Entry/exit IP addresses

[dwright 25]

Hi, I read an interview with Air here. It states that:

 

All the VPN servers have separate entry and exit-IP addresses, to prevent some types of dangerous correlation attacks which some VPN services are vulnerable to.

 

May I ask, do the different IP addresses indicate completely separate entry and exit servers? If so, are they always nearby each other, or can they be geographically distant? Is this a different technology from the anti-geolocation multihop feature?

[6501166996442015 35]

No, it just means that incoming traffic is handled with one IP address, and outgoing traffic is handled with another IP address. It's still the same machine, but it has a red entry door and a blue exit door.

 

The anti-geolocation feature works by DNS hopping. It means that one DNS in country A points to another DNS in country B, thereby the website doesn't know the origin source of the request.

[telemus 16]

Hi there.

I've been puzzling over this, and I think you have answered my question.

I looked in eddie and saw the entry ip as just one digit different from the exit ip....indicating the same box. That would make a correlation attack theoretically possible simple, if the adversary knows that happens and they have sufficient horse power.

Is there anyway to select an entry server in one country and also, as I do now, my preferred exit server?

May be I have this wrong - still learning this stuff.

Thanks for your time.

[telemus 16]

Hello there.

I am not sure if this thread is the right one (not even sure how to even search for a thread to describe this event).

This morning when I logged on to air - and selected a UK exit, I was astonished to find that when I did an ipleak test, it resolved to a bunch of servers in the US. I tried another air UK exit and received a similar result.

On my third attempt, I tried another UK exist server and the test showed I was apparently exiting in the UK, as I wanted.

The air gui in all cases showed UK servers.

I wonder if someone might be able to tell me why this odd behaviour might have happened.

Thank you for you time.

[NoiselessOwl 26]

Can you post ipleak.net result for each of those exit IP you posted? It should be clear induction of what is the issue.

[telemus 16]

Hi there

I only discovered this curious incident when I tried to watch the a UK TV channel from outside UK and the site said I was in the US. I checked the connection, as per my post above.

I did not have the presence of mind to grab a screen shot. If it happens again, I will do so and post it.

Thanks for your taking the time to reply.

T