Staff

Hello! We're glad to inform you that the critical, remotely exploitable "shellshock" bug http://seclists.org/oss-sec/2014/q3/650 does not affect our systems, which (if they used bash) have been all patched with appropriate updates. Kind regards AirVPN Staff

Well it's supposed to only apply during the time vpn connection tunnel is active, but it's possible for some reason or another after the connection with 2.6 (with network lock enabled) the original FW rules that are saved were not being put back in place right after the disconnect. - or so was my thinking for one a possible cause - Hello! Firewall rules are not restored after a disconnection, otherwise Network Lock would be quite useless. You need to disable Network Lock if you want to restore your previous firewall rules. Kind regards

You are at your SECOND voluntary chargeback so you will not get any support.

Hello! Activate the option "Network Lock" in our Eddie client for Mavericks and Yosemite. See also https://airvpn.org/topic/12175-network-lock Feel free to tell us how Network Lock and Eddie work (in another thread) when you put your computer to sleep and then you wake it up: these situations need to be investigated (there are a lot of variables, for example you might put the computer to sleep in one network, and then wake it up in another network). Kind regards

Website: http://www.repubblica.it La Repubblica, an Italian news website and streaming. Status: OK Routing: All servers to IT route.

Hello! Our service is based on OpenVPN and OpenVPN connections are disrupted in most China residential lines. This is possible because OpenVPN packets headers (not payload, which are of course encrypted) have some additional information for packet re-ordering that make them discernible (with DPI) from pure TLS/SSL connections. In order to bypass the block, OpenVPN over SSL is necessary. The first SSL tunnel encrypts the OpenVPN "fingerprint" to make it not detectable. The method has been tested as successful since more than a year ago from various China areas, including Shanghai and Beijing. OpenVPN over SSL is available for Linux, Windows and OS X Mavericks only. It is not working on Android and iOS for limitations of the openvpn app. Anyway, many mobile networks in China do not block OpenVPN, so this is a relatively minor problem. Our client Eddie (for Linux, OS X and Windows) implements OpenVPN over SSL, that can be activated with a click. All of our VPN servers accept this connection mode. In Eddie, go to "AirVPN" -> "Preferences" -> "Protocol". Select "SSL Tunnel - Port 443", click "Save" and finally connect to a server. Kind regards

Hello! Although not confirmed, Snow Leopard seems to have reached the end of its life cycle http://arstechnica.com/apple/2014/03/snow-leopard-updates-are-probably-done-here-are-your-os-x-upgrade-options There are some bugs in the developers tools we use to build Eddie about Snow Leopard which apparently will never be fixed because of the end of support. For example it seems that Snow Leopard doesn't work with the Xcode version that supports XIB integration. Yes, pinfo.list have 10.6 as minimum requirement. This is simple because we have only a Mavericks testing system, we simply don't know if 10.6..10.8 works (perfectly) or not, and we are still studying feedbacks. [Staff note: additionally, Eddie is compiled to be compatible with OS X 10.6, as explained in the previous post] Our mistake might have been that we dropped the word 'beta' before adjusting the minimum requirements in plist. Kind regards Eddie programmers

Hello! Android versions older than 4 lack API to support OpenVPN. However, it is possible to run OpenVPN compatible clients in devices running older Android versions, but only if such devices are rooted and modded. We do not provide support to root and mod a device and we take no responsibility for any caused damage/brick if it occurs, we're sorry, but you can find plenty of information on the WWW. Our Configuration Generator will generate any possible file you will need in case. Note: OpenVPN or OpenVPN wrapper must be compatible with OpenVPN 2.1 or higher to support all the needed OpenVPN directives). Additionally, TLS Auth, server and client certificates double authentication and client key must all be supported. In the Configuration Generator, tick "Advanced Mode" and then tick "Separate certs/keys from .ovpn file". In addition to the .ovpn configuration file, in this way you will get four files: user.crt: the client certificate ca.crt: the CA (server) certificate ta.key: the TLS Authorization key user.key: the client secret key Kind regards

Hello! Yes, we are not precise in the download page. Be informed that Eddie works only with OS X Mavericks and Yosemite, as repeatedly stated in the forums. The misleading information in info.plist comes from the fact that Eddie is really compiled to be compatible even with OS X 10.6 and 10.7, but the employed development tool used for OS X clearly must have problems in generating compatible binaries. Upgrade to Mavericks is free, if your system can support it. If you can't or don't want to upgrade, please use Tunnelblick (free and open source, just like Eddie), for which we provide instructions and a very thorough Configuration Generator, or OpenVPN (we also provide a re-compiled version of OpenVPN, just in case). At this very moment, we have no plans to make Eddie compatible with OS X older than Mavericks. Kind regards

Hello! We're very glad to inform you that a new Eddie Air client version has been released: 2.6. Please read the changelogs: https://airvpn.org/services/changelog.php?software=client&format=html 2.6 version is compatible with several Linux distributions. For very important notes about environments, please read here: https://airvpn.org/forum/35-client-software-platforms-environments This is essentially a release aimed to bug fixes. We recommend that OS X users as well as any Operating System users needing to connect OpenVPN over a proxy with authentication perform upgrade as soon as possible. Eddie 2.6 for Linux can be downloaded here: https://airvpn.org/linux Eddie 2.6 for Windows can be downloaded here: https://airvpn.org/windows Eddie 2.6 for OS X Mavericks can be downloaded here: https://airvpn.org/macosx PLEASE NOTE: Eddie 2.6 package, just like Eddie 2.4beta and Eddie 2.5 packages, includes an OpenVPN version re-compiled by us with OpenSSL 1.0.1i for security reasons and to fix this bug: https://community.openvpn.net/openvpn/ticket/328 Eddie overview is available here: https://airvpn.org/software Eddie includes a Network Lock feature: https://airvpn.org/faq/software_lock Eddie 2.6 is free and open source software released under GPLv3 Kind regards & datalove AirVPN Staff

Hello! Try to add the following OpenVPN directives: route-method exe route-delay 2 In Eddie, you can add those directives in "Custom" field that you can see in "AirVPN" -> "Preferences" -> "Advanced" -> "OVPN directives". Feel free to keep us posted. Kind regards

We solved the problem with Hulu immediately, you should be able to watch Hulu from any Air VPN server in the world, can you confirm? Kind regards

Hello! That's fine (in this case the logs might be a little misleading). Logging in the first authorization server hard coded in Eddie timed out (and that was due to Comodo rules) but then Eddie could manage to evade the 1st block. In order to speed up the procedure please authorize (in Comodo global rules) packets to and from the following IP address: 54.246.124.152 A radical alternative would be disabling Comodo and relying on the "Network Lock" feature of Eddie, which uses (currently) Windows firewall. This is another problem... we will investigate. Does it occur even if you disable Comodo completely? Kind regards

Hello! You need a little workaround: whitelist all and only the countries of the continent you wish to connect to. Kind regards

Hello! According to Tunnelblick logs there are conflicting kexts in your system, please see here for an explanation and to solve: https://code.google.com/p/tunnelblick/wiki/cCommonProblems#An_OpenVPN_log_entry_says_%22Tunnelblick:_openvpnstart_status Kind regards

Hello! If so, it's not Sirius. You can anyway access no country-customized Google search engine in the No Country Redirect page which Google made available for such needs. https://www.google.com/ncr Kind regards

Hello! That's fine: it is a correct behavior. If you have your router DNS server set as nameserver in your resolv.conf Network Lock will not block DNS queries to your router, that's not its purpose at the moment (it explicitly allows communications to your router otherwise your system would be completely isolated even in the local network). So Network Lock ON or OFF in this case makes no difference and the fact that you could see your ISP DNS shows that the system works as expected and according to your configuration. And that's correct again. No issues on the client so far, it is behaving exactly as you instructed it to. Of course, testing this particular configuration on a variety of systems is totally voluntary! From your description everything is fine, thank you for your time, it is very much appreciated. Kind regards

Do you mean that you again get "No such host is known" log line? Can you re-post the logs if in doubt? Kind regards

Hello, we were suggesting that you can use anyway Eddie 2.5 without going back to outdated client versions which have more bugs, because you are not forced to use Eddie 2.5 network lock feature. You can just keep it not active, and use your custom or favorite type of leaks prevention. Kind regards

Hello! You can also use Eddie 2.5 because Network Lock is optional. You decide to activate it or not. In Eddie 2.5 it is disabled by default. Kind regards

Hello! We need to understand if some advanced feature of AirVPN client can be activated by default for all users without causing issues. We ask those who want to collaborate to do a little test: In Menu -> Preferences -> Advanced -> General please enable "Checking if the tunnel uses AirVPN DNS" and "Force DNS" (this last option only under Microsoft Windows) DNS Switch mode is by default set to "Automatic", please use it in "Automatic". If these settings work for you, please use them and confirm in this topic that they work for you. Otherwise, if some problem occurs, please describe here the problem. Finally, we have a question: without prejudice to the fact that it can be switched on or off anytime by users, do you prefer that by default the option "Exit confirmation" is on or off? Thanks to anyone who will collaborate! Kind regards AirVPN Staff

Hello! That's the right decision then. Try OpenVPN over SSL as well. It might work better than over SSH, because from other reports from Thailand it is possible that SSH is shaped much more than SSL to port 443. Also try the Hong Kong server, just in case. Kind regards

Hello! Yes, it is mandatory, no UDP support by SSH as you can imagine. So you have overhead by additional SSH tunnel and on top of that OpenVPN forced to work in TCP mode (which, for how OpenVPN works, will be slower and less efficient than UDP). You should never use this mode unless you absolutely need it for some reason (for example to bypass OpenVPN disruption or extreme shaping). Kind regards

Now this is getting interesting... https://twitter.com/JustusRanvier/status/511986110889619456 Kind regards

Hello! TCP and UDP are allowed in the local network. So if you use SMB (CIFS) to share folders, it should work as long as the transport protocol is UDP or TCP. However SMB could rely on NetBIOS too as transport protocol, in which case we need to investigate, can you please give us some information about that? Kind regards