-
Content Count
11328 -
Joined
... -
Last visited
... -
Days Won
1947
Everything posted by Staff
-
New user-need help, DNS leaks, secure Vipre,
Staff replied to Saken's topic in General & Suggestions
Hello! You can use any of your favorite torrent clients. It's not necessary. It may be a courtesy to us as it might help us receive less bogus copyright infringement notices. However PeerBlock efficiency is so low that it does not really make a significant difference. Also, please be aware that some PeerBlock blocklists are so badly written that they will block some of our servers as well. First of all, you must never use two firewalls simultaneously. They will interfere with each other with unpredictable outcomes. DNS leaks are not a concern when you do p2p. The real concern is preventing your real IP leak in case of unexpected VPN disconnection. We would recommend you to get rid of any firewall and install Comodo firewall (the free version is just fine), OR to translate the Comodo rules for your favorite firewall (please be aware that it's not possible to do that fully with the Windows firewall). With the recommended Comodo rules you will prevent not only DNS leak, but any leak. Variable latency is normal on the Internet. The best approximation you can obtain with short-time speed tests is with speedtest.air, because the test is performed internally, inside the Air server you're connected to, without relying on another server. Unfortunately we are still unable to find an Asian provider which complies with our requirements about security, privacy, peering, bandwidth and traffic. All these factors together, in addition to privacy legal frameworks, represent a hard selection which cuts out a lot of providers (privacy-hostile legal frameworks force us to discard whole countries in Asia). We are not willing to sacrifice privacy and security for better marketing. Our research anyway is ongoing. Kind regards -
This client is obsolete and no more supported
Staff replied to libai's topic in General & Suggestions
Hello! Please upgrade your client. You can download the latest version here: https://airvpn.org/windows (click on the "Download" button). Direct link: https://airvpn.org/repository/air_windows.zip Kind regards -
Hello! Since you can reach https://airvpn.org on the same network with a different device there must be a problem on the device which can't reach it. Please make sure that the device with the problem resolves airvpn.org to 85.17.207.151. If you have modified your hosts file, please make sure that the line referring to airvpn.org is: 85.17.207.151 airvpn.org Kind regards
-
[SOLVED] Cannot open AirVPN.org webpage from deskt
Staff replied to 2maggie's topic in General & Suggestions
Hello! Please describe your problem with as many information as possible and also please send us the connection logs of your client. Kind regards -
Hello! Everything appears fine... can you please perform a test? On both your Realtek PCIe GBE Family Controllers, force the following DNS: 10.4.0.1 as primary 8.8.8.8 (or anything you like) as secondary and please test a VPN connection on port 443 UDP (ping, normal browsing etc.). We're looking forward to hearing from you. Kind regards
-
Tunnel only traffic on a couple of ports
Staff replied to PsychoWolf's topic in General & Suggestions
It's a little unclear: you don't tunnel ports, you tunnel packets. Can you please elaborate? Kind regards What i mean is, what if I wanted only DNS and web traffic (port 80 and 443) over the tunnel, and everything else (like email, IM, etc) to just use my regular connection. I'm considering biting the bullet and flashing a "known working with AirVPN" dd-wrt build as well, as I would like this to be transparent on my network as a whole, but if I could get that working on just this one PC in the mean time, that would be good. I assume it can't be done with openvpn alone and I'd need some sort of firewall configuration to do the routing? Hello! Splitting the tunnel on a port basis will not necessarily allow you to split it on programs basis. Since our servers will push a routing table and redirect gateway in order to tunnel all the client device traffic, you can reject the push (using the nopull directive) and build your own NAT, gateways and routing table. Unfortunately some tools which come handy are missing in Windows: on a vanilla Windows non-server edition, you can't do masquerading, forwarding and you can't even handle multiple routing tables. So, perhaps a more viable solution is a little hack: bind the applications that you do NOT want to be tunneled to your physical network interface with a program loader and DLL injector like ForceBindIP: http://www.r1ch.net/stuff/forcebindip Although ForceBindIP is not advertised for Windows 7, at least two customers of us have reported it works successfully in Win7 (although the usage was the other way round, i.e. forcing the binding to awfully programmed videogame clients like PES2012 which refuse to bind to the TAP-Win32 interface and therefore would not connect to the game servers when the VPN connection is established). Kind regards -
Hello! Your system can reach the VPN DNS, but still can't resolve airvpn.org. Do you have some firewall running? Can you please send us the output of the commands "ipconfig /all" and "route print" (feel free to delete sensitive information) while you are connected? Kind regards
-
Hello! You can safely define that network zone with the following IP range: [10.4.0.0 - 10.9.255.255]. Please note that this is an IP range, not an IP/NetMask. You can discern in Comodo an IP range from an IP/NetMask: the first has the "-" symbol, the latter the "/" symbol, according to CIDR notation. Please see here if you're curious: https://airvpn.org/specs About the hosts file: launch a text editor (for example NotePad) with administrator privileges. Open the hosts file and add the following line: 85.17.207.151 airvpn.org Save the file and quit the text editor. The name of the file is simply "hosts" and the path to it is (on a default Win7 installation): C:\Windows\system32\drivers\etc Please do not hesitate to contact us for any information or further support. Kind regards
-
Hello! AES-256-CBC encryption/decryption (the data channel cipher mode we picked for OpenVPN) of tens of Mbit/s throughput requires a CPU power which, while widely available on desktop and laptop computer since years, is still problematic for most routers CPUs. You can find more information on DD-WRT forums, most probably users and developers there will be able to give you some recommendations on high-end DD-WRT compatible routers with enough processing power to break the 8-10 Mbit/s limit. You might like to specify that the encryption method for the data channel in the OpenVPN servers you use is AES-256-CBC. The packet authentication (HMAC SHA-160bit) and the RSA auth keys (2048 bit) are not relevant for a CPU. Kind regards
-
[SOLVED] Cannot open AirVPN.org webpage from deskt
Staff replied to 2maggie's topic in General & Suggestions
Hello! Please change that line in the hosts file into: 85.17.207.151 airvpn.org We have changed IP address of the main frontend to provide a higher quality. An additional change is imminent, please follow the forum, it will be announced. Once completed, the migration will provide a much more robust infrastructure with an effective failover. Kind regards -
Hello! Can you please make sure that all your network cards are enabled to accept a DNS DHCP push (i.e. you have not forced DNS fixed IP addresses)? Also, while you're connected to port 443 UDP, please open a command prompt or the PowerShell and send us the output of the commands: ping airvpn.org ping 85.17.207.151 ping 10.4.0.1 Kind regards
-
Tunnel only traffic on a couple of ports
Staff replied to PsychoWolf's topic in General & Suggestions
Hello! Good to know, thank you. However the version you're running is not reported by us as fully working and the logs you sent us seem to confirm that. It's a little unclear: you don't tunnel ports, you tunnel packets. Can you please elaborate? Kind regards -
Hello! It appears correct, your router can't probably handle more than 10 Mbit/s throughput. As you can see from your Windows connection (32 Mbit/s) the "bottleneck" is not on our side or your ISP side, but on the router. You should check whether you have a stable VPN connection. If you have it, you can safely ignore the final part of those logs. You can use the DNS servers you prefer, however for optimal privacy protection you should either tunnel your DNS queries or use the Air DNS server. Kind regards
-
Hello! Why do you say that the problem is due to DNS servers? Can you please elaborate? Also, are the below quoted disconnections caused by your intervention or do they happen on their own? We're looking forward to hearing from you. Kind regards
-
Tunnel only traffic on a couple of ports
Staff replied to PsychoWolf's topic in General & Suggestions
@PsychoWolf Hello! It definitely looks like a firmware OpenVPN known bug. Probably a re-flash with a different firmware is necessary. Please see here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=4684&Itemid=142#4687 and here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=4684&Itemid=142#4690 for Linksys E2000 and E3000 DD-WRT firmware versions that are reported as fully functional. Kind regards -
Hello! We're very glad to inform you that a new 1 Gbit/s server located in Switzerland is available: Virginis. The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Member Area"->"Access without our client"). The server accepts connections on ports 53, 80 and 443 UDP and TCP. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN admins
-
Tunnel only traffic on a couple of ports
Staff replied to PsychoWolf's topic in General & Suggestions
Hello! Can you please send us the connection logs? Kind regards -
Hello! You might like to start from here: http://en.wikipedia.org/wiki/Vpn AirVPN is based on OpenVPN: http://en.wikipedia.org/wiki/Openvpn http://openvpn.net/index.php/open-source/335-why-openvpn.html Kind regards
-
Hello! Thank you for the great job. Don't worry, messages are not lost, they just need to be approved by a moderator before they show up. Kind regards
-
Hello! Remember that you can have a full refund within 3 days since you subscribed. That said, have you tried different ports? Several ISPs cap bandwidth on some UDP ports. Also, can you please send us your client logs? You can see normal bandwidth which most clients with high bw lines are able to use on our servers in the "Top 10 Users Speed" in our monitor https://airvpn.org/status Kind regards
-
Any Swiss replacement servers planned? Hello! Yes, we should be able to provide more connectivity in Switzerland during the next week. Kind regards
-
Hello! Setting up Comodo rules requires a basic knowledge of Comodo firewall. This simple guide will let you use the firewall at its best: http://personalfirewall.comodo.com/Comodo_Internet_Security_User_Guide.pdf You can concentrate on the firewall section, skipping all the other parts. Kind regards
-
Hello! Due to repeated copyright alleged infringement notices (three in one month ) we have no choice but to dismiss Aquarii (the ISP will shut it down anyway). Please disconnect from Aquarii as soon as possible. Kind regards
-
Hello! TPB is now accessible from Vega. Kind regards
-
Hello! Using PeerBlock is surely a courtesy toward us, because it may slightly help us receive less bogus copyright infringement notices. However, the PeerBlock protection against them is so small, that you can safely renounce to it. If you wish to use PeerBlock anyway, you will have to remove from the blocklist you're using the LeaseWeb entry and exit-IP addresses of our servers with LeaseWeb: - all the NL servers - Tauri in Germany - Librae and Sirius in the USA or you'll have to use a non-LeaseWeb server. The solution to allow our servers entry and exit-IP addresses is the safest one. Kind regards