Staff

Hello! Can you please try connections to different servers on different ports for comparison tests? In particular, can you please try ports 53 UDP and 80 TCP? In order to change connection port with the Air client, after you have picked a server please select the "Modes" tab and click "Enter". Kind regards

Hello! Puzzling, we did not change anything in the servers configurations in the last days. What do the OpenVPN logs say? Kind regards

@airvpnclient Hello! As you can see from the logs it works just fine. You get an AUTH_FAILED just because "airvpnclient" account is already connected to some of our servers (since hours before your message) and happily exchanging data. You can check your account status and the reason of the last failed connection attempt in your "Client Area" (login and click on "Client Area" in the upper menu). Kind regards

Hello! Using VPNCheckPro is not a good idea at all, as you rightly say. Setting up Comodo rules as you did is the safest solution. There can't be leaks in this case. About the Air client remaining forever on "Checking..." it could be related to the DNS you forced on the TAP-Win32 adapter. You don't really need to force them (the TAP-Win32 adapter DNS will be set according to the OpenVPN server push), but if you do, can you please check? It's unclear from your message if they are correct, they must be: 10.4.0.1 10.5.0.1 Kind regards

Hello! Three years ago an Air co-founder discarded the idea to make the OpenVPN servers listen to IANA-assigned port 1194 and convinced everybody else, because it was (is) one of the first ports that VPN-hostile ISPs block or shape. After three years, was it a wise decision or not, in your opinion? We're looking forward to any feedback about it. OpenVPN over SSH has been successfully tested on various distributions, with and without any desktop manager, which problems do you experience? Logs may help. Kind regards

Hello! Try to run OpenVPN GUI with administrator privileges (right-click and select "Run as administrator"). It should create the key, but if it fails see also the following ticket: https://community.openvpn.net/openvpn/ticket/252 Kind regards

Hello! To begin with, have a look at our servers here (servers stats are updated every 60 seconds): https://airvpn.org/status You might also like this service: https://airvpn.org/forum/10-websites-support/ Be aware that some moderator might delete any competitor name or any advertisement in posts. As a general rule (not that it necessarily applies to your post, of course), moderators are instructed to delete spam and advertisements, even after a message approval. Kind regards

Hello! Just as a side-note, you don't need to assign a static IP address to your network card to prevent DNS leaks (and in some circumstances it might also create issues if your network is handled by a DHCP server), just set static DNS IP addresses 10.4.0.1 and 10.5.0.1, which are reachable regardless of the Air VPN server port you connect to. Kind regards

Hello! About tracker.openbittorrent.com, we'll investigate (at the moment we can't neither confirm nor deny), which servers(s) do you experience the problem from? About various domain names that failed to be resolved through our DNS, it might be related to a DNS issue in some NL servers that is now fixed, please see here: https://airvpn.org/topic/9374-dns-problems Kind regards

Hello! Problem solved. Kind regards

Hello! Can you determine which process (if any) is causing such upload rate? Kind regards

Hello! Now you can pick the compression format of the archive to download, or no compression at all (the compression options will not be prompted if only one file is generated). Please make sure you have followed the below steps reported in the instructions, because network-manager does not support embedded .ovpn files: Select "Advanced Options"Tick "Separate certs/keys from .ovpn files"Kind regards

EDIT 20:04 CET+1 06-May-13 Problem solved Hello! We regret to inform you that we are currently experiencing DNS problems on the following servers in the Netherlands: Ophiuchi LeporisLyncisOrionisCastorCorviThe problem affects DNS resolution. You might be unable to resolve some (and only some) names with our internal DNS (10.4.0.1, 10.5.0.1, ... , 10.9.0.1). The problem is external: it is not caused by our DNS or configuration. We're anyway working to solve it as soon as possible. In the meantime, as a momentary work-around (not compromising security): on Linux, OpenBSD and FreeBSD, just set a public DNS on your nameservers list after the connection. Example: in /etc/resolv.conf add the line "nameserver "on Windows, on your TAP-Win32 network interface (NOT on your physical network card) after the connection set preferred and alternate DNS IP addressalternatively, simply connect to any of our servers not included in the above list We will update this post as soon as the problem is solved. We apologize for the inconvenience not caused by us. Kind regards

Hello! Problem confirmed. We're posting an announcement and we'll be working to fix the issue. Kind regards

Hello! We amend our previous post, the problem can arise also on symmetric lines. It has been under discussion since two years ago: https://github.com/bitcoin/bitcoin/issues/273 As you can see there's no easy agreement on the issue. Kind regards

Hello! Currently it's not possible with the Air client. To achieve your purpose you can run OpenVPN as a service. Since our system provides a double-certificates / key authentication, no human interaction is required to connect at boot. Kind regards

Hello! We can confirm that (since we accept Bitcoin payments, we know the system): on ADSLs the Bitcoin client can sometimes saturate the upload bandwidth, "choking" the download bandwidth as well as a consequence. Kind regards

Hello! Some clarifications: AirVPN is based on free and open source OpenVPN by James Yonan and OpenVPN Project / OpenVPN Technologies, Inc.. We consider OpenVPN the most reliable and secure VPN client/server solution currently existing. OpenVPN is available for most existing OS (Linux, OS X, OpenBSD, FreeBSD, Android, iOS - in client mode, Tomato, DD-WRT, Windows...). OpenVPN can be invoked directly via command line or can be controlled through a wrapper or GUI. We don't bind our users and customers to run any proprietary software from us: the Configuration Generator can generate all the files needed by OpenVPN or any well-developed OpenVPN wrapper. Some wrappers have minor or major limitations, for example network-manager does not pass the explicit-exit-notify directive, Tunnelblick (an open source wrapper for OS X) is incapable to handle properly the socks-proxy and http-proxy directives. On Windows, OpenVPN is packaged with "OpenVPN GUI", an OpenVPN GUI. If you don't wish to run our client or OpenVPN directly, OpenVPN GUI may provide an excellent solution (as long as you don't need more than 50 configurations at once, currently OpenVPN GUI limit) and does not suffer, as far as we know, of any limitation apart the aforementioned one. The correct link Shippy was probably meaning is http://openvpn.net/index.php/download/community-downloads.html Kind regards

Hello! In the new system, the configuration generator is accessible in menu "Client Area". Click on "Client Area" on the upper menu, then click on "Config generator" in the left tabs. Direct link (while you're logged in): https://airvpn.org/generator Old previous post has been edited to reflect the changes in the new system, we apologize for the inconvenience.This thread was outdated (it refers to the new configuration generator of Aug 2012, since then it changed again). Now the thread and the links are on-sync. Kind regards

Hello! Difficult to say, in order to rule out or confirm that the switch is the "weak chain ring", would you be able to connect the XP machine directly to the router, just momentarily for a comparison test? Kind regards

Hello! The TAP-Win32 adapter for Windows is not limited to 10 Mbit/s. 10 Mbit/s is a bogus hard-coded value, it means nothing. Kind regards

Hello! That adapter is the virtual network card (the tun/tap interface) used by OpenVPN and it is strictly necessary. The 10 Mbit/s limit you see is just a bogus hard-coded value which has no significance at all. Kind regards AirVPN Support Team

Hello! AirVPN is based on OpenVPN. The configuration of each Air VPN server is the same and you can't change encryption algorithms, if you do you will not be able to connect to any of our servers. OpenVPN encrypts both Control Channel and Data Channel. In our servers Packet Authentication is also mandatory. Encryption algorithms are respectively RSA (with 2048 bit keys), AES-256-CBC (symmetric, 256 bit keys) and HMAC SHA1 (160 bit key). Authentication method is based on double certificates and key. TLS re-keying is performed by default every 60 minutes, with overlapping windows, so that the re-keying does not affect in any way performance and does not introduce any time-pressure. This is a parameter you can change on the client side, if you wish. If you're interested in going deeper, you can read an OpenVPN manual, or for a more synthetic summary the Wikipedia article. Kind regards

Hello! Choices of non-working ciphers in the configuration generator are not possible. It will generate files consistent with our OpenVPN servers settings. It would be detrimental (and somehow grotesque) that you could generate non-working configurations with the configuration generator... its purpose is exactly to generate working configurations for Air servers. Kind regards

Hello! Your OpenVPN client must match the cipher set in our OpenVPN servers. Our configuration generator will generate the correct configuration files. Current set: RSA 2048 bit keys AES-256-CBC Data Channel HMAC SHA-1 160 Packets Authentication Kind regards