Staff

Hello I have managed to get SSL and SSH working (although only on port 22 for SSH) and the connection is significantly faster. Thank you. Hello! Excellent. Additionally, you might like to contact BT customer service. Several months ago they had major issues with OpenVPN when they implemented some new system, but then they claimed they solved all the problems. Actually we have had BT customers that had problems at the beginning, but then BT managed to solve their problems. It's worth that you contact them because anyway you can get higher performance with direct OpenVPN connections over UDP than OpenVPN over SSH. Kind regards

Hello! Can you please tell us your OS? About the logs, if you use Windows and the Air client, you can find them by right-clicking the Air client dock icon and selecting "Logs". After that please click "Copy to clipboard" and paste into your message. Kind regards

Hello, no, we're sorry, it's not possible. Kind regards

Hello, this is a guide to prevent ANY leak on Windows 7/8 with Windows Firewall published by Omniferum. It is particularly simple to follow and well written, and it provides also a very comfortable "VPN flipper". Thank you Omniferum! Warning: the setup works on Windows 7 and Windows 8 with the default Windows Firewall. It has NOT been tested on any other Windows version. It will NOT work on Windows XP (whose firewall is completely different and very limited, Windows XP users might like to use Comodo Firewall). It is NOT suitable if you have any other firewall running on your system (remember, you must never run two firewalls simultaneously). Important: the VPN flipper script will NOT work if your Windows is not in English language, because the system Firewall rules names change (incredible but true!) according to the language (thanks to Esamu for the information). UPDATE 14-May-14: issue fixed. Original thread updated on May the 14th, 2014: https://airvpn.org/topic/9609-blocking-non-vpn-traffic-with-windows-firewall Kind regards

Hello! You have probably a redirection/hijack malware in your system. Try to remove it and also add to your hosts file the line: 95.211.138.143 airvpn.org Feel free to keep us informed. Kind regards

Hello! Instructions for Windows, Linux and OS X can be found here: https://airvpn.org/ssh Remember that OpenVPN over SSH should be used only when absolutely necessary, for example when a direct OpenVPN connection is not possible (China residential and mobile lines, Iran). When a direct OpenVPN connection is possible and not throttled, OpenVPN over SSH should not be used. Kind regards AirVPN Support Team

Hello, your system can't resolve nl.vpn.airdns.org (which is not used by the Air client). Can you please tell us if nl.vpn.airdns.org is resolved by your system now? Commands: tracert nl.vpn.airdns.org ping nl.vpn.airdns.org Kind regards

We received a notification of solved problem from auto24955520: "I think the problem was upgrading my tunnelblk. Basically I looked through the preferences, and for some reason the OpenVPN version was still on default, an old version. I changed it to the latest, v2.3.2, deleted the profiles and created a new one. And it works fine now." Kind regards

Hi, of course, of course. It's planned in the next client release (Eddie). Kind regards

Hi, actually there's a guide: https://airvpn.org/topic/9549-guide-to-setting-up-vpn-just-for-torrenting-on-windows-thanks-to-nadre/ see section "Routing Table Change to Block Outgoing Native Traffic" It does not depend on firewall. Kind regards

Hello, you need to edit your hosts file because the Air client needs airvpn.org resolution (when your system is disconnected from the VPN, it can't resolve names via DNS, because 10.4.0.1 and 10.5.0.1 are private IP addresses). Add the lines: 95.211.138.143 airvpn.org 212.117.180.25 airvpn.org Kind regards

@NaDre Hello, it was explained here: Kind regards

@stefeman You're typing the wrong file name, please type the correct file name. If in doubt issue command "ls" to see the list of the files in the current directory. Press TAB for auto-completion help while typing the filename. Kind regards

Hello, it's difficult to say something useful without logs, anyway try to install configuration files by keeping one and only one configuration per folder. Make sure to rename the folder with a ".tblk" extension only AFTER you have pasted the .ovpn configuration file inside it. Kind regards

@johndough Yes. Just to explain more to the readers, the client, without any server co-operation, can either disable TLS renegotiation (NOT recommended at all) or set any TLS re-keying period NOT HIGHER than the server setting. It's not possible that the client set a TLS re-negotiation (if active) to more than the time value set on the server. Our servers are set to 60 minutes, so you can't have TLS re-negotiations higher than 60 minutes. Kind regards

Hello, there is a GMail option to disable that warning and allow any IP address, and even an option to authorize certain IP addresses (so you could put there the exit-IP addresses of the VPN servers you connect to). Please consult the GMail guides at your convenience. Once you have authorized an IP address, it will be authorized regardless of the device you use to access the mail server. Kind regards

Hello, the unsolvable problem for NSA in this case is that our customers client keys for OpenVPN Data Channel encryption are re-negotiated at each new connection AND every 60 minutes (essentially the core of Perfect Forward Secrecy). Customers can also lower the TLS re-keying interval on the client side. Kind regards

Hello, these log entries: show that there was no communication between your node and the VPN server: no routing to the server was possible. Kind regards

Hello, please run the PortListener and report the server names where you experience the problem at your convenience. Kind regards

@tangomega Ok, it was wrongly understood that OpenVPN was running in a DD-WRT router. Our fault, you were very clear in your description. Your idea on how to fix the issue is just fine, please see also here: http://wandin.net/dotclear/index.php?post/2009/01/08/OpenVPN-MTU-Size http://openvpn.net/archive/openvpn-users/2004-11/msg00044.html Alternatively, just connect over TCP, but this might not be the ideal solution due to performance hit. Kind regards

Hello, if the client does not notify the server about a disconnection on UDP, the server has absolutely no way to know that the client disconnected. In this case, you will need to wait for the inactivity timeout (normally 60 seconds) to be authorized to re-connect or click the button "Disconnect Now" from your control panel. Kind regards

Hello, CPU load is normal. Routers CPU do not have built-in AES commands and their processing power is low, if compared to nowadays desktop and laptop computers. The limit for a typical consumer's router CPU to encrypt and decrypt on the fly AES-256-CBC is 7-10 Mbit/s total throughput (AES-256-CBC is the cipher of our OpenVPN Data Channel). Some fragmentation may be perfectly normal, as long as it does not impact performance. Since you already reach the maximum theoretical throughput peak allowed by your router processor, you probably have nothing to worry about. Kind regards

Hello, are you using network-manager? It might have problems in resolving host names. If it's the case, re-generate the configuration in the following way: - click "Advanced Mode" - in the "Advanced" table, tick "Resolved hosts in .ovpn file" and "All servers for area region" Re-generate and re-download. it should fix the problem. Kind regards

Hello, thank you very much for the information. We'll check it out and update the thread. Kind regards

Hello, can you please try again now? Kind regards