ANSWERED DNS breaks when using AirVPN on 5GHz network

[DrKabuki 3]

Hello all,

 

I have what appears to be a strange issue. I recently purchased a new AC router, which works great and delivers >90Mbps to my PC. I can use AirVPN just fine with the standard 2.4GHz band, but if I disconnect the VPN and switch to my 5GHz network, the VPN connects then shortly after ALL DNS requests will fail. I have tried everything I can possibly think of, even looking at old topics on this forum (there aren't many for this issue) but none have a solution. 

 

Here is a list in no particular order of what I have tried so far:

• Reinstalling both Eddie and the TAP driver, using the latest stable version
• Manually forcing the DNS of my adapter to use 10.4.0.1, which works for about 1 minute then DNS dies again
• Completely uninstalling my network card drivers (I'm using the Intel Dual Band Wireless-AC 8260) including registry entries, AppData, ect. and updating to the latest version
• Resetting my router (here's a link to the router I purchased) to the factory settings. I did this twice
• I can verify with ipconfig /all that all interfaces are using the correct 10.4.0.1 DNS address while the VPN is running
• Using the "Ensure DNS lock" and "Force all network interfaces for DNS" settings in Eddie
• Praying to the network gods
• A LOT of reboots

I'm not sure what else to try. I'll attach a picture with the exact DNS error Chrome gives me, as well as a log from Eddie. Thanks in advance for any help.

 

 

Here's the log:

 

I 2017.02.06 17:25:45 - Session starting.
. 2017.02.06 17:25:45 - IPv6 disabled with packet filtering.
I 2017.02.06 17:25:45 - Checking authorization ...
! 2017.02.06 17:25:45 - Connecting to Yildun (United States, Miami)
. 2017.02.06 17:25:45 - OpenVPN > OpenVPN 2.4.0 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 29 2017
. 2017.02.06 17:25:45 - OpenVPN > Windows version 6.2 (Windows 8 or greater) 64bit
. 2017.02.06 17:25:45 - OpenVPN > library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
. 2017.02.06 17:25:45 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2017.02.06 17:25:45 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.02.06 17:25:45 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.02.06 17:25:45 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]173.44.55.178:443
. 2017.02.06 17:25:45 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144]
. 2017.02.06 17:25:45 - OpenVPN > UDP link local: (not bound)
. 2017.02.06 17:25:45 - OpenVPN > UDP link remote: [AF_INET]173.44.55.178:443
. 2017.02.06 17:25:46 - OpenVPN > TLS: Initial packet from [AF_INET]173.44.55.178:443, sid=d36feaf3 c3b9b133
. 2017.02.06 17:25:46 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
. 2017.02.06 17:25:46 - OpenVPN > Validating certificate key usage
. 2017.02.06 17:25:46 - OpenVPN > ++ Certificate has key usage 00a0, expects 00a0
. 2017.02.06 17:25:46 - OpenVPN > VERIFY KU OK
. 2017.02.06 17:25:46 - OpenVPN > Validating certificate extended key usage
. 2017.02.06 17:25:46 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2017.02.06 17:25:46 - OpenVPN > VERIFY EKU OK
. 2017.02.06 17:25:46 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
. 2017.02.06 17:25:46 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
. 2017.02.06 17:25:46 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]173.44.55.178:443
. 2017.02.06 17:25:47 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
. 2017.02.06 17:25:47 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.36.23 255.255.0.0'
. 2017.02.06 17:25:47 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified
. 2017.02.06 17:25:47 - OpenVPN > OPTIONS IMPORT: compression parms modified
. 2017.02.06 17:25:47 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified
. 2017.02.06 17:25:47 - OpenVPN > OPTIONS IMPORT: route options modified
. 2017.02.06 17:25:47 - OpenVPN > OPTIONS IMPORT: route-related options modified
. 2017.02.06 17:25:47 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
. 2017.02.06 17:25:47 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.02.06 17:25:47 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.02.06 17:25:47 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.02.06 17:25:47 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.02.06 17:25:47 - OpenVPN > interactive service msg_channel=0
. 2017.02.06 17:25:47 - OpenVPN > ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=16 HWADDR=44:85:00:ac:70:33
. 2017.02.06 17:25:47 - OpenVPN > open_tun
. 2017.02.06 17:25:47 - OpenVPN > TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{387D5523-B267-4881-9D3C-5FF1E757B3BF}.tap
. 2017.02.06 17:25:47 - OpenVPN > TAP-Windows Driver Version 9.21
. 2017.02.06 17:25:47 - OpenVPN > Set TAP-Windows TUN subnet mode network/local/netmask = 10.4.0.0/10.4.36.23/255.255.0.0 [sUCCEEDED]
. 2017.02.06 17:25:47 - OpenVPN > Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.36.23/255.255.0.0 on interface {387D5523-B267-4881-9D3C-5FF1E757B3BF} [DHCP-serv: 10.4.255.254, lease-time: 31536000]
. 2017.02.06 17:25:47 - OpenVPN > Successful ARP Flush on interface [4] {387D5523-B267-4881-9D3C-5FF1E757B3BF}
. 2017.02.06 17:25:47 - OpenVPN > do_ifconfig, tt->did_ifconfig_ipv6_setup=0
. 2017.02.06 17:25:52 - OpenVPN > TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
. 2017.02.06 17:25:52 - OpenVPN > C:\Windows\system32\route.exe ADD 173.44.55.178 MASK 255.255.255.255 192.168.0.1
. 2017.02.06 17:25:52 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=10 and dwForwardType=4
. 2017.02.06 17:25:52 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.02.06 17:25:52 - OpenVPN > C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.0.1
. 2017.02.06 17:25:52 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
. 2017.02.06 17:25:52 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.02.06 17:25:52 - OpenVPN > C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.0.1
. 2017.02.06 17:25:52 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
. 2017.02.06 17:25:52 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.02.06 17:25:52 - Starting Management Interface
. 2017.02.06 17:25:52 - OpenVPN > Initialization Sequence Completed
. 2017.02.06 17:25:52 - DNS leak protection with packet filtering enabled.
. 2017.02.06 17:25:52 - DNS of a network adapter forced (Intel® Dual Band Wireless-AC 8260, from automatic (8.8.8.8,8.8.4.4) to 10.4.0.1)
. 2017.02.06 17:25:52 - DNS of a network adapter forced (TAP-Windows Adapter V9, from automatic (10.4.0.1) to 10.4.0.1)
. 2017.02.06 17:25:52 - Flushing DNS
I 2017.02.06 17:25:55 - Checking route
I 2017.02.06 17:25:55 - Checking DNS
! 2017.02.06 17:26:07 - Connected.

[LZ1 672]

Hello!

 

I'll give you a +1 just for writing such a beautifully formatted and informative OP, haha.

 

Please try and turn off IPv6, also on your TUN adapter - as it can cause problems now and then.

 

What version of Eddie are you running? Your logs weren't from line 1 so it wasn't possible to see. It would also be interesting to see if other clients on the same network can connect with Eddie via 5Ghz.

 

You should also be aware that when praying to network Gods such as zhang888, it's very important to use the right protocol. What the right one is, is a matter of discussion.

[DrKabuki 3]

Thank you! I appreciate that   I'm glad someone can benefit from my passion for good formatting besides me lol.

 

First, here is a complete log from line 1 connecting using my 2.4 network:

 

I 2017.02.07 14:09:01 - Eddie client version: 2.11.15 / windows_x64, System: Windows, Name: Microsoft Windows NT 10.0.10586.0, Mono/.Net Framework: v4.0.30319
. 2017.02.07 14:09:01 - Reading options from C:\Users\Admin\AppData\Local\AirVPN\AirVPN.xml
. 2017.02.07 14:09:02 - Data path: C:\Users\Admin\AppData\Local\AirVPN
. 2017.02.07 14:09:02 - Application path: C:\Program Files\AirVPN
. 2017.02.07 14:09:02 - Executable path: C:\Program Files\AirVPN\AirVPN.exe
. 2017.02.07 14:09:02 - Command line arguments (1): path="home"
. 2017.02.07 14:09:02 - Operating System: Microsoft Windows NT 10.0.10586.0
I 2017.02.07 14:09:02 - OpenVPN Driver - TAP-Windows Adapter V9, version 9.21.2
I 2017.02.07 14:09:02 - OpenVPN - Version: 2.4.0 - OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09 (C:\Program Files\AirVPN\openvpn.exe)
I 2017.02.07 14:09:02 - SSH - Version: plink 0.67 (C:\Program Files\AirVPN\plink.exe)
I 2017.02.07 14:09:02 - SSL - Version: stunnel 5.40 (C:\Program Files\AirVPN\stunnel.exe)
I 2017.02.07 14:09:21 - Session starting.
. 2017.02.07 14:09:21 - Updating systems & servers data ...
. 2017.02.07 14:09:22 - IPv6 disabled with packet filtering.
I 2017.02.07 14:09:39 - Checking authorization ...
! 2017.02.07 14:09:51 - Connecting to Yildun (United States, Miami)
. 2017.02.07 14:09:51 - Systems & servers data update completed
. 2017.02.07 14:10:03 - OpenVPN > OpenVPN 2.4.0 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 29 2017
. 2017.02.07 14:10:03 - OpenVPN > Windows version 6.2 (Windows 8 or greater) 64bit
. 2017.02.07 14:10:03 - OpenVPN > library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
. 2017.02.07 14:10:03 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2017.02.07 14:10:03 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.02.07 14:10:03 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.02.07 14:10:03 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]173.44.55.178:443
. 2017.02.07 14:10:03 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144]
. 2017.02.07 14:10:03 - OpenVPN > UDP link local: (not bound)
. 2017.02.07 14:10:03 - OpenVPN > UDP link remote: [AF_INET]173.44.55.178:443
. 2017.02.07 14:10:03 - OpenVPN > TLS: Initial packet from [AF_INET]173.44.55.178:443, sid=c773e30e e518d2db
. 2017.02.07 14:10:03 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
. 2017.02.07 14:10:03 - OpenVPN > Validating certificate key usage
. 2017.02.07 14:10:03 - OpenVPN > ++ Certificate has key usage 00a0, expects 00a0
. 2017.02.07 14:10:03 - OpenVPN > VERIFY KU OK
. 2017.02.07 14:10:03 - OpenVPN > Validating certificate extended key usage
. 2017.02.07 14:10:03 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2017.02.07 14:10:03 - OpenVPN > VERIFY EKU OK
. 2017.02.07 14:10:03 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
. 2017.02.07 14:10:03 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
. 2017.02.07 14:10:03 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]173.44.55.178:443
. 2017.02.07 14:10:03 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
. 2017.02.07 14:10:04 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.36.23 255.255.0.0'
. 2017.02.07 14:10:04 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified
. 2017.02.07 14:10:04 - OpenVPN > OPTIONS IMPORT: compression parms modified
. 2017.02.07 14:10:04 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified
. 2017.02.07 14:10:04 - OpenVPN > OPTIONS IMPORT: route options modified
. 2017.02.07 14:10:04 - OpenVPN > OPTIONS IMPORT: route-related options modified
. 2017.02.07 14:10:04 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
. 2017.02.07 14:10:04 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.02.07 14:10:04 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.02.07 14:10:04 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.02.07 14:10:04 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.02.07 14:10:04 - OpenVPN > interactive service msg_channel=0
. 2017.02.07 14:10:04 - OpenVPN > ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=16 HWADDR=44:85:00:ac:70:33
. 2017.02.07 14:10:04 - OpenVPN > open_tun
. 2017.02.07 14:10:04 - OpenVPN > TAP-WIN32 device [Ethernet 2] opened: \\.\Global\{387D5523-B267-4881-9D3C-5FF1E757B3BF}.tap
. 2017.02.07 14:10:04 - OpenVPN > TAP-Windows Driver Version 9.21
. 2017.02.07 14:10:04 - OpenVPN > Set TAP-Windows TUN subnet mode network/local/netmask = 10.4.0.0/10.4.36.23/255.255.0.0 [sUCCEEDED]
. 2017.02.07 14:10:04 - OpenVPN > Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.36.23/255.255.0.0 on interface {387D5523-B267-4881-9D3C-5FF1E757B3BF} [DHCP-serv: 10.4.255.254, lease-time: 31536000]
. 2017.02.07 14:10:04 - OpenVPN > Successful ARP Flush on interface [4] {387D5523-B267-4881-9D3C-5FF1E757B3BF}
. 2017.02.07 14:10:04 - OpenVPN > do_ifconfig, tt->did_ifconfig_ipv6_setup=0
. 2017.02.07 14:10:04 - OpenVPN > TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
. 2017.02.07 14:10:04 - OpenVPN > C:\Windows\system32\route.exe ADD 173.44.55.178 MASK 255.255.255.255 192.168.0.1
. 2017.02.07 14:10:04 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
. 2017.02.07 14:10:04 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.02.07 14:10:04 - OpenVPN > C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.0.1
. 2017.02.07 14:10:04 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
. 2017.02.07 14:10:04 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.02.07 14:10:04 - OpenVPN > C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.0.1
. 2017.02.07 14:10:04 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=20 and dwForwardType=4
. 2017.02.07 14:10:04 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.02.07 14:10:04 - Starting Management Interface
. 2017.02.07 14:10:04 - OpenVPN > Initialization Sequence Completed
. 2017.02.07 14:10:05 - DNS leak protection with packet filtering enabled.
. 2017.02.07 14:10:24 - DNS of a network adapter forced (Intel® Dual Band Wireless-AC 8260, from automatic (8.8.8.8,8.8.4.4) to 10.4.0.1)
. 2017.02.07 14:10:24 - DNS of a network adapter forced (TAP-Windows Adapter V9, from automatic (10.4.0.1) to 10.4.0.1)
. 2017.02.07 14:10:25 - Flushing DNS
I 2017.02.07 14:10:43 - Checking route
I 2017.02.07 14:10:45 - Checking DNS
! 2017.02.07 14:10:58 - Connected.
. 2017.02.07 14:10:58 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100
. 2017.02.07 14:10:58 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info
. 2017.02.07 14:20:13 - Updating systems & servers data ...
. 2017.02.07 14:20:15 - Systems & servers data update completed

 

I'm going to try disabling IPv6 on both adapters and post the result. That may very well work.

 

As for other computers, I unfortunately don't have an identical test bench to try (Win 10 machine that also supports 5GHz) but I tried on my school laptop which is a Macbook Air and connected to the 5GHz network. I successfully joined the Cursa Miami server with Eddie and so far no DNS issues. All pages load going on 35 minutes now.

 

 

One day before I die, I will invent the holiest of all protocols. But first I must suffer through the rest of my engineering bachelors. Thank you for your help LZ1!

[LZ1 672]

Remember to do so on the TUN adapter too .

 

An engineering student with formatting abilities - you'll go far haha.

 

I look forward to that protocol. Also, it's good to try with and without Network Lock.

[DrKabuki 3]

IT WORKED!

 

Disabling IPv6 on my wifi and TUN adapter and turning on network lock did the trick! I've tested it for the past 2-3 hours and DNS holds up.

 

Consider my issue solved   Thank you again for your help.

[LZ1 672]

You're most welcome my friend. I hope it continues working and that OPs like yours become more frequent, as they help us solve problems more quickly

 

By the way, don't forget to burn some incense at the zhang888/Network Gods shrine, for future luck