-
Content Count
11487 -
Joined
... -
Last visited
... -
Days Won
2022
Everything posted by Staff
-
Sent Fatal SSL Alert: Bad Certificate
Staff replied to Sanctioner's topic in Troubleshooting and Problems
Hello! Very odd and hinting to a corrupt configuration file that somehow can not be updated properly. Try to delete it while Eddie is not running. In order to locate Eddie's configuration file please see here: https://eddie.website/support/data-path/ At the next run Eddie will create a new configuration file with default settings (you will need to re-enter your AirVPN account credentials). If the the current file is corrupt, this procedure will resolve the problem. Kind regards -
I'm having some issues connecting to OVPN using a proxy
Staff replied to ainisw99's topic in Troubleshooting and Problems
Hello! The problem is here above. OpenVPN 2.6.12 recognizes socks-proxy option, but a paremeter is missing, specifically, we infer (see below), the hostname (or IP address). This error is visible in Eddie's report: proxy.host is not valorized (empty string?); can you please re-check this setting and fix accordingly? Kind regards -
@blackbox0815 Hello! We're sorry to hear that, but are you sure that the problem is not on your ISP side and/or due to the fact that you want to connect only to few specific servers? Please open a ticket to check, just in case, because the overall bandwidth per account has increased dramatically in the last 12 months - we added 220 Gbit/s full duplex in USA, Canada and Europe. The customer satisfaction and the general stats reflect the increased bandwidth availability so your message is somehow unexpected. However, please consider the trend in Western providers to enforce tougher, selective and AI driven traffic shaping, which necessarily affects the type of traffic that can not be inspected and identified uniquely (therefore VPN traffic too) during peak times: https://editorialge.com/emerging-trends-isp-network-architecture/ See also the specific thread (where we are merging these messages): https://airvpn.org/forums/topic/48234-speedtest-comparison/
-
ANSWERED Eddie + Kubuntu 24.04 firewall
Staff replied to raix's topic in Troubleshooting and Problems
Hello! Consider to block any outbound packet except those directed to localhost, local network and those necessary for DHCP. Example (you will need to adjust your local network subnet): sudo iptables -F OUTPUT sudo iptables -A OUTPUT -d 127.0.0.1 -j ACCEPT sudo iptables -A OUTPUT -p udp --dport 67 -j ACCEPT sudo iptables -A OUTPUT -p udp --dport 68 -j ACCEPT sudo iptables -A OUTPUT -d 192.168.0.0/16 -j ACCEPT sudo iptables -A OUTPUT -j DROP sudo ip6tables -F OUTPUT sudo ip6tables -A OUTPUT -d ::1 -j ACCEPT sudo ip6tables -A OUTPUT -p udp --dport 546 -j ACCEPT sudo ip6tables -A OUTPUT -p udp --dport 547 -j ACCEPT sudo ip6tables -A OUTPUT -d 2001:db8::/64 -j ACCEPT sudo ip6tables -A OUTPUT -j DROP Then you can make the rules persistent (check how to use iptables-save and ip6tables-save). Kind regards -
ANSWERED Eddie + Kubuntu 24.04 firewall
Staff replied to raix's topic in Troubleshooting and Problems
Hello! Excellent. Yes, but use iptables-legacy (in general, the same frontend used by Eddie too for Network Lock) and not gufw; also do not define custom chains. Kind regards -
ANSWERED config generator yields html
Staff replied to p1geon's topic in Troubleshooting and Problems
@p1geon Hello! It reminds us of this archaic bug: https://issuetracker.google.com/issues/36906622 It's unclear why it's DuckDuckGo specific. At first we suspected of the different engine: Firefox uses Gecko, DuckDuckGo instead uses Blink. Since Blink (a WebKit fork) is used by Chromium, if the problem were caused by the engine the issue should be reproducible on Chrome, Opera, Brave and other Chromium-based browsers but it is not. The matter deserves additional investigation, if anything relevant comes out we will update this thread. Kind regards -
ANSWERED Eddie + Kubuntu 24.04 firewall
Staff replied to raix's topic in Troubleshooting and Problems
Hello! Please publish also a system report generated by Eddie (please do not edit the destination IP address as you did earlier) and also disable gufw completely. Set rules only through iptables-legacy, do not mix with any overlapping frontend during the tests (and do not create your own chains) in order to avoid that gufw custom chains in the filter table interfere. Kind regards -
Eddie Android edition 3.3.0 preview available
Staff replied to Staff's topic in News and Announcement
Hello! We're very glad to inform you that Eddie Android edition 3.3.0 beta 2 is now available. Link on the announcement first post has been updated accordingly. Thank you very much if you decide to test this new version and report any problem and bug you experience! New in beta 2: all the beta 1 reported by testers problems have been addressed replaced code with lambda expressions in all classes and where applicable additional bug fixes linked against the latest OpenVPN3-AirVPN library (20250911) all deprecated by Google classes replaced Kind regards -
Hello! We're very glad to announce a special promotion on our long term Premium plans for the end of Summer or Winter, according to the hemisphere you live in. You can get prices as low as 2.06 €/month with a three years plan, which is a 70% discount when compared to monthly plan price of 7 €. If you're already our customer and you wish to stay aboard for a longer period, any additional subscription will be added on top of already existing subscriptions and you will not lose any day. Please check plans special prices on https://airvpn.org and https://airvpn.org/buy All reported discounts are computed against the 7 EUR/month plan. Promotion expires on 2025-09-22 UTC. Kind regards & datalove AirVPN Staff
-
ANSWERED Eddie + Kubuntu 24.04 firewall
Staff replied to raix's topic in Troubleshooting and Problems
@raix Hello! Can you print the complete list of rules when Network Lock is enabled? Kind regards -
Hello! It's possible, an investigation is planned: https://airvpn.org/forums/topic/73807-airvpn-servers-pushing-ipv6-killing-connection/?do=findComment&comment=253388 Kind regards
-
@trmanco Hello! Since Wurren and Kornephoros have different providers, it is possible that you enjoy better connectivity (routing, peering...) with the latter. Kind regards
-
Hello! The community can't help you so a message here is useless, we're sorry. Please open a ticket by writing to support@airvpn.org to check whether it's possible to do something or not. Kind regards
-
ANSWERED Can we get an update on Taiwan server outage?
Staff replied to bellefontaine's topic in Troubleshooting and Problems
Hello! Unfortunately we have no updates at the moment and no ETA for operations resume. The problem is that the server network doesn't work properly, showing significant packet loss to and from all IP addresses. The datacenter technicians have been warned, of course, and we're waiting for their intervention and feedback. Kind regards -
@CIAOBUBU Hello! Your analysis is correct potentially: although it's unclear how the hypothetical order issuers can manage to get the private address you mention, let's assume that a method does exist. Please see here what we implemented to mitigate this problem with the static, on file written private IP address (the fact that the file is in VPN servers RAM disk makes no difference). Your active intervention is required: https://airvpn.org/faq/wireguard/ Kind regards
-
ANSWERED WireGuard with Linux - Terminal: Help...
Staff replied to Nasheayahu's topic in Troubleshooting and Problems
Hello! Have you tested the AirVPN Suite for Linux? It should behave properly when systemd-resolved is installed but disabled, because for DNS management it does not invoke resolvconf (needed by WireGuard for this purpose). Kind regards -
Hello! The AirVPN Suite was born as a light, Linux-only, compatible with both systemd and SysV init-like based systems, GUI-less, not depending on Mono and with tiny RAM footprint software, alternative to Eddie. A robust client-daemon architecture was also designed (you can use it with Goldrect as a client and Bluetit as a daemon) as well as extensive and detailed user's and developer's reference manuals, which are missing in Eddie Linux edition. Given Suite's success with hardcore Linux customers, it evolved to include features not supported (currently) by Eddie, such as traffic splitting on an application basis. A TUI was also planned for Goldcrest years ago (*) and probably will see the light in the future. However the Suite lacks OpenVPN over SSH/SSL/TLS/Tor connection modes, OpenVPN to SOCKS5 and HTTP proxies out of the box connections, programmable events, a GUI (as mentioned) and a few other Eddie features. And of course Eddie is available for Windows and macOS too. Hummingbird is a stand alone binary, part of the Suite, which is useful when you need OpenVPN3-AirVPN library offering significant performance boost on OpenVPN 2.x especially on macOS (Hummingbird is the only component of the Suite ported to macOS too). Eddie is able to run OpenVPN 2.x, WireGuard or Hummingbird. Of course Hummingbird can connect over WireGuard library too and in that case WireGuard's performance will in most cases beat OpenVPN3-AirVPN, but if WireGuard is blocked in a network, or UDP is heavily shaped, then OpenVPN3-AirVPN library may come handy. If you read the extensive Suite user's manual you will get more information and probably everything to need to know. (*) a very nice TUI for Hummingbird was written in bash by the community member @nwlyoc https://airvpn.org/forums/topic/46717-interactive-wrapper-for-hummingbird-with-boot-script-and-default-network-lock Kind regards
-
Yes, thank you for pointing out. Edited the original message to specify the change. Kind regards
-
Hello! VPNs are not in the scope of both the legislation and trivial tech considerations, as we don't have the keys for the communications: chat, instant messages and e-mails are encrypted end-to-end without our keys, but with the keys of the parties and/or the keys of the service offering e-mail / chat / messaging service, so we can't decrypt anything in any case. With that said, this abomination must be fought. We repute it is incompatible with the Charter of Fundamental Rights and with various CJEU decisions on data retention and privacy. We feel to share the position and the consideration offered by Tuta and EDRi here and here: https://tuta.com/blog/chat-control-criticism https://edri.org/our-work/most-criticised-eu-law-of-all-time/ Unfortunately, opposition has become more difficult because big AI actors see chat control as a great opportunity and they have spent tens of millions to lobby in favor of this abominable regulation. This is the main explanation that tells you why various politicians have changed their positions. Kind regards
-
ANSWERED [macOS] Eddie disconnects after 3 seconds continually
Staff replied to Primrose99's topic in Troubleshooting and Problems
Hello! Updated solution: https://airvpn.org/forums/topic/70745-eddie-cant-connect-to-any-server/?do=findComment&comment=249545 Kind regards -
Hello! We do not see any packet loss (checked from all the other VPN servers across the world as usual), so it should be a problem specific to your routing. Maybe an mtr report can help shed some light. https://www.hivelocity.net/kb/mtr-report-how-to-generate-in-linux-and-windows/ Kind regards
-
ANSWERED Every reboot creates a new session
Staff replied to hifiboombox's topic in Troubleshooting and Problems
Hello! We checked after you posted your message and there were no days old connections, except one which is really active and that you are probably using successfully as we see data exchange and correct handshake. We could never see days old stuck connection slots, with your or any other account, if you see them please warn us. Kind regards -
@Hutchinman Hello! Thanks a lot for your tests, the bug has been noted and it will be addressed in the near future during the 3.3.0 beta testing (currently ongoing). Kind regards
-
Hello! Probably you mean OpenVPN over SSL. If so, not in the imminent version 3.3.0, we're sorry, but it could come in the next one. Kind regards