Reputation from Staff - Page 272

Staff reacted to vpntunnel123 in Different DNS Leak Results? ...

Update: Everything is fine now, no DNS "leaks". Following the IPv6 line of thought I disabled the IPv6 DHCP option in my router settings, reconnected and now on all of the tests I mentioned as well as GRC's Nameserver test I can only see those belonging to AirVPN.

Thanks for all the help

Staff got a reaction from MD45 in How to forward ports in DD-WRT & Tomato with iptables ...

HOW TO FORWARD PORTS TO YOUR DEVICES WITH IPTABLES

You need to create a basic DNAT on your router. Remember that the router GUI forwards ports from the WAN to LAN. When connected to the VPN you must forward ports from TUN to LAN. Therefore, it is imperative that you do NOT forward ports in the GUI of the router.

Assuming that:
destIP is the IP address of the destination device port is the port you wish to forward to that device tun1 is the tun interface of your router (please check! on some routers it can be tun0, on Tomato it can be tun11) you need to forward both TCP and UDP packets you need to add the following rules. Please note that the following rules do NOT replace your already existing rules, you just have to add them.

iptables -I FORWARD -i tun1 -p udp -d destIP --dport port -j ACCEPT
iptables -I FORWARD -i tun1 -p tcp -d destIP --dport port -j ACCEPT
iptables -t nat -I PREROUTING -i tun1 -p tcp --dport port -j DNAT --to-destination destIP
iptables -t nat -I PREROUTING -i tun1 -p udp --dport port -j DNAT --to-destination destIP

Note: if your router firmware iptables supports the multiport module you can use --match option to make your rules set more compact. Please see here, thanks to Mikeyy https://airvpn.org/topic/14991-asuswrt-merlin-multiple-ports/?do=findComment&comment=31221

Kind regards

Staff got a reaction from Stevieoo in Five new 1 Gbit/s servers available (NL) ...

Hi,
this is a an important question.

We have recorded a dramatic increase of clients requiring connections to NL servers in the past weeks and months. With the increase of single connected clients (consider that since April a user can connect simultaneously three clients and also consider that Air user base has grown up considerably during this year), we must take into account different variables to a server load in addition to available bandwidth.

CPUs of our servers not only must handle TLS auth and OpenVPN AES-256 encryption/decryption, but also SSH and OpenSSL additional tunnels. There is, so far, no scientific study which determines how the CPU load increases (under the same provided bandwidth) with the increase of connected clients in an OpenVPN server, but empirically it might be not linear (example: 50 clients requiring 1 Mbit/s each stress CPU more than one client requiring 50 Mbit/s does). So, we could have a server that has a line and a port of 1 Gbit/s, but whose CPU gets at capacity before that limit (for example already at 650 Mbit/s). Therefore, in order to respect our commitment to always provide at least 4 Mbit/s per client in at least one server in the world, we add servers before this limit is reached. In the particular case of the Netherlands, we have decided to go beyond our warrant, because customers clearly appear to be very interested in this country.

With the current configuration and considering the average numbers of clients connected to Netherlands servers with an excess prudential margin of 20%, we are now able to provide more than 4 Mbit/s per client in the Netherlands alone, even keeping into account potential aforementioned overhead. In the "Top 10 Users Speed", right now, we can see that the topmost 4 clients are all in the Netherlands, ranging from 65 Mbit/s to 40 Mbit/s each.

Kind regards

Staff reacted to darkLogik in Eddie 2.7 available ...

I was having the same issue as others (initially) with slower speeds across multiple servers after installing 2.7 (Windows 8 x64). All seems to be working perfect now though. The network lock has been working quite nicely too!

Thanks for the great service...

Staff got a reaction from Baraka in Data Retention and Investigatory Powers (DRIP) ...

Hello,

nothing has changed in our obligations, we have not been notified of anything, so there are no news to inform you about and our policy on UK VPN servers remains the same.

Kind regards

Staff got a reaction from Baraka in Data Retention and Investigatory Powers (DRIP) ...

Hello!

We will examine the legislation you're talking about in due time. At the moment nothing changes on the UK servers.

Kind regards

Staff reacted to chanukah-lambkin in Problem using DD WRT as VPN Client (TLS handshake failed) ...

Hi, thanks for the quick response.

The wrong url seems to is unintended maybe one mistake in the trail and error phase (I had the resolved ip and different other airvpn servers)

I THINK the problem was that I used a router behind another modem-router that connects to the WAN, so I used the ip of the modem-router (which is 192.168.0.1 instead of 3.1)

Never mind it works now. Thank you anyway!

Interessting: no matter what TLS Ciper I use it seems to work BUT only after 1 TLS Handshake timeout error

EDIT: Also it was tun1 not tun0. For future reference, check this in DD-WRT with the Admin Web UI -> Administration -> Commands -> Enter "ifconfig" -> Run Commands

Staff got a reaction from Artful Dodger in Eddie 2.7 available ...

Hello!

We're very glad to inform you that a new Eddie Air client version has been released: 2.7. Please read the changelogs: https://airvpn.org/services/changelog.php?software=client&format=html

2.7 version is compatible with several Linux distributions. For very important notes about environments, please read here: https://airvpn.org/forum/35-client-software-platforms-environments

Eddie 2.7 includes important bug fixes.

It also implements direct TOR support for OpenVPN over TOR connections. Finally, Eddie makes OpenVPN over TOR easily available to Linux and OS X users: no needs for Virtual Machines, middle boxes or other special configurations. Windows users will find a more friendly approach as well. The logic of the connection of OpenVPN over TOR has been completely rewritten. This mode is not handled anymore as a generic connection to a socks proxy, but it is specifically designed for TOR and therefore solves multiple issues, especially in Linux and OS X, including the "infinite routing loop" problem (see for example http://tor.stackexchange.com/questions/1232/me-tor-vpn-how/1235#1235 )

As far as we know, Eddie is the first and currently the only OpenVPN wrapper that natively allows OpenVPN over TOR connections for multiple Operating Systems. https://airvpn.org/tor

We recommend that you upgrade Eddie as soon as possible.

Eddie 2.7 for Linux can be downloaded here: https://airvpn.org/linux
Eddie 2.7 for Windows can be downloaded here: https://airvpn.org/windows
Eddie 2.7 for OS X Mavericks and Yosemite only can be downloaded here: https://airvpn.org/macosx

PLEASE NOTE: Eddie 2.7 package includes an OpenVPN version re-compiled by us with OpenSSL 1.0.1j for security reasons and to fix this bug: https://community.openvpn.net/openvpn/ticket/328

Eddie overview is available here: https://airvpn.org/software
Eddie includes a Network Lock feature: https://airvpn.org/faq/software_lock
Eddie 2.7 is free and open source software released under GPLv3

UPDATE Eddie 2.7 and 2.6 for OS X had a digital signature which is no more recognized because of a change in Apple logic. Eddie 2.7 has been digitally re-signed and the package has been re-uploaded. It's anyway useless to re-download it if you already did.

Kind regards & datalove
AirVPN Staff

Staff got a reaction from wer in Eddie 2.7 available ...

@LBDude
@snaggle
@wer

Hello,

please re-download the .rpm package for openSUSE or Fedora. We think we have found the problem and fixed it.

Kind regards

Staff got a reaction from LBDude in Eddie 2.7 available ...

@LBDude
@snaggle
@wer

Hello,

we're going to check the .rpm package for Fedora and openSUSE. Do you confirm that the problem is in the .rpm package, while you can run the portable version?

Kind regards

Staff got a reaction from Artful Dodger in Eddie 2.7 available ...

Hello!

We're very glad to inform you that a new Eddie Air client version has been released: 2.7. Please read the changelogs: https://airvpn.org/services/changelog.php?software=client&format=html

2.7 version is compatible with several Linux distributions. For very important notes about environments, please read here: https://airvpn.org/forum/35-client-software-platforms-environments

Eddie 2.7 includes important bug fixes.

It also implements direct TOR support for OpenVPN over TOR connections. Finally, Eddie makes OpenVPN over TOR easily available to Linux and OS X users: no needs for Virtual Machines, middle boxes or other special configurations. Windows users will find a more friendly approach as well. The logic of the connection of OpenVPN over TOR has been completely rewritten. This mode is not handled anymore as a generic connection to a socks proxy, but it is specifically designed for TOR and therefore solves multiple issues, especially in Linux and OS X, including the "infinite routing loop" problem (see for example http://tor.stackexchange.com/questions/1232/me-tor-vpn-how/1235#1235 )

As far as we know, Eddie is the first and currently the only OpenVPN wrapper that natively allows OpenVPN over TOR connections for multiple Operating Systems. https://airvpn.org/tor

We recommend that you upgrade Eddie as soon as possible.

Eddie 2.7 for Linux can be downloaded here: https://airvpn.org/linux
Eddie 2.7 for Windows can be downloaded here: https://airvpn.org/windows
Eddie 2.7 for OS X Mavericks and Yosemite only can be downloaded here: https://airvpn.org/macosx

PLEASE NOTE: Eddie 2.7 package includes an OpenVPN version re-compiled by us with OpenSSL 1.0.1j for security reasons and to fix this bug: https://community.openvpn.net/openvpn/ticket/328

Eddie overview is available here: https://airvpn.org/software
Eddie includes a Network Lock feature: https://airvpn.org/faq/software_lock
Eddie 2.7 is free and open source software released under GPLv3

UPDATE Eddie 2.7 and 2.6 for OS X had a digital signature which is no more recognized because of a change in Apple logic. Eddie 2.7 has been digitally re-signed and the package has been re-uploaded. It's anyway useless to re-download it if you already did.

Kind regards & datalove
AirVPN Staff