AirVPN over Tor problem

[zobrandji 0]

Hi all,

I want to follow this diagram : ME > Tor network > AirVPN

I start Tor Browser, I launch Eddie, I'm able to make a connection from Eddie to tor with the test button (Tor Test: Successful test. Tor Version: 0.3.3.7) but I can't access AirVPN server.

After 'flushing DNS' and 'Checking route IPv4' / 'Checking route IPv6 steps, Eddie disconnects and try again a connection (logs attached).

Do you know what does it mean ?

Thanks,

log.txt

[Staff 10014]

Hello!

Can you please upgrade to Eddie 2.16.1 and test again? To download this version, in the usual download page for your system please click "Other versions", then select "Experimental". You will be brought back to the download page, where you can proceed to download and install as usual.

Please feel free to let us know whether this new version fixes the problems you experience.

Kind regards
 

[zobrandji 0]

Very good, it works with the version 2.16.1! ("layer IPv6" is blocked with this version, it's the only difference with the 2.15.2 version ?)

I will be able to take a longer subscription

Now that it works, I have other technical questions :


1. Is it possible to use a socks5 in addition to Tor & VPN like this : ME > Tor network > AirVPN > Socks5 (configured in Firefox as in the picture for example) ?
When I try, I have the IP socks5 that appears on ipleak.com but do I respect the diagram above ?


2. Is it possible to put another VPN provider between me and Tor without creating conflict with AirVPN : (ME > Another VPN provider > Tor network > AirVPN) ?


3. Does the Network Lock work well with the configuration AirVPN over Tor ?


Thanks,
 

[Staff 10014]

Hello!

 

About the changes from 2.15.2, please check the changelog here:

https://eddie.website/changelog/?software=client&format=html

 

And yes, you're right, now it works properly for a new feature. There are some cases for which IPv6 seems available but in reality it does not work properly. Now Eddie tries to understand these issues, which have a definite pattern. If it detects them, it switches IPv6 tunneling to "Block".

 

1. Yes.

 

2. No: you have a local Tor proxy, you can connect to it different OpenVPN instances (provided that you take care to define multiple routing tables, a feature that's unsupported on Windows systems), but then you have to decide which route a packet must follow. A simpler solution would be adding another VPN service not between Tor and AirVPN, but before them or after them.

 

3. Unfortunately not. It is not possible to ensure a proper Network Lock because Eddie can not know in advance the Tor guard IP address. So you might lock the traffic only after the circuit is established, a thing that Eddie currently does not do, and anyway might be deceptive.

 

Kind regards

[zobrandji 0]

Thank for you quick reply.

 

2. I didn't understand your reply, you said 'A simpler solution would be adding another VPN service not between Tor and AirVPN, but before them or after them.' but this is what I said 'put an another VPN provider before Tor' : ME + Another VPN provider + Tor network + AirVPN.

 

3. Ok, so if the AirVPN server 'fall' when I use firefox or chrome, my IP will be visible instantaneously because the Tor network will no longer be used ?

There is any other solutions to counter this problem ? by using the firewall and specify the entry IP of Tor network ?

[Staff 10014]

Hello!

 

2. In this case you could rely on VMs. For example, you have a host connecting over OpenVPN over Tor, and a VM (attached to the host via NAT) which connects to another VPN server. The traffic to/from the VM would be tunneled according to your description, if we understand it correctly.

 

3. Exactly, this is an important factor to consider. A different setup, again with the aid of a VM, would be more secure under this respect. For example, connecting the host to a VPN server with Network Lock enabled, and then using OpenVPN over Tor in a VM attached to the host via NAT. In this way, if the connection established by the VM fails, you can still rely on the host connection "locked".
 

There is any other solutions to counter this problem ? by using the firewall and specify the entry IP of Tor network ?

 

Yes, once you know the Tor guard entry-IP address you can enter the rule allowing traffic only to that IP address, but complications arise when the circuit changes.A safer solution appears as the one described in point 3 (with a VM). This is also a matter for developers to see whether something similar can be implemented in a safe way in Eddie, we will make them aware of this thread.

 

Kind regards

[zobrandji 0]

Many thanks for your reply, it's very interesting.

To summarize the two points (always in the case of AirVPN over Tor, the most complex ...), I can follow this diagram:

Hote : AirVPN (with Network Lock enabled) --> VM : Tor network > AirVPN (without Network Lock enabled because not possible).

In this case, if the AirVPN server in the VM falls, the IP that will appear will be that of the AirVPN server of the host machine, that's right?
In other cases, if the AirVPN server of the host machine falls, the 'global' network connection is cut, that's right?

Is there a specific network configuration to put in the VM to apply the schema above?

[vpnair33 6]

After 'flushing DNS' and 'Checking route IPv4' / 'Checking route IPv6 steps, Eddie disconnects and try again a connection (logs attached).

 

 

I had a similar problem where Eddie would Disconnect and try to reconnect infinitely. To solve this I had to disable IPv6 system wide. I had this issue on Ubuntu Linux and Debian Linux as well. If you are using linux here are some guides on how to disable IPv6 system wide on linux:

 

https://www.techrepublic.com/article/how-to-disable-ipv6-on-linux/

 

https://askubuntu.com/questions/309461/how-to-disable-ipv6-permanently

[zobrandji 0]

Hello,

Yes, to solve the problem, we have to disable IPv6 system, Eddie 2.16.1 turns off automatically the IPv6 system if needed with AirVPN over Tor.

What are the consequences of disabling IPv6 ? We can not access a website / server / application that uses an IPv6 ?