Jump to content
Not connected, Your IP: 35.172.195.49
Staff

AirVPN client based on OpenVPN 3.3 AirVPN

Recommended Posts

Posted ... (edited)
Using AirVPN OpenVPN 3 client version 1.0 alpha 2

I am still experiencing a loss of internet connection after using Ctrl +C to end 
it.
The use of  '--recover-network' still does not work 

The only way I can use this beta programme is to use the option --network-lock off which destroys my need for a secure vpn connection and makes it a waste of time using it in beta . 

It is making it hard work to have to use a 'screen' utility  to get around the problem as suggested previously.
  Edited ... by pjnsmb
oops sorry alpha programme

Share this post


Link to post
@pjnsmb

Hello!

We're not yet in beta testing, thanks for the trust, but we count to release a beta version soon (for Mac too). Can you tell us your exact Linux distribution name and version and send us the client log taken just after the problem has occurred?

Using the screen utility was a suggestion pertaining to a different case, or maybe are you connecting remotely via ssh or telnet to the machine that will connect to the VPN? If so using screen is absolutely not a hard work, it's piece of cake don't worry.

Kind regards
 

Share this post


Link to post

Hmm, I'm sorry, but it's still mixing up v4 and v6...

$ sudo ./airvpn -N off -i -6 yes IPv6.ovpn
AirVPN OpenVPN 3 Client 1.0 alpha 2 - 7 November 2019

CONNECTING...
Starting thread
Thu Nov  7 18:28:12.805 2019 OpenVPN core 3.3.2 AirVPN linux x86_64 64-bit
Thu Nov  7 18:28:12.809 2019 Frame=512/2048/512 mssfix-ctrl=1250
Thu Nov  7 18:28:12.812 2019 UNUSED OPTIONS
3 [resolv-retry] [infinite]
4 [nobind]
5 [persist-key]
6 [persist-tun]
7 [auth-nocache]
8 [route-delay] [5]
9 [verb] [3]
10 [explicit-exit-notify] [5]
18 [pull-filter] [ignore] [dhcp-option DNS]
Thu Nov  7 18:28:12.812 2019 EVENT: RESOLVE
Thu Nov  7 18:28:12.813 2019 WARNING: Network filter and lock is disabled
Thu Nov  7 18:28:12.813 2019 Contacting [2001:ac8:20:2b:fbca:14fa:873e:4051]:443 via UDP
Thu Nov  7 18:28:12.813 2019 EVENT: WAIT
Thu Nov  7 18:28:12.813 2019 net_route_best_gw query IPv6: 2001:ac8:20:2b:fbca:14fa:873e:4051/128
Thu Nov  7 18:28:12.813 2019 sitnl_route_best_gw result: via fe80::9a9b:cbff:fe6d:a378 dev enp35s0
Thu Nov  7 18:28:12.813 2019 Thu Nov  7 18:28:12.813 2019 EVENT: DISCONNECTED
connect error: ipv4_exception: error parsing IPv4 address '2001:ac8:20:2b:fbca:14fa:873e:4051' : Invalid argument
Thread finished
STATS:


Profile is the same. :(

Four simple things:
There's a guide to AirVPN. Before you ask questions, take 30 minutes of your time to go through it.

Amazon IPs are not dangerous here. It's the fallback DNS.
Running TOR exits is discouraged. They're subject to restrictions on the internet and harm all AirVPN users.

Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, you'll be unique among the mass again.

 

XMPP: gigan3rd@xmpp.airvpn.org or join our lounge@conference.xmpp.airvpn.org

Share this post


Link to post
@giganerd

Hello!

We might be in presence of a conflict when you try an IPv6 connection and at the same time you also want IPv6 over IPv4 (which actually may appear contradictory). The error pertaining to address parsing comes from OpenVPN 3 library. Can you tell us whether the problem is resolved or not when you don't force IPv6 over IPv4 for an IPv6 connection (i.e. do not include -6 option)?

Kind regards


 

Share this post


Link to post

$ sudo ./airvpn -N off -i IPv6.ovpn
AirVPN OpenVPN 3 Client 1.0 alpha 2 - 7 November 2019

CONNECTING...
Starting thread
Thu Nov  7 22:22:27.392 2019 OpenVPN core 3.3.2 AirVPN linux x86_64 64-bit
Thu Nov  7 22:22:27.395 2019 Frame=512/2048/512 mssfix-ctrl=1250
Thu Nov  7 22:22:27.398 2019 UNUSED OPTIONS
3 [resolv-retry] [infinite]
4 [nobind]
5 [persist-key]
6 [persist-tun]
7 [auth-nocache]
8 [route-delay] [5]
9 [verb] [3]
10 [explicit-exit-notify] [5]
18 [pull-filter] [ignore] [dhcp-option DNS]
Thu Nov  7 22:22:27.399 2019 EVENT: RESOLVE
Thu Nov  7 22:22:27.399 2019 WARNING: Network filter and lock is disabled
Thu Nov  7 22:22:27.399 2019 Contacting [2a02:c205:0:1031:79f8:734d:afb7:43c]:443 via UDP
Thu Nov  7 22:22:27.399 2019 EVENT: WAIT
Thu Nov  7 22:22:27.399 2019 net_route_best_gw query IPv6: 2a02:c205:0:1031:79f8:734d:afb7:43c/128
Thu Nov  7 22:22:27.399 2019 sitnl_route_best_gw result: via fe80::9a9b:cbff:fe6d:a378 dev enp35s0
Thu Nov  7 22:22:27.399 2019 Thu Nov  7 22:22:27.399 2019 EVENT: DISCONNECTED
connect error: ipv4_exception: error parsing IPv4 address '2a02:c205:0:1031:79f8:734d:afb7:43c' : Invalid argument
Thread finished
STATS:

 
1 hour ago, Staff said:

We might be in presence of a conflict when you try an IPv6 connection and at the same time you also want IPv6 over IPv4 (which actually may appear contradictory)


I don't want to do v6 over v4, all my networks and devices support and use native v6.
 
1 hour ago, Staff said:

(i.e. do not include -6 option)


It might have escaped my notice, but where do you document that this option causes a v6 over v4 connection as opposed to explicitly enable and use IPv6 as I understood it (also with "help" from --help)?

And how ironic is it that, if the source code was published, I could simply look at it and help you find the problem? :D If you need me to give you more info on my setup or try something out, say the word.

Four simple things:
There's a guide to AirVPN. Before you ask questions, take 30 minutes of your time to go through it.

Amazon IPs are not dangerous here. It's the fallback DNS.
Running TOR exits is discouraged. They're subject to restrictions on the internet and harm all AirVPN users.

Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, you'll be unique among the mass again.

 

XMPP: gigan3rd@xmpp.airvpn.org or join our lounge@conference.xmpp.airvpn.org

Share this post


Link to post
13 hours ago, Staff said:
@pjnsmb

Hello!

We're not yet in beta testing, thanks for the trust, but we count to release a beta version soon (for Mac too). Can you tell us your exact Linux distribution name and version and send us the client log taken just after the problem has occurred?

Using the screen utility was a suggestion pertaining to a different case, or maybe are you connecting remotely via ssh or telnet to the machine that will connect to the VPN? If so using screen is absolutely not a hard work, it's piece of cake don't worry.

Kind regards


@Staff

attached is a full log showing my commands used.

A new  backup resolv.conf file is made showing my initial nameserver 127.0.0.1 (this is set by network manager settings as I do use dnscrypt-proxy)airvpn log

The generated resolv.conf file shows my correct address.

After CTRL+C the log shows :
Fri Nov  8 06:17:09.202 2019 Successfully restored DNS settings
Fri Nov  8 06:17:09.222 2019 Network filter successfully restored

BUT the backup resolv.conf disappears so use of :
sudo ./airvpn --recover-network

shows :
ERROR: Cannot restore DNS settings. Backup copy of resolv.conf not found.
ERROR: Cannot restore network filter

and there is no internet connection.

regards

Share this post


Link to post
22 hours ago, giganerd said:

I don't want to do v6 over v4, all my networks and devices support and use native v6.
 
It might have escaped my notice, but where do you document that this option causes a v6 over v4 connection as opposed to explicitly enable and use IPv6 as I understood it (also with "help" from --help)?

And how ironic is it that, if the source code was published, I could simply look at it and help you find the problem? :D If you need me to give you more info on my setup or try something out, say the word.

Hello!

-6 is an undocumented option in OpenVPN 3 library, it has nothing to do with the frontend. OpenVPN 3 is mostly undocumented by OpenVPN developers and we are doing our best to fill the gap. In the next version we will clarify usage of -6 option to leave no doubts on the matter.

You can infer that -6 pertains to IPv6 over IPv4 from the comments in the source code, which contrarily to what your misleading irony suggests has been published in GitHub a long ago. https://github.com/AirVPN/openvpn3-airvpn

Anyway that part is identical to the main branch and has not been touched by us, so you can see that part both in our fork and in the main branch, it exists since years ago and has remained undocumented since years ago.

At this stage we are focused on bug fixing because, for Linux, we found a dramatic situation to say the least. just consider, as a mere, shameful example, that data structures were systematically not initialized, an error that you can't expect or imagine, not even from C novice children students during their first C course. Lack of initialization in C/C++ causes apparently random crashes and/or unexpected behavior in different conditions, systems and system states, according to how "dirty" the data RAM area is or is not. Situation is now under control (while OpenVPN 3 main branch remains mainly unusable in Linux for practical purposes) but only after a very hard, time consuming work.

That said, omitting -6 might not solve the issue. We suspect now that it's another OpenVPN 3 bug; as such we will investigate with the purpose to fix it. Please test anyway without -6 option and let us know the outcome at your convenience. (DONE)

Kind regards
 

Share this post


Link to post
@pjnsmb

After you press CTRL-C resolv.conf backup is correctly deleted so the reply you get after you ordered "--recover-network" is expected. Up to this point everything sounds fine. Then you notice lack of Internet connectivity, which might or might not be expected.

Please check firewall rules as well as chain policies before and after the VPN connection: if they match your lack of Internet connectivity is expected; if not something wrong is going on, please notify us including rules (first and after you have run the client) and exact distribution name and version.


Kind regards
 

Share this post


Link to post
8 hours ago, Staff said:

You can infer that -6 pertains to IPv6 over IPv4 from the comments in the source code, which contrarily to what your misleading irony suggests has been published in GitHub a long ago. https://github.com/AirVPN/openvpn3-airvpn


I was referring to this client, not the library. But if it's indeed a problem with the library itself, I take back the things you refer to and hereby apologize. I was merely mocking the closed nature of the CLI client. :D

It it helps in anyway, I see if I can find some time to dig in the library code. Currently, I can be lucky to have one free day in the weekends at least. :)

Four simple things:
There's a guide to AirVPN. Before you ask questions, take 30 minutes of your time to go through it.

Amazon IPs are not dangerous here. It's the fallback DNS.
Running TOR exits is discouraged. They're subject to restrictions on the internet and harm all AirVPN users.

Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, you'll be unique among the mass again.

 

XMPP: gigan3rd@xmpp.airvpn.org or join our lounge@conference.xmpp.airvpn.org

Share this post


Link to post
@giganerd
 
Quote

I was referring to this client, not the library. But if it's indeed a problem with the library itself, I take back the things you refer to and hereby apologize. I was merely mocking the closed nature of the CLI client. :D


Hello!

Well, it's not uncommon that any source code is not released at alpha stage. In several environments it is common practice. It is all in all a wise decision because any part can be even rebuilt from scratch, even from alpha n to alpha n+1. However, as you noticed, the library source code is published and of course it's not alpha. :)
 
Quote

It it helps in anyway, I see if I can find some time to dig in the library code. Currently, I can be lucky to have one free day in the weekends at least. :)


That would be great!

Kind regards
 

Share this post


Link to post
On 11/8/2019 at 1:23 PM, Staff said:
@pjnsmb

After you press CTRL-C resolv.conf backup is correctly deleted so the reply you get after you ordered "--recover-network" is expected. Up to this point everything sounds fine. Then you notice lack of Internet connectivity, which might or might not be expected.

Please check firewall rules as well as chain policies before and after the VPN connection: if they match your lack of Internet connectivity is expected; if not something wrong is going on, please notify us including rules (first and after you have run the client) and exact distribution name and version.


Kind regards

@staff

As I said at the top of my log I sent :

System:    Host: peter-mate Kernel: 5.4.0-rc6-siduction-amd64 x86_64 bits: 64 Desktop: MATE 1.22.2 
           Distro: siduction 18.3.0 Patience - mate - Sid unstable.

 As I used Eddie-ui  from apt without any problem at all with firewall rules and chain policies prior to testing this I am not familiar with the terminal  commands to get the  information you are asking for.

Please help and tell me the terminal commands I  need to use.

To be clear my NETWORK and  INTERNET  connection work fine prior to, and during use of, this programme, but both stop working as soon as I use CTRL+C . 

regards

Share this post


Link to post

It's working very well for me. Always used the cli version and this one is stunningly fast. I would love to have the 'n' command too to reconnect to a new server. 

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...