Leaderboard

Eddie 2.23.2 + Hummingbird 2.0.0 Beta 1 terminates connection in a loop at start due to ~/.config/eddie/*.tmp.ovpn file. Alpha 2 works. . Eddie version: 2.23.2 / linux_x64, System: Linux, Name: Arch Linux, Version: Linux host 6.8.9-hardened1-2-hardened #1 SMP PREEMPT_DYNAMIC * x86_64 GNU/Linux, Framework: 6.12.0 (makepkg/0cbf0e290c3 Sat Mar 9 11:37:33 UTC 2024); Framework: v4.0.30319 . Command line arguments (2): path.resources="/usr/share/eddie-ui" path.exec="/usr/bin/eddie-ui" . Raise system privileges . Collect network information . Reading options from /home/user/.config/eddie/default.profile . OpenVPN - Version: 3.3.2 - Hummingbird - WireGuard/OpenVPN3 Client 2.0.0 beta 1 - 13 May 2024 (/usr/local/bin/hummingbird) . SSH - Version: OpenSSH_9.7p1, OpenSSL 3.3.0 9 Apr 2024 (/usr/local/bin/ssh) . SSL - Version: 5.72 (/usr/bin/stunnel) I Ready . Collect information about AirVPN completed ! Activation of Network Lock - Linux nftables . Collect information about AirVPN completed I Session starting. I Checking authorization ... ! Connecting to Xuange (Switzerland, Zurich) . Routes, add 79.142.69.163/32 for interface "wlp3s0". . Routes, add 79.142.69.163/32 for interface "wlp3s0", already exists. . SSL > LOG6[ui]: Initializing inetd mode configuration . SSL > LOG5[ui]: stunnel 5.72 on x86_64-pc-linux-gnu platform . SSL > LOG5[ui]: Compiled with OpenSSL 3.2.1 30 Jan 2024 . SSL > LOG5[ui]: Running with OpenSSL 3.3.0 9 Apr 2024 . SSL > LOG5[ui]: Update OpenSSL shared libraries or rebuild stunnel . SSL > LOG5[ui]: Threading:PTHREAD Sockets:POLL,IPv6,SYSTEMD TLS:ENGINE,OCSP,PSK,SNI . SSL > LOG6[ui]: Initializing inetd mode configuration . SSL > LOG5[ui]: Reading configuration from file /home/user/.config/eddie/c99f82f1ac630c54507010a373bede3e83fd5823b241fe155d4cf82b4d573f48.tmp.ssl . SSL > LOG5[ui]: UTF-8 byte order mark detected . SSL > LOG5[ui]: FIPS mode disabled . SSL > LOG6[ui]: Compression disabled . SSL > LOG6[ui]: Initializing service [openvpn] . SSL > LOG6[ui]: OpenSSL security level is used: 2 . SSL > LOG6[ui]: Session resumption enabled . SSL > LOG6[ui]: Configured trusted server CA: C=IT, ST=Italy, L=Perugia, O=AirVPN, OU=stunnel, CN=stunnel.airvpn.org, emailAddress=info@airvpn.org . SSL > LOG4[ui]: Service [openvpn] needs authentication to prevent MITM attacks . SSL > LOG6[ui]: DH initialization skipped: client section . SSL > LOG5[ui]: Configuration successful . SSL > LOG6[ui]: Service [openvpn] (FD=9) bound to 127.0.0.1:61863 . SSL > LOG6[ui]: Accepting new connections . SSL > LOG6[per-day]: Executing per-day jobs . SSL > LOG6[per-day]: Per-day jobs completed in 0 seconds . Hummingbird > Hummingbird - WireGuard/OpenVPN3 Client 2.0.0 beta 1 - 13 May 2024 . Hummingbird > OpenVPN core 3.9 AirVPN linux x86_64 64-bit . Hummingbird > Copyright (C) 2012-2022 OpenVPN Inc. All rights reserved. . Hummingbird > OpenSSL 3.3.0 9 Apr 2024 . Hummingbird > WireGuard Client 1.0.0 AirVPN Linux x86_64 64-bit . Hummingbird > System and service manager in use is systemd E Hummingbird > ERROR: profile /home/user/.config/eddie/9b7c5dbb3f48811ec5344bd0d0829a2fd0bf83b650a4d99a2ebcc4f6cea4615e.tmp.ovpn not found ! Disconnecting . Sending soft termination signal . SSL > LOG5[ui]: Terminated . SSL > LOG6[ui]: Terminating 2 service thread(s) . SSL > LOG6[ui]: Service threads terminated . Routes, delete 79.142.69.163/32 for interface "wlp3s0". . Routes, delete 79.142.69.163/32 for interface "wlp3s0", not exists. . Connection terminated.

Nice! I've been using 2.0.0 Beta 1 for a few hours, so far so good. The issue I reported where bluetit wouldn't connect at boot with 2.0.0 alpha 2 despite using "airconnectatboot quick" is solved on my end. I couldn't reproduce after a few reboots (using Wireguard, default). The new bluetit-suspend/bluetit.resume systemd units seem to work consistently after several resume/suspend. After running this Bash script and then suspending, it seems that there isn't any DNS leak at all: #!/usr/bin/env bash while true; do curl ifconfig.co/country >> output.txt sleep 0.5s done I did this multiple times and the output file only contains the country of the VPN server I was connected to. May I ask how the network lock somehow "survives" these: systemctl stop bluetit.service systemctl start bluetit.service considering that stopping bluetit.service manually disables the network lock? Is real IP address really not briefly exposed just before suspending and right after resuming? Will report back after a longer period of usage. Thanks.