Staff

Hello! To succeed with that reverse engineering, the attacker must have something more. Note from the source code how Eddie communicates to retrieve manifest - or try snooping http traffic from/to Eddie: you should find immediately the missing element which makes this attack impossible as long as the attacker can't break in the backend servers (which are unknown even to Eddie). See also https://airvpn.org/topic/11545-airvpn-client-eddie-beta-testing-phase/?do=findComment&comment=17709 Kind regards

Hello! Understood. Some additional info: the attacker should make many more servers unavailable, not only the auth server. Additionally, Eddie will connect happily (provided that it connected at least once in the past and that the user did not erase the data files) even if the attacker finds and blocks to the client all the possible auth servers. Eddie will use the latest available information to find VPN servers. Once it connects to a VPN server, it tries to update all the data from inside the VPN. Kind regards

Hi, but in this case (we write especially for the casual reader, since this is obvious to you) Network Lock remains active. Even if the attacker manages an exploit to make Mono, .NET or the client "crash", the firewall rules stand. Eddie relies on a different software (pf, iptables or Windows Firewall) for Network Lock, and that's important. Kind regards

@angruvidal Hello, do you connect OpenVPN in UDP, while without VPN most of your traffic is over TCP? If so, is the problem resolved if you connect OpenVPN in TCP? Kind regards

Hello! Network Lock is not available for Windows XP. The fact that the option is showed is a bug, fixed in the latest Eddie release for Win XP. Kind regards

Website: http://www.tf1.fr Official site of French television channels (TF1, TMC, NT1, HD1) Status: OK Native: FR servers. Routing: All other servers.

Website: http://www.france.tv Official site of French public television channels (France2, France 3, France 4 , France 5, France ô) Status: OK Native: FR servers. Routing: All other servers.

Hello, https://airvpn.org/topic/14309-looking-up-server-ips-show-them-in-different-country/?do=findComment&comment=28052 Kind regards

Thank you lsat. Kind regards

Hello! . 2015.06.15 20:17:21 - OpenVPN > Socket Buffers: R=[131072->65536] S=[131072->524288] While the OpenVPN send buffer is appropriate for your line (even too big), the receive buffer could be too small for a 100 Mbit/s line, try to force it to 131072 bytes (currently OpenVPN shrinks it to 65536 bytes, we see from the logs). In Eddie 2.10.1 Experimental you can set buffers size in "AirVPN" -> "Preferences" -> "Advanced" -> "General", and anyway Eddie 2.10.1 sets them to 131072 bytes by default. In Eddie versions older than 2.10.1 you can set buffers size with the OpenVPN directives "sndbuf" and "rcvbuf". In your case: rcvbuf 131072 Put the above line in the "Custom" field that you can see in "AirVPN" -> "Preferences" -> "Advanced" -> "OVPN Directives". On Comcast traffic shaping can be intermittent (it is applied at their discretion even according to customer behavior, see https://airvpn.org/topic/14078-slow-download-speed-hezepersei-fremontca-servers/page-2?do=findComment&comment=27026 ), so your protocol choice could be correct, but you can also test UDP, it's worth a try. Kind regards

Hello! In "AirVPN" -> "Preferences" -> "Advanced" -> "Network Lock" set the combo box "Mode:" to "None". In this way you will completely disable Network Lock, and you will prevent permanently Eddie to modify firewall rules. Anyway, even if you use Network Lock, if you shut down Eddie properly it will restore previous firewall rules diligently. It's only when you kill Eddie without grace that it can't restore rules. Kind regards

Hello! Please see https://airvpn.org/topic/14309-looking-up-server-ips-show-them-in-different-country/?do=findComment&comment=28052 Kind regards

Hello! You're totally free to query any DNS server you wish in our service. Usage of our VPN DNS, although recommended, is not mandatory. About the problem you cite, maybe it is not related to nameservers. It might be a Google IP address geo-location error. Browse to No Country Redirect page, which Google offers even for these cases. https://www.google.com/ncr Kind regards

Hello! Your posts approval have had a delay of a few hours due to personnel problems on Sunday. Thousands of customers know from our five years activity that customer support and forum maintenance takes place 24/7 including Sunday, Christmas, New Year's Day etc. Problems during this Sunday are exceptional and as far as we can remember it's only the second time in five years that this inconvenience takes place. Every new writer on the forum needs his/her posts approved until they have five approved posts. We allow forum access to everyone, even non customers, and this is mandatory to keep the forum readable: every day several posts talk about totally unrelated arguments with explicit ads and links to malware spreading web sites. We are normally on the top of any serious and independent VPN review. We are not cited in many reviews because we don't pay for reviews: we respect customers, potential customers and persons in general. Almost every week we have proposals for a review which should be paid, and the reviewer suggests that the payment will be hidden. You will never find a paid review about AirVPN and for this reason you will often not find AirVPN reviews at all on some web sites. Kind regards

Hello, that's because currently OpenVPN does not scale on multi-core systems. Each OpenVPN daemon will run only on one core and therefore will load only one core. Kind regards

Hello, the uplink port is capable of 1 Gbit/s but only 100 Mbit/s are guaranteed. Usually the server can provide more than 100 Mbit/s, but we can't guarantee that it will be able to do that anytime, so the servers monitor reports "100 Mbit/s" as maximum available bandwidth. Kind regards

Hello, by default no incoming packets can reach your system. Of course we provide remote port forwarding. If you remotely forward a port in your control panel, our VPN servers will forward incoming packets to that port to your system and protection is up to you. Kind regards

Hello, we're very glad to know it. For any improvement you wish to suggest, do not hesitate to write to us. Sometimes it's not easy for us to understand needs and requirements so any suggestion will be very precious. Kind regards

Hello, when we did not perform stringent verifications on credit cards we received an unacceptable amount of frauds. Now we're glad that Avangate has managed to reduce frauds dramatically, we're very pleased with that and we will not change our policy. We accept a wide variety of cryptocurrencies for your purposes. Kind regards

Website: http://www.mtv.it Italian website and streaming TV Status: OK Routing: All servers to IT route.

Website: http://www.realtimetv.it Italian streaming TV Status: OK Routing: All servers to IT route.

Website: http://www.dmax.it Italian streaming TV Status: OK Routing: All servers to IT route.

Website: http://www.cbc.ca Official CBC television site for Canada Status: OK Native: CA servers. Routing: All other servers.

Hello, yes, this an error in MaxMind database (the database for geo-location based on IP address that we use for ipleak.net). Please see here for more details about this error: https://airvpn.org/topic/14309-looking-up-server-ips-show-them-in-different-country We have done everything to have it fixed on MaxMind, Now it's up to them. Kind regards

Hello! Eddie 2.10.1 Experimental is now out. With Control M you can open the menu, with Control P you can open the Preferences window and with Control A you can open the "About" window. Eddie 2.10.1 can be downloaded in the usual download page: click "Other versions" then select "Experimental". Yes, you're right. The developer is aware of this problem. Some more time is needed to fix that. Thank you very much, please feel free to keep sending us your feedback: it is very much appreciated and always kept into consideration. Kind regards