Staff

Hello! Authentication to our VPN servers is not based on username and password but on certificates and keys. The username and password you enter in our client are not used as credentials to connect to the VPN servers. Kind regards

Hello darkstar1707, when not connected to the VPN at least your secondary nameserver should be set to some public DNS server IP address because 10.4.0.1 is accessible only from inside the VPN. Set appropriate nameservers while Eddie is not running. We would recommend OpenNIC, please see http://opennicproject.org If your mails are not sent to port 465 or 587 (or any port different than 25) then a possible cause is that the SMTP server does not accept connections from our VPN servers. This is for example not uncommon with domestic ISPs which provide home connectivity as well as e-mail services: sometimes they accept usage of their mail services only from clients inside their own infrastructure. Kind regards

Hello! From the size of the address you wiped out in the screenshot it looks like an IPv6 leak. Our web site supports IPv6 but our VPN service does not. In your case, just enabling Network Lock (or disabling IPv6) with the options in our client should fix the problem immediately (remember to re-start a VPN connection). Kind regards

Hello! AirVPN is not vulnerable to DNS hi-jacking because VPN DNS server and gateway IP addresses match. The paper is outdated because their tests were performed on VPN servers with a /30 topology that we kept to maintain compatibility with Windows OpenVPN 2.0.9 and some older versions. After the draft paper preview they kindly provided us with months ago, we decided to speed up Windows OpenVPN 2.0.9 support drop, which made sense in 2010 but not now. Current topology allows to have the same IP address for VPN DNS server and VPN gateway, solving the vulnerability at its roots, months before the publication of the paper. Unfortunately they could not manage to fix the paper, purely for problems of time we suppose, which remained outdated. The quickest way to prevent IPv6 leaks with our service is just enabling Network Lock with a click, for those who don't want to disable IPv6. You can also disable IPv6 with a click, provided that you run our client Eddie for Windows or OS X (version 2.9 or higher is required; feature not available in Eddie for Linux). EDIT: we wish now to underline that since 2018 we also support IPv6 and IPv6 over IPv4. Kind regards

@darkstar1707 Hello! Outbound port 25 is blocked on all VPN servers, as specified in technical specifications published in our web site. This is the only exception we make to our Net Neutrailty respectful policy. It is aimed to mitigate spam e-mails. Please use alternative outbound ports (check your SMTP server settings: in many cases they listen to ports 465 and/or 587 for SMTP over SSL/TLS). About the other problem, you write that you have no connectivity out of VPN, but might it be simply a names resolution problem? Can you please check your system DNS settings? Kind regards

Hello, FTP servers and client work just fine in AirVPN. The FTP server requires specific setup due to how an FTP daemon maps ports for the client, please see https://airvpn.org/topic/1700-ftp-server-and-client-on-air-vpn/?do=findComment&comment=1702 Assuming that everything was correctly set on your side (and it seems it's ok, because little files can be transferred succuessfully), then the issue looks like an MTU size problem. Try with directive "mssfix". Insert mssfix 1400 in the "Custom" field which appears in "AirVPN" -> "Preferences" -> "Advanced" -> "OVPN directives", click "Save", start a new VPN connection and test again. If necessary, decrease the mssfix value at steps of 50 (for example "mssfix 1350", "mssfix 1300" and so on) until the problem is resolved. If the problem is not solved, then it's probably not an MTU size issue. Kind regards

Hello! That was answered in your ticket, we're curious to see alternative answers from the community without influence from us. Kind regards

Hello! "Lock current" is an option to re-connect to the current server during the current session. For your purpose you need to tick "Force reconnection to last server at startup" in "AirVPN" -> "Preferences". About the alleged crash, please make sure to shut the client down properly. What are your OS and your Eddie version? Kind regards

Hello! If in a VPN service you read "we have a server in country X", you expect: - that the server is physically located in country X or - that it can be located anywhere in the world, the important thing is that its IP address is located in country X by some database Nihal is in Madrid, Spain. In this specific case, it's also correctly located in Spain, since a year ago: https://apps.db.ripe.net/search/lookup.html?source=ripe&key=46.182.35.0%20-%2046.182.35.255&type=inetnum so there is absolutely no justification for wrong databases in this case. This is just another proof that a 100% reliable geo-location based on IP addresses is a myth. We comply to the first expectation: Nihal is in Spain, we report it as in Spain. Now consider this: fr1-ovpn.purevpn.net resolves into 94.249.174.130, GHOSTnet GmbH, that has servers only in Germany. Search in PureVPN http://www.purevpn.com/server_location.php for France. They list it under 'France' country. But, at least, they report this kind of server as "Virtual (Via Europe)". However, a lot of our competitors claim to cover hundreds of countries, when actually their servers are outside those countries and they have only re-located the IP address. We think this is not a honest behavior and that it is a disrespectful approach to customers. A honest VPN reviews website must ascertain and declare whether the provider lies about the alleged countries, or at least specify if the servers are really in the alleged countries or not. Kind regards

I just checked out Antares (Singapore) and Hadar (HK) 5 minute average charts for today. Earlier today Antares reached a peak of about 240mbit/s inbound and outbound (480mbit/s total) while Hadar is barely used. They are 1000mbit/s servers. I don't know if that's 1000mbit/s total or in each direction. Staff will have to answer that. If total, then that would mean that the 240mbit/s peak on Antares was still only half capacity (240 inbound + 240 outbound). If 1000 each way then it's only 1/4 capacity. So, I don't think any slowness can be blamed on Air. Hello! 1 Gbit/s is total. Only sporadically Antares is required to provide more than 600 Mbit/s. We see rare 600-700 Mbit/s peaks in the last months, so the server is almost never at capacity. Kind regards

Hello! We're sorry, we have no plans to add a VPN server in Italy. However, Sky Italia is accessible from all of our VPN servers, anywhere in the world, provided that you use VPN DNS. Please see also here: https://airvpn.org/forum/10-websites-support Currently RAI, Marco Polo, Leonardo, Lifestyle, Alice, Mediaset, Nuvolari, Repubblica, Gazzetta Sport, VVVVID, Videotime, Infinity and Cielo are accessible as well. Kind regards

Hello, it was a glitch in the servers monitor: fixed. It's 100 Mbit/s. Kidn regards

Hello! We're very glad to inform you that two new 1 Gbit/s server located in Sweden are available: Gacrux and Zaniah. The AirVPN client will show automatically the new servers, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The servers accept connections on ports 53, 80, 443, 2018 UDP and TCP. Just like every other Air server, Gacrux and Zaniah support OpenVPN over SSL and OpenVPN over SSH. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

Hello! We're very glad to inform you that a new 100 Mbit/s server located in Ukraine is available: Theemim. The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP. Just like every other Air server, Theemim supports OpenVPN over SSL and OpenVPN over SSH. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

Hello! We're very glad to inform you that a new 1 Gbit/s server located in the USA is available: Etamin. The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP. Just like every other Air server, Etamin supports OpenVPN over SSL and OpenVPN over SSH. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

Hello! We're very glad to inform you that two new 1 Gbit/s server located in Canada are available: Alhena and Tegmen. The AirVPN client will show automatically the new servers, while if you use the OpenVPN client you can generate all the files to access them through our configuration/certificates/key generator (menu "Client Area"->"Config generator"). The servers accept connections on ports 53, 80, 443, 2018 UDP and TCP. Just like every other Air server, Alhena and Tegmen support OpenVPN over SSL and OpenVPN over SSH. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN Team

Hello! From the limited number of lines reported on the screenshot it seems there are routing table problems in your system. Please post complete logs in text format ("Logs" -> "Copy to clipboard" then paste here), maybe some additional clue will be visible. Please never post logs through a screenshot unless absolutely unavoidable. Kind regards

Hello! Network Lock is an Eddie plugin. For Windows, currently the only available plugin is for Windows Firewall. You will need to disable Norton Firewall completely if you wish to use Network Lock, because two competing firewalls can cause unpredictable behavior. Otherwise, you will need to set specific rules for your firewall, taking as an example the guide for Windows Firewall or Comodo Firewall in our "How-To" forum: https://airvpn.org/forum/15-how-to Kind regards EDIT Oct 2016: starting from Eddie 2.11, Network Lock uses Windows Filtering Platform (switching to Windows Firewall is optional anyway).

You won't believe it but IT FINALLY WORKED :-D I just tried with "mssfix 1400" and it worked! I also tried anothother values (1500, 1450, etc.) but it works only with 1400. I'm so happy now! Finally I also compared the connection via SSL and there seem not to be any performance hit at all, neither over SSL nor Automatic mode. I run some speed test here and on speedtest.net, pingtest.net. So, if there is no noticable performance hit between UDP and SSL, is it better then to go with SSL connection? I've read this is something like an additional security layer, right? But anyway THANK YOU GUYS!!! :-) Hello! Very well! About OpenVPN over SSL, use it only if you wish (or need) to hide to your ISP the OpenVPN fingerprint, for example when detection of OpenVPN causes traffic shaping. Otherwise you don't need it, because it hits performance and does not add a significant security layer. If you need to strengthen effectively the anonymity layer for specific purposes, you should evaluate to use Tor after you have connected to the VPN (Tor over OpenVPN). Kind regards

Hello! No, in that case you don't need it and you must not use it. Kind regards

Hello! Problem fixed, please try again at your convenience. Kind regards

Hello, since we're not familiar with Microtik you could find yourself without our support in case of necessity, anyway you can get community support of course (which is often excellent); therefore do not hesitate to ask for a free trial coupon which will let you have a free three days subscription, probably the best way to determine whether the service meets your requirements and expectations without spending money. Make sure to file a request to "Trial request" dep. from your registered account. Kind regards

Hello! Nice idea; it has just been implemented. Kind regards

Thank you! We're going to check soon. Kind regards

Hello, about OpenVPN over SSH on stock, non-rooted Android devices, Sheivoko wrote this guide some months ago: https://airvpn.org/topic/13486-ssh-tunneled-vpn-on-stock-android Kind regards