Search the Community

Hi, folks, I observe a strange behavior when trying to bypass DNS-based site blocking in Russia. The name flibusta.is gets unexpectedly resolved to the ban site lawfilter.ertelecom.ru. I use openvpn under Debian Linux. OpenVPN 2.5.0 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Oct 31 2020 Configuration files are downloaded from airvpn.org generator. By default, /etc/resolv.conf contains the following: nameserver 192.168.1.1 When I connect to VPN, the settings do not change. My browser (Firefox 84) is configured to use DNS over HTTPS, but I can also change /etc/resolv.conf to use the Cloudflare DNS: nameserver 1.1.1.1 Now, I run tcpdump to capture all DNS exchange and try to open flibusta.is in the browser. Here's what I get: 19:32:41.326041 Out ethertype IPv4 (0x0800), length 73: 10.7.213.47.41548 > 1.1.1.1.53: 38651+ A? flibusta.is. (29) 19:32:41.326052 Out ethertype IPv4 (0x0800), length 73: 10.7.213.47.41548 > 1.1.1.1.53: 2303+ AAAA? flibusta.is. (29) 19:32:41.345679 Out ethertype IPv4 (0x0800), length 84: 10.7.213.47.37238 > 1.1.1.1.53: 25045+ A? lawfilter.ertelecom.ru. (40) 19:32:41.345690 Out ethertype IPv4 (0x0800), length 84: 10.7.213.47.37238 > 1.1.1.1.53: 13267+ AAAA? lawfilter.ertelecom.ru. (40) 19:32:41.471163 In ethertype IPv4 (0x0800), length 100: 1.1.1.1.53 > 10.7.213.47.37238: 25045 1/0/0 A 188.186.157.49 (56) 19:32:41.619187 In ethertype IPv4 (0x0800), length 149: 1.1.1.1.53 > 10.7.213.47.41548: 2303 0/1/0 (105) 19:32:41.619205 In ethertype IPv4 (0x0800), length 128: 1.1.1.1.53 > 10.7.213.47.37238: 13267 0/1/0 (84) 19:32:41.619214 In ethertype IPv4 (0x0800), length 89: 1.1.1.1.53 > 10.7.213.47.41548: 38651 1/0/0 A 81.17.19.227 (45) 10.7.213.47 is the address of the VPN interface. The request seems to go through VPN to Cloudflare, but for some reason it resolves to lawfilter.ertelecom.ru. This response gets inserted between request and the correct response (the last line). But this doesn't happen every time. Sometimes, after re-establishing VPN connection, tcpdump captures the correct response: 19:53:46.028205 Out ethertype IPv4 (0x0800), length 73: 10.20.213.58.38277 > 1.1.1.1.53: 10615+ A? flibusta.is. (29) 19:53:46.028224 Out ethertype IPv4 (0x0800), length 73: 10.20.213.58.38277 > 1.1.1.1.53: 4978+ AAAA? flibusta.is. (29) 19:53:46.121195 In ethertype IPv4 (0x0800), length 89: 1.1.1.1.53 > 10.20.213.58.38277: 10615 1/0/0 A 81.17.19.227 (45) So, basically, there are two things I can't understand. First, why the browser seems to ignore DOH settings, sending requests via plain UDP. But it is not related to VPN, so, let's not bother ourselves with this one. The second question is how the DNS request sent via VPN gets a spoofed response from the provider's blocker? Am I simply doing something wrong?

Hey everyone, When ı try to connect airvpn, i can not connect. Turkey ISP servers don't allow using VPNs. What can ı do? Thanks.

Is there a way to block Local network connections? I'm thinking of scenarios like this. Router or portal or Firewall or ISP sets up it's own DNS MITM like over the Router IP like 192.168.0.100:53 So, in the cases AirVPN allows this IP even in network Lock and DNS leaks occurs. Or may be a HTTP SSH proxy attacks etc on the LAN computers which are not using AirVPN. So, to avoid scenarois like this and others, is there a way for people to block LAN connections?

The german livestream of rbb (part of ARD) can not be accessed with AirVPN (Hamal): http://rbb_live-lh.akamaihd.net/i/rbb_berlin@108248/master.m3u8 and http://mediathek.rbb-online.de/tv/live

Seems that Sony has started to either block or ban users with Air Exit Ip's or is having network issues of their own? I imagine that this is related to actual other accounts activities or maybe the number of active log ins from the same Ip if I had to guess... Not sure I would like to be able to access these services though. But, not being able to access this server to log into their services is is becoming more and more frequent over the last week. As seen here https://airvpn.org/routes/?q=https%3A%2F%2Faccount.sonyentertainmentnetwork.com And it may be more then just some "Bad users" getting Ip's banned as it seems that I can't resolve a number of their Ip's now unless their servers are really going down? A number of these servers where resolving just shortly ago.... As seen here https://airvpn.org/routes/?q=https%3A%2F%2Fstatus.playstation.com Please advice Thanks and Kind regards!

Hi! I feel like a noob asking this, but there is something I do not quite understand. I live in a country where a recent court order has instructed the ISP's to block several sites due to piracy-allegations. I sometimes browse these sites, and belived this to not be a problem since I am using AirVPN. Still; when I try to access the site in question, I am told by my local ISP that this site is blocked due to the earlier mentioned court order. This surprised me, because I belived that my ISP could not see which IP-adresses I tried to access except the AirVPN-address? I searched the web and found suggestions to help, example flushing the DNS, changing the proxy settings etc. but alas - no help. What am I missing here?!

Just found out that Paysafecard didn't carry out my payment (I'm recently in Germany, was connected via Aquilae and used a Paysafecard purchased in Germany). A little message told me that I need to disable my IP anonymizer before I could proceed. ​ ​So much for anonymized payment methods.

While using AirVPN I only want a single application (my browser) to have access to the internet. Should any other internet related application startup I do not want it to connect to the internet. Is there a way to block all applications except those I specify should have access?