Staff

Hello! Ah good, thank you, the previous admin did not see that. Kind regards

Hello! This is the main problem: https://groups.google.com/forum/?fromgroups=#!topic/tunnelblick-discuss/_1Q1a2qZ9d4 Kind regards

Hello! First of all, thank you very much for your report about Shimo. What you say about Mac is true, there's no GUI for Mac that is capable to use every OpenVPN feature. On the other hand OpenVPN over TOR or over any proxy is an additional service not strictly depending on us. It would be absurd that additional features independent of our system should bind us to any commitment, especially when those features are perfectly accessible with a single command. Moreover, all the Air system is designed so that the user is not bound to use an Air proprietary client, which is vital under a security and openness point of view. Yes, definitely, and we'll try to explain why here, without any polemic intent, but to make you understand the reasons of our choices. Your opinion could be easily interpreted like we should not be offering any advice on how to use OpenVPN fully because some system does not have a GUI to use every OpenVPN feature. What's more, as you have surely noted, we have added some significant features (without any increase in price) which are vital to use a VPN in several countries (simply because VPN connections are actively disrupted). Should we stop offering native OpenVPN over SSL and over SSH support directly on our servers because there's no GUI on any OS to use them? Should we had stopped offering remote-random directive because Android and iOS official OpenVPN clients did not support it (until a couple of weeks ago)? Should we had provided insecure PPTP-based tunneling when Air was born, because OpenVPN was not available in iOS and because Apple was actively forbidding its customers to run OpenVPN on iPhone/iPad/iPod? Should we stop offering explicit-exit-notify and embedded configuration files because network-manager for Linux does not respect that directive and does not support embedded configuration files? And the list can go on. As you said in your previous post, we also "aim to support open platforms and free speech on a self-sustaining environment". The lack of a GUI that is able to take full advantage of every OpenVPN feature will not stop us from providing any useful additional service OpenVPN is capable of and we will never force our customers to use any proprietary software from us. Kind regards

I know, that is why I wrote that things were working perfect on your side. But you do not provide a native client for Mac platform and I do not know a way of using your service without using the mentioned wrappers which do not support SOCKS proxies. Hello! You need to launch OpenVPN directly from a shell. Put your configuration files (i.e. the files generated by our configuration generator) on any directory you like, enter the directory (with the command "cd ") and issue the command: sudo openvpn Remember to launch TOR before (or your socks proxy), if the generated configuration file is built to order OpenVPN to connect over a socks proxy. sudo is necessary because OpenVPN needs root privileges to modify the routing table and the default gateway. Could you please explain this in more detail? Do you really think that it is appropriate for the intermediate users? It depends on the definition of intermediate user. In order to launch OpenVPN, the user must be able to install it, create a folder, copy & paste files (these last two operations are anyway required even if the user uses Tunnelblick), open a command shell and type in the above mentioned commands. Probably most Mac users are able to do that. Kind regards

Hello! You might also like to read here to connect over OpenVPN over TOR on a Mac: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=8860&Itemid=142#8864 Kind regards

Hello! Thank you for your nice words, they are much appreciated. Tunnelblick and Viscosity are OpenVPN wrappers that do not support connections of OpenVPN over socks proxies. This is not a limitation of our service. It's not even a limitation of OpenVPN for Mac OS X. It is just a limitation of the wrappers due to their programmers inability to support all OpenVPN features from the wrapper. Mac OS X users who need to connect over OpenVPN over TOR or over a proxy just need to use OpenVPN directly (installed by themselves, or using the version installed by Tunnelblick). Or they can use Shimo as an allegedly full-featured OpenVPN GUI (only for OS X 10.7 or higher). EDIT: please note that we did NOT test Shimo. Therefore, while we appreciate and welcome your criticism, we wish to reply that it's unfounded: our support to Mac OS X platforms IS complete. Kind regards

Hello! After you have modified the DNS in your physical network card, your system can't resolve airvpn.org when disconnected from the VPN. Please add to your hosts file the lines: 85.17.207.151 airvpn.org 212.117.180.25 airvpn.org Kind regards

Hello! Can you please tell us your OS and the client you're running to connect to a VPN server? Can you please make sure that no program (especially antivirus, packet filtering programs/firewall) is interfering with OpenVPN? Kind regards

Hello! We have had so many problems with Vega that it's possible. It may be a consequence of excessive packet loss. We have momentarily withdrawn Vega because all these problems together cause a very poor customer experience. Of course we're glad to know that switching server solved the problem. Kind regards

Hello! Due to latency and bandwidth problems which are causing poor service quality, we have decided to close Vega. Please connect to any other server while we work on the problem. Please have a look at https://airvpn.org/status Since this week it's the third time that we are compelled to close Vega for poor performance, every time for datacenter faults. During the next days we will make a decision on Vega definitive withdrawal. We will keep you updated on this thread. Kind regards

Hello! We confirm you that http://mywhisper.net/ web site and mywhisper.net domain name are under AirVPN team's total control. Please note that encryption and decryption are performed by your browser through JavaScript. The clear text and the key never pass through the server. Kind regards

Hello! No, you don't need to do anything else. Just test and make sure that Norton Firewall blocks uTorrent when your computer is not connected to the VPN. Kind regards

Hello! Please send them to us through the "Contact us" form in the "Support" menu. A screenshot is not really necessary, you can send us (copy & paste) just the textual output if you prefer. Kind regards

Hello! Since you don't use a router, you can close that port on your physical interface with your software firewall. Kind regards

Hello! That's correct, Tunnelblick does not seem to support properly OpenVPN connections over a socks proxy. Unfortunately we are currently not aware of any solution to this problem, it does not depend on us in any way. Kind regards

Hello! Sorry, we don't understand, can you please elaborate? Kind regards

Hello! Correct, dns-oarc should not see your ISP DNS. You have a DNS leak. The fact that dnsleaktest does not detect this leak can imply that dns-oarc test is more accurate. We'll investigate and if it's the case we will recommend to test with dns-oarc, not with dnsleaktest. We are also launching our own service to test DNS and more, we're going to announce it very soon. Kind regards

Hello! You don't need to do or configure anything else. Recommended Comodo global rules that you implemented already prevent packets to reach your computer port "30000" (and any other port) on its real IP address/physical network interface, preventing therefore correlation attacks of this type. The only way to reach your computer on ports on its physical network interface with the above Comodo rules would be to have packets pass through the entry-IP address with destination your real IP address, but that can't happen, not even if the attacker monitors your line and knows the entry-IP address of the server you're connected to, because foreign packets to the entry-IP address are not forwarded to any client. Kind regards

Hello! We'll do our utmost best... to push the Air client for Linux programmer... :evil: The Linux client will need Mono to run and it will be on par with the Windows version. We are very aware of several network-manager problems. For example, your issue is determined by the fact that network-manager simply ignores the explicit-exit-notify directive in our configuration files, which is vital for connections over UDP, and does not pass it to OpenVPN. To make things worse, network-manager does not support embedded configuration files and ignores other useful directives. As a momentary mitigation to your problem when switching servers, wait for the timeout (1 minute) when you disconnect. A complete solution until our client is released would be running OpenVPN directly. Kind regards

Hello! We'll check the problem carefully. Please notify us when you experience the issue through the "Contact us" form. Also, can you please tell us which Tunnelblick and Mac OS X versions you are running? Kind regards

Hello! Please make sure that: - the TOR proxy is running before you launch OpenVPN - the TOR proxy is listening to port 9050 (check the SocksPort, not the ControlPort) - you pick a TCP port for OpenVPN connection (TOR proxy does not support UDP) Kind regards

Hello! Your system does not lose connectivity to the Internet with your setup, it will just lose the capacity to resolve names through DNS queries. DNS queries are sent only if the hosts file evaluation AND the DNS resolver cache evaluation do not resolve a name. If you flush the DNS cache resolver, your system will become immediately unable to resolve all the names not included in the hosts file (well, there's some additional step, but for simplicity's sake this overview is sufficiently correct). Kind regards

Hello! Actually, the Air client is portable. It's not possible to make the Air client connect automatically at Windows 7 startup. You need to use OpenVPN directly to do that. Kind regards

Hello! There's not such an option in Norton as far as we know and anyway it would not be possible, we don't know essential details about your network. Send us the output of the command "ipconfig /all" which will help us determine your home network IP range. Anyway the described operations show you, step-by-step, what you have to click and which values you have to enter. Please refer to Norton manual and to Norton customer service for additional support on Norton Firewall. Kind regards

Hello! Please follow the instructions for iOS, direct link: https://airvpn.org/ios If you don't have AirDisk Pro (in spite of of the name, we have nothing to do with this app), just send the files to yourself via mail or via iTunes, please see here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=7035&Itemid=142#7051 Kind regards