Staff

Hello! Please see step 3: set it to "Custom Policy". Correct. Unfortunately not: you should not block all incoming connections if you wish to use our remote port forwarding system. You need remote port forwarding only if you want some service (a web server, a p2p client etc.) to be reachable from the Internet behind our VPN servers. Please see also here: https://airvpn.org/faq This will define the firewall behavior on an application basis. Nothing wrong, but it will not secure your connection against leaks in case of unexpected VPN disconnection: you will have to set the global rules anyway. Please do not hesitate to contact us for any additional support. Kind regards

Hello! Maybe a corrupt archive? Can you please try to re-generate and re-download it? Kind regards

Hello! As far as we know OpenVPN can't run on a PS3. Therefore you need a gateway, like a DD-WRT router or a computer which connects to AirVPN and shares the connection with the PS3. For additional instructions about the latter case, can you please tell us the OS of the computer which might share the connection? Kind regards

Hello! Please see our previous message to determine the non-Leaseweb servers. You can obtain the IP addresses you need by contacting us through the "Contact us" form (or by using the configuration generator, menu "Member Area"->"Access without our client"), because we are reluctant to publish them in the forum. Kind regards

Hello! You can use any of your favorite torrent clients. It's not necessary. It may be a courtesy to us as it might help us receive less bogus copyright infringement notices. However PeerBlock efficiency is so low that it does not really make a significant difference. Also, please be aware that some PeerBlock blocklists are so badly written that they will block some of our servers as well. First of all, you must never use two firewalls simultaneously. They will interfere with each other with unpredictable outcomes. DNS leaks are not a concern when you do p2p. The real concern is preventing your real IP leak in case of unexpected VPN disconnection. We would recommend you to get rid of any firewall and install Comodo firewall (the free version is just fine), OR to translate the Comodo rules for your favorite firewall (please be aware that it's not possible to do that fully with the Windows firewall). With the recommended Comodo rules you will prevent not only DNS leak, but any leak. Variable latency is normal on the Internet. The best approximation you can obtain with short-time speed tests is with speedtest.air, because the test is performed internally, inside the Air server you're connected to, without relying on another server. Unfortunately we are still unable to find an Asian provider which complies with our requirements about security, privacy, peering, bandwidth and traffic. All these factors together, in addition to privacy legal frameworks, represent a hard selection which cuts out a lot of providers (privacy-hostile legal frameworks force us to discard whole countries in Asia). We are not willing to sacrifice privacy and security for better marketing. Our research anyway is ongoing. Kind regards

Hello! Please upgrade your client. You can download the latest version here: https://airvpn.org/windows (click on the "Download" button). Direct link: https://airvpn.org/repository/air_windows.zip Kind regards

Hello! Since you can reach https://airvpn.org on the same network with a different device there must be a problem on the device which can't reach it. Please make sure that the device with the problem resolves airvpn.org to 85.17.207.151. If you have modified your hosts file, please make sure that the line referring to airvpn.org is: 85.17.207.151 airvpn.org Kind regards

Hello! Please describe your problem with as many information as possible and also please send us the connection logs of your client. Kind regards

Hello! Everything appears fine... can you please perform a test? On both your Realtek PCIe GBE Family Controllers, force the following DNS: 10.4.0.1 as primary 8.8.8.8 (or anything you like) as secondary and please test a VPN connection on port 443 UDP (ping, normal browsing etc.). We're looking forward to hearing from you. Kind regards

It's a little unclear: you don't tunnel ports, you tunnel packets. Can you please elaborate? Kind regards What i mean is, what if I wanted only DNS and web traffic (port 80 and 443) over the tunnel, and everything else (like email, IM, etc) to just use my regular connection. I'm considering biting the bullet and flashing a "known working with AirVPN" dd-wrt build as well, as I would like this to be transparent on my network as a whole, but if I could get that working on just this one PC in the mean time, that would be good. I assume it can't be done with openvpn alone and I'd need some sort of firewall configuration to do the routing? Hello! Splitting the tunnel on a port basis will not necessarily allow you to split it on programs basis. Since our servers will push a routing table and redirect gateway in order to tunnel all the client device traffic, you can reject the push (using the nopull directive) and build your own NAT, gateways and routing table. Unfortunately some tools which come handy are missing in Windows: on a vanilla Windows non-server edition, you can't do masquerading, forwarding and you can't even handle multiple routing tables. So, perhaps a more viable solution is a little hack: bind the applications that you do NOT want to be tunneled to your physical network interface with a program loader and DLL injector like ForceBindIP: http://www.r1ch.net/stuff/forcebindip Although ForceBindIP is not advertised for Windows 7, at least two customers of us have reported it works successfully in Win7 (although the usage was the other way round, i.e. forcing the binding to awfully programmed videogame clients like PES2012 which refuse to bind to the TAP-Win32 interface and therefore would not connect to the game servers when the VPN connection is established). Kind regards

Hello! Your system can reach the VPN DNS, but still can't resolve airvpn.org. Do you have some firewall running? Can you please send us the output of the commands "ipconfig /all" and "route print" (feel free to delete sensitive information) while you are connected? Kind regards

Hello! You can safely define that network zone with the following IP range: [10.4.0.0 - 10.9.255.255]. Please note that this is an IP range, not an IP/NetMask. You can discern in Comodo an IP range from an IP/NetMask: the first has the "-" symbol, the latter the "/" symbol, according to CIDR notation. Please see here if you're curious: https://airvpn.org/specs About the hosts file: launch a text editor (for example NotePad) with administrator privileges. Open the hosts file and add the following line: 85.17.207.151 airvpn.org Save the file and quit the text editor. The name of the file is simply "hosts" and the path to it is (on a default Win7 installation): C:\Windows\system32\drivers\etc Please do not hesitate to contact us for any information or further support. Kind regards

Hello! AES-256-CBC encryption/decryption (the data channel cipher mode we picked for OpenVPN) of tens of Mbit/s throughput requires a CPU power which, while widely available on desktop and laptop computer since years, is still problematic for most routers CPUs. You can find more information on DD-WRT forums, most probably users and developers there will be able to give you some recommendations on high-end DD-WRT compatible routers with enough processing power to break the 8-10 Mbit/s limit. You might like to specify that the encryption method for the data channel in the OpenVPN servers you use is AES-256-CBC. The packet authentication (HMAC SHA-160bit) and the RSA auth keys (2048 bit) are not relevant for a CPU. Kind regards

Hello! Please change that line in the hosts file into: 85.17.207.151 airvpn.org We have changed IP address of the main frontend to provide a higher quality. An additional change is imminent, please follow the forum, it will be announced. Once completed, the migration will provide a much more robust infrastructure with an effective failover. Kind regards

Hello! Can you please make sure that all your network cards are enabled to accept a DNS DHCP push (i.e. you have not forced DNS fixed IP addresses)? Also, while you're connected to port 443 UDP, please open a command prompt or the PowerShell and send us the output of the commands: ping airvpn.org ping 85.17.207.151 ping 10.4.0.1 Kind regards

Hello! Good to know, thank you. However the version you're running is not reported by us as fully working and the logs you sent us seem to confirm that. It's a little unclear: you don't tunnel ports, you tunnel packets. Can you please elaborate? Kind regards

Hello! It appears correct, your router can't probably handle more than 10 Mbit/s throughput. As you can see from your Windows connection (32 Mbit/s) the "bottleneck" is not on our side or your ISP side, but on the router. You should check whether you have a stable VPN connection. If you have it, you can safely ignore the final part of those logs. You can use the DNS servers you prefer, however for optimal privacy protection you should either tunnel your DNS queries or use the Air DNS server. Kind regards

Hello! Why do you say that the problem is due to DNS servers? Can you please elaborate? Also, are the below quoted disconnections caused by your intervention or do they happen on their own? We're looking forward to hearing from you. Kind regards

@PsychoWolf Hello! It definitely looks like a firmware OpenVPN known bug. Probably a re-flash with a different firmware is necessary. Please see here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=4684&Itemid=142#4687 and here: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=4684&Itemid=142#4690 for Linksys E2000 and E3000 DD-WRT firmware versions that are reported as fully functional. Kind regards

Hello! We're very glad to inform you that a new 1 Gbit/s server located in Switzerland is available: Virginis. The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Member Area"->"Access without our client"). The server accepts connections on ports 53, 80 and 443 UDP and TCP. As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses. Do not hesitate to contact us for any information or issue. Kind regards and datalove AirVPN admins

Hello! Can you please send us the connection logs? Kind regards

Hello! You might like to start from here: http://en.wikipedia.org/wiki/Vpn AirVPN is based on OpenVPN: http://en.wikipedia.org/wiki/Openvpn http://openvpn.net/index.php/open-source/335-why-openvpn.html Kind regards

Hello! Thank you for the great job. Don't worry, messages are not lost, they just need to be approved by a moderator before they show up. Kind regards

Hello! Remember that you can have a full refund within 3 days since you subscribed. That said, have you tried different ports? Several ISPs cap bandwidth on some UDP ports. Also, can you please send us your client logs? You can see normal bandwidth which most clients with high bw lines are able to use on our servers in the "Top 10 Users Speed" in our monitor https://airvpn.org/status Kind regards

Any Swiss replacement servers planned? Hello! Yes, we should be able to provide more connectivity in Switzerland during the next week. Kind regards