go558a83nk

the squid proxy was the cause of problems for two other users recently. I should have remembered that for this thread.

the machine that was accessing the router for the VPN setup was connected to VPN at the time you turned on VPN on the router?

The test on this web site is less than ideal. You might want to re-test another way. But, that's the way to do it. Just trial and error. Keep in mind that what works well one day may not work well the next and that's not Air's fault. The internet is dynamic so a speedy route may cease to exist for one reason or another.

what does ipleak.net say?

there is no automated way of doing that built into the software. but you can manually change servers whenever you want.

It just so happens that I was looking at something like this on an Ars Technica website where somebody made such a device. Once the product comes back in stock, what other stuff would I need to buy so that I could connect at least 4 wired devices? And may I ask how I would solve the WiFi issue? Would I be able to adapt my current WiFi router for the WiFi duties? Cheers they have devices with more LAN ports if you want to spend the money. or buy a cheap, unmanaged switch (gigabit). put your current wifi router in access point mode or whatever that brand may call it and connect it to the firewall device that you purchase.

https://store.pfsense.org/SG-2220/ you might just go with this. it is out of stock right now but seems to be within your budget.

do other sites load?

I don't know what kinds of stores are available to you. Where I am I can go to a store that sells all the parts and use their help to find parts that work with eachother within my budget. I simply just use my phone to look up information about parts if I need to. For example, to make sure the CPU I'm looking at has AES-NI. The pfsense store sells hardware that is suitable, but for many people it's out of their budget. I don't know what kind of person you are but there are many who can't see spending more than $100 on something that they intend to use for years. That's crazy in my opinion.

Are they compatible with 3rd party VPN services such as AirVPN? yep, I'd stay away until that question and the actual openvpn aes-256-cbc speed is confirmed.

I read a little about this on the pfsense forums. the point is that you don't need to assign a gateway because the VPN server is already "directly connected" (via VPN). the only way it can be reached is via the VPN so no need to assign a gateway.

this is something that needs to be asked on pfsense forums.

build or buy a machine with a CPU with AES-NI to run pfsense and follow the guide in this forum. keep your wifi router to use as a wifi access point (not router mode).

Username and password are used in Eddie to download your certs and keys. Username and password are not used to connect to a VPN server. The log shows part of the VPN connection process. Therefore, this isn't a username/password problem. If you try the openvpn 2.3.x can you connect?

Staff, the exit IP of the server Tonatiuh seems to struggle from a sordid past (it's on projecthoneypot's list) and incorrect geolocation. This has prevented me from using several web sites. What efforts have been made to correct those problems? Anything I can do to help?

Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA that's in my openvpn log - pfsense 2.3.3. It's not new. I've used it ever since I began using pfsense. just put tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 in the custom options.

if your router doesn't have an openvpn client stock then you'll need third party firmware like dd-wrt or openwrt. don't expect high performance if you end up using it as an openvpn client.

Air tried a server in South Korea and quickly dropped it because of the censorship.

how have you tested DNS speed?

people, disabling IPv6 on your system doesn't matter. what you're seeing is the ipv6 address of the DNS server. Then there is confusion from old/incorrect geolocation databases. Staff have already said they will get it fixed. Just be patient and try some other DNS leak services just to make sure.

it's an error with whatever geolocation database the web sites are using. just try a different server if it's too troublesome for you.

this has already been discussed in other threads. https://airvpn.org/topic/21713-ipleak-showing-2-dns-addresses/ https://airvpn.org/topic/21715-ipleak-test-two-dns-addresses/?hl=ipleak

I'm telling you it's cogent. tonatiuh is the only dallas server that's not reached from comcast via cogent. I'm guessing other providers (if you're not using comcast) are using the same routing...because cogent is known to be cheap. I'm on AT&T at home, and not sure what at work, so I'm not sure if routing is the same or not. But, that really doesn't explain things, since the speed is perfectly normal when not using SSH/SSL on the other Dallas servers. I highly doubt that the routing would be different based on the protocol, nevermind with two different ISPs that I connect from. I'm not saying the routing is different. And I very well could be wrong in my thinking that cogent is to blame. My only thought was that cogent was clamping down on TCP connections. Thus, UDP are faster. I have since tried SSL and SSH to Tonatiuh and they, also, are slow.

Eddie is supposed to allow LAN traffic even with network lock on, there are settings for it. Maybe you disabled them? If not, I suggest you open up a support ticket and give them logs.

make sure you're using the latest version of Eddie on your PC. The only openvpn app on the iphone is openvpn connect. all others are not based on openvpn and use the built in VPN options apple provides. thus, they may behave "better". but, openvpn is the more secure option. any problems you have running openvpn connect have nothing to do with AirVPN and everything to do with the phone and the internet to which it's connected.