go558a83nk

I'm using OpenVPN, natively on an Ubuntu server with two NICs, using the automatically generated file, with the addition of very basic up and down scripts (which I got here).  My broadband is average - about 10Mbit/s, but I can torrent at up to 1.2MB (9.6Mbits/s). The server is also the router for my home network, plus DNS, mail, media server, 
 
My firewall blocks and logs any traffic from my server, other than outbound DNS and UDP443. The VPN has been up for three days and no attempts have been made to connect outside the tunnel (except to Absolute Radio's streaming server - configured with a static route and permitted by the firewall.  In fact even the tunnel doesn't register as I cleared the counters after I restarted the VPN tunnel and it hasn't dropped since then.
 
I even terminate inbound VPN from my mobile devices via port forwarding, and then route the outbound requests via the tunnel. I use ddclient to update the no-IP dynamic DNS.
 
Everything just works. Even Netflix lets me watch stuff (on an LG DVD player thing) and in full HD.
 
Thank you AirVPN.
 
 

Okay, so I started to work on the man page for linux. Does no one care or? 
Here is the old one:

 
Here is the one I am working on (you can see where I stopped):

 
Some of the sections in the manual do not make a whole lot of sense to me so I was waiting to hear from staff to hear their thoughts. I did not want to make too many changes to the text itself. Okay take care. 

We are aware of the problem which is caused by a non-working IP address (null routed?). We have repeatedly contacted datacenter (ATE) support service (and other e-mail addresses of theirs) and they never replied. We are considering to drop them because of this intolerable lack of care.
 
Kind regards

Hello!
 
It will be available in the next beta version.
It's about editing AirVPN.xml config file, and adding something like
<providers> <OpenVPN title="OtherVpnProvider1" path="X:\ovpn_archive1\"/> <OpenVPN title="My personal" path="X:\ovpn_personal\" login='abc' password='123'/> </providers> For each provider, Eddie looks in the specified path for .ovpn config files (recursively).
Eddie will add any .ovpn file found as "Servers", with a name composed by provider title + filename.
If the .ovpn file uses the "auth-user-pass" directive, the login/password in the XML are used for authentication.
Of course the protocol and port used are from .ovpn file and tunnel/dns checks are not performed.
Column like 'Users' or 'Bandwidth' will be blank.
Countries are detected by "geo-locating" the IP address (there is an option about external web services for this detection).
It's a feature under development, a lot of improvements and better usability are needed, and it's not really tested with a lot of .ovpn configuration files yet.
 
Kind regards

Hello!
 
ONLY FOR WINDOWS USERS
 
Previous Eddie editions (Eddie 2.11 adopts a new method that prevents DNS Leaks, so in theory it's not necessary anymore to force network interfaces DNS.
For this reason, the option "Settings -> Advanced -> Force all network interfaces for DNS" is disabled by default.
But some of you report DNS Leak. We can't reproduce the issue on any of our machines in our labs.

So, anyone wishing to collaborate will be welcome.

Please ensure:
- Settings -> DNS -> DNS Switch Mode: Automatic
- Settings -> DNS -> DNS Servers: empty
- Settings -> Advanced -> IPv6: Disable
- Settings -> Advanced -> Force all network interfaces for DNS: DISABLED
- Settings -> Advanced -> Ensure DNS lock: enabled
- Settings -> Advanced -> WFP: enabled

All the options above are set to the default settings.

Please report:
- Your Windows version
- Whether you have IPv6 or not.
- If you have DNS leaks. If so, please generate a report by clicking life belt icon in Logs tabs, and copy it at least up to the "Default gateways:" line. Please post it in "spoiler" tag.
 
Kind regards

Why exactly is my MTU reported as 1392 if OpenVPN's default is supposed to be 1500?

Well FTP working as advertised!  Just tested by uploading a 1.2 GB folder and all went well and it all got delivered i about an hour @ 800+Kbps.  Not sure where the choke point is, but likely inside my house, since I get 10Mbps up.  Maybe hitting CPU encryption bottleneck.

This is harder than it seems in today's internet. Many big sites don't use single IPs, but a combination of various CDN solutions.
This creates 2 issues - huge routing table list of exclusions, and constant cat and mouse game to add new ranges. Bad.
Second issue - those ranges are also used by other websites which you do want to use VPNs for, i.e. torrent trackers.
 
So the only actual solution would be running a VM, bridge it to the host adapter without VPN, and use it for websites
and services you wish to be excluded from the main VPN connection.

pfsense sells hardware that I believe is quite capable of running openvpn over 100mbit/s if i understand correctly.  or you can probably build your own cheaper.

did you check out the pfsense store as I suggested?  I refuse to hold hands so you're going to have to do the legwork on your own.

dj77 said it above in this thread.

Clearly not a user from Germany. In Germany, residential internet connections get reset every day, usually in the night hours. For OpenVPN it'd mean a complete reconnect. Sometimes I hate living here.

76.6 TB - seems like this user is trying to archive the entire internet. Interesting how many VPN providers will actually tolerate these amounts of traffic
for a single user

pfsense sells hardware that I believe is quite capable of running openvpn over 100mbit/s if i understand correctly.  or you can probably build your own cheaper.

Eddie 2.11 final edition will have the 'hidden' feature to run any VPN OpenVPN configuration, not just AirVPN. 'Hidden feature' because the UI will not include it yet. It will remain usable in manual configuration, mainly for beta-testing and skilled users. We will post a guide about that soon.
Eddie 3 will feature a full UI interface for that.
 
Kind regards

After playing around with the configuration on my new cable modem/router I found the issue.
Apparently the ICMP flood protection of the built in Firewall blocked the traffic.
Disabling it instantly solved the issue, and re-enabling reproduces it.
 
Thanks for the help and sorry to bother you about an issue at my end!

Since you mentioned bad routing I humbly suggest you trace the route to the servers you like to use day to day, especially when you notice changes in speed.  It could be that routing is changing depending on the demand your ISP is seeing, maintenance, etc.  Since routes are often asymmetric it's also a good idea to catalog the reverse route - the route from the VPN server back to the ISP router nearest you (not your IP because depending on your setup it might be the first hop).

Pocket Firewall for Windows (Vista and above, no XP)
Doesn't require any driver installation Portable Pocket, Safe, absolutely not OS invasive: if you brutally kill the process, rules are cleaned (persistent mode not yet implemented). Requires Administrator privileges Requires .NET 4 (at the moment) 32 bit and 64 bit edition It is not needed for Network Lock, IPv6 block or DNS Lock with Eddie (AirVPN client). Eddie 2.11 (currently under experimental phase) that already has it built-in.  
 
It was born to study whether we can avoid the dependencies between Eddie (AirVPN Client) and Windows Firewall for the Network Lock / IPv6 lock / DNS lock features. 
 
There are a lot of improvements that can be done (viewer/editor of rules running on the system, persistent rules across boot, etc).
I think it can be an interesting community project, a free and open source alternative to expensive firewall software.
I released all source-code on GitHub (under GPLv3). 
 
Download v0.1: 32 bit , 64 bit

I don't have a KAT account but it does bother me that my birth nation polices the world so eagerly and thoroughly.  I don't believe they have the right but what do I know.

No the Servers were not seized but the provider for the servers did hand over access to them. And in that they were greatly compromised as there were password files and all sorts unsecured available for them.
 
 
You are allowed to have your opinions of course as anybody, but in saying parasite you are calling a big portion of AirVPN users parasites as many of us pirate and it may not always be for copyright evading, many of us do not live in the United States for one and have to use piracy as a means to get tv shows and movies we would like to see especially now that Netflix is blocking VPNs

Hello,
 
the domain name  of this "kat" has been seized (before any due process in any jurisdiction, as far as we understand), but were the servers seized as well? Does anyone have the correct, old IP address or addresses?
 
Kind regards

Duuuht, partly wrong, thanks for playing anyway.
In times of fiber, distance doesn't play a great deal anymore. The true hindrances are routers/ASes your traffic needs to pass through, called hops. The more you have, the higher the latency. The higher the latency, the slower your speed according to the bandwidth-delay product. BGP and its rules work for me in 90% of all cases, the other 10% is a multitude of exceptions ranging from AS owner choices against the BGP principles to technical difficulties (router offline for example).

no, the solution to this problem isn't for users to mark solutions.  when there is a large problem like what happened Staff do need to make an announcement.  many people probably consider that disabling checking DNS and route is decreasing their security.  whether that's true or not, some guidance by Staff is much more assuring and authoritative than other users.

You can add Coinbase to the list companies that provided information when faced with a court order. See paragraph 60 of the "Criminal Complaint" document that you can find here:
 
https://www.justice.gov/opa/file/877691/download
 
The simple reality is that no service provider any of us here use would be likely to refuse to comply with a proper court order, including ANY VPN provider.
 
If you don't want to read the complaint, this is a good overview:
 
https://gizmodo.com/the-colossal-screwups-that-got-the-kickass-torrents-own-1784033848
 
If you really need privacy for something you are doing, idealism and outrage at people not behaving as you think they should will not help you. It will impair your thinking and assessment of risk.

I don't have a KAT account but it does bother me that my birth nation polices the world so eagerly and thoroughly.  I don't believe they have the right but what do I know.