Search the Community

When using VPN on Linux with openvpn I get 3 DNS adresses on ipleak.net. 1. AirVpn-Server Exit Ipv4, 2. AirVpn-Server Exit Ipv6 and 3. the residential address of my ISP. Note: This is not my own home IP, but rather the one by my ISP. Should I be worried? Ipv6 is disabled.

When I have the VPN active using Eddie, my DNS queries randomly come to a crawl. In Chrome I see "Resolving host" a lot. Sometimes takes 10 seconds or more to return. I disconnect the VPN, shutdown Eddie and everything is back to running fine. Even through I am running the latest Eddie and the latest Windows 10 version, I tried setting the metric cost in the various adapters, per the sticky in this forum. Set the normal ethernet adaptor to 25 and a virtual box adaptor to 35. Both for ipv4 and ipv6. Eddie set's it's TAP adaptor to 3 for both protocols. None of that helped. I'm at a loss. Thoughts/ideas? System info: Windows 10 Pro, version 1803 Eddie, version 2.15.2 Thanks.

Hi, I'm not an expert on networks, and VPNs add a layer of complexity to the subject, so I had an idea but I don't even know whether that idea is possible or not: I have a Pi-Hole DNS server in my home network. At the LAN level, everything communicates with the Pi-Hole for DNS purposes (router uses the Pi-Hole as nameserver and DHCP clients are instructed to submit DNS requests to router). If I get the Pi-Hole to operate through AirVPN, nothing will change on the LAN side, but would it be possible for me to, for example, go outside with my smartphone (which also connects to AirVPN) and have the phone use my home network Pi-Hole for DNS purposes? I mean, both the Pi-Hole and smartphone would be connected to the AirVPN network of servers, is there a way for my Pi-Hole to provide DNS service to my VPNed devices when I take them outside my home? I understand this could get complicated, but I like learning through challenge. That being said, please be clear in your explanations.

for some days now i can´t get a connection to any server with my macbook pro runs at macOS High Sierra 10.13.6 Hope someone can help me If i forgot smth to tell u ask^^ https://i.imgur.com/Fc71vPn.jpg

Hi! I'm running Fedora 28 and wanted to use build in network manager to deal with vpn. Everything seems to work fine, but I noticed this text in Technical Specs section. VPN DNS addresses (private addresses, only reachable from inside the VPN): 10.4.0.1 / fde6:7a:7d20:4::1 - reachable from any virtual subnet However, we recommend that your machine accepts the DNS push from our servers. If that's not possible, then we suggest to set the DNS IP address matching the VPN gateway IP address, as this is the safest method to prevent certain attacks based on hijacking. So is there something I should do? I tried to check this https://airvpn.org/topic/9608-how-to-accept-dns-push-on-linux-systems-with-resolvconf/ but couldn't find needed packages for fedora. I've also edited /etc/resolv.conf to only contain AirVPN DNS, because I sometimes saw unwanted DNS servers in Ipleak.net. I'm not too familiar with this stuff. But would like to try to go without Eddie for awhile, because random crashes and network lock once broke randomly, but I don't have debug log about that.

I understand there may be changes coming to DN Servers. Currently I make use of 10.4.0.1 and 10.5.0.1 which aren't available if my VPN isn't connected though I know I can't rely solely on that. Are there changes afoot and if so what? I did try to search but "DNS" like other abbreviations is too short but I'm sorry if this is a repeat. Richard

I thought I'd share some links I've found to check for DNS leaks: http://www.dnsleaktest.com http://ipleak.net/ If you see your real IP or another IP (other than the one that you are connected to by VPN) then you have a DNS leak. You should fix it by setting static IP and DNS server settings on your network adapter. I've written a step-by-step guide for people unfamiliar with network and IP settings. Instructions on how to make your IP settings static for Windows 7: You might be asked to elevate system priviledges or authenticate as Admin while you perform these steps, just allow it all. Click on the network icon on the taskbar (the lower right screen near the clock) -> Click on "Network and sharing center" -> Click on "Change adapter settings" on the menu to the left. You need to know your router's network settings before you continue: Right click on your network adapter (Local area connection if you're connected by a LAN cable or Wireless network connection if WiFi) and choose "Status" -> Click on "Details...". There you should notice your "IPv4 Address", "IPv4 Subnet Mask", "IPv4 Default Gateway" and "IPv4 DNS Server". Click "Close" and again "Close". Right click on your network adapter and choose "Properties" -> Click on "Internet Protocol Version 4" (don't un-check it) and click "Properties". Select the "Use the following IP address" button. IP address: When you noticed your "IPv4 Address" in the "Details" screen earler, it might have looked like this: 192.168.0.1 or 192.168.1.1. This was an IP address assigned by the DHCP pool on your router and happens automatically. You might think to put in the same IP address as you saw in the "Details" window but if you do that, the IP address might be assigned to another computer while your computer is turned off. You should choose an IP address that's much higher than your current IP address so it will be unlikely that another computer will get the same IP address from the DHCP pool. When you put in the "IP address" on the "Properties" screen, you should put in the same first three numbers (e.g. 192.168.0.) and then the last number should be a random number between 100 and 250. It doesn't really matter what number you choose, you are just choosing a number that should be unused on your local LAN. If you get an error about an "IP address conflict", you should choose another last number in the IP address. Subnet mask: Copy the "IPv4 Subnet Mask" from earlier. Default gateway: Copy the "IPv4 Default Gateway" from earlier. This is the IP address of your router. Preferred DNS server: Put in "10.4.0.1". This is AirVPN's DNS server. Alternate DNS server: Put in "10.5.0.1". AirVPN's DNS server. What you have done here is tell Windows to only use AirVPN's DNS servers instead of your routers (or ISP's) DNS servers. If you are not connected to an AirVPN server, you cannot go to the internet unless you put in your normal DNS server settings that you should have noticed in the "Details" screen before (IPv4 DNS Server above). You can also put AirVPN's website IP address in your "Hosts" file. This means that you can get to Airvpn.org to download a config without constantly changing your DNS server settings. Here's how you do it: Open notepad.exe as Admin (Right click -> Run as Administrator). Go to File -> Open. You need to navigate to this folder: "C:\Windows\System32\drivers\etc" and it might involve changing folder settings ("Organize" -> "Folder and search options") to show hidden files (View -> Show hidden files). The folder might appear to be empty but change the document type from "Text Document" to "All files" and then open the file called "hosts". Put in this lines at the bottom: 95.211.138.143 airvpn.org Then save the file as "hosts" and overwrite the old one. If you didn't run notepad.exe as Admin then you can't save the file. Hopefully this guide will help people. If there are any questions, just ask!

Truth is, when configuring airvpn manually, you need DNS to resolve the IP of a server behind one of the Airvpn clusters (europe.vpn.airvn.org for example). Airdns does not have a DNS server accessible outside the tunnel as it strongly suggests/supports OpenNIC. OpenNIC is the go-to for AirVPN. But, I have a grudge against OpenNIC. You select any OpenNIC DNS server in Europe for example, and the DNS ends up someplace else, the USA for example. Granted, DNS allegedly only sees the AirVPN IP as soon as the connection is up. But still ... Blinds me why sometimes an OpenNIC from a nice internet country ends up in an ugly internet country. It yanks me every time, and I did try a lot of OpenNIC servers, sooner or later they end up in land I don't want them to end up in. Then there is OpenDNS, but I'm not too keen on a few aspects, call them personal preferences. Then there is Google DNS, and the newly raved about cloudflare DNS. Yuk! Yes I know, they only "see" AirVPN IP's as long as the tunnel etc. are running. But since it is used to establish the tunnel, Google knows my IP searched for an AirVPN server and then nothing after that ... So Google knows I use AirVPN, and I hate that. Same with Cloudflare, or other internet evils offering reliable DNS as a source of business intel gathering. Then there are a few of the other good VPN providers who have publicly accessible DNS servers. Kind of defeats using one VPN to use the DNS of another VPN. It somehow doesn't feel right to do that. Which DNS service is of OpenNIC philosophy, is reliable to resolve AirVPN, and never ends up in an ugly internet country telling that ugly country I use AirVPN?

https://www.ghacks.net/2018/04/02/configure-dns-over-https-in-firefox/ This seems interesting. Naturally I know that by using Air i am happy with the DNS that that they provide. However as a Firefox user it can't hurt to have 1.1.1.1 running on top as a https resolver for my browser only. Any issues of trust/leaking/logging etc with 1.1.1.1 will just pass back to Air. Thoughts?

Since yesterday I cant connect to any address without using Eddie. I deactivated network lock but I'm still not able to connect. IPtables state: sudo iptables --list Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination sudo ip6tables --list Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Content of /etc/resolv.conf: # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN # 127.0.0.53 is the systemd-resolved stub resolver. # run "systemd-resolve --status" to see details about the actual nameservers. nameserver 127.0.0.53 Also ping to any address isnt working: ping: google.com: Name or service not known The connection through Eddie in any server of airVPN works without any troubles. Any ideas what is wrong?

will using DNScrypt limit what information my ISP sees about what i do online? will it stop my ISP from being able to see what websites i connect to? is there a reason to use airVPNs DNS? will using DNScrypt with airVPN compromise my connection in any way? will airVPN ever offer an encrypted DNS, is that something you guys are thinking about and how hard would it be for you to implement? sorry if these questions are dumb, i'm pretty new to this stuff ^-^'! i love airVPN by the way, and i really love your eddie client on linux!

Hello, I set up airVPN on my mini router using a custom build of openWRT from GL.inet but when I run ipleak and whoer it comes back with a ton of DNS leaks (50+). When I changed the DNS from "Keep blank to use default DNS" to Custom DNS of 10.4.0.1 and 10.5.0.1 then airVPN can no longer connect at all! I've also tried checking the box that says: "Force all clients to use: [ ] Override Clients' DNS setting" but it doesn't solve the issue. After setting the Custom DNS, airVPN disconnects and says the following over and over: RESOLVE: Cannot resolve host address: America.vpn.airdns.org:1194 (try again) Could not determine IPv4/IPv6 Protocol SIGUSR1 [soft,init_instance] received, process restarting Thoughts? NOTE: When NOT connecting through the router, and just firing up Eddie on my mac, I get no leaks.

Hello, I really didn't want to write this post, especially after reading the "Config Generator not resolving hosts for Entry IP 2" post and the https://airvpn.org/topic/14378-how-can-i-get-vpn-servers-entry-ip-addresses post over and over again. I read these posts a million times each but still couldn't figure out how to get my entry IP address and I kind of guessed for the DNS. The only command line prompt I could even get a response for was: nslookup nihal.airservers.org. I tried so many variations of nslookup nl.all.vpn.airdns.org (for example, uslookup pavo.airservers.org) and couldn't get the earth one to work either: earth.all.vpn.airdns.org I went to the specs page of the airvpn website looking for the VPN DNS and kind of just guessed with 10.4.0.1 Here we go: Operating System: RouterOpenVPN version: >= 2.4 IPv4 only Servers: by Continent Protocol: TCP Port: 1194 I chose TCP 1194 because the router I'm flashing has Tor capability and I'm shooting for true anonymity. Everything is just about set up and ready to go but despite reading the entry-ip-addresses article over and over again I couldn't seem to ascertain how exactly to get it. Thoughts anyone?

I've used the dynamic DNS service for a very long time and all of a sudden the DNS entry doesn't get updated anymore. What I have tried: Wait for 3 hours to make sure that the TTL has been reached: Check ✔Check the TCP Port via the ✔Check my client if the connection worked: Works ✔Try to connect via the IP under "Mapped to public IP:": Works ✔Connect to the server via the airdns.org domain name: Fail ✘Resolve the AirDNS IP: Fail ✘Issue: The IP address is wrong and hasn't been updated yet

Topic closed.

Just a short question to the admins here. I would like to use the AirVPN DNS servers on my VPN routers. The manuals (DD-WRT and Tomato) are referring to the Specs Page but I can't find them there anymore.

Hi, I have an issue with my home network. I have an ASUS RT-AC87U router. I use Expressvpn on the router with polcy routing. My Mac is connected straight to the WAN but I use AirVPN'd client Eddie. I have had no issues with either Expressvpn or AirVPN. Last night I spent serveral hours on my universities website doing work. At the end of the night I decided to just check everything was running ok with the VPN connections. I found no matter what I did (clear caches, delete cookies, check my dns settings, renew the lease etc) this problem persists. My iPhone uses the Expressvpn (openvpn in the router) and my mac uses the AirVPN client eddie. When I run the ipleak.net test I receive 100 DNS errors. I have not changed any settings in the router whatsoever. I've changed nothing. See the screenshots ... (Sweden is AirVPN, US is Expressvpn) Obviously the error is being caused within my router, which I have restarted and checked for a ASUS-WRT Merlin update).

EDIT: Hello all In order to get an Internet connection i need to reset dns and ip settings everytime after being connected to AirVPN. Help and information about any of this is greatly appreciated. Thanks for reading. SOLVED using merlin user scripts.

Hi guys, Sorry I'm a bit of a noob. Is there any tutorial or has anyone set up Pi-hole (https://pi-hole.net/)+ Air on a RP3 so as to not have DNS be leaked via Pi-hole? Also the ability to VPN from my phone whilst on cellular data to my Pi would be great. How exactly would would the whole process look, presumably I wont use Eddie because the Pi will be handling the Air VPN requests? So how exactly do I connect using my computer and phone? Thank you!

Hi guys, Sorry I'm a bit of a noob. Is there any tutorial or has anyone set up Pi-hole (https://pi-hole.net/)+ Air on a RP3 so as to not have DNS be leaked via Pi-hole? Also the ability to VPN from my phone whilst on cellular data to my Pi would be great. How exactly would would the whole process look, presumably I wont use Eddie because the Pi will be handling the Air VPN requests? So how exactly do I connect using my computer and phone? Thank you!

I normally use AirVPN with openvpn in my computer, with openresolv to allow openvpn to connect to the server then change the DNS so it is tunnelled through the VPN connection. The openvpn config file I downloaded specifies a country, not a particular server, so DNS resolution is needed initially to make the connection. However I am interested in putting the VPN inside a router instead, and I have been experimenting. Looking at the instructions for ddrwt and here: https://airvpn.org/topic/14378-how-can-i-get-vpn-servers-entry-ip-addresses/ it seems it will not be possible to continue using my existing per-country configuration, as I need to give a specific IP address, ie choose just one server (and edit the .ovpn file accordingly). At the moment, I am using an OpenNIC DNS server in parallel with the VPN one instead, but I'd rather not continue to do this. Am I right in thinking each query goes to both DNS servers (rather than using the second one only if the first doesn't return an IP address)? Is there a way to select a country or region, rather than a specific AirVPN server, in this situation? I want to continue using openvpn manually as I understand and trust this method. I am also more familiar with the command line (ssh into the router) than LEDE/OpenWRT, which is new to me.

I have troubles understanding DNS resolution with AirVPN on debian using IP forwarding. My setup is as follows: One debian 9 virtual machine (VM1), acting as the gateway, is connected to two network interfaces: one (enp0s3) is NAT (connected to the host) and the other (enp0s8) is an internal network named "VPN". The gateway connects to AirVPN using openvpn configuration files. Its /etc/network/interfaces is: auto lo iface lo inet loopback allow-hotplug enp0s3 iface enp0s3 inet dhcp allow-hotplug enp0s8 iface enp0s8 inet static address 192.168.42.10 netmask 255.255.192.0 One debian 9 virtual machine (VM2) acts as the client and is only connected to the internal network "VPN". /etc/network/interfaces: auto lo iface lo inet loopback allow-hotplug enp0s3 iface enp0s3 inet static address 192.168.42.11 gateway 192.168.42.10 netmask 255.255.192.0 Through iptables rules, the VM1 (gateway) transparently forwards traffic from the VM2 (client) to its tun0 interface (AirVPN): iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE iptables -A FORWARD -i tun0 -o enp0s8 -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A FORWARD -i enp0s8 -o tun0 -j ACCEPT However, I have found that these rules do not forward DNS traffic (why? I don't know), so after searching around, I have also added the following rules to forward DNS traffic to tun0 (AirVPN) DNS resolver (or so it seems?): iptables -t nat -A PREROUTING -i enp0s8 -p udp --dport 53 -j DNAT --to-destination 10.5.0.1 iptables -t nat -A PREROUTING -i enp0s8 -p tcp --dport 53 -j DNAT --to-destination 10.5.0.1 Everyhting seems to work fine, but I don't understand how DNS resolution works. If I test DNS leaks on websites such as ipleak.net, I see that DNS server is AirVPN (=no leak). If I change the abovementioned rules to Google DNS: iptables -t nat -A PREROUTING -i enp0s8 -p udp --dport 53 -j DNAT --to-destination 8.8.8.8 iptables -t nat -A PREROUTING -i enp0s8 -p tcp --dport 53 -j DNAT --to-destination 8.8.8.8 I see on ipleak.net that DNS resolution is done by Google DNS servers (=leaks). This seems to indicate that DNS resolution is correctly done by the gateway (VM1), which correctly redirects it through tun0 interface and AirVPN DNS. The problem is that the client (VM1) still seems to at least try to resolve DNS itself: if I leave its /etc/resolv.conf file blank, it fails to resolve anything and fails to connect to any website. But if I write nameserver 10.0.2.3 which is the default VirtualBox NAT gateway, everything works fine. Why? Why does the client try to resolve DNS queries locally when all its traffic is supposed to be forwarded to the virtual gateway (VM1)? Does it act like a "dummy" DNS resolver that debian needs in order to work? Same goes for the gateway (VM1): if I leave its /etc/resolv.conf file empty, it cannot resolve anything, if I leave the default NAT VirtualBox entry (as above, nameserver 10.0.2.3), it works properly. Why? Isn't AirVPN supposed to replace the default entry in /etc/resolv.conf by its own (10.5.0.1)?

I am getting no response from: 10.4.0.1 No response 10.6.0.1 No response 10.30.0.1 No response No issues resolving through Google DNS: 8.8.8.8 4 msec Anyone else having issues??

AirVPNs DNS: ``` > nslookup h-bid.com Server: 10.4.0.1 Address: 10.4.0.1#53 ** server can't find h-bid.com: SERVFAIL ``` ISPs DNS: ``` > nslookup h-bid.com 192.168.1.1 Server: 192.168.1.1 Address: 192.168.1.1#53 Non-authoritative answer: Name: h-bid.com Address: 164.132.193.202 ```

I am facing the dreaded DNS issue that is caused by not exiting Eddie properly, which in the case of Linux Mint, is due to Eddie crashing frequently (there is a long thread about this). There is also a long thread about the DNS issue, but that thread is all about Windows and provides no step-by-step instuctions for Linux users who encounter this. ​This is the resolv.conf file on a Linux Mint PC that is able to connect to the internet with Eddie (AND network lock) turned OFF. In other words, this is what my resov.conf file should be when I disconnect from Eddie: ​ However, this is what my resolv.conf file looks like when I exit Eddie now: ​ There is no nameserver, and adding it manually does nothing to resolve the issue. How can I fix this so the resolv.conf file is restored correctly? I need to be able to access the internet when Eddie is disconnected. Thanks.