Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ
Ξ We've updated our CA certificate. All members need to be using the latest ones by Dec 22. See this page for more infoΞ

Search found 1114 matches

by parityboy
Sat Feb 18, 2017 7:43 am
Forum: member support & tech assistance
Topic: Slow connection on Tunnelblick
Replies: 6
Views: 2712

Re: Slow connection on Tunnelblick

@OP Cryptostorm exit nodes don't support IPv6, so the fact that you are connecting to them at all tells us your router is being provisioned with an IPv4 address - you should be able to confirm this in the admin console of the router. As for the speeds...the Frankfurt cluster is 100Mb/s which will l...
by parityboy
Sat Feb 18, 2017 7:33 am
Forum: member support & tech assistance
Topic: VPN on macOS (host) + windows (guest) = no connection
Replies: 3
Views: 2005

Re: VPN on macOS (host) + windows (guest) = no connection

@OP

It sounds like an interface/routing table issue, although can't see what it might be. How is the network interface of the guest set? Bridged or NAT?
by parityboy
Wed Feb 15, 2017 4:52 am
Forum: member support & tech assistance
Topic: Suggestions for VPN Router
Replies: 2
Views: 2829

Re: Suggestions for VPN Router

@OP

Is this page of any help? Or maybe this page?
by parityboy
Tue Feb 14, 2017 7:13 pm
Forum: member support & tech assistance
Topic: Router: Zyxel p-2812HNU-F1 configuration
Replies: 4
Views: 1903

Re: Router: Zyxel p-2812HNU-F1 configuration

@OP

According to specs, that device supports IPSec and PPTP. There is no mention of OpenVPN. You may have to flash it with OpenWRT after all.
by parityboy
Tue Feb 14, 2017 1:18 am
Forum: general chat, suggestions, industry news
Topic: keybase tokens
Replies: 2
Views: 2520

Re: keybase tokens

@OP

I'll have one, thanks. :)
by parityboy
Tue Feb 14, 2017 1:09 am
Forum: general chat, suggestions, industry news
Topic: Keys to iPhone? Best practices thoughts?
Replies: 3
Views: 2980

Re: Keys to iPhone? Best practices thoughts?

@mjyxx

If you mean creating QR codes from the (un)hashed access token, then yes that is a useful tool. It's something I do for my Nexus 4, and would actually be a nice addition for the in-browser token delivery page.
by parityboy
Mon Feb 06, 2017 7:01 pm
Forum: member support & tech assistance
Topic: Torstorm
Replies: 12
Views: 5576

Re: Torstorm

omegap00p wrote:How do I access .onion site without using Torstorm? I am a paid subscriber. Thanks.


All paid subscribers have transparent access to .onion and .i2p sites. Simply enter the target address into the software of choice (browser/ssh client/whatever) and it should Just WorkTM.
by parityboy
Sun Feb 05, 2017 6:10 am
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: Linux connections to cryptostorm
Replies: 48
Views: 48921

Re: HOWTO: Linux connections to cryptostorm

df wrote:@dreab_kcalb
In that tutorial, you would replace 'username' with the SHA512 hash of your token, and 'password' can be anything.


...but must be something.
by parityboy
Sat Feb 04, 2017 7:50 pm
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: Linux connections to cryptostorm
Replies: 48
Views: 48921

Re: HOWTO: Linux connections to cryptostorm

amnesia wrote:Cryptostorm sucks. Where's the step by step procedure to set up on linux?


"Linux" and "step by step procedure" in the same sentence? Really? :P
by parityboy
Sat Feb 04, 2017 7:46 pm
Forum: member support & tech assistance
Topic: .onion routing broken?
Replies: 8
Views: 4750

Re: .onion routing broken?

@OP The fact that the nameserver is the same as the node you're connecting to and that you're getting a 10.x.x.x address tells me that the OS is using the correct DNS server and that by all accounts it should work. If (as I suspect) connections to .onion sites are timing out in the browser, you may...
by parityboy
Sat Feb 04, 2017 5:38 am
Forum: member support & tech assistance
Topic: .onion routing broken?
Replies: 8
Views: 4750

Re: .onion routing broken?

@OP

Can you post the contents of /etc/resolv.conf? I'm not familiar with macOS' resolver mechanism but I imagine it's fairly close to traditional UNIX. Also, in the GUI what resolvers do you have configured?
by parityboy
Sat Feb 04, 2017 5:30 am
Forum: cryptofree: no-cost cryptostorm network access
Topic: how to use cryptofree on osx (el capitan) ? any guidance for non-code-wizzard highly appreciated.
Replies: 1
Views: 2388

Re: how to use cryptofree on osx (el capitan) ? any guidance for non-code-wizzard highly appreciated.

@OP

Have you successfully set up the paid-for services on El Capitan? If so, the set up procedure is identical, except that the exit node addresses are different and in the username and password you can put whatever you want, aslong as the number of characters used is greater than zero.
by parityboy
Wed Jan 25, 2017 2:46 pm
Forum: member support & tech assistance
Topic: Can't seem to buy tokens anywhere?
Replies: 13
Views: 4755

Re: Can't seem to buy tokens anywhere?

@OP

Could you try buying it on a completely different device? If that doesn't work then it's definitely a back-end issue, and I would ping staff at support@cryptosatorm.is.

As for other resellers, they seem to have dried up.
by parityboy
Wed Jan 25, 2017 1:40 am
Forum: crypto, VPN & security news
Topic: [The Intercept] Encrypted Email Service Once Used by Edward Snowden Relaunches
Replies: 2
Views: 1496

Re: [The Intercept] Encrypted Email Service Once Used by Edward Snowden Relaunches

@NYOB

Many thanks for posting this. I thought it merited its own topic. :)
by parityboy
Tue Jan 24, 2017 1:45 pm
Forum: crypto, VPN & security news
Topic: [Ars Technica] China announces mass shutdown of VPNs that bypass Great Firewall
Replies: 0
Views: 2625

[Ars Technica] China announces mass shutdown of VPNs that bypass Great Firewall

China's announcement said the country's Internet service market "has signs of disordered development that requires urgent regulation and governance" and that the crackdown is needed to “strengthen cyberspace information security management," according to the Post. The government said...
by parityboy
Sun Jan 22, 2017 6:02 pm
Forum: member support & tech assistance
Topic: Connection problemo [Mostly solved]
Replies: 3
Views: 1786

Re: Connection problemo [Mostly solved]

@OP

Check Cryptostorm Node Uptime. It could be that the global random is handing you the IP of a downed exit node.
by parityboy
Sun Jan 22, 2017 7:56 am
Forum: guides, HOWTOs & tutorials
Topic: HOW-TO: Tomato router setup
Replies: 16
Views: 20004

Re: HOW-TO: Tomato router setup

user5 wrote:Sorry to revive a dead post but is anyone able to get any of the balancers working with Tomato? I can get any standard one to work but none of the balancers. It will show status as working but it isn't connected.


Tomato should be set to use linux-balancer.cryptostorm.net. What do the logs show?
by parityboy
Thu Jan 19, 2017 10:11 pm
Forum: crypto, VPN & security news
Topic: [fossbytes] New Intel CPUs Can Be “Hacked” Using The USB Port And A Hardware Feature
Replies: 0
Views: 2739

[fossbytes] New Intel CPUs Can Be “Hacked” Using The USB Port And A Hardware Feature

In later versions, starting from Skylake and Kabylake processors, Intel simplified the connection process and introduced DCI (Direct Connect Interface) which allows JTAG access via the USB 3.0 port present on the machine. This is handy in the case of portable computers like laptops. According to th...
by parityboy
Thu Jan 19, 2017 4:37 am
Forum: member support & tech assistance
Topic: Major reliability issues with CryptoStorm since October
Replies: 10
Views: 3522

Re: Major reliability issues with CryptoStorm since October

@Jimbo I'm going to agree with NYOB on this one. His stance is that Cryptostorm has effectively "stolen" revenue (not an opinion I share, by the way) by not providing the service that users have paid for. In no way has he accused you of such a thing, considering that we are all in the sam...
by parityboy
Wed Jan 18, 2017 3:25 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@Fermi Many thanks for the post. After a few minutes of napkin logic, I think there maybe a way to do this without having to a) log too much information and b) patch OpenVPN. A possible solution would be to - in addition to the current session counter - track the sessions and their ages. If we assu...
by parityboy
Tue Jan 17, 2017 5:50 am
Forum: member support & tech assistance
Topic: Major reliability issues with CryptoStorm since October
Replies: 10
Views: 3522

Re: Major reliability issues with CryptoStorm since October

@Jimbo

No problem, happy to be of (limited) help. :) Just out of interest, I've always thought the max number of sessions (at least unofficially) was three. Are you aware of any official word on this, or is this simply what you're seeing "in the wild"?
by parityboy
Mon Jan 16, 2017 3:32 pm
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: cryptostorm on Android non-root | cryptostorm.org/android
Replies: 100
Views: 145570

Re: HOWTO: cryptostorm on Android non-root | cryptostorm.org/android

Hi, For me it does not work anymore, I change smartphone I installed open vpn, but when i want to import a config he says : " No endtag <//head> for startag </head> found " Do you have a solution ? thanks Sounds like you downloaded the config from GitHub. Left click on the config file, th...
by parityboy
Mon Jan 16, 2017 7:17 am
Forum: member support & tech assistance
Topic: Major reliability issues with CryptoStorm since October
Replies: 10
Views: 3522

Re: Major reliability issues with CryptoStorm since October

@OP Look here for further info. From what I myself have experienced, it may be related to the session tracking code in the authentication mechanism. Go here and check your token to see if it has reached "maximum number of sessions". If so, mail the token hash to support@cryptostorm.is and...
by parityboy
Mon Jan 16, 2017 6:59 am
Forum: member support & tech assistance
Topic: Can't connect
Replies: 1
Views: 1282

Re: Can't connect

@OP

Can you give us a little more info? What OS are you running? What's your Internet connection?
by parityboy
Mon Jan 16, 2017 6:58 am
Forum: member support & tech assistance
Topic: VPNDEMON for linux securizes vpn discos
Replies: 2
Views: 1565

Re: VPNDEMON for linux securizes vpn discos

@OP

Nice idea, but "meh". A good iptables script is far more effective, at least for me.
by parityboy
Mon Jan 16, 2017 6:56 am
Forum: member support & tech assistance
Topic: After connect
Replies: 1
Views: 1293

Re: After connect

@OP The short answer is "yes". The long answer is "yes but look into setting up your firewall so that the connection doesn't leak if/when the VPN connection drops." The Windows widget doesn't yet have a built-in "kill switch" to guard against this. If you're on Linux, ...
by parityboy
Fri Jan 13, 2017 6:43 am
Forum: cryptofree: no-cost cryptostorm network access
Topic: CryptoFree on OpenVPN
Replies: 7
Views: 4710

Re: CryptoFree on OpenVPN

@NYOB

That last one is an epic /facepalm. Why block VPN? To me that's retardedly stupid. If anything, they should welcome VPN usage, since it inherently and automatically indemnifies them against any consequences of "unwanted" network usage.
by parityboy
Fri Jan 13, 2017 6:35 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread

My latest session lasted 3d23h45m before failing due to "inactivity timeout". I checked the token and it had not run out of sessions.
by parityboy
Tue Jan 10, 2017 10:04 pm
Forum: DeepDNS.net - cryptostorm's no-compromise DNS resolver framework
Topic: cryptostorm dnscrypt servers
Replies: 6
Views: 8838

Re: cryptostorm dnscrypt servers

My apologies for posting this again (thought I was logged in when posting the first time). Like I was saying, this posting has been stagnant for just over a month now without any real answers. I'm not going to ask them again, I'll just refer to the OP's questions (although I'm mostly curious about ...
by parityboy
Sun Jan 08, 2017 6:49 pm
Forum: crypto, VPN & security news
Topic: [phoronix] WireGuard Secure Network Tunnel Is Eyeing Mainline, Running On Android
Replies: 1
Views: 2031

[phoronix] WireGuard Secure Network Tunnel Is Eyeing Mainline, Running On Android

Back in June we reported on WireGuard as a next-generation secure network tunnel for the Linux kernel . We haven't heard much on WireGuard in recent months, but this New Year's morning we received a message from their lead developer with a status update. WireGuard creator Jason Donenfeld emailed in...
by parityboy
Sun Jan 08, 2017 7:54 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@ntldr Check your token here while it's logged in on a single session. If the checker complains that the maximum number of sessions has been reached, send a message to support@cryptostorm.is So far I have session to two nodes, and they have been solid for ~48 hours (previous token ran out). @thread...
by parityboy
Sun Jan 08, 2017 7:42 am
Forum: cryptofree: no-cost cryptostorm network access
Topic: CryptoFree on OpenVPN
Replies: 7
Views: 4710

Re: CryptoFree on OpenVPN

@NYOB What you've written is both worrying and interesting. I very much doubt a publicly-funded library is using expensive DPI equipment, so could it be that that they are simply blocking UDP/443? Blocking TCP/443 would of course be foolish, as would playing whack-a-mole with exit node IP addresses...
by parityboy
Sat Dec 31, 2016 5:51 pm
Forum: member support & tech assistance
Topic: Importing .ovpn Config File iOS
Replies: 3
Views: 2133

Re: Importing .ovpn Config File iOS

@OP

So...you got a successful connection in the end?
by parityboy
Fri Dec 30, 2016 10:47 pm
Forum: member support & tech assistance
Topic: ASUS-WRT Merlin - OpenVPN Client
Replies: 13
Views: 4419

Re: ASUS-WRT Merlin - OpenVPN Client

@belowzero One thing I noticed when setting up pfSense for Cryptostorm is that even though the exit node pushes its DNS server down to the client, this data is not applied to the general DNS settings when the VPN tunnel becomes active, so if I specify Google's DNS server, that's precisely what the ...
by parityboy
Fri Dec 30, 2016 7:04 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

Parityboy, You've been a real trooper. This was never your task to perform. Actually, it was. :) Nailing down network issues - especially transient network issues - is hard work and can be frustrating. The staff aren't connected to every network in the world, so as many users as possible providing ...
by parityboy
Fri Dec 30, 2016 7:41 am
Forum: member support & tech assistance
Topic: [pfSense] Transparent Darknet Access
Replies: 3
Views: 2365

Re: [pfSense] Transparent Darknet Access

@Fermi OK, I have a better sense of what is going on here. For seamless access to I2P and Tor websites, you have to create a Domain Override. However, when creating the override, you MUST specify the IP address of the DNS server sitting on that particular exit node . Alternatively, you can specify ...
by parityboy
Fri Dec 30, 2016 7:37 am
Forum: general chat, suggestions, industry news
Topic: [Request] pfSense-Friendly Darknet Access
Replies: 0
Views: 4069

[Request] pfSense-Friendly Darknet Access

@df [For background, see here ] Can you alter the DeepDNS policies on the exit nodes such that if you query a darknet FQDN from an out-of-tunnel address (including other exits), the result is NXDOMAIN ? In other words, if I'm connected to the German node and my query for an Onion address is sent to...
by parityboy
Fri Dec 30, 2016 5:27 am
Forum: member support & tech assistance
Topic: [pfSense] Transparent Darknet Access
Replies: 3
Views: 2365

Re: [pfSense] Transparent Darknet Access

@Fermi

Yeah, I looked at that guide, unfortunately it was of no help. pfSense does allow its DNS server list to be overridden, but that only applies to the WAN interface, not the VPN interface.
by parityboy
Thu Dec 29, 2016 4:19 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread

UPDATE
Despite the session issues with my token being resolved, my test connection to the England node lasted 15 hours before I got an "inactivity timeout".
by parityboy
Thu Dec 29, 2016 5:40 am
Forum: member support & tech assistance
Topic: Can no longer connect with Cryptostorm Widget
Replies: 1
Views: 1343

Re: Can no longer connect with Cryptostorm Widget

@OP

"cannot resolve Global Random" sounds like a DNS issue. Since you're running Windows, have you tried the classic "Reboot Manoeuvre"?
by parityboy
Wed Dec 28, 2016 9:32 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread OK, having sent a message to staff, my token is now fixed and counts the sessions correctly. I'll now see how long the connection stays up. :) same issue here- max sessions reached. I'm only using one. will try and get someone on irc. Send a message to support@cryptostorm.is with this threa...
by parityboy
Tue Dec 27, 2016 6:43 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

0x24d wrote:Have been connected to Lithuania for ~30 minutes and no longer have the max sessions reached message on cryptostorm.nu. Seems like that issue has been resolved.


Yeah I sent a message to staff as well about this, my token is doing the same thing.
by parityboy
Tue Dec 27, 2016 6:37 pm
Forum: cryptofree: no-cost cryptostorm network access
Topic: how do i install cryptofree VPN?
Replies: 3
Views: 3789

Re: how do i install cryptofree VPN?

GUESTqwas wrote:HI, my OS is Windows 7, and I'm trying to chose a paid vpn service, I'm looking to try cryptostorm, there is a way to test it at his full potential?
Thanks


If you go here, you can choose a "one-shot" 1 week token for $1.86.
by parityboy
Sat Dec 24, 2016 11:22 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@0x24d Thank you very very much for this, it's certainly an interesting data point and kind of reinforces my belief that the issue is with the authentication system. I believed at first that the issue was network-based, but it would appear that some token data is either a) already corrupted in some...
by parityboy
Sat Dec 24, 2016 6:01 pm
Forum: cryptofree: no-cost cryptostorm network access
Topic: cryptofree howto iOS | cryptofree.me/cfios
Replies: 7
Views: 15525

Re: cryptofree howto iOS | cryptofree.me/cfios

@reubysa

Try switching off LZO Compression, if that doesn't work try connecting via UDP rather than TCP.
by parityboy
Thu Dec 22, 2016 7:22 pm
Forum: member support & tech assistance
Topic: [pfSense] Transparent Darknet Access
Replies: 3
Views: 2365

[pfSense] Transparent Darknet Access

Last night I set up a pfSense VM in VirtualBox to test out some private LAN configs. Everything is working as expected, including protecting the private LAN with a Cryptostorm instance. However, the one thing that doesn't seem to work correctly with this config - having the router initiate the VPN c...
by parityboy
Wed Dec 21, 2016 6:50 pm
Forum: crypto, VPN & security news
Topic: [The Register] Landmark EU ruling: Legality of UK's Investigatory Powers Act Challenged
Replies: 0
Views: 2539

[The Register] Landmark EU ruling: Legality of UK's Investigatory Powers Act Challenged

The legality of the UK's Investigatory Powers Act has been called into question by a landmark EU legal ruling this morning, which has restated that access to retained data must only be given in cases of serious crime. The landmark judgment [PDF] was handed down by the European Union's Court of Just...
by parityboy
Tue Dec 20, 2016 6:50 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread My connection to the ENG node just died after 11 days, 10 hours. UPDATE My connection to US West died after ~34 hours. A second session has lasted ~4 hours. A second session to the ENG node has lasted 19h20m. UPDATE #2 My connection to US West lasted 2 hours. My connection to England lasted...
by parityboy
Mon Dec 19, 2016 9:32 pm
Forum: member support & tech assistance
Topic: ASUS-WRT Merlin - OpenVPN Client
Replies: 13
Views: 4419

Re: ASUS-WRT Merlin - OpenVPN Client

@OP

This might help. :)
by parityboy
Mon Dec 19, 2016 3:37 pm
Forum: member support & tech assistance
Topic: ASUS-WRT Merlin - OpenVPN Client
Replies: 13
Views: 4419

Re: ASUS-WRT Merlin - OpenVPN Client

@OP

OK, is there a tab with "Keys" as the title (or something similar)? Also, would this thread be of any help?
by parityboy
Mon Dec 19, 2016 2:57 pm
Forum: member support & tech assistance
Topic: ASUS-WRT Merlin - OpenVPN Client
Replies: 13
Views: 4419

Re: ASUS-WRT Merlin - OpenVPN Client

@OP

If you set "username/password auth. only", does something come up concerning keys? Can you post a screenshot?
by parityboy
Sun Dec 18, 2016 8:23 pm
Forum: member support & tech assistance
Topic: ASUS-WRT Merlin - OpenVPN Client
Replies: 13
Views: 4419

Re: ASUS-WRT Merlin - OpenVPN Client

@OP I don't run an ASUS router but I can give you a few tips. 1. If you're not bothered about which exit node to use, use linux-balancer.cstorm.pw 2. username is your hashed token. If the characters do not fit, just enter the token itself 3. password can be anything, including a single character 4....
by parityboy
Sun Dec 18, 2016 5:37 pm
Forum: cryptofree: no-cost cryptostorm network access
Topic: how do i install cryptofree VPN?
Replies: 3
Views: 3789

Re: how do i install cryptofree VPN?

@OP

Which OS are you running?
by parityboy
Tue Dec 13, 2016 11:55 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@0x24d Not only that, but AirVPN and PIA are a bigger, juicier target. I still think the issue is related to re-auth during session renegotiation. Unfortunately, the problem isn't easy to reproduce (except for those who are affected, obviously) - I was affected by it on all nodes, but now the nodes...
by parityboy
Tue Dec 13, 2016 7:42 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

I just connected to Moldova and the connection disconnected after 20 minutes (after renegotiation). I'll try the tor test and see if it is any different. I am also in a different location/ISP next weekend so I will try connecting and doing the tor test then to see if I get different results. Update...
by parityboy
Mon Dec 12, 2016 10:07 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@Guest As far as we can see, the issue comes specifically during session re-negotiation, where the client's credentials are re-sent to the server; initial connection and authentication is always successful, unless there is an obvious failure - token expiry, dead server etc. In the case of Manjaro, ...
by parityboy
Fri Dec 09, 2016 1:24 am
Forum: member support & tech assistance
Topic: never received my token
Replies: 2
Views: 2100

Re: never received my token

@OP

An option open to you is to hit the Chat icon at the top of this page and join the IRC channel - staff are always in there. Link your forum post and ask again for help. :)
by parityboy
Thu Dec 08, 2016 8:50 pm
Forum: member support & tech assistance
Topic: Online Video will not play
Replies: 2
Views: 1855

Re: Online Video will not play

@OP Since you mention the Cryptostorm client, I will go ahead and assume you are using Windows. Which version of Windows are you using? Which version of the client are you using? Which exit node did you connect to? Which browser are you using? Also can you post a link to the video so that others ca...
by parityboy
Thu Dec 08, 2016 3:49 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

My connection to Latvia using NetworkManager just dropped after ~20 minutes. My own connections to both Latvia and England have now been solid for 24 hours, not even a hiccup. ⋅ We are mostly all connected via different networks ⋅ Many of us are connected to the same nodes &sdot...
by parityboy
Tue Dec 06, 2016 5:11 pm
Forum: cryptofree: no-cost cryptostorm network access
Topic: cryptofree.me howto Android | cryptofree.me/cfandroid
Replies: 13
Views: 18744

Re: cryptofree.me howto Android | cryptofree.me/cfandroid

nqCX635HEvgW wrote:Has anyone else had issues on Android with hostnames failing to resolve on Arne Schwabe's client, but after connecting/using VPN for sometime?


Yes, see this thread. The issue appears to have been solved; the nodes I've tested so far have been 24hr-stable.
by parityboy
Tue Dec 06, 2016 12:57 am
Forum: cryptofree: no-cost cryptostorm network access
Topic: cryptofree.me howto Android | cryptofree.me/cfandroid
Replies: 13
Views: 18744

Re: cryptofree.me howto Android | cryptofree.me/cfandroid

@Xx In that particular case it's expecting a file called ca.crt in /sdcard/Download , because it's ignoring the in-line certificate data in the configuration file. Check my sig. for the post-Heartbleed certificate (it's in a Zip file), extract it, rename it to ca.crt and copy it to /sdcard/Download...
by parityboy
Mon Dec 05, 2016 2:56 am
Forum: cryptofree: no-cost cryptostorm network access
Topic: cryptofree.me howto Android | cryptofree.me/cfandroid
Replies: 13
Views: 18744

Re: cryptofree.me howto Android | cryptofree.me/cfandroid

@Xx

I'm not sure why your OpenVPN client isn't recognising that parameter...I'm running version 0.6.60 of that client on Android 5.1.1, and the OpenVPN version in the logs is OpenVPN 2.4-icsopenvpn, not 2.4-master.

I'm going try to replicate your environment in a VM and report back to you.
by parityboy
Sun Dec 04, 2016 4:22 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread Well, so far my connections to the NL node have stayed up for around 12 hours, on Windows via the widget and on Linux via Network Manager. Hopefully they'll stay up for another 12. :) UPDATE OK, so both of my connections (Linux & Windows) to the NL node have stayed up for 24 hours with ...
by parityboy
Sun Dec 04, 2016 3:19 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@Khariz

Widget 2.22 uses OpenVPN 2.3.6. I don't know what Widget 3.0.0 uses, but it's obviously newer. On Linux I'm using 2.3.13. What we have proved so far, is that no matter the client platform or OpenVPN version, the problem is reproducible, including on Android 5.1.1/OpenVPN 2.4.x.
by parityboy
Sun Dec 04, 2016 12:40 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread Log from the Windows Widget 2.22 on the new NL node. Sat Dec 03 19:15:56 2016 us=416132 Initialization Sequence Completed Connected Sat Dec 03 19:35:48 2016 us=931757 VERIFY OK: depth=1, C=CA, ST=QC, L=Montreal, O=Katana Holdings Limite / cryptostorm_darknet, OU=Tech Ops, CN=cryptostorm_is,...
by parityboy
Sat Dec 03, 2016 9:49 pm
Forum: cryptofree: no-cost cryptostorm network access
Topic: cryptofree.me howto Android | cryptofree.me/cfandroid
Replies: 13
Views: 18744

Re: cryptofree.me howto Android | cryptofree.me/cfandroid

@Xx

What OS are you running and how are you invoking the openvpn command?
by parityboy
Sat Dec 03, 2016 5:42 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread QUICK UPDATE Tested the new Russia West node, it lasted ~22 mins before the connection dropped. df is testing a new configuration on the ENG node, so far it has lasted 10 hours with no drops. If it lasts another 10, the new configuration is a step in the right direction. For a comparison po...
by parityboy
Sat Dec 03, 2016 5:21 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread

OK, so I tested US East and US South today. Both lasted ~22 mins. My current connection to US North has lasted 6h20m. My current connection to Cryptofree has lasted 29 hours.

UPDATE
lol, well my connection to US North just died. Lasted 6hr24m.
by parityboy
Fri Dec 02, 2016 9:44 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@Fermi Strange isn't it? For me, every paid Linux instance sited in Europe has displayed this connection error - CH , DE , DK , ENG , FR , IT , LV and PT , none of which can stay up for more than a couple hours on average , sometimes not more than ~20 mins. With accelerated renegotiation intervals ...
by parityboy
Fri Dec 02, 2016 3:57 pm
Forum: general chat, suggestions, industry news
Topic: FOR SALE: Aleph Token
Replies: 4
Views: 4175

Re: FOR SALE: Aleph Token

df wrote:EDIT:
Also, we no longer offer @cryptostorm.is email addresses to aleph owners.


Why, what changed?
by parityboy
Fri Dec 02, 2016 3:36 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread OK I've spent the last few hours chatting with Fermi and trying to narrow this issue down. The most recent test was against the England node, where I tested with a 30 second renegotiation interval on Mint 17.3 KDE. The result was Thu Dec 1 22:17:31 2016 us=888158 TLS: tls_pre_encrypt: key_i...
by parityboy
Thu Dec 01, 2016 11:30 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

Update Connection to Latvia dropped after 22 minutes. This is precisely what I'm seeing on DK, ENG and CH although in the past few days they have stayed up a lot longer in some cases, and died in less than 10 mins in others. seems disturbingly normal ;) /fermi lol, I kinda knew you would say that. ...
by parityboy
Thu Dec 01, 2016 6:45 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@Fermi Just for reference, below is the command line executed by NetworkManager when connecting. This is on a Mint 18 Live CD but the drops are still occurring. /usr/sbin/openvpn --remote linux-denmark.cryptostorm.net 443 udp --comp-lzo --nobind --dev tun --cipher AES-256-CBC --auth SHA512 --auth-n...
by parityboy
Thu Dec 01, 2016 6:14 pm
Forum: member support & tech assistance
Topic: That token has reached the maximum number of sessions.
Replies: 4
Views: 3474

Re: That token has reached the maximum number of sessions.

@Fermi

One thing I've noticed during the session testing in this thread is that when I disconnect, I can't immediately reconnect - doing so results in "AUTH_FAILED". What's the wait time for the session to properly expire? 30 seconds? 60 seconds?
by parityboy
Wed Nov 30, 2016 6:51 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 110
Views: 34915

Re: Serious Drops and packet loss South node

@thread

OK, second session on the DK node lasted approximately six hours.

UPDATE
The ENG node seems to last 20 mins before it dies.

Go to advanced search

Nothing to display.

Login