Leaderboard

Hello! We're very glad to inform you that twelve new 1 Gbit/s servers located in Alblasserdam (Netherlands) are available: Aljanah, Alpheratz, Aspidiske, Capella, Eltanin, Larawag, Melnick, Muhlifain, Piscium, Scuti, Suhail, Tiaki. The AirVPN client will show automatically the new servers. If you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The servers accept connections on ports 53, 80, 443, 1194, 2018 UDP and TCP. Just like every other "second generation" Air server, they support OpenVPN over SSL and OpenVPN over SSH, TLS 1.2 and tls-crypt. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

I think I saw that error some time ago, when I was using 1 year or more old certificates for AirVPN. Did you upgrade your DSM to latest 6+ version? Did you get new certificates and ovpn file from airvpn? Be sure to imput them at correct place. Is your AirVPN membership active? If you are using DSM <6 (5.2, 5.1, 5.0, 4...) then you need to ssh and copy certificates and keys manually. Just delete VPN from Synology interface, try restart, and do everything from beginning. I see what you mean. That never happened to me. Script always starts VPN if it's not started, but I managed to reproduce it by just using those variables in script, without anything else. Thank you for find, I just moved those variables further down to one of IFs, so they will be called only when VPN is up for sure. Hope that solves it for you also.

Website: http://www.zdf.de/ German TV channel ZDF (Zweites Deutsches Fernsehen). Status: OK Native: DE Routing: All servers.

Website: http://www.ardmediathek.de/tv/Das-Erste/live?kanal=208 German TV channel Das Erste. Status: OK Native: NO Routing: All servers.

I stopped DNS Leak on my DD-WRT router by putting 10.4.0.1 and 10.6.0.1 in my DNS settings and strict-order that fixed it for me..

Hello, this is a guide to prevent ANY leak on Windows 7/8 with Windows Firewall published by Omniferum. It is particularly simple to follow and well written, and it provides also a very comfortable "VPN flipper". Thank you Omniferum! Warning: the setup works on Windows 7 and Windows 8 with the default Windows Firewall. It has NOT been tested on any other Windows version. It will NOT work on Windows XP (whose firewall is completely different and very limited, Windows XP users might like to use Comodo Firewall). It is NOT suitable if you have any other firewall running on your system (remember, you must never run two firewalls simultaneously). Important: the VPN flipper script will NOT work if your Windows is not in English language, because the system Firewall rules names change (incredible but true!) according to the language (thanks to Esamu for the information). UPDATE 14-May-14: issue fixed. Original thread updated on May the 14th, 2014: https://airvpn.org/topic/9609-blocking-non-vpn-traffic-with-windows-firewall Kind regards

Hi All I would appreciate some feedback on a solution I have ended up with for preventing DNS leaks as I am not sure how appropriate it is. I am running 2 routers, a modem router connected to my ISP and a second router running DD-WRT with openVPN to connect to AirVPN. With this set up we have 2 wireless networks available, a standard connection and a VPN connection. (some sites are still better to connect to without VPN that are https) After checking for DNS leaks and still seeing my ISP, my first option was to set the modem router to the DNS server 10.4.0.1 which stopped the DNS leaks, but meant the non-VPN connection didnt work. Having reverted back to letting the non-VPN connection use another DNS server i have added the following to my ipTable commands: iptables -t nat -A PREROUTING -i br0 -p udp --dport 443 -j DNAT --to $(nvram get lan_ipaddr) I got this code from http://www.dd-wrt.com/wiki/index.php/OpenDNS and changed the port to what i have set up when creating my config file. When using the VPN connection and checking for DNS leaks, it now does not show my ISP as long as I have a secondary DNS in my DD-WRT router. I have used 10.5.0.1 as my secondary DNS but am not sure if this is appropriate as it has it for TPC connections. Also as I have not used ipTables before I am not sure how appropriate the code is or if what I have done has any pitfalls. Is there a better secondary DNS server to use and is this iptable coding ok? Thank you for any help.

This works, you lose isp connection if openvpn got disconnected. But it did not prevemt dns leaks while openvpn running. If you guys find something easy, let us know. I'll look also. Hello! You could try to force 10.4.0.1 as first DNS server in your router. [EDIT] Oh yes, you already did it, glad to know it solved the problem, thank you! Kind regards

This worked for me in the end... https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=4287&Itemid=142#4287

I have had no luck preventing leaks, the firewall rule as written in post #1 hangs my router when I run it. I've tried a few other things as well, but nothing seems to work. I'm tempted to run the VPN client manually and build my own routes, but that's more work than I have time for right now.

Hey, I'm interested in getting this to work too. Got any progress? FWIW I am running x86 DD-WRT on nettop hardware so I can break that 6-7Mbit/s VPN speed barrier.

I've seen the VPN/Firewall Blocking instructions for Comodo. You wouldn't happen to have instructions for a recent version of Norton would you? My experience with networking issues is pretty weak.

About Tomato Firmware Tomato is a small, lean and simple replacement firmware for Linksys' WRT54G/GL/GS, Buffalo WHR-G54S/WHR-HP-G54 and other Broadcom-based routers. Official website: http://www.polarcloud.com/tomato. PrerequisiteMake sure you triple-check that your version of Tomato supports OpenVPN or you'll be sorry. I strongly recommend Toastman's build of Tomato because of its widespread feature support and stability. StepsUnder Basic->Network, configure your 3 static DNS servers. If you wish to use the AirVPN DNS set 10.4.0.1 as first DNS IP address. The Air DNS will enable you to access internal Air services, geo-routing services and bypass ICE/ICANN USA censorship (more information here). About the others, I recommend picking ones from the OpenNIC Project because many of the servers don't keep any logs, which is consistent with the Air service, plus they would allow your internet service to continue functioning in the event of a government-ordered root DNS server shutdown- https://servers.opennic.org/Under Basic->Time, make sure that the correct time zone and server is configured.Download the OpenVPN (.ovpn) file of your choosing under "Client Area -> Config Generator" after you log in the AirVPN site. In the Configuration Generator make sure to tick "Advanced Mode" and "Separate certs/keys from .ovpn files". In order to determine the IP address of the server you wish to connect to, please resolve "servername.airservers.org". For example, for Acrux resolve "acrux.airservers.org". Find the server names by looking at Status page.For the actual configuration, please see the following two screenshots of the Basic and Advanced OpenVPN Client Configuration: Under Basic, sub in your own correct protocol, IP and port in place of what I have in my own config. In the Advanced Custom Configuration text box, the options are as follows: resolv-retry infinite remote-cert-tls server comp-lzo verb 3 Under Keys, you'll need to again text edit your user.key, user.crt, ca.crt and ta.key files, copy the matching keys and certificates and paste them into the text boxes in your router config. - ta.key is the Static Key - ca.crt is the Certificate Authority certificate (in some older builds, "Server certificate") - user.crt is the Client Certificate - user.key is the Client KeyAbout certificates files (user.crt and ca.crt) content, just copy and paste from "-----BEGIN CERTIFICATE-----" (included) up to "-----END CERTIFICATE-----" (included).Save all settings.Under Status, click Start Now and count for 30 seconds. Go to https://airvpn.org and at the bottom of the screen it should show you are connected or visit https://ipleak.net for check. Tested withToastman's build of Tomato [v1.28.7500 MIPSR2Toastman-RT K26 VPN] on Asus RT-N16 router.Tomato-ND-1.28.7633-Toastman-IPT-ND-SmallVPN on Buffalo WHR-G54S Feedback For any comment or feedback, you can find the discussion here. Thanks to Baraka for this article.

Website: http://www.alice.tv/ Italian TV Streaming Status: OK Routing: All servers to IT route.

Website: http://www.gazzetta.it La Gazzetta dello Sport, an Italian sport website and streaming. Status: OK Routing: All servers to IT route. Note: if you have an advertising blocker active (like Adblock or uBlock) try to disable it. This site detect use of this blocker and prevent to see the video.

Hello! Excellent. You will just have to add the rules posted in the previous messages in IceFloor. In the list of features, the author writes "edit main PF and anchors configuration files with the built-in editor". You can just do that and copy & paste the given rules. Just take care to identify the correct IP addresses and network cards. Please do not hesitate to contact us for any further information or support. Kind regards