Staff

Everything seems to be working now. Thank you!

However... When I changed airvpn.org as you suggested nothing would connect. When I changed it back to where it was [46.105.19.36] everything worked great. Is this a potential future problem?

Hello!

We're glad to know that the problem is solved. However the behavior you report is odd. Can you please send us the content of your hosts file and how your system resolves airvpn.org?

I chose your service because of the great customer support reviews and I have to say you have lived up to the rave reviews. My 30 day "check out" is about to be extended by a year. Thank you again.

Thank you for your nice word, they are much appreciated.

Kind regards

Hi,

I'm using AirVpn on a Win 7 x64 platform throught client.

I've see that your page state that I'm connected and not connected at the same time (see attachment). Which is the real information? How can I check if I'm really connected??

I use this post also to ask how I have to set Comodo firewall to allow connection that request a browser authentication.

Thanks in advance.

Hello!

A possible explanation is that you were browsing the Air website before you established a VPN connection. Even if you establish a connection while the browser is browsing websites, already established connections to those websites will remain open (that's perfectly normal). Try to run your browser after you have connected to an Air server.

Kind regards

Hello!

Please feel free to report here any website not accessible from Vega. We're already aware about yahoo.com.

Kind regards

It seems that http://thepiratebay.se is not accessible from Vega, whereas it works when I turn the VPN off.

I wonder where the blocking is occurring? I'm sure it was working a week or so ago.

Hello!

We confirm the issue.

There is no block from Vega or from Vega datacenter and the routing is correct.

The packets are rejected or dropped somewhere in the piratpartiet network, or by The Pirate Bay itself (perhaps TPB blacklisted Vega exit-IP for some abuse).

We will be working to circumvent the block. In the meantime, we kindly ask you to connect to any other server in order to have access to TPB.

Kind regards

Hello!

You can achieve your purpose with DNATting.

Make sure that you have remotely forwarded the ports you wish.

Then please add the following iptables rules for each TCP/UDP port you wish to forward:

iptables -t nat -I PREROUTING -i -p tcp --dport -j DNAT --to-destination

iptables -t nat -I PREROUTING -i -p udp --dport -j DNAT --to-destination

where:

- is the port number of the port you want to forward to a device

- is the IP address (for example 192.168.x.y) of the device you wish to forward packets on that port to

- is the TUN/TAP adapter name (for example tun1)

Kind regards

Hi!

I have a few questions about the OpenVPN Client settings. I've noticed for example that there seems to be a soft reset every hour... what is that good for and is there a way to increase that time?

Hello!

It's the TLS rekeying, an OpenVPN smart feature. You can't increase that time (it should be done on the server side) but you don't need to. It is a nice security feature which does not add any practical overhead. During SSL/TLS rekeying, there is a transition-window parameter that permits overlap between old and new key usage, so there is no time pressure or latency bottleneck during SSL/TLS renegotiations.

Also, there seems to be a very long key, or rather a good encryption. I personally might not find that necessary:

Is there a way to lower the encryption level to increase performance (or decrease cpu load) for example?

Thank you

The main load on the CPU is the encryption/decryption on the data channel, currently AES-256-CBC. We're sorry, we have no plans to lower encryption strength on the data channel. On the contrary, we are evaluating whether to raise it up in the future.

A dual core Atom can handle at least 35 Mbit/s throughput with AES-256-CBC, while even old processors (from Athlon64 and newer) should have no problems to handle at least 100 Mbit/s. Low-consumption old CPU on DD-WRT routers can handle up to 7 Mbit/s.

Kind regards

Hello!

The rules you published are blocking any packet from and to 95.211.169.3, the server you're trying to connect to.

In order to allow access to 95.211.169.3 please add the following rules and put them higher than the block rule:

Allow IP In/Out From IP 95.211.169.3 To MAC Any Where Protocol Is Any

Allow IP In/Out From MAC Any To IP 95.211.169.3 Where Protocol Is Any

Also, the airvpn.org IP has changed to 85.17.207.151, please modify it.

The Network Zones look fine except perhaps the [Home Network]. Just make sure that in your Home Network the IP range is the one you specified, just in case you need [192.168.0.0 - 192.168.255.255] instead of [192.168.1.1 - 192.168.255.255] (if everything is fine, then you don't need this change).

Kind regards

Hello!

You need to change firmware and find one which has all the options, otherwise you'll be forced to create scripts in order to connect.

For Linksys E2000 the following firmware has been reported by our customers as fully functional and OpenVPN bug-free:

dd-wrt.v24-16785_NEWD-2_K2.6_big-e2k-e3k

Kind regards

Hi!

I was just wondering why my link speed is displayed as only being 10Mbit/s? A speedtest gives me about 13-15Mbit/s download speed with 100% network utilization. Is there any way to fix that?

Using this new 2.3 beta of openVPN right now...can that have anything to do with it?

Thanks

Hello!

The 10 Mbit/s is just a bogus number, nothing to be worried about.

Anyway, there are actually some limits on Windows, it looks like the TAP-Win32 adapter can't handle more than 160 Mbit/s while on Linux there is no such limitation.

Kind regards

Hello,

I tried the Guide on airvpn.org/index.php?option=com_kunena&a...=3405&Itemid=142,

but it won`t work.

can you give me the missing Rules,to finish my Setting?

Kind regards

Hello!

Of course. Please do not hesitate to send us a report which includes all the required data as described here:

https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=3405&Itemid=142#3512

All the data are necessary in order to provide you with proper support.

Kind regards

What do you mean by my service? Your service is the only thing I'm using.

Hello!

Clarification: it is meant as the service which should listen to port 22074. It may be a web server, a torrent client, an ftp server, an ssh daemon or any other service which needs to be reached from the Internet on that port.

Kind regards

So what do I do then? Is this canyouseeme.org's fault?

Hello!

Not necessarily, it might be that your service is not responding or that some firewall is blocking packets to your service. Can you please check?

Kind regards

I saw the other thread about this but It didn't help. When I go to check the port I have forwarded on canyouseeme.org

I get this message:

Error: I could not see your service on 178.248.30.132 on port (22076)

Reason: Connection refused

Is it the server I'm connected to or what?

Thanks!

Hello!

You're currently connected to a server which is properly forwarding packets to your account VPN IP address. Actually, your services ARE responding on all the ports you have remotely forwarded except 22076 (which is anyway properly forwarded) and another port remapped to a different local port (which is anyway properly forwarded). Please make sure that the service which should listen to port 22076 is running and really listening to the correct port.

Kind regards

Hello,

testet different Rules,nom it seems to work.

DNS Leak Test is ok.

Can i use these Rules?

Kind Regards

Hello!

The rules do not appear to be complete in order to prevent any leak AND allow DHCP and communications within your home network and with our servers. Please follow the guidelines in this thread:

https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=3405&Itemid=142

If you have any issue please do not hesitate to send us a report which includes all the required data as described here:

https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=3405&Itemid=142#3512

Kind regards

Hello!

Thank you for your choice.

Unfortunately Google Checkout for vendors is not available to companies operating in the European Union (with a single exception). We don't process directly credit cards, so we're afraid that if your card is not accepted by PayPal, you'll need to find a different funding method for your PayPal account. Anyway, please make sure that you don't use any proxy or VPN while trying the transaction: PayPal may block any transaction if it detects an IP address geo-located in a country different of your own.

Please do not hesitate to contact us for any further information.

Kind regards

ok, so i just spoke to the support from giganews. and what he told me is that giganews is blocking all ips from lease web due to spam, etc. how can this be fixed?

Hello!

So it's a Giganews problem. We will not comment on that at the moment.

On our side, connect to one of the following non-Leaseweb servers:

Aquarii (Switzerland) [EDIT: NO LONGER AVAILABLE, please use Virginis instead]

Geminorum (Switzerland)

Herculis (Luxembourg)

Serpentis (Sweden)

Bootis (United Kingdom)

Cassiopeia (United Kingdom)

Arietis (USA)

Vega (USA)

Please feel free to let us know if this fixed the "problem".

Kind regards

Unfortunately its not working on its own. I am using Unison and if I disconnect from Viscosity, I am connected immediately and if I connect to viscosity and try connecting , I am not connecting. Please help!

Hello!

Unison is an NNTP client, so it works over a VPN without any particular configuration. Maybe the Unison logs can help shed light on the issue, can you please send them to us?

Does any other application connect to the Internet without problems when you're connected to an Air server?

Kind regards

So if someone wanted to run an FTP server on the VPN, where would an FTP client connect to?

Thanks, regards

Hello!

You can find all the relevant information (especially for an FTP server behind a VPN server) here:

https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=1700&Itemid=142#1702

Kind regards

Hello!

Thank you for your subscription.

The exit-IP address of the server you're connected to is the IP with which you are "visible" on the Internet. It is a static and shared IP. The IP address of the TUN interface (called TAP-Win32 Adapter v... in Windows) is the IP address that has been DHCP-assigned to your client inside the Virtual Private Network. The TUN interface is accessed by OpenVPN. For further information about VPN IP ranges: https://airvpn.org/specs

Your client is behind a p2p-friendly NAT which will allow several torrent clients to receive incoming connections. On top of that, you can also remotely forward ports (up to 20). Please see also https://airvpn.org/faq for further information. Remote port forwarding is necessary for any service that you wish to be reachable from the Internet and in particular to optimize the p2p performance of those clients who can't "punch" cone-NATs. eMule-like clients always need port forwarding to work fully.

In order to check against leaks of your torrent client, you can perform the test at the following website:

http://checkmytorrentip.com

Please remember, always, to launch any application that you want to be tunneled AFTER you have connected to the VPN.

Please consider to secure your connection against leaks in case of unexpected VPN disconnections as suggested in the welcome e-mail we send to premium subscribers. Just in case you used a non-existing e-mail address, you can find the instructions for several systems (Linux and any UNIX compliant system, Windows, *BSD and any *BSD-based OS like Mac OS X) on the permanent links of the announcement section of the forum (click on the link matching your OS).

Kind regards

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in Luxembourg is available: Herculis.

The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Member Area"->"Access without our client").

The server accepts connections on ports 53, 80 and 443 UDP and TCP.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.

Do not hesitate to contact us for any information or issue.

Kind regards and datalove

AirVPN admins

Thank you for the reply.

I do hope however that you do build in the client such a feature with a few configurable options, ie: pick server in advance, auto pick lowest lattency, auto pick lowest load, auto pick "advised" by your server

Hello!

We're glad to inform you that all of the above features are already planned for the next client releases.

Kind regards

Hi.

I have a subscription with Giganews and I would like to know how i can configure viscosity with it. Can you please tell me how I can go about doing that.

Thank you.

Hello!

Viscosity is an OpenVPN GUI/wrapper. With our configuration generator (menu "Member Area"->"Access without our client") you can generate all the files Viscosity needs to connect to AirVPN servers.

Once you are connected to an Air server, just access the newsgroups as you would normally do. No client or "Usenet browser" specific configuration is necessary. Please make sure to run the client AFTER you have connected to the VPN.

Kind regards

Hello!

Additional servers locations will be added according to our expansion, customer base growth and our commitment to guaranteed allocated bandwidth per user. The servers datacenters must comply to our requirements for privacy, bandwidth, traffic, peering, net neutrality and usage policy. All these factors together restrict significantly the range of viable choices (the privacy requirements alone cuts out entire countries) however this is the only way to keep the service up to our quality and security standards.

Kind regards

10) Do the same for any entry-IP address of the VPN servers you wish to connect to. For example for Castor:

Allow TCP or UDP In/Out From IP 95.211.169.3 To MAC Any Where Source Port Is Any And Destination Port Is Any

Allow TCP or UDP In/Out From MAC Any To IP 95.211.169.3 Where Source Port Is Any And Destination Port Is Any

On Step 10, Is there a way to skip this and add all? Furthermore, where do I find the IPs for all these servers should I have to do it manually?

Hello!

You can't skip that step. You need to allow communications to/from all the servers you want to connect to. Anyway, this is an operation that you need to perform once and for all.

You can find the entry-IP address with our configuration generator (menu "Member Area"->"Access without our client"). Generate the files for all the servers you wish to connect to and look at the line "remote" of the .ovpn files to know the entry-IP addresses of the servers.

Alternatively, ask for the entry-IP list with the "Contact us" form.

Kind regards

I need the list of server IPs, anyone have those?

Hello!

You can find the entry-IP addresses of any server with our configuration generator (menu "Member Area"->"Access without our client"). Please generate the files for all the servers for which you need the entry-IP address and look at the line "remote" of the .ovpn files.

Alternatively, you can ask for them through the "Contact Us" form.

Kind regards