Search the Community

Hi, I just bought a subscription to airvpn but unfortunately I can't connect to internet I am on Ubuntu 16.04.1. My attempts : - I tried with the terminal. here is the log : pc@computer:~/DL$ openvpn AirVPN_BE-Brussels_Diadema_UDP-443.ovpn Fri Dec 30 23:50:51 2016 OpenVPN 2.3.10 i686-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb 2 2016 Fri Dec 30 23:50:51 2016 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08 Fri Dec 30 23:50:51 2016 Control Channel Authentication: tls-auth using INLINE static key file Fri Dec 30 23:50:51 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Fri Dec 30 23:50:51 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Fri Dec 30 23:50:51 2016 Socket Buffers: R=[163840->163840] S=[163840->163840] Fri Dec 30 23:50:51 2016 UDPv4 link local: [undef] Fri Dec 30 23:50:51 2016 UDPv4 link remote: [AF_INET]194.187.251.162:443 Fri Dec 30 23:50:51 2016 TLS: Initial packet from [AF_INET]194.187.251.162:443, sid=f969fb38 f697c7be Fri Dec 30 23:50:51 2016 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org Fri Dec 30 23:50:51 2016 Validating certificate key usage Fri Dec 30 23:50:51 2016 ++ Certificate has key usage 00a0, expects 00a0 Fri Dec 30 23:50:51 2016 VERIFY KU OK Fri Dec 30 23:50:51 2016 Validating certificate extended key usage Fri Dec 30 23:50:51 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Fri Dec 30 23:50:51 2016 VERIFY EKU OK Fri Dec 30 23:50:51 2016 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org Fri Dec 30 23:50:52 2016 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Fri Dec 30 23:50:52 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Fri Dec 30 23:50:52 2016 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Fri Dec 30 23:50:52 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Fri Dec 30 23:50:52 2016 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Fri Dec 30 23:50:52 2016 [server] Peer Connection Initiated with [AF_INET]194.187.251.162:443 Fri Dec 30 23:50:54 2016 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Fri Dec 30 23:50:54 2016 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.8.248 255.255.0.0' Fri Dec 30 23:50:54 2016 OPTIONS IMPORT: timers and/or timeouts modified Fri Dec 30 23:50:54 2016 OPTIONS IMPORT: LZO parms modified Fri Dec 30 23:50:54 2016 OPTIONS IMPORT: --ifconfig/up options modified Fri Dec 30 23:50:54 2016 OPTIONS IMPORT: route options modified Fri Dec 30 23:50:54 2016 OPTIONS IMPORT: route-related options modified Fri Dec 30 23:50:54 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Fri Dec 30 23:50:54 2016 ROUTE_GATEWAY 192.168.1.254/255.255.255.0 IFACE=wlp6s0 HWADDR=xx:xx:xx:xx:xx:xx Fri Dec 30 23:50:54 2016 ERROR: Cannot ioctl TUNSETIFF tun: Operation not permitted (errno=1) Fri Dec 30 23:50:54 2016 Exiting due to fatal error - I tried with the client. The .ded (stable AND experimental) didn't want to install on the system. - I tried with portable client (stable AND experimental) but when I launch "airvpn" nothing happens. - I tried with the network-manager. Importing the config file was a success and I passed to connect to the VPN ..... Yes, but all websites are unreachable (DNS issue because I can ping a specific IP) : # I wrote in the settings in the networkmanager the dns server (10.4.0.1). Same issue : DNS does not work. # I changed the nameserver in the resolv.conf .... but same thing the DNS doe not do the job. So i need help. What can I do now ? Thanks A new member a bit confused

Last week I built Eddie 2.11.x from your DEB file on Ubuntu Xenial, with no problems. Over the weekend I began testing but soon ran into a bug whereby the client would try one server after another but fail with TAP/TUN problems. I sent you the logfile appended to support request 66876, but have not heard back so far. See appended file airvpn-linux-client-OUT for more information. The graphic interface is nice but I would like to build a CLI version without the overhead of the GUI. I have cloned the sources from Github. I need a way to toggle the build process into producing a cli only version. In a conventional linux build system there would be a flag in the toplevel Makefile to do this. However that will not work in this case as the build process here is completely opaque. Can you please provide me with a means to do this, or as a last resort, provide me with the source code for src/Deploy/bin/Release/Deploy.exe? Perhaps you have already produced a CLI only version of Eddie 2.11 somewhere? airvpn-linux-client-OUT.txt

I am running a headless ubuntu server v16.04 on raspberry pi, everything works fine. Now I am trying to setup openvpn client with AirVpn, can anybody provide some instructions on how to do it ?

Usage of operating systems is like living in countries: There are laws, things you may or may not do. Also, there are people, talking one or two certain languages, behaving in a certain way. Operating systems are like that: There are restrictions on the system what you can do and what is more difficult. And there is software, supporting certain languages, behaving in a certain way. You can of course decide to use two or more OSes, but it's like renting a holiday cottage and visiting it a few times a year. There's always home, as there's always a primary OS. I chose this simile because it reflects a bit of myself. I lived a certain amount of my lifetime in Russia, and now I live in Germany. Two different legal systems, two different kinds of people. As it is with switching my primary OS: I've been using Windows for a certain amount of time and now I switched to Linux. Why? Windows more and more gives me the feeling that it's nothing but a machine for procrastination and entertainment (besides being a cash cow for Microsoft). Like Facebook, where scrolling through your feed gives neither knowledge nor wisdom, it's only good at burning time. Also, Microsoft's recent publications marked them the enemy for me: What reputable, customer-centered company would publically say "Our goal is to have 1 billion Windows (10) installations by 2018"? It just shows me that Windows is no longer the OS "you want to fall in love with". Also, when Windows 10 was announced along with the Windows-as-a-Service plan, I really started to question my habits. I would not want to pay for an OS which spys on people and restricts both your creativity and productivity. My intention with this post is to show how easy or difficult it is to switch to Linux and what steps it involved for me so you get an idea how much work is needed. The thread can then be used for discussions. The first decision one needs to make, besides deciding to actually switch, is which distribution one's going to use (and which desktop environment but that's another thing). Since I work with SUSE Linux Exterprise in the company, I wanted to use OpenSUSE. So I downloaded a Live CD of it, wrote it on a USB drive and attempted to start it. It didn't work, it hang on a "Assuming drive cache: write through" message referencing the USB drive. To see whether it's a problem with USB, I went ahead and installed it. This time, it worked, and I was welcomed with GNOME. And while I was making my first steps in this new world.. it hung itself up. Just like that. It still did after several reboots. So I was thinking, maybe it was a driver issue because I experienced dozens of those in the past. So I downloaded Ubuntu to see if this would work, and the Live CD did. I didn't install it, though. It's popular and maybe it has the highest compatibility with different kinds of hardware (due to easy access to proprietary drivers) but I thought to myself, I don't want a distribution aimed at beginners. I also used Linux Mint on my netbook and found it too much pre-configured (but Cinnamon was cool!). So I decided to go with Debian out of a few reasons. I like how Debian puts you in control while you don't need to configure everything in detail.There's this huge software repository, of course.It's well documented and supported.I also like Debian's mindset about free software, like the DFSG (there also were some guidelines on behavior inside the community or something like it but I don't find the links anymore ).Installed, booted, same hanging. Here the DE would "crash" and show a shell with one repeated message from nouveau: "GPU lock". This is where I knew it has to be the open source driver causing this; it forced me to use the proprietary driver for now. Its installation could be done in two ways: By downloading it from nVidias homepage or from Debian's non-free repos. I chose the latter since it was easier to set up. I even found a guide for this. Anyway, the drivers fixed the only hardware problem I had with switching. Next steps included the configuration of the OS for production. Setting up Cinnamon This included spawning a few desklets and altering the taskbar. xkcd on your desktop, what could be cooler than being greeted with one of these when you log in? And of course a system monitor. Mounting the other drives I reserved a 500 GiB partition for Linux, but there's still the other half of the hard drive plus my Windows 8.1 SSD and a 2 TiB media drive, all of which I wanted to have access to from Linux. Mounting the SSD and the media drive was easy and I "hardcoded" it directly into /etc/fstab. But the other half of the hard drive caused a small error. The thing is, it still contains a working Windows installation which I kept there to allow troubleshooting the SSD in case it failed. mount told me it wouldn't mount the partition in read-write mode because Windows was allegedly not shut down completely. I don't know what the Windows 8 bootloader is doing but going through man mount I found an option to clear the hibernation cache or something which did the trick.Installing and setting up programs I needed I was using mostly open source and cross-platform software on Windows, in general software which was also available on Linux. Even migrating settings sometimes involved a simple move command (like Firefox and Thunderbird profiles). Also installed Steam and Wine. And Steam on Wine, though I use this combination in very rare occasions. I was very surprised to see almost all games I played on Windows were available as Linux builds on Steam. So much for "Linux is not ready for gaming". Also: openvpn and airvpn, both of which work much better than on Windows in terms of stability, qbittorrent, vlc, PDF editing tools, a number of others as well. Some of these apps were installed to replace already included things, for example zsh instead of bash.Overall experience Linux is a wonderful desktop OS. But it depends on many points how easy or difficult it will be for you. Sometimes the switch fails because of unsupported hardware. As you have read, the open source driver nouveau has its problems with certain nVidia graphics cards. When I searched for this on the internet I found out I am not the only one with this: nVidia don't support nouveau like they supported nv so most work on nouveau had to be done by reverse engineering their proprietary drivers which involved much work and time I imagine.Most people at my age don't switch because they use Windows for gaming, especially for playing the notorious "triple A" games which are traditionally Windows/DirectX only, using the newest tech hardware and software can offer. I can understand this point of view, even I still have Windows on my SSD which I see as a last reserve when Wine fails. There was no reason to boot Windows yet so update-wise it's like 60 days behind. But in most cases it fails because people have no experience with Linux. Most of them expect it to work like Windows. "Windows != Linux" is often cited in this case - Windows is not Linux. Linux does not aim to be like Windows, Linux also doesn't want to be a replacement for Windows. Understanding this is key if you're new to it. If you do the switch, be ready to read. Like, a lot. As for me, I had experience with Linux before. The hardware problem was a small one, multiple smaller complications arose, ensued, were overcome and I don't focus my time on gaming. My choice is clear. What about you? Planning on switching? Maybe you already use Linux? If yes, tell us which distribution and desktop you use and why. Give some tips for "potential switchers", for newbies and for pros if you like. Windows you ditch, to Linux you switch. Edit: I have stumbled upon my second self on Reddit who wrote this:

Hello there ​ ​I have setup in pfsense airvpn DNS Resolver and I am trying to setup internal DNS server with Ubuntu server. In order to do so I need a DNS Forwarder. How can I use airvpn DNS ? so I won't have any dns leaks from my internal network ​Thank you ​ ​

I was downloaded the software for my distro, but i cant seem to get it installed correct. Error Message : ERROR DEPENDENCE MAY NOT FULFILLED LIBMONO-SYSTEM RUNTIME 2.0 CIL

Hi there! I installed the Eddie Client on my (headless) Ubuntu Server. I managed to start a VPN connection using the 'airvpn -cli' command, giving some arguments like -login -password -connect -server -port and -protocol However, the up and down speed aren't as good as I expected. As I read, increasing the buffer size could improve the speeds. In the GUI version of Eddie (which I tested on my Laptop) you can set the TCP/UDP buffer size (Preferences -> Advanced -> General). Is there a way to set these buffer sizes using the command line edition of Eddie, too? I couldn't find an appropriate command in the documentation. BTW: Is there a command to disconnect the VPN via the command line? Thank a lot & cheers

Hello! My system is a fresh Ubuntu 16.04.1 64 bit. network-manager-openvpn and network-manager-openvpn-gnome packages are installed. I created my .ovpn file using Config Generator. I added this file as a VPN connection using NetworkManager. It can connect to VPN server successfully, however I cannot connect to anywhere. $ ping google.com ping: unknown host google.com $ sudo openvpn --config AirVPN_Netherlands_UDP-443.ovpn Thu Oct 6 19:31:46 2016 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb 2 2016 ... ... Thu Oct 6 19:31:54 2016 Initialization Sequence Completed $ cat /etc/network/interfaces # interfaces(5) file used by ifup(8) and ifdown(8) auto lo iface lo inet loopback $ cat /etc/resolv.conf # Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8) # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN nameserver 127.0.1.1

hey guys, with ufw enabled, vpn connects but wget and web pages don't resolve: $uname -a Linux 4.4.0-38-generic #57-Ubuntu SMP Tue Sep 6 2016 x86_64 x86_64 x86_64 GNU/Linux $ufw reset $ufw allow out on wlp1s0 to 213.152.161.180 port 443 proto udp $ufw allow out on tun0 $ufw status verbose Status: active Logging: on (low) Default: deny (incoming), deny (outgoing), disabled (routed) New profiles: skip To Action From -- ------ ---- 213.152.161.180 443/udp ALLOW OUT Anywhere on wlp1s0 # NL-Alblasserdam_Alchiba_UDP-443.ovpn Anywhere ALLOW OUT Anywhere on tun0 # tun0 $openvpn --config ~/VPN/NL-Alblasserdam_Alchiba_UDP-443.ovpn Mon Oct 3 2016 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Feb 2 2016 Mon Oct 3 2016 library versions: OpenSSL 1.0.2g 1 Mar 2016, LZO 2.08 Mon Oct 3 2016 Control Channel Authentication: tls-auth using INLINE static key file Mon Oct 3 2016 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Oct 3 2016 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Oct 3 2016 Socket Buffers: R=[212992->212992] S=[212992->212992] Mon Oct 3 2016 UDPv4 link local: [undef] Mon Oct 3 2016 UDPv4 link remote: [AF_INET]213.152.161.180:443 Mon Oct 3 2016 TLS: Initial packet from [AF_INET]213.152.161.180:443, sid=b2d0c912 4505e529 Mon Oct 3 2016 VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org Mon Oct 3 2016 Validating certificate key usage Mon Oct 3 2016 ++ Certificate has key usage 00a0, expects 00a0 Mon Oct 3 2016 VERIFY KU OK Mon Oct 3 2016 Validating certificate extended key usage Mon Oct 3 2016 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication Mon Oct 3 2016 VERIFY EKU OK Mon Oct 3 2016 VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org Mon Oct 3 2016 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Mon Oct 3 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Oct 3 2016 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key Mon Oct 3 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication Mon Oct 3 2016 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA Mon Oct 3 2016 [server] Peer Connection Initiated with [AF_INET]213.152.161.180:443 Mon Oct 3 2016 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1) Mon Oct 3 2016 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.48.174 255.255.0.0' Mon Oct 3 2016 OPTIONS IMPORT: timers and/or timeouts modified Mon Oct 3 2016 OPTIONS IMPORT: LZO parms modified Mon Oct 3 2016 OPTIONS IMPORT: --ifconfig/up options modified Mon Oct 3 2016 OPTIONS IMPORT: route options modified Mon Oct 3 2016 OPTIONS IMPORT: route-related options modified Mon Oct 3 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified Mon Oct 3 2016 ROUTE_GATEWAY 10.42.0.1/255.255.255.0 IFACE=wlp1s0 HWADDR=xx:xx:xx:xx:xx:xx Mon Oct 3 2016 TUN/TAP device tun0 opened Mon Oct 3 2016 TUN/TAP TX queue length set to 100 Mon Oct 3 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0 Mon Oct 3 2016 /sbin/ip link set dev tun0 up mtu 1500 Mon Oct 3 2016 /sbin/ip addr add dev tun0 10.4.48.174/16 broadcast 10.4.255.255 Mon Oct 3 2016 /sbin/ip route add 213.152.161.180/32 via 10.42.0.1 Mon Oct 3 2016 /sbin/ip route add 0.0.0.0/1 via 10.4.0.1 Mon Oct 3 2016 /sbin/ip route add 128.0.0.0/1 via 10.4.0.1 Mon Oct 3 2016 Initialization Sequence Completed $route -n Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.4.0.1 128.0.0.0 UG 0 0 0 tun0 0.0.0.0 10.42.0.1 0.0.0.0 UG 600 0 0 wlp1s0 10.4.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun0 10.42.0.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp1s0 128.0.0.0 10.4.0.1 128.0.0.0 UG 0 0 0 tun0 169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 wlp1s0 213.152.161.180 10.42.0.1 255.255.255.255 UGH 0 0 0 wlp1s0 $ip addr 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: wlp1s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 link/ether xx:xx:xx:xx:xx:xx brd ff:ff:ff:ff:ff:ff inet 10.42.0.9/24 brd 10.42.0.255 scope global wlp1s0 valid_lft forever preferred_lft forever inet6 <removed>/64 scope link valid_lft forever preferred_lft forever 3: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN group default qlen 100 link/none inet 10.4.48.174/16 brd 10.4.255.255 scope global tun0 valid_lft forever preferred_lft forever inet6 <removed>/64 scope link flags 800 valid_lft forever preferred_lft forever i don't usually touch my iptables directly but here's the output: $iptables -L Chain INPUT (policy DROP) target prot opt source destination ufw-before-logging-input all -- anywhere anywhere ufw-before-input all -- anywhere anywhere ufw-after-input all -- anywhere anywhere ufw-after-logging-input all -- anywhere anywhere ufw-reject-input all -- anywhere anywhere ufw-track-input all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination ufw-before-logging-forward all -- anywhere anywhere ufw-before-forward all -- anywhere anywhere ufw-after-forward all -- anywhere anywhere ufw-after-logging-forward all -- anywhere anywhere ufw-reject-forward all -- anywhere anywhere ufw-track-forward all -- anywhere anywhere Chain OUTPUT (policy DROP) target prot opt source destination ufw-before-logging-output all -- anywhere anywhere ufw-before-output all -- anywhere anywhere ufw-after-output all -- anywhere anywhere ufw-after-logging-output all -- anywhere anywhere ufw-reject-output all -- anywhere anywhere ufw-track-output all -- anywhere anywhere Chain ufw-after-forward (1 references) target prot opt source destination Chain ufw-after-input (1 references) target prot opt source destination ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-ns ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:netbios-dgm ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:netbios-ssn ufw-skip-to-policy-input tcp -- anywhere anywhere tcp dpt:microsoft-ds ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootps ufw-skip-to-policy-input udp -- anywhere anywhere udp dpt:bootpc ufw-skip-to-policy-input all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST Chain ufw-after-logging-forward (1 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] " Chain ufw-after-logging-input (1 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] " Chain ufw-after-logging-output (1 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] " Chain ufw-after-output (1 references) target prot opt source destination Chain ufw-before-forward (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem ACCEPT icmp -- anywhere anywhere icmp echo-request ufw-user-forward all -- anywhere anywhere Chain ufw-before-input (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ufw-logging-deny all -- anywhere anywhere ctstate INVALID DROP all -- anywhere anywhere ctstate INVALID ACCEPT icmp -- anywhere anywhere icmp destination-unreachable ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp time-exceeded ACCEPT icmp -- anywhere anywhere icmp parameter-problem ACCEPT icmp -- anywhere anywhere icmp echo-request ACCEPT udp -- anywhere anywhere udp spt:bootps dpt:bootpc ufw-not-local all -- anywhere anywhere ACCEPT udp -- anywhere 224.0.0.251 udp dpt:mdns ACCEPT udp -- anywhere 239.255.255.250 udp dpt:1900 ufw-user-input all -- anywhere anywhere Chain ufw-before-logging-forward (1 references) target prot opt source destination Chain ufw-before-logging-input (1 references) target prot opt source destination Chain ufw-before-logging-output (1 references) target prot opt source destination Chain ufw-before-output (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED ufw-user-output all -- anywhere anywhere Chain ufw-logging-allow (0 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW ALLOW] " Chain ufw-logging-deny (2 references) target prot opt source destination RETURN all -- anywhere anywhere ctstate INVALID limit: avg 3/min burst 10 LOG all -- anywhere anywhere limit: avg 3/min burst 10 LOG level warning prefix "[UFW BLOCK] " Chain ufw-not-local (1 references) target prot opt source destination RETURN all -- anywhere anywhere ADDRTYPE match dst-type LOCAL RETURN all -- anywhere anywhere ADDRTYPE match dst-type MULTICAST RETURN all -- anywhere anywhere ADDRTYPE match dst-type BROADCAST ufw-logging-deny all -- anywhere anywhere limit: avg 3/min burst 10 DROP all -- anywhere anywhere Chain ufw-reject-forward (1 references) target prot opt source destination Chain ufw-reject-input (1 references) target prot opt source destination Chain ufw-reject-output (1 references) target prot opt source destination Chain ufw-skip-to-policy-forward (0 references) target prot opt source destination DROP all -- anywhere anywhere Chain ufw-skip-to-policy-input (7 references) target prot opt source destination DROP all -- anywhere anywhere Chain ufw-skip-to-policy-output (0 references) target prot opt source destination DROP all -- anywhere anywhere Chain ufw-track-forward (1 references) target prot opt source destination Chain ufw-track-input (1 references) target prot opt source destination Chain ufw-track-output (1 references) target prot opt source destination Chain ufw-user-forward (1 references) target prot opt source destination Chain ufw-user-input (1 references) target prot opt source destination Chain ufw-user-limit (0 references) target prot opt source destination LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning prefix "[UFW LIMIT BLOCK] " REJECT all -- anywhere anywhere reject-with icmp-port-unreachable Chain ufw-user-limit-accept (0 references) target prot opt source destination ACCEPT all -- anywhere anywhere Chain ufw-user-logging-forward (0 references) target prot opt source destination Chain ufw-user-logging-input (0 references) target prot opt source destination Chain ufw-user-logging-output (0 references) target prot opt source destination Chain ufw-user-output (1 references) target prot opt source destination ACCEPT udp -- anywhere 213.152.161.180 udp dpt:https ACCEPT all -- anywhere anywhere any help would be great. let me know if you need anymore info.

Hello, I have recently encountered problems with connecting to AirVPN via the network manager in ubuntu 16.04. I followed the guide correctly and the gnome network manager plugin is installed and works correctly. I have downloaded the correct configs and separate files, and everything is configured to work correctly. When I use firefox or even ping www.google.com i get no response and firefox doesnt connect, even though i get a message that the VPN connection is established successfully. Any fix for this? Could this be related to DNS issues or something ?

Hey, I have been using the Portable version of Eddie on my Ubuntu 16.04 installation with no problems, ever since the native Ubuntu client stopped working on 16.04 a few months ago. Earlier today, I booted my laptop up after about two weeks and got the recent set of updates for Ubuntu 16.04, which I've been running since April 2016. Post installing the updates and restarting the laptop, I tried running the portable Eddie 2.10 client by clicking the shortcut I've set up on the launcher. Nothing happened, no error message, no freeze and in fact no other sign that the icon had even been clicked. After restarting the computer, I again tried clicking on the launcher shortcut a few more times to no response. Since I had made no changes (or even turned on the laptop) since the last two weeks, I thought the recent set of updates to Ubuntu might have something to do with Eddie not launching or even giving an error. So I explored the AirVPN forums and came across these two links: https://airvpn.org/topic/17810-installing-portable-airvpn-client-version/ and https://airvpn.org/topic/18366-airvpn-portable-archlinux-x64-not-running/ that dicuss this problem. In order to follow the instructions in the above two links, I downloaded a new copy of Eddie 2.10 Portable client, extracted it on the Desktop and attempted to launch it in the Terminal (something I never had to do before) The output (which is similar to the errors described in the two links above) was as follows: gtnoob@Anonymous-Laptop:~/Desktop/airvpn_linux_x64_portable$ '/home/gtnoob/Desktop/airvpn_linux_x64_portable/airvpn' Unhandled Exception: System.TypeInitializationException: An exception was thrown by the type initializer for Mono.Unix.Native.Syscall ---> System.DllNotFoundException: $mono_libdir/libMonoPosixHelper.so at (wrapper managed-to-native) Mono.Unix.Native.Syscall:_L_ctermid () at Mono.Unix.Native.Syscall..cctor () [0x00000] in <filename unknown>:0 --- End of inner exception stack trace --- at AirVPN.Platforms.Linux.GetExecutablePath () [0x00000] in <filename unknown>:0 at AirVPN.Core.Platform.GetProgramFolder () [0x00000] in <filename unknown>:0 at AirVPN.Core.Engine.Initialization () [0x00000] in <filename unknown>:0 at AirVPN.UI.Linux.Program.Main () [0x00000] in <filename unknown>:0 [ERROR] FATAL UNHANDLED EXCEPTION: System.TypeInitializationException: An exception was thrown by the type initializer for Mono.Unix.Native.Syscall ---> System.DllNotFoundException: $mono_libdir/libMonoPosixHelper.so at (wrapper managed-to-native) Mono.Unix.Native.Syscall:_L_ctermid () at Mono.Unix.Native.Syscall..cctor () [0x00000] in <filename unknown>:0 --- End of inner exception stack trace --- at AirVPN.Platforms.Linux.GetExecutablePath () [0x00000] in <filename unknown>:0 at AirVPN.Core.Platform.GetProgramFolder () [0x00000] in <filename unknown>:0 at AirVPN.Core.Engine.Initialization () [0x00000] in <filename unknown>:0 at AirVPN.UI.Linux.Program.Main () [0x00000] in <filename unknown>:0 This error is almost the same as the error in the above two posts. The solution to the above error given in the first post linked above was to run the following command: sudo ln -s '/path/to/airvpn_linux_x64_portable/libMonoPosixHelper.so' '/usr/lib/libMonoPosixHelper.so' when I ran the command, after changing the path to the correct folder on my Dekstop, I got the following error: ln: failed to create symbolic link '/usr/lib/libMonoPosixHelper.so': File exists So essentially, the solution given in the first post linked above does not seem to work for me. Nothing else I've tried seems to work either. Clearly, something in the recent set of updates seems to have broken the Eddie 2.10 Portable Client from working on Ubuntu 16.04. I would greatly appreciate any help on how I could make this work! I am willing to provide any logs, information or time that may be needed for this to work. Thanks a ton for reading this rather long post all the way to the end and hope we can find a quick and effective solution (and get a new native client) soon!

I'm not sure where to start on this one tbh. I was sat looking at my comp the other day and came up with the idea of using my router firewall (multi OS boot PC) to reject the majority of unwanted traffic. At the moment on my linux mint install (I'm very new to linux - 2 weeks) this is done by iptables and similar setup on windows OS. With windows this isn't a problem as the tap adapter produces a MAC but on my linux install it uses Tun masquerading as my eth adapter IP/no MAC. I should probably first ask is there a need - it would make life easier and rejects traffic at the router reducing network load, a second(1st) line of leak defence if an accidental change is made? I can't setup a firewall rule on my router (non wrt/tomato) that will give the restrictions needed without a separate MAC or IP to my physical adapter. I have tried to setup a Tap adapter on my linux install and ultimately failed. I have tried (linux mint) using gnome network manager (bridge utils installed) ticking the box use tap and downloaded Airvpn config files (no extra lines at point of download) replacing the lines in the file after putting in directory 'dev tun' with 'dev tap0' along with bridge ip's etc and without. I did read somewhere I may need to change 'update-resolv-conf'... Basically I'm out of my depth without help at this stage and I didn't want to make the huge number of changes some articles I read gave guidance for without further advice and guidance. In summary: 1- Will this indeed work well as a second leak protection measure? 2- Is it worth the effort? 3- Thoughts on the idea? 4- How do I change to use a Tap instead of tun with minimal/succinct changes? IF this makes no sense at all, please feel free to pull me up on it

So I'm running Ubuntu-MATE 16.04 and I've installed network-manager-openvpn-gnome, downloaded the certs. Added Air to my list of VPN's. All seems to work fine, I can connect and get the message that I have connected, however I cannot connect to any website, it just comes up Resolving host and then states that the site cannot be reached. Also on a side note, the .deb package is busted.

So just installed Ubuntu-MATE 16.04 and then re-setup airvpn. But I'm having trouble, I can connect fine but but don't the browser doesn't resolve a host. I downloaded the config file, install the network manager and imported the files. If I go via the terminal the connection works. It used to work in 15.10.

Hey, So I am trying to install Eddie on the new Ubuntu 16.04 LTS release and am getting the following error. Package Dependencies could not be resolved. Dependency is not satisfiable libmono-system-runtime2.0-cil. I tried installing that dependency and got the following message: Package libmono-system-runtime2.0-cil is not available, but is referred to by another package.This may mean that the package is missing, has been obsoleted, oris only available from another sourceHowever the following packages replace it: mono-reference-assemblies-2.0 mono-devel Installing the two replacement packages doesn't solve the problem either. Is there anything I can do to fix this? Thank you!

I bought an Ubuntu phone mainly because of privacy concerns I have with IOS & Android. I was disappointed to see that they don't have the built in support for Network Manager like the Ubuntu desktop does, is it possible to run Airvpn on the Ubuntu EQ5 phone?

Hey. I'm running OpenVPN 2.3.2 on Ubuntu server 14.04 in a VirtualBox 5.0.14 instance on a Win-64 box to connect to AirVPN using the config file generated from the AirVPN site. The VirtualBox instance is bridged to my host NIC using a PCnet-FAST III driver in Ubuntu. Set to auto-start with the AirVPN config file as the default in /etc/openvpn so I control it with service stop / start. The tunnel will work for somewhere between 1 and 6 hours and then it will remain established but no traffic will move through it. I've tried adding keepalive 10 60 to the config but no change. I've anecdotally seen that it could be related to interruption in the internet connection. How can I either a. get the openvpn service to withstand internet connectivity interruptions or b. cron a script to test and if fail restart the openvpn service. FYI I'm reasonably strong technically but my Linux skill is newbie.

I've setup a Ubuntu 15.10 64bit server as a VM for my torrenting, I'm running openvpn from the command line using a config file generated from this site. When my torrents are running I see a lot of error like below: I've disabled port forwarding on my router just to check if that was causing an issue but it doesn't seem to make a difference. I've tested downloading a torrent with openvpn running on my physical laptop using the same config file and on a Xubuntu VM and I only this error once ever few minutes so its definitely something on the Ubuntu server VM that's causing the problem. Any ideas what the issue is?

Hi, I've got a weird problem that I can't seem to solve: I'm running Ubuntu Gnome 15.10. I have installed the airvpn client from the .deb package and its running normally. But many websites won't load completely. for example facebook just loads most of the page elements but won't load the feed if i scroll down. other pages have similar problems or sometimes won't load at all. As soon as I disconnect, everything runs smoothly again. It happens with every server location, every browser I have tried and every kind of dns sever setting. I also tried it on ubuntu 14.04 just to make sure. same thing again. (I've been using airvpn on windows for a long time without problems) I disabled the firewall and my ubuntu is a fresh install. Maybe I'm missing something here, but I can't figure out what to do. Any help would be appreciated

Hi, I've got a weird problem that I can't seem to solve: I'm running Ubuntu Gnome 15.10. I have installed the airvpn client from the .deb package and its running normally. But many websites won't load completely. for example facebook just loads most of the page elements but won't load the feed if i scroll down. other pages have similar problems or sometimes won't load at all. As soon as I disconnect, everything runs smoothly again. It happens with every server location, every browser I have tried and every kind of dns sever setting. I also tried it on ubuntu 14.04 just to make sure. same thing again. (I've been using airvpn on windows for a long time without problems) I disabled the firewall and my ubuntu is a fresh install. Maybe I'm missing something here, but I can't figure out what to do. Any help would be appreciated

I swear I have searched and am unable to find a solution there or on my own. Issue: I have Plex server running on an Ubuntu 15.10 machine and had ports in my router and airvpn configured where it has been working for quite some time. it recently all stopped. I am unable to get plex to properly connect again. Config: Ubuntu 15.10 using OpenVPN to connect to airvpn service. AirVPN using random external port, currently 63525 to local port 32400. Router configured to pass external 32400 to internal 32400. No firewall configured in ubuntu. Errors: Plex will not conenct: Private 172.16.1.10 : 32400 <-- Public 94.100.23.163 : 63525 X Internet. Whenb clicking check under TCP test in AirVPN client area I get error 110 connection time out. Thank you for any help.

Hello, I'm having a really weird issue. I initially had ufw setup, but my speeds were horrendous. Pings all worked well everywhere with good latency, but connecting (www, ssh, etc) to anything took forever! After trying many different servers I disabled my firewall, and BAM speeds were excellent. So I said screw it, lets try the network lock on the AirVPN GUI and there we go again with incredibly slow speeds. I'm running Ubuntu 15.10 if that matters, I'm all out of ideas any assistance would be appreciated as I really don't want to leave the firewall off.

Hello, on my Windows machine everything works fine, but on my Ubuntu 14.04 64bit desktop the installation of the .deb-package fails with: > airvpn depends on: > libmono-system-runtime2.0-cil (should not be installed)> libmono-winforms2.0-cil (should not be installed)> libmono-corlib2.0-cil (should not be installed)> openvpn (should not be installed)> stunnel4 (should not be installed) can I force the installation of those packages without harming my setup? Thanks

Hello. I am brand new to using mono. Been using Arch Linux a long time though. I installed the package from the aur and was wondering if there is any way to increase the font size? I am having a hard time reading it (my eyes aren't what they used to be). Does this require the program be recompiled? I don't mind hacking on it to get the desired outcome but I definitely need some help with that. While we are on that subject is there any way to theme this application differently. I did a search for fonts on this forum and didn't see any similar topics. When searching online I did not find anything mono theme related besides gtk themes with mono in the name hahaha. Thanks for reading.

I am trying to get port forwarding working but it isn't. OS is Ubuntu 14.04 LTS. I'm running ssh on a non-standard port (lets call it 1234). I am connected to airvpn.org fine, and "checkip.org" shows my IP as what it should be. I forward port 1234 tcp/udp to 1234 localhost. From my box, I can "ssh -p 1234 user@localhost" fine, so I'm pretty sure sshd is listening there. I can also "ssh -p 1234 user@192.168.1.100", the static IP my machine has. That works fine. However, I cannot ssh to the airvpn ip at 1234, nor does "canyouseeme.org" show that port is open. I have also tried this on another non-ssh service (subsonic). I can get to my subsonic instance on port 33333 (for example) from within my lan, but not through the IP that AIRVPN says I'm using. I should note that this was all working recently - I switched to Ubuntu (from Mint), and now it's not, but because I can't see that port open with canyouseeme.org, I'm not sure it's the OS switch that is the issue. I can get to both ssh and subsonic from other machines on my LAN via the static IP. My router is not doing anything with any of these ports. Thoughts on what to try next welcome.