Staff

Hello!
 
In the Configuration Generator please tick "Advanced Mode", then tick "Separate certs/keys from .ovpn files". In this way you will generate split files, otherwise the CG will embed the configuration .ovpn file with certificates and key .
 
user.crt is the client certificate; ca.crt is the CA certificate; user.key is the client key.
 
Kind regards

So I'm checking System Logs on a Windows 7 machine and see a warning, Source: DNS Client Events.
 
It says, "Name resolution for the name dns.msftncsi.com timed out after none of the configured DNS servers responded".
 
I get this message because the machine is not leaking when the tunnel is disconnected.
 
I'm thinking, hmmm, msft that rings a bell. I didn't access anything that would query msftncsi.com. So I do a seach for it and came accross this explaination:
 
http://blog.superuser.com/2011/05/16/windows-7-network-awareness/
 
A comment at the end of the discussion questions how Android can detect that “wifi needs authorization” when you connect to a public wifi. I don't have a Droid so I wouldn't know anything about this.
 
I can determine my own connectivity so I just set the value for EnableActiveProbing to 0

I've been working in IT for 20+years, i've done everything from Windows 95 to NT migration, to corporate sysadmin.
 
I've been on Air for about 6 months, not sure. I was a bit of a paranoid arsehole to begin with (check my early posts, sorry for being an arsehole Mods ) but now i know the service is excellent, as is the tech support, and i wholly respect the aims and outlook of Air.
 
Thank you
 

Hello!
 
Your concerns about OpenVPN are probably based on a basic and huge misunderstanding. AirVPN is based on OpenVPN, a free and open source software by James Yonan and subsequently developed by OpenVPN Project and by OpenVPN Tehcnologies Inc.
 
OpenVPN has been and is continuously peer-reviewed and tested by some of the best cryptography experts in the world and by a very vast community with members from all over the world, together with OpenSSL (and PolarSSL, which might become relevant in the near future). AirVPN does not use any server, machine or infrastructure, does not employ any technician or any personnel from OpenVPN Technologies Inc. and does not exchange any data with OpenVPN Technologies Inc.
 
The fact that the software (which AirVPN uses without tweaks or anyway modifications from the source code) is open source is an invaluable advantage for deeper examinations and analysis. It is well known that OpenVPN is considered by thousands of experts, gurus and competent persons alike one of the best, if not THE best, VPN solution under a security and flexibility point of view. Please see here for a nice overview: https://en.wikipedia.org/wiki/Openvpn
 
Kind regards

Thanks for your help. I have just renewed my account.

Fixed!  Thank you!

You provide Remote Port Forwarding, what is it?
 
"Remote port forwarding" forwards traffic coming from the Internet to our VPN server ports to a specified local port of your client.

By default, your account has no forwarded ports, and this is good as long as you don't wish to have a service reachable from the Internet. For example, suppose that you want to run a web server behind our VPN, or that you wish to receive incoming connections to your BitTorrent client in order to improve p2p performance, or to seed a file. Without at least one remotely forwarded port, your service could not be reached from the outside, because our VPN server would reject the proper packets to your service.

Usually this is a good security measure against attacks, but it prevents your services to be reached from the Internet.

When you remotely forward an inbound port, our servers will open that port (TCP, UDP or both, according to your selection) and will properly forward incoming packets to you on that port. The service will be reachable from the exit-IP address of the VPN server your system is connected to.

You can forward up to 20 ports simultaneously. You can do that on our website, in your account "Client Area". You can't forward ports lower than 2048.

You can map a remotely forwarded port to a different local port: this is useful for a variety of cases, for example when your service listens to a port lower than 2048 or when the port is already reserved. More details about it here below.

Once you reserve an inbound remote port for your account, you have two options:

1) Leave the "Local" field empty. In this case, packets arriving to the VPN server exit-IP address port n will be forwarded to your machine IP address inbound local port with the very same number n

2) Fill in the "Local" field with a different port number x. In this case packets arriving to port n will be forwarded to your system inbound local port x.

In both cases you need to reach the service on the VPN server exit-IP address port n.


IMPORTANT: do NOT forward on your router the same ports you use on your listening services while connected to the VPN. Doing so exposes your system to correlation attacks and potentially causes unencrypted packets to be sent outside the tunnel from your client. However, if you connect a router (for example DD-WRT, Tomato based firmware router) an additional step is required, please see https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/  
NOTE: you can't reach your listening service(s) through the VPN server exit-IP address from the very same machine that's running it/them and is connected to a VPN server, or from any other machine connected to that same VPN server.

What is a VPN?

VPN is an acronym of Virtual Private Network. Our VPN extends the private network across the Internet. It enables your computer (the "client") to send and receive data across the Internet through dedicated nodes ("the VPN servers") as if those data were an integral part of the private network. This is achieved through a point-to-point OpenVPN (in routing mode) connection. The connection is encrypted and each packet is authenticated both by your client and our servers, so that nobody (including your ISP) between your computer and the VPN server can see the data you transmit and receive, the real origin and destinations of such data, and, last but not least, can inject forged packets into your stream of data. The picked encryption cipher meets higher-than-military security requirements. 
Additionally, when your client has established a point-to-point encrypted connection (often referred to as "the tunnel"), your data will "get to the Internet" without any reference to your real IP address, which is simply no more inside the packets. Anybody on the Internet will therefore see your packets as coming from our VPN servers exit-IP addresses, not from your real IP address, protecting you against privacy intruders and other malignant entities, such as sniffers in public WiFi hot-spots, hi-jackers, profilers and disturbed "copyright trolls".
 
You don't need to configure applications to use "the tunnel", because our servers perform a set of route and default gateway pushes that your client accepts: your applications are "tunneled" transparently. OpenVPN encapsulates your packets inside an UDP or TCP stream, therefore all same or higher layer protocols are supported, making a VPN a profoundly different and highly superior solution to any http or socks proxy.

Hello!
 
Your concerns about OpenVPN are probably based on a basic and huge misunderstanding. AirVPN is based on OpenVPN, a free and open source software by James Yonan and subsequently developed by OpenVPN Project and by OpenVPN Tehcnologies Inc.
 
OpenVPN has been and is continuously peer-reviewed and tested by some of the best cryptography experts in the world and by a very vast community with members from all over the world, together with OpenSSL (and PolarSSL, which might become relevant in the near future). AirVPN does not use any server, machine or infrastructure, does not employ any technician or any personnel from OpenVPN Technologies Inc. and does not exchange any data with OpenVPN Technologies Inc.
 
The fact that the software (which AirVPN uses without tweaks or anyway modifications from the source code) is open source is an invaluable advantage for deeper examinations and analysis. It is well known that OpenVPN is considered by thousands of experts, gurus and competent persons alike one of the best, if not THE best, VPN solution under a security and flexibility point of view. Please see here for a nice overview: https://en.wikipedia.org/wiki/Openvpn
 
Kind regards

Hello!

We're very glad to inform you that a new 100 Mbit/s server located in Spain is available: Sador.

The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Sador supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.

Kind regards and datalove
AirVPN Team
 

Hello!

Probably it's not related to Comodo. Anyway you can be sure of this by setting Comodo firewall and Defense+ to "Disabled".

Try to delete the file C:\Users\Alex\AppData\Roaming\AirVPN\Air\1.0.0.0\AirVPN.xml (while the Air client is not running).

The Air client will re-generate it at the next run (you will have to enter again your login).

Are you using the latest Air client version (1.7)?

Kind regards

Hello!

Can you please determine whether it's a DNS problem?

Try from a command prompt (while you are connected):
ping airvpn.org
ping 212.117.180.25
ping 10.4.0.1

and send us the output.

Kind regards

Hello!

Can you please determine whether it's a DNS problem?

Try from a command prompt (while you are connected):
ping airvpn.org
ping 212.117.180.25
ping 10.4.0.1

and send us the output.

Kind regards

Hello!

Can you please determine whether it's a DNS problem?

Try from a command prompt (while you are connected):
ping airvpn.org
ping 212.117.180.25
ping 10.4.0.1

and send us the output.

Kind regards

Hello!

Can you please determine whether it's a DNS problem?

Try from a command prompt (while you are connected):
ping airvpn.org
ping 212.117.180.25
ping 10.4.0.1

and send us the output.

Kind regards

Watch this viedeo...
 
http://vimeo.com/61070499
 
knicker

I disabled IPv6, and doing that stopped the leaks to my ISP. 

Hello!

Today we're very glad to introduce native support for OpenVPN over SSL and OpenVPN over SSH, and a completely re-designed configuration generator which includes exciting, additional AirVPN services and features. Our service becomes more censorship resistant and easier to use with a wide range of OpenVPN GUIs and wrappers.

NEW SERVICES: OPENVPN OVER SSL - OPENVPN OVER SSH

OpenVPN over SSL and OpenVPN over SSH will allow you to bypass OpenVPN connections disruption. Known ISP countries where the disruption takes place are China, Iran, Syria, Egypt. The connection disruption is possible because OpenVPN connections have a typical fingerprint which lets Deep Packet Inspection to discern them from pure SSL/TLS connections. Connecting OpenVPN over SSL or OpenVPN over SSH will make your connection undiscernable from pure SSL or SSH connections, rendering DPI fingerprint identification powerless.

OpenVPN over SSL/SSH is included in every Premium subscription without any additional payment.

Use OpenVPN over SSL/SSH only when necessary: a slight performance hit is the price to pay. The performance hit is kept as low as possible because the "double-tunneling" is performed directly on our servers without additional hops.


NEW FEATURES

A new system for host resolution (not available for Windows) and dynamic VPN server choice is available. This will let you have OpenVPN configuration files which will try connections to various servers (according to your preferences) if one or more servers are unavailable.

A new connection port (2018) is now available on all Air VPN servers.

A new, alternative entry-IP address is now available on all Air VPN servers.

NEW CONFIGURATION GENERATOR FEATURES

- You can now select servers by countries, continents and planets (currently only one planet) or any combination between single servers and countries.

- You can now select an alternative entry-IP address. Each Air server has now an additional entry-IP address to help you bypass IP blocking.

- You can now choose a wide variety of compressing options: zip, 7zip, tar, tar & gzip, tar & bzip2.

- You can now choose not to compress the files and download them uncompressed one by one

NEW CONFIGURATION GENERATOR "ADVANCED MODE" FEATURES

- Total connection ports range available, including new port 2018 in addition to 53, 80, 443 and (for SSH) 22.

- Option to generate non-embedded configuration files, mandatory if you use network-manager as OpenVPN wrapper under Linux or just in case you use any wrapper that does not support embedded with certificates and keys OpenVPN configurations.

- Option to generate files and scripts for OpenVPN over SSL/SSH connections by clicking on "Advanced Mode"

- Option to select "Windows" or "Linux and others". Make sure you select the correct option according to your OS, because connections over SSL/SSH in Windows require different files than those required for Linux, *BSD and Unix-like / POSIX compliant systems such as Mac OSX.

- New options to generate configuration files that support proxy authentication for OpenVPN over a proxy connections, particularly useful if you're behind a corporate or college proxy which requires authentication



Instruction page for OpenVPN over SSL: https://airvpn.org/ssl
Instruction page for OpenVPN over SSH: https://airvpn.org/ssh

Please do not hesitate to contact us for any additional information.

Kind regards & Datalove
AirVPN admins

Right click "add server to favorites".
And an option to only list those servers.
 

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in the USA is available: Alkaid.

The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Alkaid supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.

Kind regards and datalove
AirVPN Team

SSL/TLS
 
 
UDP or TCP according to your choice.
 
 
TUN
 
 
It depends on your router setup. Surely not local host.
 
 
 
Ok.
 
 
53, 80 or 443.
 
 
Uncheck.
 
 
The ca.crt file that you must download from the configuration generator.
 
 
The user.crt file that you must download form the configuration generator.
 
 
Ok.
 
Kind regards

Hello!

We're very glad to inform you that a new 1 Gbit/s server located in the USA is available: Alkaid.

The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").
 
The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.
 
Just like every other Air server, Alkaid supports OpenVPN over SSL and OpenVPN over SSH.
 
As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Do not hesitate to contact us for any information or issue.

Kind regards and datalove
AirVPN Team

Hello!
 
We're very glad to inform you that a new 100 Mbit/s server located in India is available: Izar.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").

The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.

Just like every other Air server, Izar supports OpenVPN over SSL and OpenVPN over SSH.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Please note that the datacenter housing this server has one of the best alleged peering in India. However, during our tests the server seemed intermittently unable to meet AirVPN quality requirements on bandwidth. We have decided to make it available because we have been unable to find any better data center in India and because this server could be useful anyway for our customers from India and nearby countries. Should the server network be unable to meet the quality standards AirVPN customers are used to, we are ready to withdraw Izar. Therefore, please do not hesitate to send us your feedback.

Kind regards and datalove
AirVPN Team

Hello!
 
Communication logs are not written at all. Until the disconnection, what is kept (in RAM) is the VPN IP address, your node IP address (obviously, otherwise there would be no communication at all with your node!). Additionally, the amount of exchanged data in that session and the duration time of the session itself. Finally, the average up and down "speed" of the last 60 seconds are calculated. All of these data do not affect privacy but at the same time help us to verify that a server is functioning properly. All of these data are lost forever when the client disconnects.
 
Only for troubleshooting purposes you can force the system (from your control panel) to keep logs of the total amount of exchanged data and duration time of each session for your user (if you decide to do so, you can anyway disable this function, which will cause deletion of those data). You can't anyway force the system to store your session IP addresses.
 
Kind regards

Hello!
 
We're very glad to inform you that a new 100 Mbit/s server located in India is available: Izar.
 
The AirVPN client will show automatically the new server, while if you use the OpenVPN client you can generate all the files to access it through our configuration/certificates/key generator (menu "Client Area"->"Config generator").

The server accepts connections on ports 53, 80, 443, 2018 UDP and TCP.

Just like every other Air server, Izar supports OpenVPN over SSL and OpenVPN over SSH.

As usual no traffic limits, no logs, no discrimination on protocols and hardened security against various attacks with separate entry and exit-IP addresses.
 
Please note that the datacenter housing this server has one of the best alleged peering in India. However, during our tests the server seemed intermittently unable to meet AirVPN quality requirements on bandwidth. We have decided to make it available because we have been unable to find any better data center in India and because this server could be useful anyway for our customers from India and nearby countries. Should the server network be unable to meet the quality standards AirVPN customers are used to, we are ready to withdraw Izar. Therefore, please do not hesitate to send us your feedback.

Kind regards and datalove
AirVPN Team