Staff

Hello!

We're very glad to inform you that a new Eddie Air client version has been released: 2.10.

2.10 version is compatible with several Linux distributions. For very important notes about environments, please read here: https://airvpn.org/forum/35-client-software-platforms-environments
 
Integration with Windows 10 has been greatly improved as well.
 
Eddie 2.10 includes important bug fixes and changes meeting users' requests and preferences.
Please read the changelog: https://airvpn.org/services/changelog.php?software=client&format=html

Upgrade is strongly recommended.

Just like previous version 2.9, Eddie implements direct Tor support for OpenVPN over Tor connections. Eddie makes OpenVPN over Tor easily available to Linux and OS X users: no needs for Virtual Machines, middle boxes or other special configurations. Windows users will find a more friendly approach as well. This mode is not handled anymore as a generic connection to a socks proxy, but it is specifically designed for Tor and therefore solves multiple issues, especially in Linux and OS X, including the "infinite routing loop" problem (see for example http://tor.stackexchange.com/questions/1232/me-tor-vpn-how/1235#1235 )

As far as we know, Eddie is the first and currently the only OpenVPN wrapper that natively allows OpenVPN over Tor connections for multiple Operating Systems. https://airvpn.org/tor

We recommend that you upgrade Eddie as soon as possible.

Eddie 2.10 for GNU Linux can be downloaded here: https://airvpn.org/linux
Eddie 2.10 for Windows can be downloaded here: https://airvpn.org/windows
Eddie 2.10 for OS X Mavericks and Yosemite only can be downloaded here: https://airvpn.org/macosx

PLEASE NOTE: Eddie 2.10 package includes an OpenVPN version re-compiled by us from OpenVPN 2.3.8 source code with OpenSSL 1.0.2d for security reasons and to fix this bug: https://community.openvpn.net/openvpn/ticket/328

Eddie overview is available here: https://airvpn.org/software
Eddie includes a Network Lock feature: https://airvpn.org/faq/software_lock
Eddie 2.10.x is free and open source software released under GPLv3. GitHub repository https://github.com/AirVPN/airvpn-client


Kind regards & datalove
AirVPN Staff

Website: http://www.dmax.it
 
Italian streaming TV

Status: OK
Routing: All servers to IT route.

http://www.wilmaa.com

For the best streaming television that Switzerland has to offer, there’s but one name, and that name is wilmaa.

Status: OK
Native: CH servers.
Routing: All other servers.

Hello!
 
We're very glad to announce that we support the TorProject Open Observatory of Network Interference:
https://ooni.torproject.org

Our support includes, since July 2015 up to June 2016, monetary funding to aid project financial sustainability. See also https://airvpn.org/mission

Furthermore, we are sponsoring an important OONI event, Adina15 hackathon, which will be held in Rome on October the 1st and 2nd, 2015.
https://ooni.torproject.org/event/adina15
 
We'll be gladly providing all the awards and prizes to participants and winners of the Adina15 event.

Members of the AirVPN team will attend the event.
 
EDIT 27-SEP-15 - Only today it has been announced that the Adina15 hackathon event has been postponed to unknown date. https://lists.torproject.org/pipermail/ooni-dev/2015-September/000340.html
This decision is obviously outside our control (we sponsor the event, we have no role in its organization) and we regret it very much.

Kind regards and datalove
AirVPN Staff

Website: http://www.dmax.it
 
Italian streaming TV

Status: OK
Routing: All servers to IT route.

Website: http://www.vvvvid.it
Italian TV Streaming

Status: OK
Routing: All servers to IT route.

Website: http://lifestyle.alice.tv/
Italian TV Streaming
 
Status: OK
Routing: All servers to IT route.

Website: http://www.bbc.co.uk/
Breaking news, sport, TV, radio and a whole lot more. The BBC informs, educates and entertains - wherever you are, whatever your age.

Status: Not accessible
Native: none
Routing: all servers

About Tomato Firmware
 


Tomato is a small, lean and simple replacement firmware for Linksys' WRT54G/GL/GS, Buffalo WHR-G54S/WHR-HP-G54 and other Broadcom-based routers.
Official website: http://www.polarcloud.com/tomato.




PrerequisiteMake sure you triple-check that your version of Tomato supports OpenVPN or you'll be sorry. I strongly recommend Toastman's build of Tomato because of its widespread feature support and stability.


StepsUnder Basic->Network, configure your 3 static DNS servers. If you wish to use the AirVPN DNS set 10.4.0.1 as first DNS IP address. The Air DNS will enable you to access internal Air services, geo-routing services and bypass ICE/ICANN USA censorship (more information here).
About the others, I recommend picking ones from the OpenNIC Project because many of the servers don't keep any logs, which is consistent with the Air service, plus they would allow your internet service to continue functioning in the event of a government-ordered root DNS server shutdown- https://servers.opennic.org/ Under Basic->Time, make sure that the correct time zone and server is configured. Download the OpenVPN (.ovpn) file of your choosing under "Client Area -> Config Generator" after you log in the AirVPN site. In the Configuration Generator make sure to tick "Advanced Mode" and "Separate certs/keys from .ovpn files".
In order to determine the IP address of the server you wish to connect to, please resolve "servername.airservers.org". For example, for Acrux resolve "acrux.airservers.org". Find the server names by looking at Status page. For the actual configuration, please see the following two screenshots of the Basic and Advanced OpenVPN Client Configuration:

Under Basic, sub in your own correct protocol, IP and port in place of what I have in my own config.
In the Advanced Custom Configuration text box, the options are as follows:
  resolv-retry infinite remote-cert-tls server comp-lzo verb 3 Under Keys, you'll need to again text edit your user.key, user.crt, ca.crt and ta.key files, copy the matching keys and certificates and paste them into the text boxes in your router config.
- ta.key is the Static Key
- ca.crt is the Certificate Authority certificate (in some older builds, "Server certificate")
- user.crt is the Client Certificate
- user.key is the Client Key About certificates files (user.crt and ca.crt) content, just copy and paste from "-----BEGIN CERTIFICATE-----" (included) up to "-----END CERTIFICATE-----" (included). Save all settings. Under Status, click Start Now and count for 30 seconds. Go to https://airvpn.org and at the bottom of the screen it should show you are connected or visit https://ipleak.net for check.


Tested withToastman's build of Tomato [v1.28.7500 MIPSR2Toastman-RT K26 VPN] on Asus RT-N16 router. Tomato-ND-1.28.7633-Toastman-IPT-ND-SmallVPN on Buffalo WHR-G54S


Feedback
For any comment or feedback, you can find the discussion here.
Thanks to Baraka for this article.

A refreshed guide is available here:


Prerequisite
 
Install DD-WRT on router go to https://www.dd-wrt.com/ Select "router database", then enter you router model number. Follow the instructions as described and install the DD-WRT *vpn*.bin.

Steps Create configuration files from our Config Generator.
Select the server location and port you want to connect to, tick "Advanced Mode", tick "Separate certs/keys from .ovpn file", then generate and download the configuration files. Under the router "setup tab" locate your router's local IP address.
Go to Specs page of AirVPN website and locate Air VPN DNS for the server you want to connect to, and enter it under Static DNS 1.
Navigate to the "Services" tab then select the "VPN" tab. Select "Enable" under OpenVPN Client. Set the Server IP/Name and Port to the Air VPN server you selected (see here to determine VPN server entry-IP address: https://airvpn.org/topic/14378-how-can-i-get-vpn-servers-entry-ip-addresses ). Set Tunnel Device to "TUN" Set Tunnel Protocol to either "UDP" or "TCP" according to the Air VPN server you selected Set Encryption Cipher to " AES-256" Set Hash Algorithm to "SHA1" Put a check mark beside "nsCertType verification" Select "Enable" Advanced Options Select "Enable" LZO Compression Select "Enable" NAT Set Local IP Address to the router's local IP address found earlier. Set TLS Cipher to "TLS-DHE-RSA-WITH-AES-256-GCM-SHA384" or "None"
Unzip the AirVPN configuration file you downloaded. Using your favorite text editor
- Open up "ca.crt" and copy all of the contents into the CA Cert window.
- Open up "user.crt" and copy only and including "----- BEGIN CERTIFICATE----- to the end of ----- END CERTIFICATE----- " into Public Client Cert.
- Open up "user.key" and copy all of the contents into Private Client Key.
- Open up "ta.key" and copy all of the contents into TLS Auth Key Select "Save" at the bottom of the page then "Apply Setting"
Select "Save" at the bottom of the page then "Apply Setting" DD-WRT firewall rules
Go to "Administration" tab then select the "Commands" tab. Copy the following firewall rules into the command window (IMPORTANT: check your tun interface name and set it accordingly - some firmware builds will have tun1 and not tun0)
  iptables -I FORWARD -i br0 -o tun0 -j ACCEPT iptables -I FORWARD -i tun0 -o br0 -j ACCEPT iptables -I INPUT -i tun0 -j REJECT iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE Click on "Save Firewall" Verification of VPN setup
Go to https://airvpn.org and at the bottom of the screen it should show you are connected.



Trouble Shooting

If you're not shown as connected wait a minute then refresh the web (it could take a minute to make a connection with the VPN and log in).
 
Go to DD-WRT configuration and navigate to the "Services" tab, then "VPN" tab. Once there go to the bottom of the page and click on "Apply Settings". Once completed wait a minute and verify your connection again.
If you're still not connected verify the server status you're trying to connect to. Go to Air VPN website and log in, then navigate to "Support" and select "Server Status". If server is down reconfigure DD-WRT to connect to another server.
If you are still have difficulties connecting, view the OpenVPN log file in DD-WRT. You can find the log by going to DD-WRT configuration and navigating to the "Status" tab and selecting "OpenVpn". Hopefully the log will give you some indication of why you can not connect.
 

Still having issues

Contact Air VPN support, they are quick at responding back to you and very knowledgeable. Another option is to ask on the Air VPN forums.

Hello,
 
thank you for your subscription!
 
In spite of what you claim here, we replied to your ticket a few minutes after you opened it, but we never received any feedback. Please proceed to reply at your convenience.
 
Kind regards

Hello!
 
We're very glad to announce that we support the TorProject Open Observatory of Network Interference:
https://ooni.torproject.org

Our support includes, since July 2015 up to June 2016, monetary funding to aid project financial sustainability. See also https://airvpn.org/mission

Furthermore, we are sponsoring an important OONI event, Adina15 hackathon, which will be held in Rome on October the 1st and 2nd, 2015.
https://ooni.torproject.org/event/adina15
 
We'll be gladly providing all the awards and prizes to participants and winners of the Adina15 event.

Members of the AirVPN team will attend the event.
 
EDIT 27-SEP-15 - Only today it has been announced that the Adina15 hackathon event has been postponed to unknown date. https://lists.torproject.org/pipermail/ooni-dev/2015-September/000340.html
This decision is obviously outside our control (we sponsor the event, we have no role in its organization) and we regret it very much.

Kind regards and datalove
AirVPN Staff

Hello!
 
We're very glad to announce that we support the TorProject Open Observatory of Network Interference:
https://ooni.torproject.org

Our support includes, since July 2015 up to June 2016, monetary funding to aid project financial sustainability. See also https://airvpn.org/mission

Furthermore, we are sponsoring an important OONI event, Adina15 hackathon, which will be held in Rome on October the 1st and 2nd, 2015.
https://ooni.torproject.org/event/adina15
 
We'll be gladly providing all the awards and prizes to participants and winners of the Adina15 event.

Members of the AirVPN team will attend the event.
 
EDIT 27-SEP-15 - Only today it has been announced that the Adina15 hackathon event has been postponed to unknown date. https://lists.torproject.org/pipermail/ooni-dev/2015-September/000340.html
This decision is obviously outside our control (we sponsor the event, we have no role in its organization) and we regret it very much.

Kind regards and datalove
AirVPN Staff

Hello!
 
We're very glad to announce that we support the TorProject Open Observatory of Network Interference:
https://ooni.torproject.org

Our support includes, since July 2015 up to June 2016, monetary funding to aid project financial sustainability. See also https://airvpn.org/mission

Furthermore, we are sponsoring an important OONI event, Adina15 hackathon, which will be held in Rome on October the 1st and 2nd, 2015.
https://ooni.torproject.org/event/adina15
 
We'll be gladly providing all the awards and prizes to participants and winners of the Adina15 event.

Members of the AirVPN team will attend the event.
 
EDIT 27-SEP-15 - Only today it has been announced that the Adina15 hackathon event has been postponed to unknown date. https://lists.torproject.org/pipermail/ooni-dev/2015-September/000340.html
This decision is obviously outside our control (we sponsor the event, we have no role in its organization) and we regret it very much.

Kind regards and datalove
AirVPN Staff

Hello!
 
We're very glad to announce that we support the TorProject Open Observatory of Network Interference:
https://ooni.torproject.org

Our support includes, since July 2015 up to June 2016, monetary funding to aid project financial sustainability. See also https://airvpn.org/mission

Furthermore, we are sponsoring an important OONI event, Adina15 hackathon, which will be held in Rome on October the 1st and 2nd, 2015.
https://ooni.torproject.org/event/adina15
 
We'll be gladly providing all the awards and prizes to participants and winners of the Adina15 event.

Members of the AirVPN team will attend the event.
 
EDIT 27-SEP-15 - Only today it has been announced that the Adina15 hackathon event has been postponed to unknown date. https://lists.torproject.org/pipermail/ooni-dev/2015-September/000340.html
This decision is obviously outside our control (we sponsor the event, we have no role in its organization) and we regret it very much.

Kind regards and datalove
AirVPN Staff

Hello,

we have insert swiss tv (rsi.ch, srf.ch) in our anti-geo-blocking service.

Can you try again and confirm that it works now  ?

Kind regards

Website: http://viaplay.se

Website: http://www.tf1.fr
Official site of French television channels (TF1, TMC, NT1, HD1)


Status: OK
Native: FR servers.
Routing: All other servers.
 

That's very risky. You have two programs with the same privileges competing to modify the kernel or OS packets filtering tables at the same time.
 
In general you must never run two firewalls simultaneously (that's true for any system, not only Windows).
 
Kind regards

UPDATE 01-SEP-17 Due to multiple, critical  problems in network-manager-openvpn which after years have not been solved we recommend to NOT use it. Please understand that we will not provide support to network-manager-openvpn. In GNU/Linux we recommend that you run our free and open source software "AirVPN Suite", "Eddie" or OpenVPN directly
 
 
Warning: Ubuntu 14.04 has an issue on configuration files import. At 25/04/2014 there's still no fix. Bug Report Go to Config Generator page, choose Linux and choose your preferred options. Select Advanced Mode Tick Separate certs/keys from .ovpn files
Click on any archive format. Save the downloaded archive file somewhere, say in ~/.airvpn. Extract it. Five files should be extracted. Try to make sure nobody but you can read the file user.key, because that one is secret. Install the package named network-manager-openvpn-gnome, which is a plugin to NetworkManager handling OpenVPN connections. The install will automatically include all needed packages, like openvpn etc. Click on NetworkManager icon in top-right bar, and choose Edit Connections...
Click Add, choose Import a saved VPN configuration, click Create... and choose a .ovpn file extracted from files generated by our Config Generator.
The imported information is displayed. Click Save... and close the NetworkManager Connections editor.
From now on, the imported connections are showed under VPN Connections menu. Click it to connect.

What is Dynamic DNS?
"Dynamic DNS or DDNS is a method of updating, in real time, a Domain Name System (DNS) to point to a changing IP address on the Internet. This is used to provide a persistent domain name for a resource that may change location on the network."
Wikipedia, http://en.wikipedia.org/wiki/Dynamic_DNS
 
Premium Members can choose up to 20 names in their Forwarded Ports page, accessible from the left tabs of their "Client Area".
 
Just for comfort, a name is associated to a forwarded port.

When a Premium member connects to an Air VPN server, the .airdns.org DNS record is updated to the exit-IP address of that server. Therefore, be aware that this service may be unusable when you establish multiple connections to different servers from different devices with the same account (in such cases, you need to point directly to the exit-IP address of the server, or use some third-party DDNS which you manually set).

This service can be useful when you need a domain name, which must be persistent across all Air VPN servers, for a service you need to run "behind Air VPN". For example: if you want to host a game server, you can communicate to the players the DNS name and freely switch Air VPN servers.

Notes:TTL (Time-To-Live) is one hour. If you change VPN server, one hour may be needed before other users can resolve correctly your domain name. A longer time might be necessary: some public DNS (for example Google DNS) sometimes ignore TTL in their caching system.DNS are created or updated when a connection to an Air server is performed. They are deleted only if you disable the system (i.e. you delete the name from the forwarded ports panel). The latest IP address is NOT removed during disconnection or connection retry.

Hello,
 
what is your OS and which software do you run to connect to our service? When your system is allegedly connected to the VPN, browse to:
http://ipleak.net and verify carefully all the data.
 
Feel free to open a ticket to get proper support. In the ticket please include the connection logs of the software you use to connect. If you run our client please click "Logs" -> "Copy to clipboard" and paste everything into your message.
 
Kind regards

Hello,

we have inserted tvcatchup.com in UK routing.


Kind regards
 

That's correct, when Network Lock is enabled outgoing IPv6 packets are blocked. Additionally Eddie has an option to disable IPv6 completely in Windows, it seems that it's this option that in hugomueller's system does not work as well, on top of firewall malfunction in the same system. Since the problem can't be reproduced in our testing systems and is not a problem for thousands and thousands of other systems based on Windows, we think that it's a very peculiar problem in the hugomueller's system which also seems to have additional, various internal problems.
 
Kind regards

Hello!
 
No, the VPN servers are not compromised. It's that web site that's compromised.
 
You can easily verify that. First of all, have a look here:
https://sitecheck.sucuri.net/results/www.lsri.uic.edu
 
Then, look at how that page appears in Google cache (it appears with scam links):
https://webcache.googleusercontent.com/search?q=cache:-hOXCMK9BA0J:www.lsri.uic.edu/faculty-staff+&cd=1&hl=en&ct=clnk&gl=it
 
The above shows that it's not a problem in our VPN servers and that it's not an injection in the middle.
 
So, that's what we think (and we are very very probably right) has happened to that web site. Someone infected their web server with SEO spam, and they configured the php / js / whatever file to show the scam links and pages only to some destinations in some list which includes Google bot, dedicated servers... In this way the scam is indexed and the rank is increased. This enhances the likelihood that the scam will remain for a long time before the web site operators even realize that their server has been compromised.
 
From an Italian ISP we can see the scam links, from other ISPs we can't. Also, most of our VPN servers don't see the scam links (so they are not included). That's a quite subtle tactics for the purposes of the attackers.
 
Is there anyone willing to link this thread to that web site operators? We'll also do the same as soon as possible.
 
Kind regards