Search the Community

I have a couple of questions regarding port forwarding. One - I saw this line - but it isn't explained in the FAQ page: Watch for warnings from our security check: a red token implies that your anonymity layer may be lowered or broken by a malicious adversary. What does this mean exactly? Where would I find this red token and what exactly could it mean? Also - is there any additional setup required after forwarding a specific port, or will this be automatic whenever connecting through the client? And lastly - for Dynamic DNS - is there a specific naming convention I should be following for this when coming up with a name? Thanks in advance, I know this is several questions. KR

Hi, The question says it all, really, does ipleak.net detect IPv6 leaks (it is not clear from the wrebsite)? Thanks!

Hi, I got yesterday a 3-day subscription to AirVPN for testing (before bying a longer subscription) but I can't make it work. The main symptom is the extremely low speeds. My PC (Windows 7 64bit Prof) is on a Gigabit line. My normal speeds, according to speedtest.net, are around 500-600mbps (down and up). With AirVPN connected, my speed usually gets lower than 10mbps! Sometimes I get good speeds (60-100mbps) but as soon as I start uTorrent, the connection stalls to the point even DNS resolving fails. Something I noticed: the TAP adapter always says "Unintedified network" and, according to ipconfig its "Default Gateway" is empty. Is that normal? I have tried both OpenVPN and the AirVPN app. in both cases the logs are clean (no errors or warnings) but the problem persists. Also I tried uninstalling everything relevant (even the TAP adapter) and reinstalling but nothing changed. I know my ISP is ok with OpenVPN. They use it for some of their services too. So, any ideas on how to resolve this mess? Or at least how to get some usable debbuging info? Thanks!

Here's something for the Win 8 / Win 10 users struggling with leaky DNS. https://medium.com/@ValdikSS/beware-of-windows-10-dns-resolver-and-dns-leaks-5bc5bfb4e3f1 Or there'e always Linux

I've been experiencing a few problems with Eddie (2.10.3 but also previous versions) on Win 7 64, mainly after waking my computer from sleep... I can't say for sure that Eddie is the cause of the crash, as I suspect faulty Intel drivers, but the consequences are a bit annoying... If the VPN connection was up at the time of the crash, the default DNS settings are not reset and windows tries to use AirVpn DNS... so, nothing works until I connect to an AirVPN server. This could be considered as a good thing, as it assures most of the traffic won't work unless connected to the VPN, but sometimes (like with some online payment sites) it is necessary to use a "standard" connection. And so I have to go through the process of manually changing the DNS server every time for this standard connection to work... It could be interesting to add a feature so that Eddie changes the DNS in use when it is launched (to recover to working settings after a windows crash, for example) and closed (to be sure it really reverts the system to a working configuration), and to be able to manually enter the DNS we want to use. In short, at the moment we have the option to choose which DNS to use when connected to the VPN (preferences/advanced/DNS), and Eddie reads the DNS in use when it starts and considers it as the standard configuration to revert to when it's closed, without checking if it is a valid/working DNS instead of AirVPN DNS (which won't work with a standard connection). I would need the same option, but to choose which DNS to use when NOT connected to the VPN + apply this setting at start and close of Eddie.

Hi, is it possible to just use the dns-servers for geo-unblocking? like those "other sites" i did not test but find (smartydns, unlocator?) somehow using the us servers from germany isnt fast enough for good streaming (i.e. netflix) and not really necessary to route all traffic through airvpn. i dont know if this is even allowed or wanted here. if not i am sorry for asking. thanx

It would be nice to have a checkbox to disable any custom DNS servers set up in Preferences/Advanced/DNS without having to actually delete them. It would save having to type them in every time you want to use them!

Hi Im on a Nexus7 tablet. No matter what server / mode combination I try it just sits at Looking up DNS name when I try to connect. Then it timesout. Is this a common problem, what am I doing wrong? I am using the config generator and trying different servers TCP/UDP different ports etc. Im using the official OpenVPN Connect. Thanks for any help!

My setup is this; Asus RT-N66U "Black knigth" running the shibby AIO version of TomatoUSB I've set up the 1st OpenVPN client (tun11) and am forcing all traffic from a specific (internal) IP though this connection. The above works really well so I wanted to setup up a wireless network were all clients that connects are added to a different subnet and all IPs in that subnet be forced through the 2nd OpenVPN client ( tun12 ). To this end I setup; - a new VLAN (br1) - a new Wireless SSID ( wl0.1 ) that is using that VLAN This works and clients can connect, get the correct IP and can access the net. I copied every setting from tun11 to tun12 I can connect the 2nd OpenVPN. When I start the scripts to force the subnet though the tunnel I get various DNS related errors in the client ( Android 5.1.1 with chrome browser ) unless I stick to refreshing an already loaded page, the page will show the correct vpn IP however ( simple php page with <?=$_SERVER['HTTP_X_FORWARDED_FOR'];?> ) It seems that somehow DNS isn't working for the 2nd connection, and I can't for the life of me figure out why. Trouble shooting I've done so far; Shutdown both VPNs and only start Client2 - no difference Routing br1 through Client1 works perfectly ( "ip rule add from 192.168.2.0/24 lookup 200" ) So I'm starting to think that there is something wrong with my settings for Client2; The relevant settings ( minus the VPN ip's as they are irrelevant ) - what am I missing / where did I screw up? Client 1 Client 2 Script -> firewall ( custom addition to the firewall rules ) iptables -I FORWARD -i br0 -o tun11 -j ACCEPT iptables -I FORWARD -i tun11 -o br0 -j ACCEPT iptables -I INPUT -i tun11 -j REJECT iptables -t nat -A POSTROUTING -o tun11 -j MASQUERADE iptables -I FORWARD -i br1 -o tun12 -j ACCEPT iptables -I FORWARD -i tun12 -o br1 -j ACCEPT iptables -I INPUT -i tun12 -j REJECT iptables -t nat -A POSTROUTING -o tun12 -j MASQUERADE the up/down scripts that takes care of the routing root@unknown:/tmp/home/root# cat /jffs/vpn1_up.sh #!/bin/sh #iptables -D OUTPUT -s 192.168.1.203 -j DROP ip route flush table 200 ip route flush cache ip rule add from 192.168.1.203 lookup 200 VPN_GW=`ifconfig tun11 | awk '/inet addr/ {split ($2,A,":"); print A[2]}'` ip route add table 200 default via $VPN_GW dev tun11 root@unknown:/tmp/home/root# cat /jffs/vpn1_down.sh #!/bin/sh #below line doesn't work #iptables -A OUTPUT -s 192.168.1.203 -j DROP ip rule del from 192.168.1.203 lookup 200 ip route flush cache root@unknown:/tmp/home/root# cat /jffs/vpn2_up.sh #!/bin/sh ip route flush table 210 ip route flush cache ip rule add from 192.168.2.0/24 lookup 210 VPN_GW2=`ifconfig tun12 | awk '/inet addr/ {split ($2,A,":"); print A[2]}'` ip route add table 210 default via $VPN_GW2 dev tun12 root@unknown:/tmp/home/root# cat /jffs/vpn2_down.sh #!/bin/sh ip rule del from 192.168.2.0/24 lookup 210 ip route flush cache

I have noticed since yesterday that if I try to connect to Tauri server - Checking DNS fails everytime: I 2015.08.14 14:48:09 - /etc/resolv.conf renamed to /etc/resolv.conf.airvpn as backup I 2015.08.14 14:48:09 - DNS of the system updated to VPN DNS (Rename method: /etc/resolv.conf generated) I 2015.08.14 14:48:09 - Flushing DNS I 2015.08.14 14:48:09 - Checking route I 2015.08.14 14:48:10 - Checking DNS W 2015.08.14 14:48:29 - No such host is known ! 2015.08.14 14:48:29 - Disconnecting I have "Check if the tunnel use AirVPN DNS" checked in my Eddie (for Linux) settings. No such problem on other servers I use to connect.

So I just downloaded AirVPN yesterday and started exploring it today. I am very new to this vpn thing. I figured out port forwarding for qbittorrent, but I haven't tried to torrent yet. Anyway I used dnslinktest.com When I turn on the Network lock there are leaks, when I turn it off there are no leaks. Isn't the purpose of the network lock to prevent leaks?

The adult site: elephanttube(dot)com Is out from the AirVPN Dns. (?) (Online blacklist check) www.elephanttube.com is not blacklisted. Best regards. TheLastCheck.

Hi guys I'm trying to use AirVPN on my Nexus 5 and my Samsung Galaxy Tab S and due to the way Androids are, and at present with no apparent IPV6 non leaking solution in place by just about every VPN provider out there, as soon as I get connected, my IPV6 leaks, thus not allowing me to watch tv from abroad. Besides disabling IPV6 on my router, have you guys got a work around in place as yet? Cheers.

I m connected to Talitha and all DNS is going trough the VPN. I took a look at my windows firewall (which i enabled due to "network lock") and it shows a lot of these: date time action protocol src-ip dst-ip src-port dst-port size tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path 2015-06-29 11:33:34 DROP UDP 192.168.2.94 54.172.47.69 58683 3478 0 - - - - - - - SEND 2015-06-29 11:33:35 DROP UDP 192.168.2.94 54.172.47.69 58683 3478 0 - - - - - - - SEND 2015-06-29 11:33:37 DROP UDP 192.168.2.94 54.172.47.69 58683 3478 0 - - - - - - - SEND 54.172.47.69 --> is an amazon IP After allowing this IP, my IP get leaked by webrtc. (tested on https://ipleak.net/) Can anyone explain this behaviour?

Hi, I've been using ufw/gufw for a long time now to prevent leaks which works great after I followed worric's guide https://airvpn.org/topic/5586-prevent-leaks-with-linux-firestarter-also-stop-traffic-when-vpn-drops/?do=findComment&comment=5642 ​However there's one drawback, which is that all IP's must be resolved prior to connecting because the DNS resolution doesn't get through the firewall. The problem with this is that you can't let it choose the best server for the area/region by resolving for instance gb.vpn.airdns.org. It seems that the best you can do is get a random selection from the list of servers. Is there a way around this? For example to only let that dns query through? or am I wrong somehow? Any clarification is greatly appreciated! ​ Edit: Grammar

I have a fibre (xDSL) modem (192.168.1.254), supplied by my ISP which has only a few settings available through the GUI - can't even change the IP address! Sitting behind this modem/router, and on a different subnet, is a DD-WRT router (192.168.0.1) which I use to connect to the AirVPN servers. I am having a problem with DNS settings - there are so many on the DD-WRT router and a few on the modem/router, and I don't really understand how it works! Just now the AirVPN website shows me as being connected, but a DNS leak test shows my ISP's DNS servers! For the last few weeks I have been getting around this problem by using the AirVPN client software to connect to the internet which works as it should. Can anyone advise me on whether I just need to change some DNS settings to get it to work properly or do I need to add some admin commands in DD-WRT? Maybe this would be worth putting in the tutorials section if it is resolved as more ISPs seem to be giving out routers with minimal settings? Attached are screenshots of the DD-WRT Router [192.168.0.1] settings If any more info is needed just let me know. Thanks in advance. :-)

Hi Anyone know how to set-up the VPN with the Wii U?

Hey all I need some help. I am using a DD-WRT based router. I followed all the instruction on the setup page. I still am having problems changing my DNS from Germany to USA or any other country. I have tried to put different Static DNS IP's on the Router and still it is giving me a DSN of being in Germany. (By the way I am living in Germany it anyone is confused.) Is there some that i am missing and or not doing on the commands and or the Static DNS Ip's? Thank you for your time Jim

When connected to the VPN, mailinator.com is not reachable (other website can be reached). I tried switching to another servers, but it still couldn't be resolved. Disconnecting from VPN I can connect to that website. Could you help me?

I am trying to connect via a batch file: CLI.exe -netlock -advanced.windows.dns_force -login=<username>-password=<password> -connect -server -port=443 -protocol=UDP First thing to mention is that CLI.exe must be run as administrator in Win 8.1, if not the ARP flush fails. In the command line I can see "netlock activated" but if visit www.ipleak.net webrtc and dns is leaking. edit: I also have the problem with the GUI WebRTC and DNS is leaking.

Hello, After doing the reading on DNS leaks and using the ipleak.net site (nice tool), I found that one of my computers using a Windows 7 OS was subject to DNS leaks. I also found that the firewall I am using is not the most popular on these forums. I am using the Norton Smart Firewall which is part of the NIS package. After reviewing several pages and articles (with https://airvpn.org/topic/1713-win-mac-bsd-block-traffic-when-vpn-disconnects/?p=10343 being the most helpful, though slightly dated due to the new NIS interface), I was able to set up two rules. One for when the VPN was connected to only allow TCP/UDP traffic from a range of 10.4.0.0->10.9.255.255. The other to block traffic from the address of my LAN for when the VPN was not connected. With this set up, the computer checks out fine in ipleak.net. (Of course also had to make adjustments for WebRTC). However, I have one resulting issues I was wonder if anyone might be able to comment on. When I first turn on my computer, I have to disable my firewall before OpenVPN can establish the VPN connection. (I do not use EDDIE.) Once I am connected to the VPN, I can then re-enable the firewall and all works fine. Not the hardest step, but was trying to find a more seemless way to do this. Also as an aside, I only chose to allow TCP/UDP traffic when connected to the VPN, vice also allowing ICMP/ICMPv6. Are their any significant problems with the choice? I have playing with the settings for a bit, but have noticed any issue, but then definitely would not call myself the most savvy. Thanks for any comments.

I have set up AirVPN on my pfSense router with the help of the instructions I found here on this forum. Unfortunately I experience some DNS problems with the AirVPN DNS server 10.4.0.1. The AirVPN server is the first DNS (use VPN tunnel) and the other two OpenDNS server. Also the strict order option is set so se they are queried sequentially. I connect to german servers (UDP 443) but the problem not seems to be related to one certain server and may occur immediately after connecting to it or even after a day or two. Restarting the tunnel or the router itself fixes the problem, often needs a few tries. Surprisingly it is only a few websites that are affected and cannot resolve properly. Those are for example (ironically) airvpn.org, windowscentral.com, pandawill.com just to mention a few. If I omit AirVPN's DNS completely and only rely on the OpenDNS servers I not experience this issue at all and no DNS problems for weeks! I attached some information and would appreciate any help on this.

OS: Windows 7 32 bits I get a DNS checking failed when activating "Check if tunnel use Airvpn DNS" in Eddie 2.8.8 Eddie won't connect and try again and again...untill i cancel the connection and deactivate that DNS check it of course connects correctly. Is it an Eddie bug or Airvpn issue ? See a part of the log below that repeats when Eddie Disconnects, reconnects... . 2015.02.01 12:08:37 - OpenVPN > Initialization Sequence Completed I 2015.02.01 12:08:37 - Flushing DNS I 2015.02.01 12:08:37 - Checking route I 2015.02.01 12:08:37 - Checking DNS E 2015.02.01 12:08:37 - DNS checking failed. . 2015.02.01 12:08:37 - OpenVPN > MANAGEMENT: Client connected from [AF_INET]127.0.0.1:3100 ! 2015.02.01 12:08:37 - Disconnecting . 2015.02.01 12:08:37 - Management - Send 'signal SIGTERM'

I connect to AirVPN using the network-manager applet on Fedora 20 x64. I have a couple of ports forwarded, which are manually allowed in Fedora's firewall and entered into qBittorrent (latest v3.1.9-2). I have just noticed that while the connection never leaks DNS when used normally, as soon as qBittorrent is running my DNS leaks almost every time I test. Here is what happens once qBittorrent is open: Once qBittorrent is closed, the leaks stop. Does anyone have any ideas? As far as I knew DNS leaks were basically a Windows problem. Currently qBittorrent is set to use the tun0 interface only, and my network-manager settings are as follows: Ethernet: Connect automatically, IPv4 only, connect to AirVPN as soon as interface is up. AirVPN: Port 443 over UDP, no special settings after importing config files from Air's generator. The whole machine connects through an IPFire (Linux hardware firewall/router distro) box. Can anyone help shed some light on this please? Thanks in advance.

Hello! The idea of bringing this up is a result of many questions lately, that some devices or clients override OS settings and query their own DNS servers without the users permission. I would like to suggest a small enhancement, which will potentially prevent all user mistakes in the future, and will allow an even better VPN experience with less configuration. The idea is to have 2 additional options in the config generator section of the Client Area, where the user would be able to "opt-in" in case he wants the feature. One is something like "Force all applications use Air's VPN server", in which case you will have to add something like this: iptables -t nat -A PREROUTING -s 10.4.12.34 -p udp --dport 53 -j DNAT --to 10.4.0.1 iptables -t nat -A PREROUTING -s 10.4.12.34 -p tcp --dport 53 -j DNAT --to 10.4.0.1 The internal IP of the client is known to you, here is just examples of how I assume it should look on the server side. The second option in the Client Area, can be called something like "Prevent all potential DNS leaks, I will configure Air's DNS manually" Then, a rule like this can come in place: iptables -A OUTPUT -p udp -s 10.4.12.34 -d 10.0.0.0/8 --dport 53 -j ACCEPT iptables -A OUTPUT -p tcp -s 10.4.12.34 -d 10.0.0.0/8 --dport 53 -j ACCEPT iptables -A OUTPUT -p udp -s 10.4.12.34 --dport 53 -j DROP iptables -A OUTPUT -p tcp -s 10.4.12.34 --dport 53 -j DROP All the examples are made up, I am sure that a more elegant way of achieving this can take place, such as a special subnet for all users of each group. Today these methods are used in corporate VPNs mainly to enforce whitelisting/blacklisting of URLs, but I don't see a reason why we can't do the same here. Please share your comments zhang888