Leaderboard

Hello! We're very glad to announce a special promotion on our long term Premium plans for the end of Summer or Winter, according to the hemisphere you live in. You can get prices as low as 2.06 €/month with a three years plan, which is a 70% discount when compared to monthly plan price of 7 €. If you're already our customer and you wish to stay aboard for a longer period, any additional subscription will be added on top of already existing subscriptions and you will not lose any day. Please check plans special prices on https://airvpn.org and https://airvpn.org/buy All reported discounts are computed against the 7 EUR/month plan. Promotion expires on 2025-03-30 UTC. Kind regards & datalove AirVPN Staff

It's Google and their re-captcha response to bots. You need to use a YouTube front-end, like Invidious or Piped. This instance is working for me currently, but it may not work for long. possible workaround

My personal thread summary: .

My goodness, I didn't expect my post to be the basis of a new thread about morality objective reality, the right to privacy, dopamine fixes, occult teachings, and sin, but stranger things have happened. You've made up your own 7 deadly sins, which is interesting. In the original lineup, "pride" was on the list, as was "greed." They were probably on there for a good reason. I don't have much to say here. To have all these solid ideas about objective reality and the right way to do things, and for so many people to not acknowledge them with the same importance that you do, must be difficult. I will focus on "getting rich' now, I suppose, though what's considered wealth is very relative indeed. Cheers. p.s. You should consider lifting your personal ban on "exciting music," that's a little cruel to the self.

At least, according to annunaki legend, humans were created through crude genetic engineering by annunaki alien species who came to earth to mine gold and left earth a long time ago. To create humans, they mixed earth hominid genes with annunaki genes, using cheap genetic engineering methods. That explains why humans have many genetic defects. They didn't create humans with precise genetic engineering methods because humans were designed as a tool to mine gold for annunaki aliens. That also explains why humans spent a lot of effort in mining gold and processing it into gold bars even though they were not technologically advanced enough to actually utilize gold. Nowadays, gold is used in computer chips. People didn't have computer chips in the past. There was really no good reason to spend so much effort on producing gold bars if humans didn't have natural use cases like computer chips for gold. Because annunakis didn't want to directly control humans through brute force, they gave the concept of money and government to humans so that they can indirectly control humans through money and government. They spent a lot of effort on perfecting indirect control. After they left, the human controllers who controlled humans for annunakis kept money and government. The legend says they themselves don't use money and government to coordinate their own labor. They give the concept of money and government to slave species. If annunaki aliens took some humans with them after they were done with humans on earth, there must be humans on other planets. But, whether annunaki legend is real doesn't really matter at this point. I don't really care either way. What matters is the fact that I'm stuck with money and government on earth along with other earth humans. I'm still practical and try to be productive with money, but I am aware that money is a control mechanism.

Hello! Yes, attempts to show that "objective morality" exist are around since the time of Plato (at least) but they have never succeeded. Securing the possibility of objective knowledge in morality has been the dream of several Giants of Philosophy throughout human history, but nobody so far succeeded. Nowadays scientific analysis tend to show the contrary, i.e. that there's no such thing as an objective morality. Then, even if objective morality existed, comes the huge problem to define it and to interpret the definition. Your definition for example is not universally accepted, therefore there are serious doubts that this "objectivity" exists indeed. And even by accepting your definition many actions remain moral for some people and immoral for other people, according to the interpretation of your definition (we will not insult your intelligence to make trivial examples). Anyway, all of your considerations don't change the observation that your statement according to which privacy would be "a form of luxury" for financially wealthy people is false, perhaps even according to your own definition of morality! This can be an honorable and moral behavior indeed, but we don't see how this personal choice should support the idea that privacy is the luxury of wealthy people. Kind regards

I've been using the same manual with slightly different settings, but nothing worked. Tried again with your settings and surprisingly everything works perfectly. Brief summary: AirVPN+Amnesia WG on Keenetic connected to MGTS via GPON terminal tp link xz000-g7 so far works, but will continue to monitor. Many thanks for help!

I think Keenetic supports AmneziaWG natively now. You can try appending junk packets settings to fool DPI to make it work. Instruction is here: https://docs.amnezia.org/documentation/instructions/keenetic-os-awg/ At the step 23, since you don't have unique AmneziaWG settings as you would have if you self-hosted it, you need to set them in the way that is compatible with normal Wireguard. Example could be: interface Wireguard1 wireguard asc 8 50 1000 0 0 1 2 3 4

Privacy is a fundamental human right enshrined in any charter of fundamental rights, including the United Nations Universal Declaration of Human Rights and the Charter of Fundamental Rights of the European Union, and a series of amendments in the US constitution (including but not limited to the 4th Amendment). The right to privacy has been equated to the right to life (for example by the India Supreme Court) and privacy (in the form of anonymity) has been recognized as an essential requisite to freedom of expression, according to a landmark & paramount decision of the US Supreme Court in 1994. It is exactly the opposite in many documented cases. The right to privacy is often perceived as a privilege for the wealthy but it is actually more crucial for financially poor individuals, as you can easily verify through the sources and reports by the UN and by many human rights advocate organizations. As far as it pertains to additional protection of privacy on the Internet through more effective data protection and a layer of anonymity, we contribute also by aiding, technically or financially, networks that are free for everyone, such as Tor, making privacy protection enhancement (small or big) affordable for more persons. While privacy is very precisely defined universally (and coded in law as one of the most important human rights in many countries), morality poses problems even with its definition. Codes of conduct endorsed by a society or a group (such as a religion), or accepted by an individual for her own behavior, are multiple, and many of them are mutually incompatible. Large groups of people endorse a "supreme, universal" morality that's totally refused by other groups. Some groups define "morality" as something that it's not even defined as "morality" by another group. Some groups claim that "morality" is something defined by some external, powerful entity, given to us through revelation and the interpretation of this revelation by selected persons, while other groups do not even agree about the existence of such external entity. That's why many of the most famous "educators" you mention, in the course of history have been incensed as heroes of their times by some groups, while other groups have defined them, at the same time or later in history, as bloodthirsty monsters, crazy lunatics or anyway people against morality. Even your invitation to avoid a perfectly legal action in all Western countries shows that your "morality" is incompatible with the "morality" of many other individuals and groups. Kind regards

Yes I agree

Norway's servers are over 60% most of the day. Can you ship a couple of Sweden's unused servers to Oslo? There's like 5 not being used.

I'm gonna try this.

Hello! Yes, there has been intensive work behind the scenes to fix some tricky bugs and improve the implementation of specific parts (special thanks to beta testers behind the scenes). The next beta version, or perhaps the first Release Candidate, is scheduled for the very first days of April. Kind regards

It's on the specs page: If you decide, despite the note about its usefulness, that you want to use DoT, enter dns.airservers.org there. Be advised that this also means that DNS resolution will only work if the respective Wireguard connection to AirVPN is enabled and active.

Hello! In the last 12 months it appears that Singapore datacenters are "cursed": a major fiber cut, various server hardware failures (now Hydra motherboard is gone, for example), various power outages... We operate servers in two separate datacenters, we will assess the situation in the near future. Kind regards

The front-end instance I posted earlier has a free sign-up, no email address required. Any random username / password will do. Then, complete a simple captcha related to analog time, and you're good for the session. It's not perfect but it's better than continuously hunting for serviceable Piped instances (or other front-end options that may or may not work). It appears likely Google has begun targeting VPN IP addresses and forcing logins; I doubt this issue is exclusive to Air servers.

Hello! This is correct and fine, very well. Geo-location can be finalized not only through IP address, but also through other methods such as cellular and Wi-Fi networks evaluation (a technique used by HTML5 geo-location method for example), GPS, language and time zone cross-checked with other info. In some circumstances it can indeed weaken your anonymity layer and in general harm your privacy so we recommend that you disable HTML5 geo-location on the browser(s), and turn off GPS on the equipped devices when not needed and when connected to the VPN. For Android, our software Eddie Android edition features a GPS coordinates spoofing option (disabled by default) which comes handy in some circumstances. When this option is enabled, Eddie spoofs the coordinates determined via GPS and make them match with the location of the AirVPN server the device is connected to. Kind regards

Hello! Very good, if that's the case then even the "LG problem" would be solved. Let us know how it goes with Stremio and online gaming. Kind regards

If the 7530 is your router and you really like to tinker, Freetz can be used to install OpenVPN and iptables. At the same time you must get rid of some AVM tech through the Freetz config (for example, starting with Fritz!OS 5.x there's the AVM PA which ships its own versions of common Linux kernel network libs, rendering iptables useless for OpenVPN's use case; but if PA is not there you might get degraded performance). The recommendation shall be to connect a different *Wrt-capable router to the 7530 (OpenWRT, DD-WRT, AsusWrt, etc.), configure OpenVPN/Wireguard on that and henceforth connect all your devices to it. No other features than DSL and maybe telephony will be used on the Fritz!Box. Well, I think yes? Not familiar with that service. Subjective. Put it to the test with various servers, ports and protocols and see what works best. But in general, I strongly recommend against competitive gaming via VPN. Not only because you artificially increase the latency, but you also paint a big mark on your back saying "watch me closely, I'm probably up to no good".

OK, I'm sure others have already done this but I figured out how to use Plex's system with pool 2 and that is by putting the "https://pool 2 external IP:external port" into the custom server access url option in the network settings for the plex server.

@Tubular Thanks for the relevant log and output. We have two overlapping problems here. One is caused by the translations between iptables and nftables (only when ufw is enabled, otherwise nftables usage is consistent and translations never enter into play). This is quickly resolved by not enabling ufw, as you noticed. The other problem is that when a session is over Eddie restores an old /etc/resolv.conf backup created in the past by Eddie 2.21.8: # Generated by Eddie v2.21.8 - https://eddie.website - Tuesday, January 14, 2025 3:36:48 PM UTC nameserver 10.<cut> The above is wrong and it could be the consequence of some old Eddie 2.21.8 dirty status caused by a crash. For the new Eddie the above file is the normal system setting to restore at the end of a session, so Eddie will make your system unable to resolve names when your system is not connected to the VPN. Please shut down Eddie, edit /etc/resolv.conf with any text editor (root privileges required) and enter only publicly available name servers, for example Quad9 (we recommend it for privacy and neutrality commitment). An example: nameserver 9.9.9.9 nameserver 149.112.112.112 nameserver 2620:fe::fe # only if your system, router and ISP support IPv6 Save the file, re-start Eddie, connect to some VPN server, shut down Eddie and verify whether the problem is solved. Kind regards

As for me, I use a hardware TAN and TOTP generator. Both types of generators are not supposed to be used on the same device as what you're trying to do (e.g. banking + TAN app on the same device, or logging into a website and viewing the OTP in Bitwarden in a browser tab next to it). So, I physically separated them

I was quoting, therefore responding to, Mr. BLACK KITTEN, who said that the problem was encountered on Firefox and Brave only, and the CAPTCHAs solve with other browsers. So if those tests were conducted while being connected to a VPN server, it's illogical to believe it's universal and so blame Cloudflare. Certainly makes it more probable for me that the browser configuration (about:config, addons, plugins, etc.) plays some part here – if it's not outright a customer decision to block those IP addresses and ranges, as Staff noted. I was not conversing with you in that part of the post, but I should've made it clearer by a mention, maybe. That's because I am your opposition in this discussion and don't believe this to be as remotely alarming as you think. Certainly not a threat to AirVPN as a company, as people mostly use a VPN for file sharing (going by the topics created around here, and bandwidth statistics). Also, a frequently posted recommendation around these very same forums for those in need of privacy is to use Tor. AirVPN forums are there to provide a platform for AirVPN users to help each other with problems around AirVPN tech; it's a gift from AirVPN to the community. I am a moderator here because I voluntarily requested it a few years ago to help with spam removal. thread management and readability enhancement of the posts. Actually, I requested it because people wrote me privately that it took days to get their posts approved, and I wanted to get down that delay. I have not requested moderator rights to bring about some "better future" for AirVPN, defend it or do some weird missionary work preaching their mission statement. I am not a team member to worry about that. In fact, when I presented one such case of defense to Staff on something that transpired on Reddit and sought explanations, I've been told not to worry as whatever happened didn't have even a minute effect on AirVPN's reputation or sales.

I tested the beta build and it does seem to be working as intended.

Additional article which resolved any problem for a couple of customers: https://community.ui.com/questions/Port-Forwarding-from-VPN-Interface/7099072b-d3d6-46a6-a3f7-e403f6c00849#answer/17f3676b-c144-4beb-a1e7-9313716945c9 Kind regards

What are you talking about? do you know the golden rule exists in almost every religion on the earth and has thousands of years? If you want to "teach" about being "moral" in the sense of being a good person, you can simply teach the golden rule because this is something even a kid understands and can practice, while your theory on objective morality is probably only understood by yourself and cannot be practically taught. Are you talking about the historical Christ or the mystical Christ? because the historical one didn't do this, and the mystical one's actions and words cannot be interpreted literally. You can use TOR/I2P which are free and have privacy. You can read books in your local library and not do a google search and by doing that have privacy. You can go to your doctor's office and not have a conversation through WhatsApp and keep your medical condition private. Privacy in the world of computers might be hard to achieve, but many people collaborate to make privacy reach more people (either by educating, by hosting a tor node, etc.). It might sound like luxury in a country where you have most of the people living in poverty, in other countries it is not. In some countries it might be a requirement to have an online life, as the networks are controlled by a totalitarian government. In other countries it might be completely ignored, as you won't have the police knocking at your door because of a social media post no matter how "offensive" it might be to a group of people. In other words, luxury is relative, privacy is not.

And there oozes creeping racism from these conspiracy-loving, self disciplined monk educators with the will to avoid porn but not to study seriously the matters they talk about. So typical. This self proclaimed monk-educator claims a thing and the contrary of it in different messages to pollute forums. Racist monk troll alert! 😸

Are there humans anywhere else?

And thank you. <3

Hello! With Eddie Android & Desktop edition, and with the AirVPN Suite, you can define a white list of a single VPN server. When a white list is defined, the software will consider only servers inside that list. With a third party software, you can generate a configuration file for a single server from the Configuration Generator. Kind regards

Hello! Please run Eddie, enable Network Lock, connect to a VPN server, disconnect from that VPN server, disable Network Lock and then send us: a system report generated by Eddie https://airvpn.org/forums/topic/50663-youve-been-asked-for-a-support-filesystem-report-–-heres-what-to-do/ the output of "sudo nft list ruleset" the output of "sudo iptables-save" the output of "sudo ufw status" the output of "cat /etc/resolv.conf" In general, since Mint packet filtering platform is based on nftables, you should keep ufw disabled (the default setting in Mint 21.x) to avoid various clashes caused by translations forced by the hybrid usage of iptables-legacy (ufw works only with iptables, not with nftables) and nft. Kind regards

Hello! Sorry, our testing system is Mint 21.1 Xfce edition and, provided that you install bash, everything runs perfectly, including traffic splitting. We will test on Mint 21.3 and 22.1 in the next days and let you know. The log shows multiple critical problems that are not currently reproducible. We will update this thread in due time. As far as it pertains to ufw, Bluetit does not disable anything, but Network Lock operates at nftables level in your system through the userspace utility nft, because Bluetit detects that both nftables and nft are working in your system. However, ufw is an iptables frontend, so it can not interact directly with nftables, it must do it through legacy translations. This hybridization is deprecated because it may cause very many problems (Bluetit tries to warn you with "WARNING: ufw is running on this system and may interfere with network filter and lock" as you may have seen). ufw does not support nftables, which is the new network filtering subsystem of your distribution Linux kernel. iptables compatibility is maintained through a complex set of translations. If you operate simultaneously with nft and ufw, bad things may (will) happen. When Bluetit restores the previous rules, it does so via nft. If ufw gets disabled at this stage, it's not Bluetit that disables it directly. The above firewall problems are not user's direct responsibility, instead they look like the outcome of a suffering and maybe not well planned migration from iptables to nftables on Ubuntu and derivatives. Please note that in Mint 21.3, ufw is disabled by default, thus resolving the problem at its root. Solution: consider to clean up the system to stay entirely on translations or entirely on nftables. If you want to go with nftables, just disable and/or uninstall ufw. If you prefer to keep ufw then renounce to nft and rely exclusively on translations, and force Bluetit to go back to iptables translation. To do so, just change the networklockpersist setting into iptables (from the default automatic choice). Kind regards

Hello! We're very glad to inform you that a new 10 Gbit/s full duplex server located in Frankfurt, Germany, is available: Ashlesha. The AirVPN client will show automatically the new server; if you use any other OpenVPN or WireGuard client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 1194, 2018 UDP and TCP for OpenVPN and ports 1637, 47107 and 51820 UDP for WireGuard. Ashlesha supports OpenVPN over SSL and OpenVPN over SSH, TLS 1.3, OpenVPN tls-crypt and WireGuard. Full IPv6 support is included as well. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. You can check the status as usual in our real time servers monitor . Do not hesitate to contact us for any information or issue. Kind regards & datalove AirVPN Staff

Thanks OpenSourcer. I honestly appreciate your constructive feedback. I felt the other person wasn't even attempting to be helpful. Maybe if said person offered ANY feedback related to the post, then noted, "why you still using Win7?", my response would have definitely been in kind. I noted developer/application problem in a follow-up... that said, there are ways to keep win7 updated (PM me if you want for that info.). Also, I did apologize to the dude, but I'm fastly remembering why I generally avoid message boards. +My posts are now "moderated" and I was penalized with some "point" thing. ¯\_(ツ)_/¯ I believe in karma, I try to help people, not sh*t on them. I found his question unnecessary given the context. Peace @opensourcer

When using 2.24.6 with Win7 32bit (for reasons) I get an "unable to obtain elevated privileges" and can go no further. No problems with 2.21.8. 2.24.6 working flawlessly on Win10 machines.

Looks like the only way to connect to any chosen Protocol is to check "None" in Advanced, MS Windows Only. Also having trouble with latest TAP driver, maybe deprecated for Win7? Have to update TAP driver using device manager after a restart, and then TAP driver resorts to 9.0.0.9. If I exit Eddie, then update to latest TAP driver, this will work. TAP fails everytime after a reboot, requires UAC prompt, then unsuccessful. Need to exit Eddie, install from unzipped package, et. But, seems like better speeds using old 9.0.0.9 TAP? Here's a log after successful connection, then tweaking advanced MS Only setting to work with SSL, then resorting again to "None". *Automatic does not work when one tries to select individual Protocol (UDP, SSL, SSH, et). Guessing a Wireguard conflict somewhere. Could be the crap Intel Wireless Adapter too. Im spent *"VPN Network Adapter not found, install fail (wintun)". Can't figure it out PIA_or_PainInTheAss.txt

Sounds like you are making great progress, congrats! It sounds to me like everything is working as it should now, so we need to either: reset your expectations and correct your assumptions, or have you communicate why you think something should work a certain way or what your goals are. Putting your first and third posts together, it sounds like you expect to see the WebGUI on multiple ports. Can you explain why you would want that? I'm not going to say you couldn't engineer that, but I'm going to challenge your thinking here. Let's assume your machine has a local network static IP of 10.77.77.42; you access the WebGUI with http://10.77.77.42:8082 right? Why do you need additional access on port 27586? Are you trying to admin qBittorrent from outside your network? You haven't stated that before which is why I ask. Many users are uncomfortable exposing their WebGUI to the world, so you need to be clear that this is your desire (and secure it with https before doing so!). How many ports do you have forwarded from AirVPN? Are ports 8082 and 27586 in pool #2 (saving pool #1 ports for P2P users is the goal here)? Your line "FIREWALL_VPN_INPUT_PORTS=8082,27586,27587" isn't going to work unless all three of those ports are forwarded from AirVPN. I believe the most common use case is to only forward the torrenting port from pool #1 (27587) keeping the WebGUI port just for local network use. Lets check your devices to ensure they are not an issue. When you go to the devices screen have you set up a device? Then in the ports screen is that device linked to the port (in the dropdown)? And when making your config file did you select that device? When working correctly, the sessions screen should list your device at the top of the card when connected.

Then I'd get swedish localisation on websites (for those sites that sets language based on IP location). And the problem with Norway being underfunded with servers, while Sweden having several that's practically unused would still exist. As I'm writing this, Sweden have 8 servers with less than 10% load out of 13. Norway have 5 servers with only 1 with less than 63%.

Trick or Treat, indeed…

What, did someone secretly add a year of premium or something?

Take care John, I hope you are back on your feet soon.

Look, this is something you can easily look up yourself by searching for a single word: china. https://airvpn.org/search/?&q=china&search_and_or=or You find things like: .

For a few months now my PC has seemed slower in all aspects. I had put it down to it being an 8 years old desktop still running Windows 10. Also my 1G broadband connection although giving 850Mbps when not using AirVPN reduced to between 250-320Mbps when connected to AirVPN. Last Thursday I happened on this thread https://graphicscardhub.com/low-gpu-usage/ while researching why my graphics card an NVIDIA GeForce GTX1080 had stopped using its max power when using Handbrake and also my game of Elite Dangerous had started stuttering in certain situations. I found the cause and the solution for me in the section in Quotes below. On following the instructions I found my graphics card started working properly again and as an added bonus when I next started AirVPN I found that my download speed had now jumped up to 550-660Mbps and this has remained steady since. At 74 I am not as PC savvy as many so perhaps this can be another cause of slow speeds and wrongly blaming Virgin for bottlenecking etc. As my graphics card worked fine previously I am pretty sure that one of the Windows Updates in the last year or so must have caused this slowdown, likely another example of Microsoft meddling. Anyway hope this helps someone else having slowdowns.

No, the graphics card didn't limit internet speed. I just inadvertently found the solution to that while trying to find out why my graphics card wasn't using its full resources while gaming. In the graphics card help post ( link above) I found the passage on "Windows Power Management Setting for PCI Express" was what had slowed not just my graphics card but my whole PC down. My CPU very rarely ran at its full 3750MHZ but mostly between 1200-2200MHZ. When I switched the "Link State Power Management" off as shown above suddenly my PC is much faster overall including my internet and broadband connection and my VPN connection goes from 250Mbps to near 600Mbps D/L compared to a regular 800+Mbps D/L without using aVPN.

How do points 1, 2, 3 and 5 lead to such a conclusion? Just because it's Russian doesn't mean it's bad. Not everything from Russia is somehow connected to Russian politics; please take care to keep these matters separate. Only point 4 is a bit strange, but it'd be strange if it were an EU or US service, too. Let's not use the word "honeypot" here prematurely before any real analysis. Otherwise it's just FUD.

If Wireguard scales and allows full use of server bandwidth, had you considered Wireguard only servers? Seems like that would make sense at least on the 10G so as not to waste so much capacity?

Hello! This looks like a relatively new Reddit policy, not specifically aimed at VPN, but at any IP address not assigned to residential ISPs. In this case access is granted but only after you have logged in. Just tested from all Japan servers, including Taphao, and we could access. After the login all Reddit is accessible, as far as we see. To maintain a robust anonymity layer in Reddit you need an anonymous e-mail address created with the protection of AirVPN and/or Tor, of course. Follow the instructions you have published in your screenshots to login (the login page does not block access from Tor or VPN or datacenters). Two years ago Reddit started to prevent users to post more than a comment every 10 minutes if the connection came from a datacenter IP address ("if you are accessing from an hosting provider" hints to any non-residential IP address). The behavior you report seems quite new and we confirm that it happens even from dedicated servers completely unrelated from our VPN activities. However the system is still coughing because, on the other hand, as @mazurka7 correctly wrote, some VPN servers are not subjected to this filter. Kind regards

Hi guys, I had this issue whenever I shutdown my computer without exiting eddie in a regular way and I hated to need to restart the computer to fix it. Solution for me: Kill the "openvpn.exe" task -> Eddie seems released, can be started normally again and no "no socket" issue Kind regards, Vent

I just wanted to request a server in Denmark