DNS Issue on Startup

[bottledwaterl0l 0]

Hello,

Whenever I connect to AirVPN DNS doesn't work right away. I connect but any attempt to contact a site via its name fails. In the cmd prompt I can ping for example 8.8.8.8 but not google.com. This stays this way for a good 5 minutes before I start snooping around and without changing any settings it seems to fix itself. Any idea what the problem might be?

[Staff 10118]

  Quote

Hello,

Whenever I connect to AirVPN DNS doesn't work right away. I connect but any attempt to contact a site via its name fails. In the cmd prompt I can ping for example 8.8.8.8 but not google.com. This stays this way for a good 5 minutes before I start snooping around and without changing any settings it seems to fix itself. Any idea what the problem might be?

Hello!

Quite strange... What is the OS you're running?

Kind regards

[bottledwaterl0l 0]

I'm using Windows 7. I'm curious if this may have something to do with it. My taps and wireless adapters are both configured like this: http://i.imgur.com/Z3ZAY3N.png .. I disable everything but ipv4.

[bottledwaterl0l 0]

Does DNS work through IPv6? What kinds of logs would help? I've been quite discouraged regarding this and haven't been using AirVPN as much as I would like.

[bottledwaterl0l 0]

Hmmm the last two times I've attempted to connect it worked without problems. I'll report back if it does it again with the log, route tables, and maybe even a wireshark capture.

[bottledwaterl0l 0]

It happened again. Here are my AirVPN logs:

2/25/2013 - 2:12 PM AirVPN client version: 1.8

2/25/2013 - 2:12 PM Reading options from C:\Users\Administrator\AppData\Roaming\AirVPN\Air\1.0.0.0\AirVPN.xml

2/25/2013 - 2:12 PM OpenVPN bundle version: OpenVPN 2.3.0

2/25/2013 - 2:12 PM OpenVPN current version: OpenVPN 2.3.0

2/25/2013 - 2:12 PM Ready.

2/25/2013 - 2:13 PM Login...

2/25/2013 - 2:13 PM Login success.

2/25/2013 - 2:13 PM Contacting service...

2/25/2013 - 2:13 PM Connecting...

2/25/2013 - 2:13 PM OpenVPN 2.3.0 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [PKCS11] [eurephia] [iPv6] built on Jan 8 2013

2/25/2013 - 2:13 PM NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables

2/25/2013 - 2:13 PM Socket Buffers: R=[8192->8192] S=[8192->8192]

2/25/2013 - 2:13 PM UDPv4 link local: [undef]

2/25/2013 - 2:13 PM UDPv4 link remote: [AF_INET]95.211.191.33:443

2/25/2013 - 2:13 PM TLS: Initial packet from [AF_INET]95.211.191.33:443, sid=cb393061 57389a7d

2/25/2013 - 2:13 PM VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

2/25/2013 - 2:13 PM VERIFY OK: nsCertType=SERVER

2/25/2013 - 2:13 PM VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

2/25/2013 - 2:13 PM Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

2/25/2013 - 2:13 PM Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2/25/2013 - 2:13 PM Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

2/25/2013 - 2:13 PM Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

2/25/2013 - 2:13 PM Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA

2/25/2013 - 2:13 PM [server] Peer Connection Initiated with [AF_INET]95.211.191.33:443

2/25/2013 - 2:13 PM SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

2/25/2013 - 2:13 PM PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.4.0.1,comp-lzo no,route 10.4.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.4.1.66 10.4.1.65'

2/25/2013 - 2:13 PM OPTIONS IMPORT: timers and/or timeouts modified

2/25/2013 - 2:13 PM OPTIONS IMPORT: LZO parms modified

2/25/2013 - 2:13 PM OPTIONS IMPORT: --ifconfig/up options modified

2/25/2013 - 2:13 PM OPTIONS IMPORT: route options modified

2/25/2013 - 2:13 PM OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified

2/25/2013 - 2:13 PM do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0

2/25/2013 - 2:13 PM open_tun, tt->ipv6=0

2/25/2013 - 2:13 PM TAP-WIN32 device [Local Area Connection] opened: \\.\Global\{4E8607B7-830A-4FF1-9E9A-C731F03B6899}.tap

2/25/2013 - 2:13 PM TAP-Windows Driver Version 9.9

2/25/2013 - 2:13 PM Notified TAP-Windows driver to set a DHCP IP/netmask of 10.4.1.66/255.255.255.252 on interface {4E8607B7-830A-4FF1-9E9A-C731F03B6899} [DHCP-serv: 10.4.1.65, lease-time: 31536000]

2/25/2013 - 2:13 PM Successful ARP Flush on interface [16] {4E8607B7-830A-4FF1-9E9A-C731F03B6899}

2/25/2013 - 2:13 PM TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up

2/25/2013 - 2:13 PM C:\Windows\system32\route.exe ADD 95.211.191.33 MASK 255.255.255.255 192.168.0.1

2/25/2013 - 2:13 PM ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4

2/25/2013 - 2:13 PM Route addition via IPAPI succeeded [adaptive]

2/25/2013 - 2:13 PM C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.4.1.65

2/25/2013 - 2:13 PM ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4

2/25/2013 - 2:13 PM Route addition via IPAPI succeeded [adaptive]

2/25/2013 - 2:13 PM C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.4.1.65

2/25/2013 - 2:13 PM ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4

2/25/2013 - 2:13 PM Route addition via IPAPI succeeded [adaptive]

2/25/2013 - 2:13 PM C:\Windows\system32\route.exe ADD 10.4.0.1 MASK 255.255.255.255 10.4.1.65

2/25/2013 - 2:13 PM ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4

2/25/2013 - 2:13 PM Route addition via IPAPI succeeded [adaptive]

2/25/2013 - 2:13 PM Initialization Sequence Completed

2/25/2013 - 2:13 PM Starting Management Interface...

2/25/2013 - 2:13 PM Checking...

2/25/2013 - 2:14 PM Retrieve statistics...

2/25/2013 - 2:14 PM Connected.

Again it's not using DNS. I can ping 8.8.8.8 but not www.google.com. I also switch between two computers with this vpn. Never use simultaneously.

[bottledwaterl0l 0]

Also, when I do ipconfig /all the DNS server listed for the TAPS device is 10.4.0.1 .. Is that the right address? I changed it to 8.8.8.8 and it works now.

[Staff 10118]

  Quote

Again it's not using DNS. I can ping 8.8.8.8 but not www.google.com. I also switch between two computers with this vpn. Never use simultaneously.

Hello!

The DNS push from the server is correct. Try to set 10.4.0.1 as primary (preferred) DNS of your physical network adapter, this has proved to fix the issue on several Windows systems.

Kind regards

[Staff 10118]

  Quote

Also, when I do ipconfig /all the DNS server listed for the TAPS device is 10.4.0.1 .. Is that the right address? I changed it to 8.8.8.8 and it works now.

Hello!

Yes, 10.4.0.1 is the correct DNS IP address pushed by our servers when you connect to port 443 UDP. See also https://airvpn.org/specs

Setting a different DNS on your tun interface is ok (the DNS queries will be encrypted and tunneled), but you will not use Air DNS, so you will not access internal services (currently only http://speedtest.air ), you will not bypass ICE censorship and you will not be able to use our experimental service aimed to prevent geo-IP based discriminations (for example with our DNS you can use BBC iPlayer even from non-UK servers; or access CBS from non-US servers).

Kind regards