-
Content Count
11044 -
Joined
... -
Last visited
... -
Days Won
1866
Everything posted by Staff
-
Hello! Do you mean that when you forward remotely a port, everything is fine for some days and then the forwarded port does not work anymore for you on any server? If so, it's very strange, we'll investigate. We are looking forward to your confirmation (or feel free to elaborate, any detail could help us). Kind regards
-
Hello! Unfortunately there's nothing to add at the moment, please see here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=9024&Itemid=142#9040 Have you already asked your ISP for explanations? Have you already tested a different machine on your same router? If so, what is the outcome? If not, you should do that at your earliest convenience. Kind regards
-
Hello! It's a PayPal security feature. PayPal refuses to complete a transaction if the account holder is logged from any IP address that does not match the previous data PayPal has about the customer country. It can't be ruled out that there are also additional security features we are not aware of. Please contact PayPal customer service for additional information. Kind regards
-
Hello! Thousands of forums and threads talk about AirVPN, it's humanly impossible to read them all. About the the thread you linked, it has been widely debated in our forum. We already provide guides to prevent any leak, including leaks in case of unexpected VPN disconnection, without forcing the customer to use closed proprietary software. Of course there will always be people who love closeness and do not appreciate openness, but we prefer openness. The next Air client release (only for Windows and Linux with Mono) will include a security feature to prevent such leaks, but it will not be based on unreliable methods. In any case, using a firewall is still the optimal solution, and we will never compel a customer to use our proprietary software, that must always remain totally optional. Finally, using a task that forcefully kill applications is deprecated and unsafe. Kind regards
-
Hello! The only way for Google to track your real location is when it's your system that informs Google about y it, for exampe with HTML5 geo-location or simply if you have an account in Google associated to your real country. Disable HTML5 geo-location, delete geo-location permanent tokens, delete cookies and do not send to Google deliberately your information. Kind regards
-
SSH and SFTP when connected to OpenVPN
Staff replied to heisenberg1977's topic in General & Suggestions
Hello! Your case does not require policy routing. If your server is connected to an Air VPN server but you want it to reachable via ssh NOT behind the VPN server, just bind sshd to the IP address of the network card you want it to listen to. In /etc/ssh/sshd_config locate the line ListenAddress and set it to the appropriate address. Then restart sshd. You can also specify multiple IP addresses with multiple "ListenAddress" lines. On the contrary, if it's your client connected to an Air server, and your server is not, just use ssh normally. Kind regards -
Hello! We'll surely do our utmost best. Kind regards
-
Hello! Don't forget that this service is experimental and not advertised. We'll look into the issue but we don't guarantee anything. That was an additional information, we tested YouTube as well. Yes, obviously. It's not a database with problem, it's a database with wrong data. Phoenicis is in Bucharest, Romania. A service that correctly geo-locates Phoenicis IP addresses is http://ip2location.com. Kind regards
-
Hello! Currently BBC iPlayer is accessible from every server except Phoenicis, where an error is returned by the BBC (it does not appear as a geo-location problem). About YouTube, YouTube recognizes the Phoenicis IP address as a german one (a database error), so use another server as well if you want to access YouTube contents not accessible from Germany (except German servers, of course!). Therefore your setup should be fine, just don't connect to Phoenicis. Kind regards
-
my ISP can see the URLs I typed in my browser
Staff replied to Ultraman730's topic in General & Suggestions
Hello! The only explanation this admin thinks of is that you're running Windows and you're having a DNS leak. In this context, with "DNS leak" we mean an unencrypted DNS query sent by your system OUTSIDE the established VPN tunnel. Windows is the only OS which suffers of DNS leaks, basically because it lacks the concept of global DNS, so it's not an OpenVPN fault. Please check here: http://ipleak.net If you see, in the list of DNS IP addresses, an address belonging to your ISP, then you have DNS leaks. In order to fix DNS leaks on Windows you have various options: - follow the instructions you have received in the welcome e-mail, or - follow our guide https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=3405&Itemid=142 , or - set 10.4.0.1 and 10.5.0.1 as primary and secondary DNS IP addresses of your physical network card and modify your hosts file as specified in the above linked guide (in this case follow only step 12). In order to modify DNS in your physical network interface, please tell us your exact Windows version and we'll link one of the several guides on the Internet. Kind regards -
Hello! Thank you for your subscription. It's our fault, not yours, we have installed a completely new, much more powerful configuration generator without updating instructions for DD-WRT. Now the configuration generator by default generates embedded with certificates and keys configuration files. In order to force the configuration generator to generate separate files: - click on "Advanced Mode" - tick the box "Separate certs/keys from .ovpn files" In this way you will get separate user.key, user.crt and ca.crt files, in addition to .ovpn configuration file according to your choices. In order to see all the new features of the service and the configuration generator please see here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=8517&Itemid=142#8517 Instructions will be updated very soon. Kind regards
-
Hello! It's not what we see... please let's continue this conversation in private, going further in public might compromise your privacy. Or just take the additional days, no problems. Kind regards
-
Hello! It is nice, but not 100% reliable. The script puts down your physical interface when OpenVPN exits. If OpenVPN is trying a connection, or a re-connection, the interface is still up and a leak is possible. On the other hand, you can't keep down the physical interface, otherwise OpenVPN will never re-connect. Alternatively, set iptables rules to prevent securely any leak: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=1713&limit=6&limitstart=30&Itemid=142#2010 Kind regards
-
Hello! The expiration date of your account looks correct according to your payments... in this case it does not appear that we have donated free days to your account. Kind regards
-
Hello! So it seems that outgoing UDP packets are blocked anyway. Is there anything in your system or in your router that can cause such a block? If not, a possible explanation (although unlikely) is that your ISP is dropping every outgoing UDP packet (except those for its own DNS). If it's the case, you are forced to connect over TCP. Such an over-blocking however would prevent usage of every application that rely on UDP, so it's very unlikely and would imply that your ISP is not really providing you with Internet access. Anyway, if you can't find anything in your system and in your router that causes the problem, try to connect to a VPN server with another machine connected to the same router. If the problem persists, eventually you might like to ask your ISP for explanations. [EDIT] Have you tested different servers? Kind regards
-
Hello! Something is blocking outbound UDP packets, or maybe outbound port 443 UDP. Please check your firewall. Also, please try a connection to 53 UDP. If it's your ISP that blocks outbound port 443 UDP, then connecting to 53 UDP should solve, because 53 UDP can't normally be blocked by your ISP (it's the default destination port for DNS queries). There is no performance difference on any UDP port. TCP is slower due to its full error-correction implementation. Kind regards
-
Hello! You are right. In the future, if you need separate certificates, key and configuration files, in the configuration generator select the option "Advanced Mode" and tick the box "Separate keys/certs from .ovpn file". OpenVPN works just fine with embedded files, but network-manager for Linux does not support them. The Linux instructions will be updated soon. In the meantime please see here for new services and features that have been recently added: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=8517&Itemid=142#8517 Kind regards
-
Hello! A first hint could be given by the Air client logs, can you please send them to us? After the problem occurs, please right-click on the Air client dock icon, select "Logs", click "Copy to clipbard" and paste in the message. Kind regards
-
Hello! Everything seems just fine with your account (connected and exchanging data successfully), if the problem occurs again please check you panel (menu "Member Area"->"Your details") to know the exact reason of the last failed connection attempt and report back at your convenience. Kind regards
-
Re: Having some trouble connecting properly
Staff replied to aldebaran's topic in General & Suggestions
Hello! If you just need to secure your p2p client against leaks in case of unexpected VPN disconnection, then you might just set application rules for your torrent client. In Comodo they would be: Allow TCP or UDP In/Out From IP In [10.4.0.0 - 10.9.255.255] To MAC Any Where Source Port Is Any And Destination Port Is Any Allow TCP or UDP In/Out From MAC Any To IP In [10.4.0.0 - 10.9.255.255] Where Source Port Is Any And Destination Port Is Any Block IP In/Out From MAC Any To MAC Any Where Protocol Is Any strictly in the above order. With Windows Firewall for Vista, 7 and 8 the procedure is completely different. Here's a good tutorial: http://practicalrambler.blogspot.nl/2011/01/windows-7-firewall-how-to-always-use.html (ads apart! ) With Windows Firewall for Windows XP, as far as we know it is not possible to do that. Alternatively, just in case your p2p client is Vuze, you can bind it to the TAP-Win32 adapter as described here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=8472&limit=6&limitstart=6&Itemid=142#8486 Kind regards -
How to autostart airvpn session using Ubuntu server 12.04
Staff replied to tgel's topic in Eddie - AirVPN Client
Hello! It's very simple to do that in Ubuntu: http://ubuntuforums.org/showthread.php?t=1627920&p=10147351#post10147351 Also, our authentication is not based on login/password so you don't need any interaction. Kind regards -
Help with port forwarding for uTorrent/Tixati
Staff replied to Evenstar's topic in General & Suggestions
Hello! No, there's no security problem. Kind regards -
Hello! No, we don't block anything on our side. Probably the block comes from the final service side. Kind regards