Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ
Ξ We've updated our CA certificate. All members need to be using the latest ones by Dec 22. See this page for more infoΞ

Search found 1210 matches

by parityboy
Tue Jun 05, 2018 7:22 pm
Forum: member support & tech assistance
Topic: Not able to connect
Replies: 2
Views: 1227

Re: Not able to connect

@OP

It looks like you are trying to connect to an ECC instance. Can you try connecting to a non-ECC instance and report back on success or failure?

Thanks. :)
by parityboy
Sat Jun 02, 2018 7:29 am
Forum: member support & tech assistance
Topic: [DNS] Domains Not Resolving On Certain Exit Nodes
Replies: 11
Views: 4348

Re: [DNS] Domains Not Resolving On Certain Exit Nodes

@thread

westerndigital.secure.force.com now fails to resolve on England and Frankfurt. This site handles support for Western Digital (warranty, RMA etc.) so I have no idea how it made its way onto a blocklist.
by parityboy
Wed May 30, 2018 3:46 am
Forum: member support & tech assistance
Topic: [DNS] Domains Not Resolving On Certain Exit Nodes
Replies: 11
Views: 4348

Re: [DNS] Domains Not Resolving On Certain Exit Nodes

@df Cheers for the explanation. :) Quick question: can the server push more than one DNS server entry to the client? Are they stacked on the client, i.e. last in first out? Also, when the OpenVPN server forks an instance for a given session, can it load a configuration file for that specific instan...
by parityboy
Sat May 26, 2018 5:02 pm
Forum: member support & tech assistance
Topic: [DNS] Domains Not Resolving On Certain Exit Nodes
Replies: 11
Views: 4348

Re: [DNS] Domains Not Resolving On Certain Exit Nodes

@df The only issue with the two-step approach is that it's two steps. :) A small price to pay for better security but you know what people are like. :P One good thing about the password field approach is that it's scalable - you can add switches to activate other features in the future, much like a...
by parityboy
Fri May 25, 2018 6:00 pm
Forum: general chat, suggestions, industry news
Topic: PGP Fail (14May2018)
Replies: 4
Views: 2787

Re: PGP Fail (14May2018)

@df

Neither is KMail, which is what I use. :D
by parityboy
Fri May 25, 2018 5:58 pm
Forum: member support & tech assistance
Topic: [DNS] Domains Not Resolving On Certain Exit Nodes
Replies: 11
Views: 4348

Re: [DNS] Domains Not Resolving On Certain Exit Nodes

@df

I think this was mentioned back in the early days of TrackerSmacker being deployed - since the password credential isn't used as part of Cryptostorm's security model, why not use that as a field to pass switches to the exit node to activate/deactivate certain features?
by parityboy
Fri May 25, 2018 5:53 pm
Forum: member support & tech assistance
Topic: New openVPN ECC config files
Replies: 5
Views: 2462

Re: New openVPN ECC config files

@df To be honest, I'm not so sure regarding the routers. Routers supporting OpenVPN (e.g. ASUS) are pretty popular and (being routers) I'm not sure how many firmware updates they receive after launch or if those updates include updated OpenVPN instances (I doubt it). Most people are still on pretty...
by parityboy
Fri May 25, 2018 5:39 pm
Forum: member support & tech assistance
Topic: Cryptostorm not hiding my IP on Android
Replies: 2
Views: 1571

Re: Cryptostorm not hiding my IP on Android

@OP

it sounds like Android's VPNService isn't intercepting your connection. Which device and which version of Android?
by parityboy
Tue May 22, 2018 4:53 pm
Forum: member support & tech assistance
Topic: OpenVPN Preserving recently used remote address
Replies: 6
Views: 1929

Re: OpenVPN Preserving recently used remote address

@OP

OK, I'm going to test this on a couple platforms and report back.
by parityboy
Fri May 18, 2018 8:09 pm
Forum: member support & tech assistance
Topic: OpenVPN Preserving recently used remote address
Replies: 6
Views: 1929

Re: OpenVPN Preserving recently used remote address

@OP

So to clarify: you have entirely separate profiles created in NetworkManager? You are simply stopping each one and starting the other?
by parityboy
Thu May 17, 2018 7:04 pm
Forum: member support & tech assistance
Topic: KTorrent Authentication Failures
Replies: 0
Views: 1299

KTorrent Authentication Failures

This is something which is probably not specific to KTorrent. In the logs I repeatedly see the following: Authentication to 84.16.240.48 : failure 84.16.240.48 is the IP address for linux-frankfurt.cryptostorm.net . Can I assume that there is another peer that my peer is trying to connect to and is ...
by parityboy
Tue May 15, 2018 5:51 pm
Forum: member support & tech assistance
Topic: How to Test DNSCrypt?
Replies: 2
Views: 1564

Re: How to Test DNSCrypt?

@OP To my shame I haven't actually installed DNSCrypt, so I can only answer your last question. Your system will use the DNS server on the hotel LAN to resolve the FQDN of the exit node, but after the connection is made your system will use the Cryptostorm DNS server pushed to it by the exit node. ...
by parityboy
Tue May 15, 2018 5:44 pm
Forum: general chat, suggestions, industry news
Topic: PGP Fail (14May2018)
Replies: 4
Views: 2787

Re: PGP Fail (14May2018)

@OP

Yeah, Fermi posted in IRC as well. Not good. :(
by parityboy
Mon May 07, 2018 6:21 pm
Forum: member support & tech assistance
Topic: Newbie help
Replies: 2
Views: 1263

Re: Newbie help

@OP 1. The random port option enables clients to get past firewalls which block OpenVPN either by blocking its usual port number (1194) or by blocking UDP traffic on port 443 (HTTPS uses TCP on port 443). 2. I'd guess DNSCrypt would be the culprit here, since it is the one option which (temporarily...
by parityboy
Mon May 07, 2018 6:08 pm
Forum: member support & tech assistance
Topic: Can't connect over Wi-Fi
Replies: 8
Views: 1792

Re: Can't connect over Wi-Fi

@OP All I meant by "logs" is any kind of output that might highlight what may be going wrong. When you swap to another WiFi network, does "naked" Internet access work without hiccups? When it hangs at "Logging into the darknet..." can you open a command line window and...
by parityboy
Thu May 03, 2018 2:29 am
Forum: member support & tech assistance
Topic: Cryptostorm client can't connect to the darknet
Replies: 6
Views: 1836

Re: Cryptostorm client can't connect to the darknet

@OP Remember, the OpenVPN client doesn't do any of the extras that the Cryptostorm Widget does, such as disabling WebRTC, using dnscrypt-proxy etc. It might be a good idea to go through the options offered by the widget and see if you can activate them while using the OpenVPN client (perhaps by an ...
by parityboy
Wed May 02, 2018 1:39 am
Forum: member support & tech assistance
Topic: How to Achieve complete privacy and security?
Replies: 1
Views: 1172

Re: How to Achieve complete privacy and security?

@OP 1 . Cryptostorm do not keep connection or traffic logs, so the level of anonymity compared to Tor - at least in terms of tracing - is basically the same. Additionally, Cryptostorm - via DeepDNS - offers transparent access to .onion and .i2p hosts without the need to install additional software....
by parityboy
Wed May 02, 2018 12:00 am
Forum: member support & tech assistance
Topic: Cryptostorm client can't connect to the darknet
Replies: 6
Views: 1836

Re: Cryptostorm client can't connect to the darknet

@OP Yes, you feed it one of the Cryptostorm configuration files (the Windows versions). Your hashed token is the username, the password can be anything but it must be something - even a single character. If you get stuck, report back and I'll go through the steps myself (I'm not really a Windows us...
by parityboy
Fri Apr 27, 2018 4:23 pm
Forum: member support & tech assistance
Topic: I need Help with DNS/proxy etc.
Replies: 4
Views: 1754

Re: I need Help with DNS/proxy etc.

@OP

Just out of interest, which operating system are you running?
by parityboy
Fri Apr 27, 2018 4:18 pm
Forum: member support & tech assistance
Topic: Can't connect over Wi-Fi
Replies: 8
Views: 1792

Re: Can't connect over Wi-Fi

@Granny

What errors are you getting, if any? Can you post logs?
by parityboy
Fri Apr 20, 2018 5:07 am
Forum: member support & tech assistance
Topic: Cryptostorm HOW TO on TrueOS/FreeBSD?
Replies: 2
Views: 1448

Re: Cryptostorm HOW TO on TrueOS/FreeBSD?

@OP Any message like that refers to options specified in the actual configuration file, which can be edited in a plain text editor. Usually the culprits are txqueuelen , sndbuf and rcvbuf . Remove these options from the configuration file and you should be able to make progress in connecting. :)
by parityboy
Fri Apr 20, 2018 5:04 am
Forum: member support & tech assistance
Topic: Cryptostorm client can't connect to the darknet
Replies: 6
Views: 1836

Re: Cryptostorm client can't connect to the darknet

@OP

The only other way to connect that I know of would be to use the official OpenVPN client, which wasn't exactly user friendly the last time I looked at it.

Have a look at this thread for resolution of issues concerning the CS widget. :)
by parityboy
Fri Apr 20, 2018 5:01 am
Forum: member support & tech assistance
Topic: USB external hd drive
Replies: 1
Views: 1126

Re: USB external hd drive

@OP

The NAS functionality of the router is available on the LAN side, so as long as you can get a response from your router's LAN side - i.e. 192.168.x.x - you should be able to access the NAS device.

What OS are you running on your desktop?
by parityboy
Wed Apr 18, 2018 1:20 am
Forum: member support & tech assistance
Topic: Cannot Resolve Global Random
Replies: 4
Views: 1566

Re: Cannot Resolve Global Random

@OP

Can you resolve nodes in specific regions?
by parityboy
Wed Apr 18, 2018 1:18 am
Forum: member support & tech assistance
Topic: I need Help with DNS/proxy etc.
Replies: 4
Views: 1754

Re: I need Help with DNS/proxy etc.

@OP

Once configured and activated, DNSCrypt is transparent to your system. Even though it is a proxy, it does not require an application to have explicit support for it, unlike Tor or I2P (for example).
by parityboy
Sun Apr 15, 2018 8:12 pm
Forum: crypto, VPN & security news
Topic: [Google] DNS over TLS support in Android P Developer Preview
Replies: 0
Views: 1536

[Google] DNS over TLS support in Android P Developer Preview

The first step of almost every connection on the internet is a DNS query. A client, such as a smartphone, typically uses a DNS server provided by the Wi-Fi or cellular network. The client asks this DNS server to convert a domain name, like http://www.google.com, into an IP address, like 2607:f8b0:4...
by parityboy
Sun Apr 15, 2018 1:11 am
Forum: general chat, suggestions, industry news
Topic: What Best Encrypted Services do you use?
Replies: 1
Views: 1077

Re: What Best Encrypted Services do you use?

@OP

Browser: Firefox (about:config) privacy
Email: GMail burners and Yopmail
SMS: Signal
Password manager: KWallet (KDE)
VPN: Cryptostorm
by parityboy
Fri Apr 13, 2018 8:47 am
Forum: member support & tech assistance
Topic: Can't connect over Wi-Fi
Replies: 8
Views: 1792

Re: Can't connect over Wi-Fi

@OP

They may be blocking UDP traffic on port 443, since in reality the only application using port 443 will be a browser and browsers don't generate UDP traffic, they generate TCP traffic.

Try setting TCP in the widget and see what happens.
by parityboy
Fri Apr 13, 2018 8:39 am
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 17
Views: 3018

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

@FoodMaven

Is the exit node based in the U.S. (or wherever the sports app is expecting it)?
by parityboy
Wed Apr 11, 2018 10:30 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 17
Views: 3018

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

Discarding Opera/Mini solved the green/red problem. I'm on the CS "darknet". I don't think of this as "dark" I see it as the light at the end of the tunnel . But that's haberdashery. Sorry. I see what you did there. :D But yes, by providing a transparent connection to Tor and I2...
by parityboy
Wed Apr 11, 2018 10:23 pm
Forum: member support & tech assistance
Topic: Help - DNSCrypt Breaking Websites
Replies: 3
Views: 1129

Re: Help - DNSCrypt Breaking Websites

@OP The standard DNS protocol is completely unencrypted and unauthenticated. That means that it can be both intercepted and redirected to a completely different DNS server than the one you think you are using, so not only can your DNS traffic be captured and perused in-flight, all of your DNS reque...
by parityboy
Wed Apr 11, 2018 4:48 pm
Forum: member support & tech assistance
Topic: Help - DNSCrypt Breaking Websites
Replies: 3
Views: 1129

Re: Help - DNSCrypt Breaking Websites

@OP

Re: DNScrypt widget issues, look here. On your second point, does the widget have the option to use TCP instead of UDP?
by parityboy
Wed Apr 11, 2018 3:00 am
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 17
Views: 3018

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

@FoodMaven I think I've found the issue. Server: 127.0.0.1 Address: 127.0.0.1#53 Non-authoritative answer: 167.109.167.107.in-addr.arpa name = a29-02-09.opera-mini.net. Authoritative answers can be found from: opera-mini.net is a proxy service used by the Opera Mini browser, I imagine to deliver we...
by parityboy
Tue Apr 10, 2018 6:26 am
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 17
Views: 3018

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

@OP

OK, I understand that you have two router devices, but do both of them have WiFi, or only one? If it's only one, is it the ISP-provided device? If it's both, are you absolutely sure you're connecting to the OpenWRT device one via WiFi?
by parityboy
Sun Apr 08, 2018 10:59 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 17
Views: 3018

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

FoodMaven wrote:192.168.1.254 is the IP address of the ISP. It is the device (modem, router, wifi) through which I have Internet access.


So this is a separate device from your OpenWRT router, yes? Could it be that you have connected to its WiFi in error, rather than the OpenWRT router's WiFi? (I have to ask).
by parityboy
Sun Apr 08, 2018 6:24 am
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 17
Views: 3018

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

@OP OK, thank you for that. From what I can see, br-lan is the bridge between Wi-Fi and Ethernet and is used by your router to send/receive traffic across your LAN - it's also why both Ethernet and WiFi clients receive IP addresses in the same subnet range. 104.238.195.140 is the IP address of the ...
by parityboy
Sat Apr 07, 2018 8:38 pm
Forum: member support & tech assistance
Topic: Internet is broken after the update v3.13
Replies: 64
Views: 8717

Re: Internet is broken after the update v3.13

@Surcouf

There was an issue with some of the nodes yesterday in terms of passing traffic through them, but that has been since corrected and does not reflect on any issue with the client. Can you check through the nodes again and list which ones are causing issues?

Thanks. :)
by parityboy
Sat Apr 07, 2018 8:34 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 17
Views: 3018

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

@OP I don't physically have one of these routers so I can't actually test it, but it looks like the Ethernet and the WiFi interfaces are already bridged together, which is why devices connected to either are given an IP address in the 192.168.1.x range. Can you post the routing table for your route...
by parityboy
Sat Apr 07, 2018 8:27 pm
Forum: member support & tech assistance
Topic: vpn stopped working
Replies: 9
Views: 1722

Re: vpn stopped working

@scookie

Staff have patched the quietest nodes first, since it will cause the least amount of disruption. It could be that they haven't got to Canada East yet. Netherlands might be slow because everyone piled onto it. :P
by parityboy
Fri Apr 06, 2018 8:30 pm
Forum: member support & tech assistance
Topic: vpn stopped working
Replies: 9
Views: 1722

Re: vpn stopped working

@thread

Quick update. Staff have identified the specific issue and are in the process of updating and restarting the affected nodes. :)
by parityboy
Fri Apr 06, 2018 6:42 pm
Forum: member support & tech assistance
Topic: vpn stopped working
Replies: 9
Views: 1722

Re: vpn stopped working

@Bob

Yes, but there is nothing you or I can do. :)

The issue is with the exit nodes, so staff have to investigate and fix it. FYI, Cryptofree is working perfectly well, which points to an issue specific to the main nodes.
by parityboy
Fri Apr 06, 2018 5:48 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 17
Views: 3018

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

@OP

Yes, you are running OpenVPN as a client on your router. When you connect a device via WiFi, what internal IP address is handed to the device, i.e. 192.168.x.x? How does it compare to the internal IP address handed to a device connected via Ethernet?

Could you post them? Thanks. :)
by parityboy
Fri Apr 06, 2018 5:41 pm
Forum: member support & tech assistance
Topic: vpn stopped working
Replies: 9
Views: 1722

Re: vpn stopped working

@OP

I'm seeing the same problem running pfSense. Cryptofree works fine, paid nodes either aren't passing traffic through them or aren't handling DNS lookups.
by parityboy
Fri Mar 30, 2018 3:42 pm
Forum: member support & tech assistance
Topic: https://whoer.net Request for comments
Replies: 5
Views: 2443

Re: https://whoer.net Request for comments

FoodMaven wrote:https://whoer.net

offers interesting info about my VPN service, or lack thereof at the moment. As I am bareback 'cause I blew up my CS router, I'm asking for your opinion of this site.


It doesn't look very credible, tbh. IPLeak seems to be better.

What happened to your router?
by parityboy
Fri Mar 30, 2018 3:35 pm
Forum: member support & tech assistance
Topic: Internet is broken after the update v3.13
Replies: 64
Views: 8717

Re: Internet is broken after the update v3.13

Version 3.15 is not working and is stuck at the Logging into the darknet, it seems to be in a loop with the same messages. Feeling very frustrated as I only just purchased this for one year and haven't been able to use it for weeks. Thu Mar 29 23:44:32 2018 us=778198 Expected Remote Options String ...
by parityboy
Fri Mar 30, 2018 3:27 pm
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 18
Views: 5592

Re: Token Hashing - OpenVPN user input

@cryptomon

Yeah, he uses that Mac Mini as a media centre/general purpose PC, so Tunnelblick is the go to VPN software for that platform.
by parityboy
Thu Mar 29, 2018 1:34 am
Forum: member support & tech assistance
Topic: France DNSCrypt Server
Replies: 5
Views: 1864

Re: France DNSCrypt Server

@thread

Download the latest widget from the main site (3.15.0.186), make sure you uninstall the older version first. Also, follow this thread.
by parityboy
Thu Mar 29, 2018 1:02 am
Forum: member support & tech assistance
Topic: Internet is broken after the update v3.13
Replies: 64
Views: 8717

Re: Internet is broken after the update v3.13

clay wrote:Is there a fix for OSX? I've been having the same issue on a Mac for several days now.


The issue appears to be server-side so there's no client-side fix, so keep an eye on this thread. Staff are on the case.:thumbup:
by parityboy
Wed Mar 28, 2018 11:44 pm
Forum: member support & tech assistance
Topic: Internet is broken after the update v3.13
Replies: 64
Views: 8717

Re: Internet is broken after the update v3.13

@df OK, I'm not a Windows user but I thought I'd try this out in a VM to see what the state of play is. The VM is running Windows 8.1, the widget version is 3.15.0.0 . I have the following options enabled (the defaults): [ ] Use ECC Instances [*] Disable IPv6 [*] STUN/WebRTC leak prevention [ ] Ena...
by parityboy
Wed Mar 28, 2018 8:12 pm
Forum: member support & tech assistance
Topic: DNS configuration / usage
Replies: 6
Views: 2731

Re: DNS configuration / usage

Is that an acceptable approach given I may be using only one exit node? It is. However, names such as 'cs-caeast' are resolved where? Is dnscrypt-proxy given a local copy of the resolvers.csv file so that it can pull the actual IP addresses of the DNS servers? I've not installed DNScrypt on my rout...
by parityboy
Wed Mar 28, 2018 7:59 pm
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 18
Views: 5592

Re: Token Hashing - OpenVPN user input

@cryptomon Yep it is. A friend of mine has a similar Asus router which was doing a similar job. He has a 38Mb/s connection and was getting ~5Mb/s out of the router. When he moved the VPN connection to his Mac Mini, his connection speed improved greatly, close to his line speed. Domestic router hard...
by parityboy
Tue Mar 27, 2018 5:24 am
Forum: cryptostorm reborn: voodoo networking, stormtokens, PostVPN exotic netsecurity
Topic: Please help me grasp cryptostorm
Replies: 5
Views: 4420

Re: Please help me grasp cryptostorm

@VLMin

Yes, it can. I have it running on pfSense and there are guides for DD-WRT and other router distros in the guides, HOWTOs & tutorials sub-forum.
by parityboy
Mon Mar 26, 2018 11:12 pm
Forum: member support & tech assistance
Topic: How I stopped Leaking IP Addresses and Learned to Love CryptoStorm
Replies: 1
Views: 1424

Re: How I stopped Leaking IP Addresses and Learned to Love CryptoStorm

@FoodMaven

Many thanks for posting this, hopefully others will find it useful.
by parityboy
Mon Mar 26, 2018 11:09 pm
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 18
Views: 5592

Re: Token Hashing - OpenVPN user input

@cryptomon |----------|<->|NIC 0|<---->ISP connection point<---->Internet |pfSense VM| |----------|<->|NIC 1|<---->LAN<---->Host PC My ASCII art isn't the greatest.:P Without knowing better I might be inclined to try the competition's OPNsense for this. In my case I should be able to connect direct...
by parityboy
Mon Mar 26, 2018 7:44 am
Forum: member support & tech assistance
Topic: Slow connection after upgrading to widget 3.12
Replies: 13
Views: 3032

Re: Slow connection after upgrading to widget 3.12

@MOQ888

Can you not use Ubuntu in a VirtuaBox VM on (what appears to be) your Windows laptop?
by parityboy
Mon Mar 26, 2018 7:40 am
Forum: member support & tech assistance
Topic: France DNSCrypt Server
Replies: 5
Views: 1864

Re: France DNSCrypt Server

@OP A quick test (if Windows has a telnet client - I have no idea if it does) is to open a command line window and do this: telnet 212.129.46.86 443 If you get a response, it should look something like: Trying 212.129.46.86... Connected to 212.129.46.86. Escape character is '^]'.
by parityboy
Mon Mar 26, 2018 2:59 am
Forum: member support & tech assistance
Topic: New openVPN ECC config files
Replies: 5
Views: 2462

Re: New openVPN ECC config files

@OP No need to apologise, I can see how that could cause confusion. Too be honest, I think it would actually be useful to create "linux-" prefixed DNS entries which point to the same IP addresses and have a separate set of configuration files. The fact that they would effectively be "...
by parityboy
Mon Mar 26, 2018 2:56 am
Forum: member support & tech assistance
Topic: IBM's Quad9 DNS
Replies: 4
Views: 2216

Re: IBM's Quad9 DNS

@OP 173.208.95.75: 443 443 is the port number for DNSCrypt, which is an encrypted protocol used for resolving DNS addresses, as opposed to the traditional plain-text protocol which usually uses port 53. The IP address is the address of the DNS server itself, which supports DNSCrypt as well as the tr...
by parityboy
Mon Mar 26, 2018 2:47 am
Forum: general chat, suggestions, industry news
Topic: GitHUB's Config Files NOTES and spaces
Replies: 1
Views: 1442

Re: GitHUB's Config Files NOTES and spaces

@OP

The first set of commands is applied "on the fly" and will not survive a reboot. The second set of commands alters a boot-time configuration file and is therefore a more stable solution.
by parityboy
Mon Mar 26, 2018 2:43 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 18
Views: 5592

Re: Token Hashing - OpenVPN user input

@OP As for alternative firmware, I have a physical ADSL router which is untouched, but "behind" it I run a virtualised instance of pfSense. I also have a couple instances running LEDE and OpenWRT but they are just for testing purposes, nothing serious. :) This sounds like an interesting a...
by parityboy
Thu Mar 22, 2018 11:03 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: getting started
Replies: 1
Views: 1379

Re: getting started

@OP

Which OS are you running?
by parityboy
Wed Mar 21, 2018 2:04 am
Forum: member support & tech assistance
Topic: Hashed Token Not Working
Replies: 1
Views: 1356

Re: Hashed Token Not Working

@OP In reality there's no real danger using the un-hashed token, since if you use the un-hashed token the servers will recognise this and hash it before querying the database to authenticate you - the database only contains hashed representations of the tokens. If you're using Linux you can do this...
by parityboy
Sat Mar 17, 2018 6:28 pm
Forum: member support & tech assistance
Topic: [DNS] Domains Not Resolving On Certain Exit Nodes
Replies: 11
Views: 4348

[DNS] Domains Not Resolving On Certain Exit Nodes

I have noticed that certain exit nodes are guilty of not resolving domains that other exit nodes will happily resolve and return an IP address for, so I thought it would be a good idea to collate them in a single thread. Anyway, here's a start. gleam.io fails to resolve on England exit node, resolve...
by parityboy
Tue Mar 13, 2018 8:38 pm
Forum: member support & tech assistance
Topic: Connect to Obfsproxy on Linux?
Replies: 5
Views: 1779

Re: Connect to Obfsproxy on Linux?

@OP In that case, I assume you would: 1. Go to the "voodoo" section of the repo. 2. Download an appropriate configuration file 3. Load it into the VPN section of Network Manager - you may have to separate out the certificate into separate file or simply download it from here . 4. Enter yo...
by parityboy
Tue Mar 13, 2018 3:34 am
Forum: member support & tech assistance
Topic: Connect to Obfsproxy on Linux?
Replies: 5
Views: 1779

Re: Connect to Obfsproxy on Linux?

@OP

OK so in that case, to use them on Linux you would set them up exactly the same as you would a normal exit node. Have you done that before? btw, when you say "Linux" do you mean desktop or router?
by parityboy
Tue Mar 13, 2018 3:32 am
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 19
Views: 42510

Re: HOWTO: OpenWRT Routers

@FoodMaven

If you go to Status->Routes->Active IPv4-Routes in the web console, what do you see?
by parityboy
Mon Mar 12, 2018 6:10 pm
Forum: member support & tech assistance
Topic: Connect to Obfsproxy on Linux?
Replies: 5
Views: 1779

Re: Connect to Obfsproxy on Linux?

@OP

I've never used an obfsproxy node so I'm not familiar with them. When you connected to it on Windows, did you use the Cryptostorm widget or something else?
by parityboy
Mon Mar 12, 2018 5:37 am
Forum: general chat, suggestions, industry news
Topic: Encryption for a VPN
Replies: 1
Views: 1471

Re: Encryption for a VPN

@OP

Are these encryption parameters supported in OpenVPN? Are they supported in WireGuard?
by parityboy
Mon Mar 12, 2018 5:35 am
Forum: member support & tech assistance
Topic: Cryptostorm won't connect - ISP blocked it?
Replies: 6
Views: 1935

Re: Cryptostorm won't connect - ISP blocked it?

@OP Based on the fact that both TCP and UDP traffic are being blocked - plus the fact that you can probably access any HTTPS site while running "naked" - I would guess that your ISP is blocking known VPN exit nodes. I'm surprised you don't get a timeout message in the logs though. Either ...
by parityboy
Fri Mar 09, 2018 7:53 pm
Forum: member support & tech assistance
Topic: Cryptostorm won't connect - ISP blocked it?
Replies: 6
Views: 1935

Re: Cryptostorm won't connect - ISP blocked it?

@OP

1. Which node is it you're trying to connect to? I tried looking it up but it doesn't have a reverse DNS entry for the IP.
2. What is the exact error you're getting? The log you posted doesn't make that clear.

Thanks. :)
by parityboy
Thu Mar 08, 2018 4:35 pm
Forum: member support & tech assistance
Topic: Unable to open websites after connecting
Replies: 4
Views: 1749

Re: Unable to open websites after connecting

@OP Now, after I updated when I try to connect it just will not load any new webpages. Sometimes pages already opened on my browser will continue to work as will downloads , but when I try to open any new website it won't connect. It sounds like a DNS resolution issue. Assuming you're using Firefox...
by parityboy
Sun Feb 25, 2018 9:17 pm
Forum: member support & tech assistance
Topic: [Help] Debian 9 OpenVPN Network Manager: Cryptostorm randomly disconnects!
Replies: 16
Views: 2895

Re: [Help] Debian 9 OpenVPN Network Manager: Cryptostorm randomly disconnects!

@OP Non-authoritative answer: Name: linux-balancer.cryptostorm.net Address: 5.101.137.252 Name: linux-balancer.cryptostorm.net Address: 167.114.84.133 Name: linux-balancer.cryptostorm.net Address: 173.234.159.236 Name: linux-balancer.cryptostorm.net Address: 185.212.169.140 Name: linux-balancer.cry...
by parityboy
Sun Feb 25, 2018 3:25 am
Forum: general chat, suggestions, industry news
Topic: Token Hashing - OpenVPN user input
Replies: 18
Views: 5592

Re: Token Hashing - OpenVPN user input

@OP Unfortunately a SHA512 hash is going to be 128 characters long. The way OpenVPN authenticates is standard username/password so there's no real way to split them in the way you describe. Unfortunately the only way around it is to use the token in its unhashed state. As for alternative firmware, ...
by parityboy
Fri Feb 23, 2018 6:24 pm
Forum: member support & tech assistance
Topic: DNS configuration / usage
Replies: 6
Views: 2731

Re: DNS configuration / usage

@OP 1. For DNS resolution of public Internet addresses, you can use whichever DNS server you wish, including any of the ones in Cryptostorm's dnscrypt-resolvers.csv file However, for transparent access to the Tor and I2P networks - i.e. not having to install extra software - you will need to use th...

Go to advanced search

cron
Nothing to display.

Login