Jump to content
Not connected, Your IP: 34.204.169.76

pfSense_fan

Members2
  • Content Count

    247
  • Joined

    ...
  • Last visited

    ...
  • Days Won

    21

Reputation Activity

  1. Like
    pfSense_fan got a reaction from refresh in Does Air Servers drop your connection when not in use?   ...
    Excellent. Looking at that snapshot, might I suggest disabling IPv6 on that interface... and perhaps QoS, File and printer sharing (unless you actually share this from this computer), link layer topology discovery responder (lets other computers on your lan discover your computer) and netbios from the IPv4 Properties > General> Advanced > WINS. I suggest this because I assume you are not using features that use this on a computer connected to a VPN. Perhaps you are... but these things can always be reversed.
     
     
    That website is the exact IP address of airvpn.org. This is the address a DNS would retrieve for your computer if you typed in the name "www.airdns.org". If We are directly accessing this because this does not require the use of a DNS. If you are able to access this during a down time it will verify where our problem is.
     
     
    Hopefully now your IP and DNS setting in windows are set to obtain addresses automatically. If pfSense is configured correctly these will be served to any device connected to a NIC directed to do so.
     
     
    No offense meant to Knicker, he has been a great help to the community and his guide is appreciated by many, but I find it to be a bit incomplete as well as disagreeing with the methods in a few sections. This is one I disagree with. pfSense is not like Windows at all. Windows is designed to try to keep it's users connected by all means possible... for the lay person mostly. It will circumvent some rules to keep connected. pfSense on the other hand is based off freebsd. It is much more secure in that it will not do or allow anything that you do not explicitly tell it to do. No, for our uses and more correct would be to disable the DNS Forwarder on VPN interfaces and set the DNS servers on each NIC's DHCP Server page. This combined with checking the "Skip rules when gateway is down" box found at System > Advanced > Miscellaneous. From the description: "By default, when a rule has a specific gateway set, and this gateway is down, rule is created and traffic is sent to default gateway. This option overrides that behavior and the rule is not created when gateway is down", so by default we are/were telling pfSense to fall back to another Gateway. By checking this check box, which is correct for our uses, pfSense simply will not fail over a down VPN connection to another gateway. For the paranoid,  four firewall entries on a VPN facing NIC will both block all possible DNS leaks as well as guarantee the connection itself does not leak, even if someone tries. This is how I have mine set, and would like for you to try.
     
     
    Fantastic! You have extra NIC's for us to use. This will help us as well as teach you how to use the extras. The guide I began to post in another thread will greatly help you. I am going to copy that post I made as well as add to it here so you can enable another interface. But first we have to undo your settings for your current LAN interface and set it correctly. I hope you will try this, I am just going to work on the tutorial right after posting this since I have the time tonight. Please start by following the step I posted above and checking that check box.
  2. Like
    pfSense_fan got a reaction from refresh in Does Air Servers drop your connection when not in use?   ...
    What I am asking about the assigned IP is this: If you go to your network settings (I'll assume you are using Windows, so "Network and Sharing Center) on your computer, double click on your NIC, and select "Details", what information is provided. It is important we know what it says when it is malfunctioning. It may also be useful to have a snapshot from when it is working. You can highlight the text and use ctrl+c to copy the text.
     
    As you can see from this snapshot, DHCP is enabled and pfSense has served me an IP adress. Further, pfSense has served me the correct DNS srvers as well. This is what it should look like when functioning.
     
    Connection-specific DNS Suffix: XXXXXXXXXXX
    Description: XXX PCIe GBE Controller
    Physical Address: ‎XX-XX-XX-XX-XX-XX
    DHCP Enabled: Yes
    IPv4 Address: 192.168.XXX.XXX
    IPv4 Subnet Mask: 255.255.255.0
    Lease Obtained: Saturday, January 25, 2014 12:15:37 AM
    Lease Expires: Sunday, January 26, 2014 1:15:45 PM
    IPv4 Default Gateway: 192.168.XXX.1
    IPv4 DHCP Server: 192.168.XXX.1
    IPv4 DNS Servers: 10.4.0.1, 10.5.0.1
    IPv4 WINS Server:
    NetBIOS over Tcpip Enabled: No
     
    From what you have noted about the gateway statuses, everything there seems to be OK there, which leaves us to seek out other issues. The connection is up so it is not pfSense, AirVPN or your ISP. I suspect it is an issue with the DHCP server and/or the DNS Forwarder, with an emphasis on the DNS Forwarder (This would explain why you CAN log into pfSense and yet have no internet access.. If this is the case, it should be easy to correct with a bit of troubleshooting. In the mean time, next time you have this 5 minute delay, can you please enter https://95.211.138.143/ into your web browser? It is the direct IP address for airvpn.org. If this loads, we know it is a DNS Forwarder issue.
     
    I too was going to ask you about the advanced section. I do not think it has to do with your problem, but everyone should have a few entries there, at the very least to match the settings in the .OVPN files provided to us by AirVPN. Further then that, you can use this area to tweak settings towards your use once you become familiar with the options such as the "verb" setting. This setting controls how much info is shown in the logs. Default is 3, I use 4. The range is 1-5. Here is what I use, you may copy and paste this following string into yours if you wish:
     
    ns-cert-type server; verb 4; tun-mtu 1500; mssfix 1400; explicit-exit-notify 5; mute-replay-warnings; mute 20;
     
    But this brings me to another question, what hardware do you have pfSense installed on... what CPU are you using? I see you use intel NICs which is good. Any serious pfSense install should use intel NICs due to the support they have for BSD.
     
    I hope we can sort you out soon, after I post this, I am going to install Untangle on a separate hard drive to evaluate it compared to pfSense for my needs. I likely need to switch to Untangle mostly for it's ability to filter ads.
  3. Like
    pfSense_fan got a reaction from refresh in Does Air Servers drop your connection when not in use?   ...
    No, they do not drop when not in use.
     
    I do not have this issue. I have noticed you seem to have a number of issues with your setup. I do not have any of the issues you state. They are are not normal. I have not responded before because it is not the fault of pfSense or AirVPN. You either have an issue with your ISP, choice of equipment, or human error in your install.
     
    Do you monitor your AirVPN gateway? What is the packet loss?
  4. Like
    pfSense_fan got a reaction from refresh in Does Air Servers drop your connection when not in use?   ...
    Yes, I leave pfSense running 24/7... that is it's intended use. It is the firewall and router for my entire network and must be on at all times.
     
    To monitor packet loss on the AirVPN gateway you must enter a monitoring IP. I simply use 10.4.0.1 and it works well enough.
     
    Go to System > Routing
    The Gateways tab is already selected, so go to your AirVPN gateway on the page and find and select [e] edit button on the right.
    Find Monitor IP and enter your monitor IP of choice. 10.4.0.1 works.
    You will now be able to monitor packet loss on that gateway both under Status > Gateways and Status > RRD Graphs > Quality
    The RRD Graphs may give you some insight into why you are disconnecting.
  5. Like
    pfSense_fan got a reaction from refresh in Does Air Servers drop your connection when not in use?   ...
    refresh,
     
    I have a few questions for you that may help me help you with this issue.
     
    When you first come back from being away:
     
    1.) Does your computer have an assigned IP address from pfSense?
     
    2.) Are you able to log into pfSense? If yes, does Status > Gateways show a "online" connection to AirVPN or is it down? If you cannot log in what does the RRD Graph show for that time period? It will tell you if you have been disconnected or if the connection has remained.
     
     
    Also, are you running DHCP or static IP on your computer?
×
×
  • Create New...