Staff

Hello! The most common cause of this problem is a firewall blocking OpenVPN. Can you please check? Also, please try a connection to a TCP port, just in case some UDP ports are blocked/capped by your ISP, on different servers. We're looking forward to hearing from you. Kind regards

Hello! The TAP-Win32 interface does not come up. Please make sure that it is installed and it has not been deactivated. Furthermore, make sure that the Air client is launched with administrator privileges and that the Windows DHCP (client) service is active. Please perform some tests with Windows firewall disabled (if you use the Windows firewall). See also here: http://forums.openvpn.net/topic8441.html and more importantly here: http://forums.openvpn.net/topic8811.html If you can't manage to bring up the TAP-Win32 adapter: - completely uninstall OpenVPN; - re-install OpenVPN 2.2.2 and make sure that you authorize it to install any driver it will ask you for Kind regards

Hello! Yes, thanks! Ok, have a look here to add rules in order to secure your VPN connection with iptables: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=1713&limit=6&limitstart=30&Itemid=142#2010 Kind regards

Hello! Very good to know, thank you very much indeed. Kind regards

Hello! Can you please send us the complete iptables tables/chains? The rules you mention do not appear to prevent leaks from your br0 in case of VPN disconnection. Kind regards

Hello! Yes, you're fine, just do not forward ports on your router. If you forward both remotely and on your router the same ports, an adversary with the ability to monitor/wiretap your line can send packets to the same port both on the exit-IP of the VPN server you're connected to and to your real IP address. If the service you're running responds also the the packets arriving to your real IP address outside the tunnel, the adversary have established a correlation between you and the VPN usage on that port. Kind regards

Hello! Can you please send us the connection logs? Right-click on the Air dock icon, select "Logs" and click on "Copy to clipboard", then paste here. Kind regards

Hello! Thank you for all the tests, they are very interesting. If you have time, check with a TCP connection if you still have packet loss, both on Castor and Draconis. 0.1% and 1% packet loss on UDP OpenVPN tunneling may be acceptable: OpenVPN may resend packets even in UDP, so you will suffer really a minimal performance loss (probably you won't even notice the difference with respect to a 0% packet loss). Unfortunately, at the moment we have no plausible explanation about why you detect packet loss on 443 UDP but not on 80 UDP with Castor. And yes, we detect rarely packet loss when there's high latency from OpenVPN clients in Italy to any VPN server on UDP ports, between 0.05% and 0.1%. It is not our servers fault (exception: a couple of months ago we had a dramatic packet loss on Delphini, but that was just because a network card was broken), however we'll perform further tests with Draconis. Thank you for the correction about Uppsala. Kind regards

Hello! a. Yes, it is possible. We can add additional ports if they are useful to bypass censorship, for example. b. OpenVPN has the ability to establish connections over a proxy. If you wish to do so, select the appropriate proxy type. If you don't need to use a proxy, leave the field to "None". Typical examples for connections over AirVPN over a proxy are AirVPN over TOR (https://airvpn.org/tor) or when the client is behind a corporate proxy. c. FAQs are available here: https://airvpn.org/faq AirVPN is based on OpenVPN: http://openvpn.net/index.php/open-source.html Feel free to use the forum, the helpdesk and the "Contact us" form for any further information or inquiry. Kind regards

Hello! The website was unavailable at 10 PM (CET+1) for about 40 minutes, the problem has been fixed. Please note that in case of website unavailability, you can anyway connect to any VPN server via OpenVPN. Kind regards

Hello! The "Replay-window backtrack occurred" showed in the logs is a hint that you have (not necessarily always) high latency with our servers. While this may or may not disrupt the connection, using a TCP port will surely mitigate the problem, especially during the handshake, and actually you could fix the issue with a TCP connection. TCP provides full error-correction, while UDP does not. Please see the FAQ for more information. Kind regards

Hello! Please try to connect to TCP ports and let us know whether the problem is fixed. Kind regards

Hello! As you know, there are no time limits to your connection (apart subscription expiration). That said, the most common cause of disconnection is a short "line drop" with your ISP. In that case, there's unfortunately nothing we can do (and nothing you can do). When you're not connected to the VPN, you usually don't notice these "line drops", however they are enough to cause a disconnection with any VPN server (moreover, if there's an IP address change, the disconnection is totally unavoidable). You can secure your VPN connection in order to avoid leaks outside the tunnel: https://airvpn.org/index.php?option=com_kunena&func=view&catid=3&id=1713&Itemid=142 Kind regards

Hello! You can use your account on as many devices as you wish. Only one device can connect at the same time. If you need two simultaneous connections on different networks you will need two accounts. Kind regards

Hello! Please try all the servers to check whether connection stability improves. If you lose connection with your ISP and it re-assigns you a new IP address, unfortunately a reconnection to a VPN server is unavoidable (your previous IP address is no more, so the VPN server needs to know your new one). Kind regards

Hello! Vega is currently not responding on port 443 UDP. We are looking into the issue. In the meantime, please connect to any other port (443 TCP, 80 TCP, 80 UDP, 53 TCP, 53 UDP). EDIT: the problem has been fixed Kind regards

Hello! We don't detect any issue with Omicron. p2p does work on it, as usual. Can you please send us the logs of the attempted connections to the servers with which you receive a timeout? Kind regards

Hello! We don't detect any issue with the USA servers. Can you please send us the connection logs, especially the attempted connection logs with Vega? Kind regards

Hello! We're glad to know that you solved the problem. If/when you need to view logs, you can edit the configuration file with any text editor and add the directive "log-append /to/air.log>" to easily generate and find the OpenVPN logs. Kind regards

Hello! Perhaps the torrent client was already running before the connection to Aurigae? Kind regards

Hello! Please make sure that key, certificates and configuration files (that is, the files that you find inside the air.zip generated by our configuration generator) are in the correct path and that they have the correct access permissions. Also, if you could send us the OpenVPN logs they could greatly help the troubleshooting. Kind regards

@TrumpeT Thank you again for your time, it is very much appreciated. Your message will be evaluated in the nearest future. Kind regards

Hello! Please try a connection to a TCP port (for example 80 TCP). We have noticed that more and more ISPs deprioritize or even cap some UDP ports (we have detected this behaviour with some ISPs in Italy). We have also noticed that some ISPs cap ALL the ports except 80 TCP, 443 TCP and few others. Please do not hesitate to keep us informed. Kind regards

Hello! Thank you for your time. Apparently the system you suggest needs a dramatic security lowering on our systems. Please consider the following conditions. The VPN servers must not know the names of the connected and disconnected accounts and they must never have any account data on them. Furthermore, they can't and must not remember the IP addresses of disconnected clients (no logs). All the communications from VPN servers toward clients must be performed only and uniquely by OpenVPN, no ping no anything else outside the tunnel (any commodity or additional communication must come only from the frontend). Finally, there must never be a direct communication between a backend server and a client, all the backend servers must remain invisible and unknown to the clients. A compromise on security is highly questionable on a service which focuses on it like ours. Kind regards

Hello! Yes, there will be additional non-UK and non-USA servers. The Netherlands are a very good option given their remarkably good infrastructure. However, please note that NONE of the censorships around various western countries (including the Netherlands and UK wars againt The Pirate Bay) affect our servers. Kind regards