Losing contact with AirVPN

zurahthustra

Hi,

I am encountering a strange problem. Se error log below. Meantime the browser fails but, Transmission continues transferring. I Am conntecting to Serpentis.

Oct 14 11:47:35: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

Oct 14 11:47:35: TLS Error: TLS handshake failed

Oct 14 11:48:50: TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)

Oct 14 11:48:50: TLS Error: TLS handshake failed

Oct 14 11:49:19: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:20: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:21: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:22: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:23: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:24: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:25: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:26: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:27: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:28: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:29: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:30: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:31: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:32: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:33: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:34: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:35: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:37: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:38: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:39: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:42: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:43: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:44: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:45: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:46: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:47: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:49: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:50: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:51: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:53: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:54: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:56: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:49:57: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:50:00: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:50:02: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 11:50:03: Authenticate/Decrypt packet error: packet HMAC authentication failed

Oct 14 12:07:25: [server] Inactivity timeout (--ping-restart), restarting

Oct 14 12:07:25: SIGUSR1[soft,ping-restart] received, process restarting

Oct 14 12:07:25: NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables

Oct 14 12:07:25: LZO compression initialized

Oct 14 12:07:25: UDPv4 link local: [undef]

Oct 14 12:07:25: UDPv4 link remote: 178.248.30.131:443

Oct 14 12:07:26: [server] Peer Connection Initiated with 178.248.30.131:443

Oct 14 12:07:28: TUN/TAP device /dev/tun0 opened

Oct 14 12:07:28: /sbin/ifconfig tun0 delete

Oct 14 12:07:28: NOTE: Tried to delete pre-existing tun/tap instance -- No Problem if failure

Oct 14 12:07:28: /sbin/ifconfig tun0 10.x.xx.xxx 10.x.xx.xxx mtu 1500 netmask 255.255.255.255 up

Oct 14 12:07:28: Initialization Sequence Completed

Staff

Hello!

The logs show that initially you had a packet authentication failure (method is HMAC SHA-160).

The failure may be caused by various factors:

- high packet loss/latency

- WiFi problems (is your computer connected to your router via WiFi?)

- a replay attack https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=3773&Itemid=142#3784

About the last above point, if your computer is connected to your router via WiFi, can you please tell us which encryption and authentication are implemented?

Please try to change server and also try to connect to TCP ports in order to make a comparison.

We're looking forward to hearing from you.

Kind regards

Indigo35

I'm not connected to a wifi network. I'm connected to my router directly via an ethernet cable.

I did some traceroutes to some sites in the UK and EU and it doesn't look like I have a great deal of latency.

With the replay attack -- who is being attacked? Me or your VPN server? And how concerned must I be about this?

Staff

I'm not connected to a wifi network. I'm connected to my router directly via an ethernet cable.
I did some traceroutes to some sites in the UK and EU and it doesn't look like I have a great deal of latency.
With the replay attack -- who is being attacked? Me or your VPN server? And how concerned must I be about this?

Hello!

The replay attack (if any) would be against you specifically. Not a big concern, OpenVPN can perfectly handle and defeat such attacks through packet authentication (if enabled, as it is in our system). Did you notice any performance decrease?

Kind regards

Indigo35

I didn't notice any decrease in performance.

Is the attack against my real IP address issues by my ISP, or the exit IP I get from AirVPN?

Staff

I didn't notice any decrease in performance.
Is the attack against my real IP address issues by my ISP, or the exit IP I get from AirVPN?

Hello!

A sufficiently powerful adversary theoretically can have performed the packet substitution on any point between our servers and you. Using a VPN properly configured is an effective way to defeat replay attacks. If you have noticed no decrease in performance, probably either the attack was short in time or it was not an attack at all, just a momentary network problem. Probably you should not be worried at all (as long as you connect to a VPN or you connect over SSL/TLS), anyway keep an eye on the logs and feel free to report back if the problem persists or gets bigger.

Kind regards

Sign In

Losing contact with AirVPN

Recommended Posts

zurahthustra 0

Share this post

Link to post

Staff 9972

Share this post

Link to post

Indigo35 4

Share this post

Link to post

Staff 9972

Share this post

Link to post

Indigo35 4

Share this post

Link to post

Staff 9972

Share this post

Link to post

Join the conversation

Home

Community