Staff

Hello, what happens if you set your browser language to English (it is currently set in German) and disable HTML5 geo-location (if it's enabled)? Kind regards

Hello, it makes sense on a particular circumstance: if you wish to connect to a VPN server from the Windows machine, with the Air client and with the Windows machine unable (for example because it is "secured" against any leak) to resolve names via DNS queries. Kind regards

Hello, after the thread was written a "Disconnect Now" button in the web site and a "Disconnect" API service were implemented. Please see here https://airvpn.org/topic/9612-what-is-api Kind regards

Hello! What happens if you set as static DNS 2 a public DNS? What is the output of the command (from the router and while the router is connected to the VPN): dig @10.4.0.1 skydrive.live.com Kind regards

Hello, yes, 10.0.0.0/8 IP addresses are private addresses. This solution: Static DNS 1: 10.4.0.1 Static DNS 2: 50.116.23.211 Static DNS 3: (optionally another OpenNIC DNS server) looks perfect. It will let your device use the VPN DNS when it's in the VPN and a public and trusted DNS when it's not. Kind regards

Hello, we confirm that, it's an old problem with network-manager. It does not pass explicit-exit-notify directive to OpenVPN. Therefore when OpenVPN client in UDP mode ends, the server has absolutely no way to know that the client disconnected until the timeout. When you run OpenVPN in UDP mode via the network-manager, please allow 2 minutes for a server switch (i.e. wait for 2 minutes after you disconnect from the first server before trying to connect to the a different one). Alternatively please run OpenVPN directly to solve the issue completely. Kind regards

Hello, 10.4.0.1 etc. are private IP addresses which can be reached only inside the VPN. In your case you can either set, in the router OpenVPN client configuration, the entry-IP address of the server you wish to connect to (so that it does not need any name resolution) or use a public DNS as a secondary DNS after 10.4.0.1. Keeping 10.4.0.1 as primary and a public DNS as secondary will allow you to use the secondary DNS when the router is not in the private network, and VPN DNS when the router is in the VPN. Kind regards

Hello! Please see this guide: https://airvpn.org/windows_autostart (it is linked at the bottom of the Windows instructions page). However, you will need to enter your login and password anyway. If you need to connect your computer at the boot and before that any user logs in the system you need to run OpenVPN as a service. Kind regards

Hello, skydrive.live.com is correctly resolved by our DNS and the web site is accessible from the VPN servers we have tested (NL and IT). Therefore the problem should be something else. Kind regards

Hello! The DNS IP address in the VPN is 10.4.0.1 for every server. It is reachable regardless the port you connect to. It is a private address, you can't access it from outside the virtual network. Kind regards

Hello, while the router is connected to the VPN, can you ping 10.4.0.1 from a computer connected to the router? And from the router itself? Kind regards

Hello, just for readers' information and in order to close this topic, together with hogboy cooperation a support staff member detected the problem and solved it some hours ago. It was not a bug: the system was behaving correctly. As a general recommendation to anyone (not specifically to hogboy) we remind you that you should not use the same password on different services and that you must not give to anyone your user.key. An adversary in possession of your user.key and the certificates can NOT decrypt your traffic flow (not even if he/she wiretaps your Internet line), BUT can connect to a VPN server with your account. Also, please use passwords at least 12 characters long, randomly generated and not containing dictionary words in any language. Include in the password a random series of characters included in the ranges [a-z], [A-Z], [0-9]. Include at least 2 characters for each of those ranges. As a final recommendation, do not use the same username you picked for other services in our web site. Kind regards

Hello! It might be a DNS issue. Please check whether you can ping IP addresses but names can't be resolved. If so, make sure that your nameservers list in /etc/resolv.conf (or equivalent in Raspberry) includes 10.4.0.1 (i.e. a line "nameserver 10.4.0.1" in resolv.conf file) so that you enable Raspberry to query the VPN DNS. Please see also here https://airvpn.org/topic/9608-how-to-accept-dns-push-on-linux-systems-with-resolvconf If it's not a DNS issue, please feel free to publish your OpenVPN logs. Kind regards

Hello, we don't know if this helps: sometimes that error occurs if you connect from behind TOR or a proxy or anyway when PayPal sees you from an IP address that triggers risk management and security systems. Kind regards

Hello, we had a momentary, very short issue, it should have been fixed just a few minutes after you wrote your message, can you confirm? Kind regards

Hello, yes, that's a valid and good method to prevent leaks. You can compare with Nadre's posts and guides, here https://airvpn.org/topic/9787-the-pros-and-the-cons/?do=findComment&comment=11501 (please check out the "UPDATE 2" with care at the bottom of the post) and on the "How-To" section of the forum. Kind regards

Hello, packets to exit-IP:88 are not forwarded to the VPN. That port is used for services on the exit-IP address, outside the VPN. Kind regards

Hello, in "Forums"->"How-To" section you can find guides for ipfw and pf, the default pre-installed packet filtering tools according to your OS X version. Kind regards

Hello! You've probably missed the part in the instructions for Linux where it is explained how to achieve your purpose. In the Configuration Generator please tick "Advanced Mode" then tick "Separate certs/keys from .ovpn files". By default the Configuration Generator embeds .ovpn files with certificates and key. Kind regards

Hello! You have probably missed in the instructions the part where they say to tick "Advanced Mode" and then tick "Separate certs/keys from .ovpn files", in the Configuration Generator. In this way you will have separate configuration, certificates and key files. By default the CG generates .ovpn files embedded with certificates and key. Kind regards

Hello! It seems that some previously loaded kext is conflicting with Tunnelblick kexts. Please see here for a fix: https://groups.google.com/forum/#!topic/tunnelblick-discuss/ivhHZ9Ilkow or directly here: https://code.google.com/p/tunnelblick/wiki/cCommonProblems#An_OpenVPN_log_entry_says_%22Tunnelblick:_openvpnstart_status Kind regards

Hello, in the Air client login window you must enter your AirVPN credentials (username and password with which you registered and subscribed on our web site), not your Windows account credentials. Kind regards

Hello! From this error: it appears that some previously loaded kexts are conflicting with Tunnelblick kexts: please see here http://code.google.com/p/tunnelblick/wiki/cCommonProblems#An_OpenVPN_log_entry_says_%22Tunnelblick:_openvpnstart_status for a fix. Kind regards

Hello, yes, the ports are reported, as you can see. Apparently you have no need to remotely forward ports: it's onenote.exe that established the connections, it does not listen for incoming connections (and it's quite logical). We're glad to know that the problem is solved. Kind regards

@chrobak77 Please see the answer to your ticket. Kind regards