Staff

Hello! It might be a DNS issue: a possible explanation is that your system constantly try to send out DNS queries out of the tunnel and Comodo blocks them (correctly). If it's the problem, you should be able to solve it by setting 10.4.0.1 as primary (preferred) DNS IP address in your physical network interface. This is yet another problem, please send us your client logs just after it happens. Yes, in order to connect over TOR over OpenVPN, first connect to an Air server, then use a browser configured to connect to TOR. Aurora, a customized Firefox included in the TOR Browser Bundle by TOR Project, is highly recommended. It is already configured to run over TOR and includes some very useful security features. Kind regards

Hello! Problem fixed, can you please try again now? Kind regards

Hello! Problem confirmed, it's on our side. Please hold on while we investigate. Kind regards

Hello! There is a bug in the configuration generator for which you can generate a corrupt archive. The bug is due to the fact that when you select an http proxy you should be forced to pick TCP. However, if you click on Generate *before* selecting TCP, the system, instead of warning you that you did not pick the protocol, tries to generate a zipped archive. While we're fixing the bug, please select TCP. You'll see that the system will NOT zip the generated .ovpn file (if you embed it with keys/certs). Actually, the generator should NOT zip anything when the selection outcome is a single file. Thank you for discovering this vicious bug. During the next week we will implement a completely new and much, much better configuration generator with new, very useful features. Kind regards

Hello! Which client or OpenVPN wrapper are you running? Kind regards

Hello! Yes, weren't you talking about that? No, keys re-negotiation are not displayed as a disconnection in the logs, just as a TLS: soft-reset. Excellent. Maybe just a temporary issue. Do you note any unusual amount of "Replay-window backtrack occurred" entries in the logs? Kind regards

Hello! It is supposed to remain always connected. Maybe connection drops? Please note that every 60 minutes the TLS keys are re-negotiated with overlapping windows, this has nothing to do with disconnections, the connection remains alive and there's no overhead, just make sure that you're not mixing two different circumstances. Kind regards

Hello! It appears clearly as an intermittent problem from your ISP (most probably caused by congestion/overselling), simply because it's impossible that dozens of different tier1 providers have all together the same problem at the same times in different countries and continents, however feel free to ask for a refund anyway, don't worry. Kind regards

Hello! You don't need to change anything. Kind regards

Hello! Of course you can! Please feel free to let us know about Virgin, we are aware that there are problems with Virgin "superhub" and OpenVPN, normally customers are not able to beat 35 Mbit/s while using OpenVPN and this was for sure a Virgin problem (see Virgin support forums, there are dozens and dozens of customers complaining about it). Kind regards

Hello! Please note that this is correct. As far as we know TOR does not provide an option for remote port forwarding. Kind regards

Hello! If you want to connect over a proxy over OpenVPN, first connect to an Air server, then configure the programs that must connect over the proxy over OpenVPN to connect to the proxy. This is achieved by OpenVPN alone. Or by TOR alone. If this is your only purpose you can just connect over OpenVPN, without any proxy, for best performance. Kind regards

Hello! The logs do not show any problem. Please try also different servers (in the logs you tried only one) in order to determine those which can give you the best performance. If you get exactly 10 Mbit/s on all servers, all ports and all protocols then your ISP caps your OpenVPN connections at exactly 10 Mbit/s. Kind regards

Hello! Then you have a DNS leak on Windows. Please fix it as suggested. Kind regards

Hello! Perfect, that server is ours in Voxility datacenter. Of course you are free to use Google DNS if you prefer so (just set 8.8.8.8 as primary DNS of your tun adapter if you run Windows or first nameserver in resolv.conf if you run Linux without resolvconf). Kind regards

Hello! Thank you! Please see here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=3405&Itemid=142 Kind regards

Hello! Which client are you running? Kind regards

Hello! Thank you for your warning. Apparently novo-ordo is blocking our German servers. We will try to bypass the block. In the meantime you can access the web site from our non-DE servers. Kind regards

Hello! The TAP-Win32 adapter is the tun/tap virtual network interface used by OpenVPN. Without it OpenVPN can't work. The problem is that there are no TAP-Win32 adapters on your system. Maybe something went wrong during the installation. Try to add an adapter as suggested in the above quoted piece of your logs (the utility to add it is inside ..."OpenVPN"->"Utilities"). If the operation fails probably the adapter driver has not been installed properly. In this case, please uninstall OpenVPN completely and re-install it, making sure to authorize the installation of any driver. Kind regards

Hello! Yes, that's correct, you have no DNS leaks. On dnsleaktest.com you should just get the server exit-IP address because we dropped Google DNS completely earlier this day. Kind regards

Hello! Since a few hours ago, we have completely dropped Google DNS. You are of course free to use Google DNS or any other public DNS if you wish so. Every VPN server has its DNS server, directly finds out information about the root servers, top level domains and authoritative name servers. Our DNS servers are neutral, do not ever inject or alter the requests (other services resolve to search results, try to fix typos etc). Where ICANN or root servers themselves interfer with censorship, we may apply specific censorship fix to our DNS server. See "AirVPN does not recognize ICANN authority anymore" topic for more information: https://airvpn.org/index.php?option=com_kunena&func=view&id=852&catid=3&Itemid=142 Using our DNS allows our customers to use Air anti-geolocation discrimination features. For example, visiting a website that allows only United States connections from a Netherlands VPN server. It's recommended to use our DNS server to avoid censorship and use our anti geo-IP based discriminations features. Kind regards

Hello! The name of the file is: hosts Please note that it has no extension, so in Notepad make sure that you select "All files" (otherwise it will filter *.txt files and you will not see it). The file on standard Windows installation is inside the following directory: C:\Windows\system32\drivers\etc If you have still issues try to open a command prompt with administrator privileges and type: notepad C:\Windows\system32\drivers\etc\hosts (press ENTER key at the end of the line) Kind regards

Hello! Please send us the documentation required in the "Prevent leaks with Windows & Comodo" thread for troubleshooting. Please send us also the Air client connection logs after a failed connection attempt. Kind regards

@drewwheelerosman Hello! From the second post you published everything seems fine. Can you also send us the output of ping google.com as usual while you are connected to the VPN. Kind regards

Hello! As you prefer. Using our DNS will give you the following advantages: - access to internal services (currently only http://speedtest.air) - ICE censorship bypass - access to our experimental service aimed to bypass IP-based geo-location discriminations (for example you can watch BBC iPlayer from non-UK servers and access CBS and Pandora from non-USA servers) In most cases it's not a reason for concern, but if you exchange sensitive, "critical" information (for example if you are a whistleblower, or you live in a human rights hostile country) you should disconnect as soon as the critical information have been imparted or received. This attention is not necessary if you connect over OpenVPN over TOR. Which proxy server? Kind regards