Staff

Hello, thank you for your great feedback! We wish to address the issue as soon as possible. Can you please describe the problem with more details to make us understand how to fix it? Kind regards

Hello! Please note that from your last logs your system is NOT connected to the VPN because of this error: Mon Jun 08 21:30:18 2015 All TAP-Windows adapters on this system are currently in use. Mon Jun 08 21:30:18 2015 Exiting due to fatal error This is usually caused by a disabled tun/tap interface (the virtual network adapter used by OpenVPN). Make sure to re-enable it, otherwise you will never be able to connect to the VPN. You might like to run our free and open source client Eddie for additional security checks for these cases and many more. Eddie provides Network Lock and a route and DNS checks at the connection, warning you clearly if something has gone wrong. The fact that you experienced different performance while in reality your system was not connected to any VPN server remains unexplained. Kind regards

Hello! Maybe the firewall settings have not been not restored properly. Try to reset the Windows firewall while the client Eddie is not running (important). Kind regards

Hello, when you connect OpenVPN in UDP, all of your traffic (incoming and outgoing) is wrapped in UDP. This triggers (wrongly) UDP anti-flood and anti-scan security systems, as Kaspersky is reporting. Disable such systems, when you're in the VPN, or connect in TCP (at the price of a performance hit). Kind regards

Same here it directs google to Israel, will this be fixed? Hello! Well... how are we supposed to know? Ask Google, it's a Google problem (or maybe your system problem?) not ours. Server IP addresses are geo-located in Pennsylvania from WHOIS, MaxMind and several other IP geo-location databases. That said, we do not see the problem you report, but that can depend on potentially different Google services that are accessed, not necessarily depending on your system. Browse to the No Country Redirect page as a work-around: https://www.google.com/ncr Kind regards

Hello, curious indeed... 204.194.237.19 is not an IP address of ours (it seems to be assigned to Direct Media LLC) and server2.lax.airvpn.org is not an existing name. How it was defined on your system and how could it resolve into that IP address remains to be investigated, but only you can do it. Kind regards

Hello, as a first attempt to improve performance it is necessary to enlarge OpenVPN buffers: Sun Jun 07 21:31:49 2015 Socket Buffers: R=[8192->8192] S=[8192->8192] 8 kB are too few for a 50 Mbit/s line. Use the following directives to enlarge send and receive buffers to 128 kB: sndbuf 131072 rcvbuf 131072 You can add them in the Configuration Generator as custom directives (click "Advanced Mode" then add those lines in the "Custom directives" field). If you run our client Eddie, you can add them in "AirVPN" -> "Preferences" -> "Advanced" -> "OVPN Directives". Future Eddie versions will implement by default a larger buffer. Please keep us posted, if the problem is not resolved there are additional attempts to try (changing connection mode). Kind regards

Hello, the article is from 2012, can T-Mobile customers confirm that this behavior is still in place? Our default OpenVPN mode is UDP, not TCP. What happens with OpenVPN in UDP mode, in TCP mode, and OpenVPN over SSH and over SSL? Kind regards

Hello, it seems closed source so a definite answer can't be given. Probably they use one of the methods we have explained. Note that WebRTC is prevented by our free and open source client through firewall rules, but that you can easily apply a different method to prevent them with custom directives. See also http://www.clodo.it/blog/an-alternative-approach-to-so-called-webrtc-leaks They offer a tunneling service with light traffic encryption (RC4 with 1024 bit size RSA keys) which must NOT be used if security is require. They do not provide other relevant technical information. We can't find their software source code. We can't find the name of the operating company (if any), we can't find the name of the legally responsible person for the treatment of personal data, and we see that they collect users data allegedly for marketing purposes. Kind regards

In this case you can't use Network Lock. However, if Eddie can't enable Windows Firewall (when Network Lock is on) it will warn you. Conflicts may arise and your experience seems to confirm that. Kind regards

Hello, we're sorry, our service is based on OpenVPN which is currently not available for Blackberry. Kind regards

Hello! We're very glad to inform you that a new 1 Gbit/s server located in Philadelphia, PA (USA) is available: Metallah. The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accept connections on ports 53, 80, 443, 2018 UDP and TCP. Just like every other Air server, Metallah supports OpenVPN over SSL and OpenVPN over SSH. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

Of course, that's expected. Running two firewalls at the same time will inevitably cause unpredictable behavior. You have two programs running with unlimited privileges which compete to access and modify the Network layer of the TCP/IP stack. Outcome of such competition is in most cases catastrophic under a security point of view. Kind regards

Hello, now netname is NL-AIR. Country remains NL. Let's see what happens: if the problem will be fixed, then it's strange, because the country field was (and is) set to NL anyway. Is it possible that MaxMind ignores totally the country field, even when there is no valid country code in netname? Kind regards

Hello! In China, please try OpenVPN over SSL (it's called "SSL Tunnel - Port 443" in our client Eddie). Upgrade to Eddie version 2.8.8 or 2.9.2 is recommended. Feel free to keep us posted. Kind regards

Yes, definitely. Network Lock is a plug-in that (in Windows) sets Windows firewall rules. Please see also here: https://airvpn.org/topic/12175-network-lock Kind regards

Hello! The observed behavior makes us think about a problem in some QoS / packet inspection / packet filtering tool, either on the system or on the router. When you start a VPN connection in UDP, all of your traffic is wrapped in UDP, so everything you send out and receive through the router and the physical network card is in UDP. Now, a lot of tools are configured to prevent UDP flood attacks. When they see a significant and persistent percentage or amount of incoming packets in UDP, they think that an attack is ongoing. When you start your torrent client, UDP flow usually sky-rockets and does it persistently after a couple of minutes or so. This triggers the security feature of the tool which starts dropping packets, preventing quickly communications from the VPN server. We have seen repeatedly this problem with a variety of packet inspection tools (usually aimed to QoS or flood protection). It's worth a check. In case it's your ISP that does so, try a VPN connection in TCP to discern whether the problem is related to UDP or not. Kind regards

Hello! This is a very important information, thank you! Kind regards

Hello! Running two firewalls at the same time will inevitably cause unpredictable behavior. Kind regards

Hello! New subscriptions are added on top of already existing ones and expiration date is set accordingly. You will not lose a single day. Kind regards

Hello, the 10.x.y.z address is the tun interface address, i.e. the VPN IP address of your node (the tun interface is the virtual network adapter used by OpenVPN). It's not the public IP address assigned to you by your ISP. Kind regards

Hello! You're right. This is an unexpected and unobserved behavior. Do you have any other firewall installed in your system? Can we see the client logs, taken after Network Lock has been (allegedly) activated? Kind regards

Hello, different world visions. We have enough consideration for our customers to firmly believe that they can understand that a program that's not running can not do anything, even less can it reply to incoming packets. Writing that a program that's not running can't run until it is run is somehow insulting. Of course momentary lapse of reasons are always possible but just like in your case they will be spotted soon and they will be functional to inner growth. Kind regards

Hello! Correct, you don't need to worry. Check yourself with ipleak.net for ultimate test. Kind regards

About Hola, it is very important that you read this: http://adios-hola.org/ http://www.dailydot.com/technology/hola-vpn-security Kind regards