No VPN, no connection

[bobber6 8]

I was under the impression the latest Eddie  solved this problem ,if I remember rightly I read that Windows firewall is not being used any more for the network  lock.

but I'm still unable to get a working Internet connection after gracefully closing eddie.

I know there is a pinned  thread, the solution given is from 2015........

 

Is there a simple method to disconnect the network locked VPN  and without rebooting  getting the original Internet connection working.

without having to alter Windows firewall and DNS settings.

[OpenSourcerer 1441]

In Preferences > Network Lock > Mode, what is set there?

[bobber6 8]

In Preferences > Network Lock > Mode, what is set there?

Automatic

[OpenSourcerer 1441]

Set this to WFP/Windows Filtering Platform and your firewall rules will remain untouched.

[bobber6 8]

I set it to Windows Filtering Platform, rebooted, let eddie start a nw locked connection, disconnected, " turn off network lock" and gracefully exited.

no connection, so this is not working.

[OpenSourcerer 1441]

Could be a DNS issue, can you ping both google.com and 8.8.8.8 after disconnecting?

[bobber6 8]

Ping request could not find host google.com. Please check the name and try again
.
 

ping 8.8.8.8

Pinging 8.8.8.8 with 32 bytes of data:
Reply from 8.8.8.8: bytes=32 time=31ms TTL=46
Reply from 8.8.8.8: bytes=32 time=26ms TTL=46
Reply from 8.8.8.8: bytes=32 time=26ms TTL=46
Reply from 8.8.8.8: bytes=32 time=26ms TTL=46

Ping statistics for 8.8.8.8:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 26ms, Maximum = 31ms, Average = 27ms
 

[DebMul 0]

I have the exact same issue: I'm running Eddie version 2.11.15 on Windows 10.

 

As suggested in this thread I have set the network lock from Automatic to Windows Firewall.

 

When I gracefull bring Eddie down, I see that I am connected to a network, but don't have internet access. Like the Bobber6, I can then ping 8.8.8.8, but not google.com. There is clearly a DNS issue. However, when I go to my adapter settings, these are still set to automatic. In the past, while using an older version of Eddie, I noticed that sometimes this value was changed, but not this time.

 

This issue is resolved when I connect using Eddie, but sometimes you don't want to use your VPN..

 

Below are my logs (slightly edited to anonymise some data).

 

I 2017.03.02 19:24:24 - Eddie client version: 2.11.15 / windows_x64, System: Windows, Name: Microsoft Windows NT 10.0.14393.0, Mono/.Net Framework: v4.0.30319
. 2017.03.02 19:24:24 - Reading options from C:\Users\$NAME\AppData\Local\AirVPN\AirVPN.xml
. 2017.03.02 19:24:24 - Data path: C:\Users\$NAME\AppData\Local\AirVPN
. 2017.03.02 19:24:24 - Application path: C:\Program Files\AirVPN
. 2017.03.02 19:24:24 - Executable path: C:\Program Files\AirVPN\AirVPN.exe
. 2017.03.02 19:24:24 - Command line arguments (1): path="home"
. 2017.03.02 19:24:24 - Operating System: Microsoft Windows NT 10.0.14393.0
I 2017.03.02 19:24:24 - OpenVPN Driver - TAP-Windows Adapter V9, version 9.21.2
I 2017.03.02 19:24:24 - OpenVPN - Version: 2.4.0 - OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09 (C:\Program Files\AirVPN\openvpn.exe)
I 2017.03.02 19:24:24 - SSH - Version: plink 0.67 (C:\Program Files\AirVPN\plink.exe)
I 2017.03.02 19:24:24 - SSL - Version: stunnel 5.40 (C:\Program Files\AirVPN\stunnel.exe)
! 2017.03.02 19:24:25 - Ready
. 2017.03.02 19:24:25 - Updating systems & servers data ...
. 2017.03.02 19:24:25 - Systems & servers data update completed
I 2017.03.02 19:24:27 - Session starting.
. 2017.03.02 19:24:27 - IPv6 disabled with packet filtering.
I 2017.03.02 19:24:28 - Checking authorization ...
! 2017.03.02 19:24:28 - Connecting to $SERVER
. 2017.03.02 19:24:28 - OpenVPN > OpenVPN 2.4.0 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Jan 29 2017
. 2017.03.02 19:24:28 - OpenVPN > Windows version 6.2 (Windows 8 or greater) 64bit
. 2017.03.02 19:24:28 - OpenVPN > library versions: OpenSSL 1.0.2k  26 Jan 2017, LZO 2.09
. 2017.03.02 19:24:28 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100
. 2017.03.02 19:24:28 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.02 19:24:28 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.02 19:24:28 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]213.152.161.73:443
. 2017.03.02 19:24:28 - OpenVPN > Socket Buffers: R=[65536->262144] S=[65536->262144]
. 2017.03.02 19:24:28 - OpenVPN > UDP link local: (not bound)
. 2017.03.02 19:24:28 - OpenVPN > UDP link remote: [AF_INET]213.152.161.73:443
. 2017.03.02 19:24:30 - OpenVPN > TLS: Initial packet from [AF_INET]213.152.161.73:443, sid=69be81a2 2f017e5c
. 2017.03.02 19:24:30 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
. 2017.03.02 19:24:30 - OpenVPN > Validating certificate key usage
. 2017.03.02 19:24:30 - OpenVPN > ++ Certificate has key usage  00a0, expects 00a0
. 2017.03.02 19:24:30 - OpenVPN > VERIFY KU OK
. 2017.03.02 19:24:30 - OpenVPN > Validating certificate extended key usage
. 2017.03.02 19:24:30 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2017.03.02 19:24:30 - OpenVPN > VERIFY EKU OK
. 2017.03.02 19:24:30 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org
. 2017.03.02 19:24:31 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA
. 2017.03.02 19:24:31 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]213.152.161.73:443
. 2017.03.02 19:24:32 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
. 2017.03.02 19:24:32 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.62.206 255.255.0.0'
. 2017.03.02 19:24:32 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified
. 2017.03.02 19:24:32 - OpenVPN > OPTIONS IMPORT: compression parms modified
. 2017.03.02 19:24:32 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified
. 2017.03.02 19:24:32 - OpenVPN > OPTIONS IMPORT: route options modified
. 2017.03.02 19:24:32 - OpenVPN > OPTIONS IMPORT: route-related options modified
. 2017.03.02 19:24:32 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
. 2017.03.02 19:24:32 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.03.02 19:24:32 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.02 19:24:32 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
. 2017.03.02 19:24:32 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
. 2017.03.02 19:24:32 - OpenVPN > interactive service msg_channel=0
. 2017.03.02 19:24:32 - OpenVPN > ROUTE_GATEWAY 192.168.0.1/255.255.255.0 I=17 HWADDR=40: :5c:5b:a5:46
. 2017.03.02 19:24:32 - OpenVPN > open_tun
. 2017.03.02 19:24:32 - OpenVPN > TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{9602A795-F5B2-425C-BDAB-BF3025A3D352}.tap
. 2017.03.02 19:24:32 - OpenVPN > TAP-Windows Driver Version 9.21
. 2017.03.02 19:24:32 - OpenVPN > Set TAP-Windows TUN subnet mode network/local/netmask = 10.4.0.0/10.4.62.206/255.255.0.0 [sUCCEEDED]
. 2017.03.02 19:24:32 - OpenVPN > Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.62.206/255.255.0.0 on interface {9602A795-F5B2-425C-BDAB-BF3025A3D352} [DHCP-serv: 10.4.255.254, lease-time: 31536000]
. 2017.03.02 19:24:32 - OpenVPN > Successful ARP Flush on interface [13] {9602A795-F5B2-425C-BDAB-BF3025A3D352}
. 2017.03.02 19:24:32 - OpenVPN > do_ifconfig, tt->did_ifconfig_ipv6_setup=0
. 2017.03.02 19:24:37 - OpenVPN > TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
. 2017.03.02 19:24:37 - OpenVPN > C:\Windows\system32\route.exe ADD 213.152.161.73 MASK 255.255.255.255 192.168.0.1
. 2017.03.02 19:24:37 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
. 2017.03.02 19:24:37 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.03.02 19:24:37 - OpenVPN > C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.0.1
. 2017.03.02 19:24:37 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
. 2017.03.02 19:24:37 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.03.02 19:24:37 - OpenVPN > C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.0.1
. 2017.03.02 19:24:37 - OpenVPN > ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=35 and dwForwardType=4
. 2017.03.02 19:24:37 - OpenVPN > Route addition via IPAPI succeeded [adaptive]
. 2017.03.02 19:24:37 - Starting Management Interface
. 2017.03.02 19:24:37 - OpenVPN > Initialization Sequence Completed
. 2017.03.02 19:24:37 - DNS leak protection with packet filtering enabled.
. 2017.03.02 19:24:37 - Flushing DNS
I 2017.03.02 19:24:40 - Checking route
I 2017.03.02 19:24:43 - Checking DNS
! 2017.03.02 19:24:55 - Connected.
. 2017.03.02 19:24:55 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100
. 2017.03.02 19:24:55 - OpenVpn Management > >INFO:OpenVPN Management Interface Version 1 -- type 'help' for more info

[Khariz 109]

This temporary solution should work until whatever is causing this is resolved:   Right click on the network icon in the system tray, and go to Network and Sharing Center.  In the lower left of that window, click Internet Options.  Go to the Advanced tab and select the Reset button at the bottom to reset ALL of your network settings to default.  This should undo the stuck filtering.

[bobber6 8]

reset ALL of your network settings to default

But, what else is changed doing this? nw shares, other lan settings like homegroups?

If so, i'll leave it as it is and wait for a solution.

[Khariz 109]

No, that's just a settings to default switch.  It doesn't affect anything you custom built like links to other network assets, or the name of the homegroup.  

[OpenSourcerer 1441]

DNS issue.

Fix: Mainly Eddie developers' task, there were some threads about this in the past.

 

What you can do now: Network Settings > your primary network interface, such as LAN connection > Properties > IPv4: Properties > Check if IP and DNS are automatically assigned > OK, OK, OK.

Workaround: In Eddie, Preferences > DNS > Mode: None/Deactivated/Disabled (don't remember the exact name).

 

What I did when I used Windows, I set the DNS servers permanently to 10.4.0.1 (made a script to quickly apply and revert this) and connected with IP addresses utilizing remote-random. My own personal anti-DNS leak with some randomness applied to the server choice. Worked very well.

Unless you want AirVPN to determine the "best" server for you to connect, then DNS is needed. You could work around this by setting one of the public OpenNIC DNS servers as the secondary DNS server, it'll leak DNS requests after this but to more trustworthy entities, I imagine.

[bobber6 8]

What you can do now: Network Settings > your primary network interface, such as LAN connection > Properties > IPv4: Properties > Check if IP and DNS are automatically assigned > OK, OK, OK

The default was " use following dns"10,4,0,1, .

Air advises to use its DNS servers, so i am not changing this, i can't  oversee the possible anonymity consequences .

Using our DNS allows our customers to use our anti-geolocation discrimination features. For example, visit a website that allows only United States connections from a Netherlands VPN server.

It's recommended to use our DNS server to avoid censorship and use our anti-geolocation features.

 

anyway these solutions are all far too complicated, what I was looking for opening this thread  was a very simple,noob proof  solution to this long-time existing problem.

a regular user shouldn' t have to alter all sorts of settings/ using scripts  just to be able to reach a website without a VPN connection.

 

Look, due to the ever increasing surveillance from governments, I have been advising friends and relatives to use a VPN connection continuously, of course my advice is to use air VPN.

this is why I do think it is important that the developers fix this issue, because it can be a real dealbreaker for a digitally challenged  user.

 

@Khariz

reset ALL of your network settings to default

had no effect.

[OpenSourcerer 1441]

a regular user shouldn' t have to alter all sorts of settings/ using scripts  just to be able to reach a website without a VPN connection.

 

I totally agree with you. But if it's the only temporary solution, would you accept the inconvenience of your issue (even though you opened a thread for solutions because it apparently bugs you) or try thinking to learn something on the way, actually improving your understanding of how things work, lowering the probability of unsubstantiated fear to occur? The chance of you being targeted by a government is astronomically low. So low, I have reasons to believe you're paranoid for all the wrong reasons. Proof me wrong.

[LZ1 673]

Hello!

 

Maybe for some the Beta client would help.

 

Is the OP using any 3rd party security software by the way? You might benefit from submitting a support ticket, with details of your system. The lifebelt icon in Eddie is useful for this purpose.

 

But which version of Windows are you using OP? I can't find it mentioned anywhere.

 

@DebMul

Please try turning off IPv6 on all adapters, as it can oftentimes cause unexpected problems .