go558a83nk

So, tls-crypt requires no explicit line in the config but I guess will be pushed to us if we connect to entry IP 3 or 4? I guess I should just test and find out. edit: nevermind. I see the tls-crypt down at the (different) tls static key if using pfsense be sure to adjust tls key usage mode to encryption and authentication.

The ports you've forwarded will be forwarded on all servers to which you're connected. So, you don't need to worry about connecting the right device to the right server.

Hello! IPv6 full support is imminent, This will solve any issue for persons who have IPv6-only lines, regardless of the device they use. Please note that a proper IPv6 support based on OpenVPN is currently not available in any VPN service in the world, except maybe one. All the services are based on IPv4. Our development team was even forced to rewrite OpenVPN to fix bugs which prevented a real IPv6 support. IPv6 support was planned for the end of 2017 but has been postponed due to new discovered bugs. In spite of all these problems, we're optimistic about releasing the first IPv6 supporting server in a matter of days. This is FALSE, contrarily to the names of almost every and each of our competitors, airvpn.org passes all and every DNSSEC analysis, See by yourself: https://dnssec-debugger.verisignlabs.com/airvpn.org airvpn.info does not, but it's a fall back name (anyway in the future airvpn.info will be signed with DNSSEC too). We are confident that this is irrelevant for the VPN service in itself. Kind regards I think what the OP was saying is that AirVPN DNS resolvers don't support validation of domains per DNSSEC. http://en.conn.internet.nl/connection/ and https://dnssec.vs.uni-due.de/ test for this

I take it you're running an openvpn client on an amazon device. If so, that openvpn software has nothing to do with AirVPN. If there's a leak, it's that software's fault.

Eddie runs openvpn, which is the only VPN standard AirVPN supports. The tutorials you're watching are for how to setup other types of VPN (you mentioned L2TP). Pay those no attention unless another VPN provider instructs you to do so. If this AirVPN web site says you're connected to an AirVPN server, you are.

Which page says "content only available for UK viewers"? It sounds like a service which is intentionally blocking VPN users. This is quite common.

Are you actually connecting to a server? To know, do what you were doing in Eddie and visit this web site. At the top it should say the name of the server you're connect to.

I have a port picked out that forwards through airvpn, but how do I make Caddy use that port? i can't seem to find anything about it online. Maybe I'm missing something simple here? This is how I made Plex available outside my home network but plex had a spot to put the forwarded port into... Caddy doesn't. When you create a port forward with AirVPN, input the internal port that Caddy uses in the section "local port"

https://airvpn.org/ports/ Create forwarded ports here. And you may not need duckdns if you use the DDNS Air provides.

AirVPN server is an unmoving point. The path from you to that unmoving point may change depending on network conditions. Or, if the path doesn't change, perhaps there was bad weather causing...delay. I hope you get my metaphors. Bottom line, it's not AirVPN, it's your ISP and the other networks between you and AirVPN.

Youtube doesn't use flash anyway. I don't know about the others. Is your other internet activity working well through the VPN?

I've since edited my post above to be more specific about "mask"ing. I must have written that before I had my coffee because it wasn't a thorough answer.

It doesn't mask data usage. It's just that some ports are given lower priority than others in some networks.

www.skadligkod.se uses an invalid security certificate. The certificate expired on Friday, January 19, 2018, 10:00 AM. The current time is Monday, January 22, 2018, 11:48 PM. Error code: SEC_ERROR_EXPIRED_CERTIFICATE

most likely just a change to the route to the servers. your ISP may have a link down, or maybe the usual peer/transit provider does. nothing to be paranoid about.

What's your speed to other AirVPN servers? I assume you tried more than just your usual server.

I've seen BW over 60000 quite a few times lately! When they made the change to allow for more simultaneous connections usage certainly went up!

Is there an answer for this question? if you want only one key then have only 1 key. if you have only one key it'll be the default.

Interesting. The new keys are SHA512, not SHA1.

What is your goal? Most services (e.g. Netflix) the ATV uses will block connections coming from VPN users.

AirVPN doesn't yet support tls-crypt but support is expected this year sometime. When it is available you'll have to download new configs with tls-crypt for openvpn for iOS since openvpn for iOS doesn't allow editing of already added configs (last I looked).

Hello! iptables rules restored when you close Eddie: intended and expected. When Eddie crashes, we can't see how it can modify iptables rules or do anything else. Network Lock is a set of iptables and ip6tables rules, please feel free to clarify. Kind regards I'm running Mint 18.3 (or 18.2 and 18.1 and so on in the past) in a VM and as happens sometimes the Eddie GUI crashes, but openvpn is still running. I'll just reboot at this point. When I rebooted in the past the network lock rules were still running because Eddie wasn't shut down properly. But, I've noticed lately that network lock rules are not in place upon reboot. Sounds like I'm seeing the same thing as the OP.

https://eddie.website/download/?platform=windows-10&arch=x64&ui=ui&format=installer.exe&version=2.13.6 Try that link. But, it sounds like you may be doing it wrong. You click the button that you need for 64 bit, or 32bit, then for installer or portable, then for graphical or command line, The you click download.

I just tested and it's working for me. Do you have some addon or other security software that could be blocking it?

But then how does the router connect to the VPN in the first place? The dd-rwt howto recommends using the IP address of a single server in the .ovpn file, so no DNS resolution is required. But isn't there a way round that, just as there is with a desktop computer (using openresolv)? As I said above, I am using OpenWRT, not dd-wrt, but I looked at the howto for that. The details are surely different, but the situation and basic principles must be the same. That sounds like a possible answer to the problem. So how do you do that? In case it is not obvious, I should perhaps say I am new to this. This is my first attempt at making a VPN router. Using AirVPN with openvpn on a Linux desktop is so straightforward that doing so for a year or two has taught me next to nothing about networking. I'm unfamiliar with dd-wrt so I'm not much practical help, just idea help. My point is re 10.x.0.1 is that you wouldn't need to do anything special to force DNS requests to that address through the tunnel because through the tunnel is the only way it can be reached. I understand that using only that IP as DNS prevents you from resolving the country address when the tunnel isn't up. If dd-wrt doesn't support policy routing or a way to switch DNS to VPN DNS, then my suggestion is to search for the best current tomato distribution and use that, for I know it has an option to switch DNS to the VPN. That was years ago when I used it, so I'm no help now. Or, if you have an Asus router, use merlin-asus firmware.