Staff

Hello!

Multi-hopping is a client side feature. And yes, in 2012 a special "OpenVPN over Tor" mode was implemented in the Eddie AirVPN software for Desktop systems. The main "alien entity" used to multi-hop in a way that really enhances the anonymity layer strength is the Tor network as usual, as it provides a very balanced solution between usability, reliability and effectiveness.

In the near future we could implement a double-hop support inside the same AirVPN network on the AirVPN Suite for Linux. It's not the most effective method to enhance the anonymity layer (because both hops belong to AirVPN) but it could be appreciated as a small additional comfort according to the feedback we have.

DAITA is currently overkill because in real life AIs fail miserably. The high success rates comes out only when you have a limited sample of very few services, such as 10 pre-agreed web sites, and the target browses only those 10 with no other protocol complications, quite an unrealistic assumption. However, AI abilities can become relevant in the future to harm privacy and understand, with no needs to break encryption, which web sites a user visits, thus we don't rule out that we will implement specific techniques (especially on WireGuard) in due time.

Kind regards
 

Hello!

We're very glad to inform you that Eddie Android edition 4.1.0 beta 2 is now available. Please refer to the original message for important updates and details.

Kind regards
 

I installed that version (4.1.0 beta 1), and I am still having the same error, i.e., I open it and it immediately closes.

Hello! 
We're very glad to announce the Eddie Android edition 4.1.0 preview is available
UPDATE 2026-07-18 Eddie Android edition 4.1.0 beta 2 is available
Eddie Android edition 4.1.0 development focuses exclusively on improving stability by introducing a new custom AirVPN library that combines wg-go and amneziawg-go into a single runtime. This architectural change addresses a fundamental constraint of the Go runtime. Go was designed with the assumption that only one runtime instance exists per process and does not support multiple independent runtimes within the same process. Consequently, the runtime assumes exclusive ownership of global resources such as the heap, scheduler, stack management, and other core runtime components.
 
The current production version had been linked against two separate Go-based libraries since support for Amnezia WireGuard was introduced. Despite the precautions implemented, on a small subset of devices, this configuration still resulted in crashes during approximately 1% to 5% of application launches. Analysis showed that all such crashes originated from Go runtime components, most notably the garbage collector. By consolidating both libraries into a single Go runtime, Eddie Android Edition 4.1.0 is expected to eliminate these crashes across all supported devices.

Furthermore, Eddie Android edition adheres more strictly to AmneziaWG protocol version 2 real implementations. Specifically:
The <c> tag for I parameters has been removed. Although documented for about a year, it was never implemented in the AmneziaWG protocol and any implementation intent was dropped during February 2026. Because, regrettably, it remained in the Amnezia documentation, Eddie 4.0.x still generated this parameter in certain profiles, resulting in the well-known interoperability issues with other clients. Eddie 4.1.0 eliminates this inconsistency. See: https://github.com/amnezia-vpn/amneziawg-go/issues/120 Added support for the <rc> and <rd> tags for I parameters. J parameters must now be ≥ 1. Previous Eddie / Amnezia releases accepted values ≥ 0, making it possible to explicitly configure zero junk packets, thereby allowing users to explicitly configure a logically degenerate state in which the junk-packet mechanism remained enabled while simultaneously instructing it to emit precisely zero junk packets. This is no longer supported; to disable junk packet generation, simply omit the J parameters. WireGuard compatibility now requires the canonical header mapping (Hₙ = n), as packet header identifiers are interpreted in a strict semantic order. Earlier AmneziaWG implementations, including that used by Eddie 4.0.x, internally canonicalized header mappings, allowing any non-repeating permutation of {1, 2, 3, 4} to preserve WireGuard compatibility. Eddie now enforces the canonical mapping whenever interoperability with standard WireGuard peers is required, including connections to AirVPN servers using the default Amnezia configuration.   Eddie Android Edition 4.1.0 also includes updated libraries and dependencies. Please refer to the changelog below for additional details.
  Download link, checksum and changelog
https://eddie.website/repository/Android/4.1.0-Beta1/EddieAndroid-4.1.0-beta-2.apk

This is a build debug package and side load is mandatory.

If you decide to test, please report at your convenience any bug and problem in this thread. If possible generate a report from the app in a matter of seconds: by tapping the paper plane icon on the Log view bar rightmost side you will generate a full system report which will include both log and logcat and have it sent to our servers. Then you just need to send us the link the app shows you (open a ticket if you prefer to do it in private). $ sha256sum EddieAndroid-4.1.0-beta-2.apk 7e7d9f7f664e4ea6acf047adbcc69ce4613cb132fece2540d3dc6edb3d08af1d EddieAndroid-4.1.0-beta-2.apk Changelog 4.1.0 beta 2 (VC 39) - Release date: 17 July 2026 by ProMIND

Native Library [ProMIND] libeddiewg: moved to amneziawg-go v0.2.18 SettingsActivity.java [ProMIND] ameziaSettingsDialog(): Jc, Jmin and Jmax minimum value is now 1 (awg protocol 2.0) WireGuardClient.java [ProMIND] createCpsQuicInitialSignature(): removed amnezia <c> meta tag, added random <r>, <rc> and <rd> (awg protocol 2.0) [ProMIND] createCpsQuic0RTTSignature(): removed amnezia <c> meta tag, added random <r>, <rc> and <rd> (awg protocol 2.0) [ProMIND] createCpsDnsQuerySignature(): removed amnezia <c> meta tag, added random <r>, <rc> and <rd> (awg protocol 2.0) [ProMIND] createCpsJunkSignature(): removed amnezia <c> meta tag, added random <r>, <rc> and <rd> (awg protocol 2.0) [ProMIND] generateRamdonAmneziaSettingsForWireguard(): Values for H1 H4 are now 1-4 respectively (awg protocol 2.0) [ProMIND] added createRandomAmneziaRTags() method
Changelog 4.1.0 beta 1 (VC 39) - Release date: 14 July 2026 by ProMIND
Native library [ProMIND] updated to OpenVPN-AirVPN 3.12 (20260714) [ProMIND] updated to OpenSSL version 3.6.3 [ProMIND] Updated to version 4.1.0, API 11 [ProMIND] Removed library libwg-go dependecy [ProMIND] Removed library libamneziawg-go dependency [ProMIND] Introduced library libeddiewg. Custom AirVPN Go library combining wg-go and amneziawg-go [ProMIND] api.h, api.cpp: added functions eddiewgLibraryName, eddiewgLibraryQualifiedName, eddiewgLibraryVersion and  eddiewgLibraryReleaseDate, implementing the corresponding calls to libeddiewg, both C and JNI EddieApplication.java [ProMIND] onCreate(): call eddiewgLibraryQualifiedName and log output EddieLibrary.java [ProMIND] Added definitions for native library calls eddiewgLibraryName, eddiewgLibraryQualifiedName, eddiewgLibraryVersion and  eddiewgLibraryReleaseDate
Kind regards & datalove
AirVPN Staff
 

@Tech Jedi Alex

Hello!

Just to point out that age verification should have nothing to do with identity check. Various countries, the European Commission and some Italian bodies are studying methods of age verification that don't force the citizen to show his/her ID card at any step, and surely not to private entities they don't even know. If the UK wants to implement age verification through identity verification we don't know, but it would be a giant mistake that would allow potentially shady entities to steal and build highly reliable ID databases with huge monetary value on the black market. The Discord Hack catastrophe is a useful reminder https://www.404media.co/the-discord-hack-is-every-users-worst-nightmare/

Then of course you can debate ad nauseam about whether it is right or wrong that a person younger than 21, 18 or 16 should be forbidden to connect to a virtual private network, Tor, proxy, etc.

For the readers, our position is close to EFF position, see here: https://www.eff.org/issues/age-verification
 
We were with EDRi and EFF as usual, how can you not know?! Check our mission and endorsement page. The same must be said of some other VPNs to be honest.

Kind regards
 

Version 2.26.2 (Thu, 09 Jul 2026 11:19:55 +0000)
[fix] [linux] Fix elevated startup on distros without systemctl (e.g. Devuan/sysvinit) [fix] [all] Emit disable-dco in generated OpenVPN config when startup options are incompatible with data channel offload [fix] [windows] Harden elevated named pipe against pipe-name squatting (FIRST_PIPE_INSTANCE, single instance) [change] [all] Misc fixes and general cleanup

For now, we ask you to ignore that message.
It is caused by the fact that the current macOS UI is written in Xamarin, which does not support arm64 compilation.
One of our goals is to release a new modern UI, natively compiled for arm64, before this restriction becomes a problem.

Version 2.26.1 (Sat, 04 Jul 2026 17:30:39 +0000)
[fix] [linux] Fix nftables netlock ipv4 mangle OUTPUT chain priority typo [change] [linux] Store network lock rule backups in root-only state directory [fix] [all] Fix TOCTOU race [fix] [linux] Sanitize VPN DNS addresses written to /etc/resolv.conf [change] [all] Misc fixes and general cleanup [fix] [linux] Fixed connection on Arch (no SysV service command) [change] [all] Improved security of how the VPN configuration is handled by the privileged helper [fix] [all] Block OpenVPN directives that write files as root

Hello!

We are glad to announce that Eddie 2.26.0 beta has been released and is now available for public testing.

This release is mostly about maintenance, security fixes, and compatibility work.
It includes several security hardening changes, updates to OpenVPN 2.7.3 and WireGuard for Windows 1.0, improved OpenVPN driver handling on Windows, and a general cleanup of old or unused code paths.

To test it: Go to the download page for your operating system. Click “Switch to EXPERIMENTAL”. Download and install Eddie 2.26.0 beta.
Eddie 2.26.0 beta is available for Windows, Linux, and macOS.

We are also continuing the larger work of modernizing Eddie Desktop, also with a new modern UI.
We know that many requested features are still waiting, including dark mode, split tunneling, Amnezia support, and more.
They are not forgotten. For this release, the focus was on fixes and updates that needed to reach users first.
We expect this beta to move to stable soon.

Thank you for testing, and as always for your support.

Main changelog:
  Version 2.26.0 (Mon, 29 Jun 2026 14:29:16 +0000)
[change] [all] Updated the app to .NET 10 [change] [all] Updated the legacy interface to .NET Framework 4.8.1 [change] [windows] Removed Windows 7 support [fix] [all] Cleaned WireGuard configuration generation by removing unsupported entries [change] [windows] Improved OpenVPN driver setup and adapter management on Windows [change] [windows] Removed outdated Windows driver options [change] [windows] Removed the old Windows Firewall Network Lock mode and migrated existing profiles. [change] [linux/macos/bsd] Removed unused filesystem protection handling from the elevated helper. [change] [all] Restricted elevated helper tool discovery to trusted application folders. [change] [all] Added limits to elevated helper replies to protect client memory use. [change] [all] Removed the Tor control cookie path option [fix] [all] Various security hardening fixes [fix] [windows] Fixed Windows elevated launches with long command lines [change] [windows] Improved Windows elevated argument handling to prevent extra arguments from being injected into helper tools [fix] [windows] Fixed Windows OpenVPN routing with TAP adapters [change] [windows] Updated WireGuard for Windows to version 1.0 [change] [all] Updated OpenVPN to 2.7.3 [fix] [linux] Fixed Linux AppImage cleanup. Credits GitHub #147 and #152. Thanks to ThienBienBlue. [fix] [linux] Fixed Network Lock detection on clean systems where optional nftables or iptables tools are not installed. [change] [all] Removed custom OpenVPN and Hummingbird executable path options. [change] [linux] Removed the Linux dependency on the system ICU library [change] [all] Misc fixes and general cleanup
Kind regards & datalove
AirVPN Staff

@robertoohoho

Hello!

You have set either a Master Password or system key wallet password protection to encrypt Eddie's configuration file. If you can't remember the password, you have no choice but to delete Eddie's configuration file while Eddie is not running. At the next run Eddie will create a new configuration file with default settings and no password-led encryption. To delete Eddie's configuration file on macOS, from a terminal opened by the same account that installed Eddie: rm ~/.config/eddie/*
Kind regards
 

Hello!

We're very glad to inform you that Eddie Android edition 4.0.1 is now available.

This is a patch release to fix a bug affecting AmneziaWG and WireGuard profile generation by Eddie. When generating a profile for WireGuard or AmneziaWG, Eddie 4.0.0 omits the MTU option and the IPv6 address space (even when it's necessary) in AllowedIPs option arguments. We strongly recommend that you upgrade immediately. Eddie Android edition 4.0.1 is available on our web site and the Google Play Store.

Any other feature is described by the 4.0.0 version announcement, available here:
https://airvpn.org/forums/topic/79743-eddie-android-edition-400-available/

Kind regards & datalove
AirVPN Staff

Hello!

Black list enabled: all traffic inside the VPN tunnel except the traffic of the black listed applications which goes outside the tunnel.
White list enabled: all traffic outside the VPN tunnel except the traffic of the white listed applications which goes inside the tunnel.

When you define a whitelist with a single app for per-app traffic splitting purposes, only that app traffic will be tunneled. The system process traffic will not be tunneled, and any other non-white listed app traffic will not be tunneled. So the behavior you observe seems just fine, but please feel free to elaborate if we misunderstood.

Kind regards
 

@moejoe

Hello!

Configuring DNS blocks through the app is currently not possible, we're sorry, but you can have different profiles by using the option to link specific DNS block settings to each key ("device"). Then you can easily switch between devices to switch DNS blocks, although a re-connection is required for each switch.

Kind regards
 

Hello!

We do agree and we are planning to implement on our software per app traffic splitting on Windows too. Currently you can enjoy per app traffic splitting on Linux (AirVPN Suite) and Android (Eddie Android edition). If the machine you use for Steam is based on Linux you can already have per app traffic splitting with our software.

If you run Windows, in the meantime you can consider WireSock, which offers traffic splitting and reverse traffic splitting (on an application basis) and is fully compatible with our WireGuard servers. The Configuration Generator will generate the profiles you wish.

Kind regards
 

Hello!

We are glad to announce that Eddie 2.26.0 beta has been released and is now available for public testing.

This release is mostly about maintenance, security fixes, and compatibility work.
It includes several security hardening changes, updates to OpenVPN 2.7.3 and WireGuard for Windows 1.0, improved OpenVPN driver handling on Windows, and a general cleanup of old or unused code paths.

To test it: Go to the download page for your operating system. Click “Switch to EXPERIMENTAL”. Download and install Eddie 2.26.0 beta.
Eddie 2.26.0 beta is available for Windows, Linux, and macOS.

We are also continuing the larger work of modernizing Eddie Desktop, also with a new modern UI.
We know that many requested features are still waiting, including dark mode, split tunneling, Amnezia support, and more.
They are not forgotten. For this release, the focus was on fixes and updates that needed to reach users first.
We expect this beta to move to stable soon.

Thank you for testing, and as always for your support.

Main changelog:
  Version 2.26.0 (Mon, 29 Jun 2026 14:29:16 +0000)
[change] [all] Updated the app to .NET 10 [change] [all] Updated the legacy interface to .NET Framework 4.8.1 [change] [windows] Removed Windows 7 support [fix] [all] Cleaned WireGuard configuration generation by removing unsupported entries [change] [windows] Improved OpenVPN driver setup and adapter management on Windows [change] [windows] Removed outdated Windows driver options [change] [windows] Removed the old Windows Firewall Network Lock mode and migrated existing profiles. [change] [linux/macos/bsd] Removed unused filesystem protection handling from the elevated helper. [change] [all] Restricted elevated helper tool discovery to trusted application folders. [change] [all] Added limits to elevated helper replies to protect client memory use. [change] [all] Removed the Tor control cookie path option [fix] [all] Various security hardening fixes [fix] [windows] Fixed Windows elevated launches with long command lines [change] [windows] Improved Windows elevated argument handling to prevent extra arguments from being injected into helper tools [fix] [windows] Fixed Windows OpenVPN routing with TAP adapters [change] [windows] Updated WireGuard for Windows to version 1.0 [change] [all] Updated OpenVPN to 2.7.3 [fix] [linux] Fixed Linux AppImage cleanup. Credits GitHub #147 and #152. Thanks to ThienBienBlue. [fix] [linux] Fixed Network Lock detection on clean systems where optional nftables or iptables tools are not installed. [change] [all] Removed custom OpenVPN and Hummingbird executable path options. [change] [linux] Removed the Linux dependency on the system ICU library [change] [all] Misc fixes and general cleanup
Kind regards & datalove
AirVPN Staff

Hello!

We are glad to announce that Eddie 2.26.0 beta has been released and is now available for public testing.

This release is mostly about maintenance, security fixes, and compatibility work.
It includes several security hardening changes, updates to OpenVPN 2.7.3 and WireGuard for Windows 1.0, improved OpenVPN driver handling on Windows, and a general cleanup of old or unused code paths.

To test it: Go to the download page for your operating system. Click “Switch to EXPERIMENTAL”. Download and install Eddie 2.26.0 beta.
Eddie 2.26.0 beta is available for Windows, Linux, and macOS.

We are also continuing the larger work of modernizing Eddie Desktop, also with a new modern UI.
We know that many requested features are still waiting, including dark mode, split tunneling, Amnezia support, and more.
They are not forgotten. For this release, the focus was on fixes and updates that needed to reach users first.
We expect this beta to move to stable soon.

Thank you for testing, and as always for your support.

Main changelog:
  Version 2.26.0 (Mon, 29 Jun 2026 14:29:16 +0000)
[change] [all] Updated the app to .NET 10 [change] [all] Updated the legacy interface to .NET Framework 4.8.1 [change] [windows] Removed Windows 7 support [fix] [all] Cleaned WireGuard configuration generation by removing unsupported entries [change] [windows] Improved OpenVPN driver setup and adapter management on Windows [change] [windows] Removed outdated Windows driver options [change] [windows] Removed the old Windows Firewall Network Lock mode and migrated existing profiles. [change] [linux/macos/bsd] Removed unused filesystem protection handling from the elevated helper. [change] [all] Restricted elevated helper tool discovery to trusted application folders. [change] [all] Added limits to elevated helper replies to protect client memory use. [change] [all] Removed the Tor control cookie path option [fix] [all] Various security hardening fixes [fix] [windows] Fixed Windows elevated launches with long command lines [change] [windows] Improved Windows elevated argument handling to prevent extra arguments from being injected into helper tools [fix] [windows] Fixed Windows OpenVPN routing with TAP adapters [change] [windows] Updated WireGuard for Windows to version 1.0 [change] [all] Updated OpenVPN to 2.7.3 [fix] [linux] Fixed Linux AppImage cleanup. Credits GitHub #147 and #152. Thanks to ThienBienBlue. [fix] [linux] Fixed Network Lock detection on clean systems where optional nftables or iptables tools are not installed. [change] [all] Removed custom OpenVPN and Hummingbird executable path options. [change] [linux] Removed the Linux dependency on the system ICU library [change] [all] Misc fixes and general cleanup
Kind regards & datalove
AirVPN Staff

I'm running into the same issue and exception on Arch Linux. Downgrading Eddie back fixed it for me as well.
I opened a support ticket yesterday, and the staff mentioned they've passed the ticket along to the Eddie developer.

Hello!

We're very glad to inform you that AirVPN Suite version 2.1.0 is now available for x86-64 and ARM based Linux systems. Our deepest gratitude is extended to the members of the outstanding testing community, whose generous support and discerning feedback have proved invaluable in identifying and resolving numerous issues.
 
The 2.1.0 Suite includes:
Bluetit: lightweight, ultra-fast D-Bus controlled system daemon providing full connectivity and integration to AirVPN servers, or generic OpenVPN and WireGuard servers. Bluetit can also enforce Network Lock and/or connect the system to AirVPN during the system bootstrap Goldcrest: Bluetit client, allowing full integration with AirVPN servers, users, keys, profiles as well as generic OpenVPN and WireGuard servers Hummingbird: lightweight and standalone binary for generic OpenVPN and WireGuard server connections Cuckoo: traffic split manager, granting full access and functionality to AirVPN's traffic split infrastructure airsu: a "run and forget" tool to automatically set and enable the user environment for the X.Org or Wayland based ecosystem without any user input   WHAT'S NEW
 
NEW: extensive rewrite and improvement of network availability and default gateway detection NEW: option to tunnel or not IPv4 traffic over an IPv6 tunnel with air4to6 client option and airvpn4to6 run control directive (check the updated user's manual for details) NEW: cuckoo does not require libxml2 anymore updated libraries bug fix: Bluetit doesn't crash anymore with very large routing tables bug fix: IPv6 addresses parsing and management don't fail anymore in specific circumstances bug fix: airsu bash script doesn't fail anymore when the shell of the user starting it is not bash
AirVPN Suite 2.1.0 is free and open source software released under GPLv3. Source code is available on GitLab:
https://gitlab.com/AirVPN/AirVPN-Suite

AirVPN Suite 2.1.0 is available for x86-64, AArch64 (ARM 64 bit) and armv7l (ARM 32 bit) architectures. Legacy versions are also available. 
https://airvpn.org/linux/suite/

AirVPN Suite resources, links and forum:
https://airvpn.org/forums/topic/79336-airvpn-suite-resources/

Kind regards & datalove
AirVPN Staff
 

This version will not connect on Arch Linux and tries multiple times exceeding the account connection limit. There is a notification "Exception: Executable 'service' not found" . I reverted to 2.25.1 for now.

Using either the Arch package from the Eddie website or the eddie-ui-git AUR package is the same.

Hello!

We are glad to announce that Eddie 2.26.0 beta has been released and is now available for public testing.

This release is mostly about maintenance, security fixes, and compatibility work.
It includes several security hardening changes, updates to OpenVPN 2.7.3 and WireGuard for Windows 1.0, improved OpenVPN driver handling on Windows, and a general cleanup of old or unused code paths.

To test it: Go to the download page for your operating system. Click “Switch to EXPERIMENTAL”. Download and install Eddie 2.26.0 beta.
Eddie 2.26.0 beta is available for Windows, Linux, and macOS.

We are also continuing the larger work of modernizing Eddie Desktop, also with a new modern UI.
We know that many requested features are still waiting, including dark mode, split tunneling, Amnezia support, and more.
They are not forgotten. For this release, the focus was on fixes and updates that needed to reach users first.
We expect this beta to move to stable soon.

Thank you for testing, and as always for your support.

Main changelog:
  Version 2.26.0 (Mon, 29 Jun 2026 14:29:16 +0000)
[change] [all] Updated the app to .NET 10 [change] [all] Updated the legacy interface to .NET Framework 4.8.1 [change] [windows] Removed Windows 7 support [fix] [all] Cleaned WireGuard configuration generation by removing unsupported entries [change] [windows] Improved OpenVPN driver setup and adapter management on Windows [change] [windows] Removed outdated Windows driver options [change] [windows] Removed the old Windows Firewall Network Lock mode and migrated existing profiles. [change] [linux/macos/bsd] Removed unused filesystem protection handling from the elevated helper. [change] [all] Restricted elevated helper tool discovery to trusted application folders. [change] [all] Added limits to elevated helper replies to protect client memory use. [change] [all] Removed the Tor control cookie path option [fix] [all] Various security hardening fixes [fix] [windows] Fixed Windows elevated launches with long command lines [change] [windows] Improved Windows elevated argument handling to prevent extra arguments from being injected into helper tools [fix] [windows] Fixed Windows OpenVPN routing with TAP adapters [change] [windows] Updated WireGuard for Windows to version 1.0 [change] [all] Updated OpenVPN to 2.7.3 [fix] [linux] Fixed Linux AppImage cleanup. Credits GitHub #147 and #152. Thanks to ThienBienBlue. [fix] [linux] Fixed Network Lock detection on clean systems where optional nftables or iptables tools are not installed. [change] [all] Removed custom OpenVPN and Hummingbird executable path options. [change] [linux] Removed the Linux dependency on the system ICU library [change] [all] Misc fixes and general cleanup
Kind regards & datalove
AirVPN Staff

Hello!

We are glad to announce that Eddie 2.26.0 beta has been released and is now available for public testing.

This release is mostly about maintenance, security fixes, and compatibility work.
It includes several security hardening changes, updates to OpenVPN 2.7.3 and WireGuard for Windows 1.0, improved OpenVPN driver handling on Windows, and a general cleanup of old or unused code paths.

To test it: Go to the download page for your operating system. Click “Switch to EXPERIMENTAL”. Download and install Eddie 2.26.0 beta.
Eddie 2.26.0 beta is available for Windows, Linux, and macOS.

We are also continuing the larger work of modernizing Eddie Desktop, also with a new modern UI.
We know that many requested features are still waiting, including dark mode, split tunneling, Amnezia support, and more.
They are not forgotten. For this release, the focus was on fixes and updates that needed to reach users first.
We expect this beta to move to stable soon.

Thank you for testing, and as always for your support.

Main changelog:
  Version 2.26.0 (Mon, 29 Jun 2026 14:29:16 +0000)
[change] [all] Updated the app to .NET 10 [change] [all] Updated the legacy interface to .NET Framework 4.8.1 [change] [windows] Removed Windows 7 support [fix] [all] Cleaned WireGuard configuration generation by removing unsupported entries [change] [windows] Improved OpenVPN driver setup and adapter management on Windows [change] [windows] Removed outdated Windows driver options [change] [windows] Removed the old Windows Firewall Network Lock mode and migrated existing profiles. [change] [linux/macos/bsd] Removed unused filesystem protection handling from the elevated helper. [change] [all] Restricted elevated helper tool discovery to trusted application folders. [change] [all] Added limits to elevated helper replies to protect client memory use. [change] [all] Removed the Tor control cookie path option [fix] [all] Various security hardening fixes [fix] [windows] Fixed Windows elevated launches with long command lines [change] [windows] Improved Windows elevated argument handling to prevent extra arguments from being injected into helper tools [fix] [windows] Fixed Windows OpenVPN routing with TAP adapters [change] [windows] Updated WireGuard for Windows to version 1.0 [change] [all] Updated OpenVPN to 2.7.3 [fix] [linux] Fixed Linux AppImage cleanup. Credits GitHub #147 and #152. Thanks to ThienBienBlue. [fix] [linux] Fixed Network Lock detection on clean systems where optional nftables or iptables tools are not installed. [change] [all] Removed custom OpenVPN and Hummingbird executable path options. [change] [linux] Removed the Linux dependency on the system ICU library [change] [all] Misc fixes and general cleanup
Kind regards & datalove
AirVPN Staff

@theradgrad

Hello!

The fact that the host is sending a RST strongly suggests the packet is making it through PF and reaching the TCP stack, where no matching listening socket exists for that specific destination IP and port. The port tester does not test UDP, only TCP.

Please ascertain whether the listening program is really listening to all interfaces with:
netstat -an -f inet

Look specifically for something like
0.0.0.0:YYYYY or VPN_IP:YYYYY

If instead it shows
127.0.0.1:YYYYY or LAN_IP:YYYYY

then the kernel will immediately send RSTs for packets addressed to the VPN IP.

Also, please send the output of the following commands:
sudo sockstat -4 -l
sudo netstat -rn

Finally, a simultaneous packet capture while reproducing the issue:
sudo tcpdump -ni tun0 tcp port YYYYY

Kind regards
 

@Bohdan Kushnirchuk

Hello!

How to solve:
  To grant Terminal full disk access (except some specific critical directories) on macOS, follow these steps:
Open System Settings (or System Preferences):
On macOS Ventura and later, click the Apple menu at the top-left of your screen, then choose System Settings.
On macOS Monterey or earlier, choose System Preferences.
Go to Privacy & Security:
In System Settings (Ventura and later), select Privacy & Security in the left-hand menu.
In System Preferences (Monterey and earlier), click Security & Privacy, then go to the Privacy tab.
Select Full Disk Access:
In the Privacy & Security or Security & Privacy tab, scroll down and click Full Disk Access in the left menu.
Unlock Settings:
At the bottom-left of the window, you might need to click the lock icon and enter your admin password to make changes.
Add Terminal:
Once the lock is open, click the + button beneath the list of apps with Full Disk Access.
In the file chooser window that pops up, go to Applications > Utilities, and select Terminal.
Click Open to add it to the list.
Restart Terminal:
Close the Terminal app if it’s open, then reopen it to apply the changes.

 
2. Open the terminal and change ownership of the relevant files: sudo chown root /Applications/Eddie.app/Contents/MacOS/*
Kind regards
 

Hello!

Important update: OpenVPN 2.7 and DCO deployment entered its final stage. Check the update on this thread first message. Now you can start using OpenVPN + DCO on a wide portion of AirVPN infrastructure and very soon on all of it.

Kind regards & datalove
 

@Tech Jedi Alex

Hello!

Just to point out that age verification should have nothing to do with identity check. Various countries, the European Commission and some Italian bodies are studying methods of age verification that don't force the citizen to show his/her ID card at any step, and surely not to private entities they don't even know. If the UK wants to implement age verification through identity verification we don't know, but it would be a giant mistake that would allow potentially shady entities to steal and build highly reliable ID databases with huge monetary value on the black market. The Discord Hack catastrophe is a useful reminder https://www.404media.co/the-discord-hack-is-every-users-worst-nightmare/

Then of course you can debate ad nauseam about whether it is right or wrong that a person younger than 21, 18 or 16 should be forbidden to connect to a virtual private network, Tor, proxy, etc.

For the readers, our position is close to EFF position, see here: https://www.eff.org/issues/age-verification
 
We were with EDRi and EFF as usual, how can you not know?! Check our mission and endorsement page. The same must be said of some other VPNs to be honest.

Kind regards