHCP Server . . . . . . . . . . . : 192.168.55.1
   DNS Servers . . . . . . . . . . . : 10.4.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled
 
Ethernet adapter Ethernet 2:
 
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : TAP-Windows Adapter V9
   Physical Address. . . . . . . . . : 00-FF-2A-D1-03-2C
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 10.4.21.75(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.0.0
   Lease Obtained. . . . . . . . . . : Sunday, November 20, 2016 3:19:12 PM
   Lease Expires . . . . . . . . . . : Monday, November 20, 2017 3:19:17 PM
   Default Gateway . . . . . . . . . :
   DHCP Server . . . . . . . . . . . : 10.4.255.254
   DNS Servers . . . . . . . . . . . : 10.4.0.1
   NetBIOS over Tcpip. . . . . . . . : Enabled
 

They are exactly the same.  It has to be something to do with the WFP rules.  The windows firewall rules are working fine.  

 

And yes, I realize that I could manually change the DNS server in the TAP-Adapter to the 10.4.21.X range, but this post is just to report that the Eddie Client is not functioning the way that it used to with respect to WFP.

[Staff 9972]

What do you mean I say the opposite?  I state that ipleak.net is showing my ISP DNS (which is a DNS leak).  WFP Network Lock isn't working for me in 2.11.7.  It was working in 2.11.3.  Windows Firewall Network Lock still works fine.

 

The argument is that Network Lock was never meant to prevent DNS leaks. It could do that coincidentally in Eddie 2.10 or older versions (by blocking IPv6 outgoing DNS queries), but that's irrelevant in this context. In Eddie 2.11, it is true that WFP is used in an attempt to prevent DNS leaks, but that's unrelated to Network Lock.

 

From the output of ipconfig you posted, all of your interfaces are set with VPN DNS in both cases, so no DNS leak is possible, Network Lock or not. Please open a ticket including a system report and screenshots of the alleged leaks for further investigation.

 

Kind regards

[Khariz 109]

Just one interesting additional piece of information: if I leave network lock OFF, I have no DNS leaks. It's only if network lock is set to WFP that the leak appears. If I don't use the feature at all, I have no leaks.

 

It really doesn't bother me. (A) I'm content to use Windows Firewall method when using network lock. ( I mostly use OpenVPN (instead of Eddie) with the block-outside-DNS argument, which works perfectly fine for my day to day use.

 

I probably won't open a ticket because I don't use the feature anyway. Just thought I would point it out. Thanks for looking!

[Staff 9972]

Just one interesting additional piece of information: if I leave network lock OFF, I have no DNS leaks. It's only if network lock is set to WFP that the leak appears. If I don't use the feature at all, I have no leaks.

 

Yes, that's definitely interesting (and surprising). If you wish to help us reproduce the issue, please send us a system report (in a ticket).

 

Kind regards

[LZ1 672]

Tried it on Win 7 & 8 64-bit with the same client version and there's no leaks for me.

[LZ1 672]

Staff, maybe it's a silly thing, but maybe there should be a little notification during protocol changes. Like a little pop-up which says something like "Changes will come into effect on next restart ", after you click "Save". As there's otherwise very little indication that anything changed. 2.10 made it so clear that a given protocol had been selected, due to the little radial buttons .

 

I've also thought that it would be nice if there was a little warning that your account password is included in the logs and should thus be deleted manually, when you click the lifebelt icon; just like there's a warning for enabling Network Lock: "Warning: Your password is visible in this type of log. Please delete it before sharing these logs."

 

Lastly, I've often thought it would be nice if the logs could be paused in real-time. It's a little annoying when trying to read the logs while Eddie is running (because you want to see how long an error persists, for example, without disconnecting), but can't really do it without stopping it . Maybe it's just me.

 

They're small things of course ^^. I just thought I'd say it, as it's Christmas soon anyway haha.

[Guest]

 ...that your account password is included in the logs ... 

 

What??! Tell me more

 

Have I spread my password with my logs here?

 

You and your sneaky log guide lol   You obvisouly long for our passwords!

 

Also a big +1 for the Log pausing. Good idea. Always annoyed me

[LZ1 672]

 

 ...that your account password is included in the logs ... 

 

What??! Tell me more

 

Have I spread my password with my logs here?

 

You and your sneaky log guide lol   You obvisouly long for our passwords!

 

Also a big +1 for the Log pausing. Good idea. Always annoyed me

Yay a supporter! Sweet. But this one is too clever, he discovered my plan!

 

Only if you press the button with the lifebelt . Otherwise they're not included. The lifebelt icon provides system information and can be useful. Thus it also includes your login/password. The regular logs don't, so you likely haven't, don't worry . But I've seen people who have and thus I think it's appropriate to warn people.

[Staff 9972]

I've also thought that it would be nice if there was a little warning that your account password is included in the logs and should thus be deleted manually, when you click the lifebelt icon; just like there's a warning for enabling Network Lock: "Warning: Your password is visible in this type of log. Please delete it before sharing these logs."

 

No, the password is not included in Eddie 2.11 system report. It's replaced by the string "(omissis)".

[LZ1 672]

Oh okay, that's gud. If only we had people like you in government, Staff, then we'd really get stuff done! lol

[huntsman 2]

Hi LZ1,

 

Looking forward to the V2 or even the V3 update and soon I hope. It's taking a while. 

My V2.10.3 is always blocking Chrome in my WIndows 10 V1607 14393.447 firewall until I allow it when I have the 2.10.3 lock enabled. It happens when I have enabled AirVPN at boot. I've also noticed TAP V9.0.0.21 is a 5/11/2014 vintage !

There must be a later version for both AirVPN and TAP by now but it's not obvious ! ?

 

Not sure which government your referring to, but the same can be said for my government...

Australian politicians are all so intent on political correctness, it's demoralizing !

We have the dumbest Attorney General ever elected. Don't get me started on our PM or Opposition leader. Both are air heads which has nothing to do with AirVPN. Keep up the good work guys...

 

Edited V1606 meant V1607.

[Keksjdjdke 35]

Will GCM data channel cipher be supported when openvpn 2.4.0 is released?

Link to Openvpn 2.4.0 changelog https://github.com/OpenVPN/openvpn/blob/master/Changes.rst

[LZ1 672]

Hi LZ1,

 

Looking forward to the V2 or even the V3 update and soon I hope. It's taking a while. 

My V2.10.3 is always blocking Chrome in my WIndows 10 V1607 14393.447 firewall until I allow it when I have the 2.10.3 lock enabled. It happens when I have enabled AirVPN at boot. I've also noticed TAP V9.0.0.21 is a 5/11/2014 vintage !

There must be a later version for both AirVPN and TAP by now but it's not obvious ! ?

 

Not sure which government your referring to, but the same can be said for my government...

Australian politicians are all so intent on political correctness, it's demoralizing !

We have the dumbest Attorney General ever elected. Don't get me started on our PM or Opposition leader. Both are air heads which has nothing to do with AirVPN. Keep up the good work guys...

 

Edited V1606 meant V1607.

Why don't you try the experimental version then, haha? It includes a different way of handling firewalling, in addition to updates to the software you mentioned.

You could also update your TAP drivers manually if you wanted to .

 

Glad we can agree on government lol. You should see the Icelandic government these days - I think you'd like it, whatwith the pirate party and all.

[huntsman 2]

@LZ1,

I've sent a support request asking for the Eddie Experimental V2.11 location. It's not obvious, (Win V10 64bit) They're well hidden, and the search function(s) are useless ? 

 

I tried manually updating my TAP back before V2.10.3 was released and it failed. Don't remember why, it's so far back now.

I'll try again, hoping there aren't any conflicts ?

Windows hasn't updated TAP to my knowledge !

Where does Air hide TAP drivers ? 

 

I checked AirVPN Enter Page and Software but nothing about other options, only Windows V2.10.3 !    

 

Like the sound of your Pirate Party...kick @RsE ??

I'd love to see a political party with some guts take over in Ozz. Unions and socialists are running the country. Neither have a majority. 

[LZ1 672]

Haha, mate, if you check the guide in my signature it'll point you right to it. It's on the page where you got the standard client - just under "Other versions".

There's a thread stickied in the troubleshooting forum regarding TAP drivers and their location - it's an external site.

[huntsman 2]

Thanks,

Staff has pointed me to it, but the .exe file, eddie-ui_2.11_windows8_x64_installer.exe changelog only has V2.11.6.  has no details in it's properties so I don't know if it's V2.11.6 or V2.11.7. I've asked staff to update me.  I'm waiting for staff to reply. I'm much happier when all details are known, or as many as possible, at least. I don't like flying blind, especially using experimental.

IE: The .exe file is called windows8, I'm using windows10. I know the link said 7, 8.1 or 10 but that's no comfort !   It's a worry that bothers me ! Naming conventions are important for those of us who aren't privy to the developers work.

[LZ1 672]

lol, I think you worry too much bro. There's no other version for Windows 10, than the one which you mentioned, which mentions 10. The experimental isn't dangerous haha. If you download the wrong version somehow, don't worry. As long as you click on "Experimental" in the "Other versions" section, you'll get the latest one available.

[huntsman 2]

 maybe !

however, lack of attention to detail is why systems fail.

My hardware engineering training is amazed with the appalling lack of attention to detail, many so called software engineers ignore. (coders more likely !)

I have received staff's assurance I have the latest .exe so I'm prepared to fly with it & hope for the best. Not something I'd do for critical systems ! I'll run with it on my test system for now. 

good chatting with you.

[Staff 9972]

 maybe !

however, lack of attention to detail is why systems fail.

My hardware engineering training is amazed with the appalling lack of attention to detail, many so called software engineers ignore. (coders more likely !)

I have received staff's assurance I have the latest .exe so I'm prepared to fly with it & hope for the best. Not something I'd do for critical systems ! I'll run with it on my test system for now. 

good chatting with you.

 

 

Select "AirVPN" > "About" menu item in Eddie main window to see the version you're running.

[huntsman 2]

Thanks. 

Have loaded Windows 64bit V2.11.7 experimental over 3hrs ago and it's looking good. No obvious problems so far. Screen refresh rate is much,much faster across the Pacific. In fact compared to V2.10.3 it's lightning fast on my AMD Athlon64 Dual Processor with Chrome's latest. Great work guys. Will see how it boots up in the morning.

[greenclaydog 6]

I would like to add this to the list of potential bugs in the Eddie beta.

 

https://airvpn.org/topic/20335-vpn-over-obfs-tor-does-not-work/

 

I am currently using 2.11.7 beta

 

VPN over obfs Tor outright crashes Eddie 2.10 

[serenacat 83]

"My hardware engineering training is amazed with the appalling lack of attention to detail, many so called software engineers ignore."

But, but, ... Software engineers sometimes work 15 hour days getting some fancy new feature designed, programmed, tested; or skip lunch because obsessed with tracking down some weird bug; and finally head home at 11 PM; without doing the "obvious" "clerical" stuff.

 

Software teams can benefit from having a person with perfectionist and obsessive detail (valuable, no offense) psychology in a "release" role, pulling versions from the repository, making, running the test suites, and doing the labelling and packaging, and supporting distribution.

 

It does seem below expectations to not have different versions with explicit file names for the .msi or .deb etc, visible in the URL so you can confirm what you are downloading. On W7 they end up in the Downloads folder with names like eddie-ui_2.11_windows_x64_installer(2).exe, and really need to rename to keep rollback organised. Especially for different versions of system drivers. Especially for "beta"s.