go558a83nk

I don't have a KAT account but it does bother me that my birth nation polices the world so eagerly and thoroughly.  I don't believe they have the right but what do I know.

no, the solution to this problem isn't for users to mark solutions.  when there is a large problem like what happened Staff do need to make an announcement.  many people probably consider that disabling checking DNS and route is decreasing their security.  whether that's true or not, some guidance by Staff is much more assuring and authoritative than other users.

Thanks for getting this fixed quickly! Looks like it happened in the middle of the night when you were sleeping.
 
Also a suggestion: once you know there's a system-wide problem, post it PROMINENTLY somewhere on the site. That way people know you're aware of it and are working on a repair. That will save a lot of users ANGST AND TIME trying to figure out why their AirVPN connection isn't working. That would also prevent dozens of similar posts saying "mine isn't working".
 
PS,  I know you don't have much experience with system-wide problems because they happen very rarely ; ) Cheers.

What caused the deployment failure though? Anything interesting there? I mean the other day we had that freaky issue with the Netherlands servers becoming the most recommended connection point for a whole lot of clients and now this. I assume it's not related, but it's always interesting with a deeper explanation, if any is available. Thank you for your time :].

All the SSL VPN connection protocol allows you to do is slip through standard network blocks by shielding the OpenVPN headers in your packets and replacing them with SSL headers, also your data is encrypted a second time in SSL format. Any IT shitlord with a grudge is going to know your using a VPN regardless of what ip your connecting to, as it will be the only ip you connect to and it will be a constant stream of encrypted data.
 
TL;DR: SSL only helps if no one is at their desk actively targeting you, which is good because contrary to popular belief i have found that to be rare. Either VPN blocks are done by settings (blocked ports) or DPI Boxes that look for OpenVPN headers.

Notes from Staff
 
1) this topic has been split to keep it readable because it contains at least two important pieces of information which deserve to not be mixed with funny flames. Off topic forum is the correct place for the split messages that you can now find in "[TOXIC WASTE] ---" topic.
 
2) the two persons who say that we allow this type of information for our purposes and suggesting that we should censor it are not in good faith in our opinion, because our forums have been full of marketing promotion of competitors and we never saw them advocating the censorship of such messages. The difference is that this thread reports alleged facts from various sources, it is not marketing.
 
Additionally, when you claim that the reported facts and/or the opinions and/or the actions by a moderator of a single sub-forum of a forums set dedicated to the community and handled by the community reflect in any way any AirVPN opinion, idea or action, then you're living in a fantasy world. It should be superfluous to remind you that any message not written by "Staff" does not necessarily reflect any opinion, ideology and/or technical or non-technical knowledge of AirVPN personnel.
 
Kind regards

Wait I just noticed that it's John Titor who wrote this. Wasn't this the guy who came back from the future? He might be referring to a future event wherein AirVPN is down!

That creature is a troll!

Patriot Act is something congress keeps passing that allows them to do whatever they want because "terrorism".  It's a serious repression of liberty and freedom yet most americans don't care because they think it makes us safer.

entware has its own repository with stunnel available, if that's what you're asking.  install merlin firmware, install entware (directions on merlin wiki if I recall correctly), then from SSH command line install stunnel.  something like  opkg install stunnel
 
you'll probably also want to install screen to run stunnel in the background.
 
screen -dmS choose-a-name-for-the-process stunnel sslconfigfromAir.ssl

yep, that's exactly correct.  stunnel has created a server and is listening on the local device (127.0.0.1) port 1413.  Then you must load the corresponding ovpn file in the openvpn client config which will not point to a remote server but will instead connect to that local stunnel server.  You'll see that in the custom config it's setup to then connect to whatever Air server you chose.

read the guide that I've already mentioned  https://airvpn.org/topic/17444-how-to-set-up-pfsense-23-for-airvpn/

I think I found the reason for your slow speeds with them.
 

To the trash can actually. A messenger that cannot be compatible around at least 2 independent platforms
is a huge UX issue by itself. This includes me, as an Android user.
 
The biggest risk with iMessage is carrier grade/state level attacks on the SS7 protocol. As some of you might
know, many government adversaries can hijack your global phone number and route it to their network using
flaws in the SS7 signaling system, effectively hijacking SMS messages.
A practical attack on it was demonstrated by PTsecurity:
https://www.ptsecurity.com/upload/ptcom/SS7_WP_A4.ENG.0036.01.DEC.28.2014.pdf
 
So a singe hijacked SMS message would be enough to impersonate an iMessage user, without the other party
having any real knowledge that the keys have been swapped. Something that is solved by other superior implementations,
i.e. Signal.

​First number (with u) means user elapsed time (how much time process spent in user execution mode), second one means system time (how much time system spent in system, ie kernel execution mode), third is sum of first and second. So yes, You should use 9,33.
​
​

Hello!
 
It's nonsense. It would not work because "the police" would need to send each warning to about 11000 ISPs in the world. Even if they embarked in this lunatic endeavor, and even if all 11000 ISPs replied properly, "the police" would receive back 0 matches, because no OpenVPN clients can connect to our servers exit-IP addresses.
 
Kind regards

The saying goes, "iron sharpens iron".  A healthy community should have some friction with the intent being constructive criticism.  The members of a healthy community should learn from eachother and teach eachother and be humble in doing so.

Browsing pfSense forum I've found some intriguing quick OpenVPN performance test. I think this may be interesting because many people here asking about OpenVPN hardware for their needs.
 
To test (theoretical) throughput:
 
1. generate secret:
 
openvpn --genkey --secret /tmp/secret 2. Test OpenVPN speed:
 
time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-cbc 3. Your VPN performance is:
 
( 3200 / execution_time_seconds ) = Projected Maximum OpenVPN Performance in Mbps  
For my RT-AC87U router it gives 70s, meaning 45Mbps; for my pfSense Celeron C3150 box it gives 25s, meaning 126Mbps. Both values are actually pretty much identical with real client/server tests I did some time ago. Of course this formula is true to the some degree, where actually NIC performance starts to play role. However for casual, quick and dirty checks this seems very interesting.
 
I'm curios how are other's results.
 
 
Credits:
 
https://forum.pfsense.org/index.php?topic=105238.msg616743#msg616743

TL ;DR air vpn didnt Leak while Multiple other big competitors did !
 
Source
https://www.reddit.com/r/vpnreviews/comments/4obseo/only_nine_of_the_29_windows_vpn_clients_that_i/
 
 
Full Report 
https://vpntesting.info/Initial_Win7_Report/index.html
 
 
 

if that's the case then you should talk to them

I hate having to allow so much outside the VPN.  I guess this has gotten too complicated for Air to re-route?

Just to add some information that might be of some use to someone.

The other night I was bored enough to check my netflix access on every AirVPN server. I don't use a Pfsense box, just your average user, DNS leak protection, firewall rules (block all apart from added AirVPN servers) etc.

It was suggested before that the restrictions may now be associated with netflix accounts. I think this may be the case.

I was able to view netflix europe on every NL server with no issues. All servers micro-routing US Netflix or other were not playable. 
Working through all the servers I would check with http://witch.valdikss.org.ru/ every 3 servers or so or if a country, or region location change happened.

There was no correlation between the results of 'W I T C H' and what I could or couldn't access.

In the next few days I hope to find the time to setup a netflix account with a US address, US registered payment etc and will see if that changes things.

As things stand EU netflix works no problem for me. The lack of content is a problem though

just manually change the DNS back to automatic if you are not connected to VPN at the time.  it should revert back to automatic (from 10.4.0.1) when Eddie disconnects but sometimes there's a hiccup.

could be that wifi network is blocking traffic to the German server IP range or if your config file didn't have resolved hosts they could be blocking DNS resolution of the server name.

allowing AS2906 outside the VPN tunnel got netflix to work.  I didn't need to allow AS55095.