Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ

Search found 173 matches

by Fermi
Thu Dec 01, 2016 8:50 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 60
Views: 2694

Re: Serious Drops and packet loss South node

seems disturbingly normal ;)

/fermi
by Fermi
Mon Nov 28, 2016 3:43 am
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 60
Views: 2694

Re: Serious Drops and packet loss South node

@Parityboy, The "pings" are being sent. These do not behave like ICMP pings. No reply is expected. The client sends ping packets to the server, and the server sends ping packets to the client. This should be according to the pushed directive ping 20. The client should receive a ping every ...
by Fermi
Sat Nov 26, 2016 1:21 pm
Forum: member support & tech assistance
Topic: Bad file descriptor?
Replies: 3
Views: 239

Re: Bad file descriptor?

@BAM

Please uninstall and use the latest version (beta), to be found @:
https://b.unni.es/cryptostorm_setup.exe

/fermi
by Fermi
Fri Nov 25, 2016 9:11 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 60
Views: 2694

Re: Serious Drops and packet loss South node

@parityboy, These values shouldn't be repeated in the client config file I believe. These are pushed by the helper directive --keepalive. PUSH : Received control message: 'PUSH_REPLY,persist-key,persist-tun,redirect-gateway def1,redirect-gateway bypass-dhcp,dhcp-option DNS 108.62.19.131,route-gatewa...
by Fermi
Fri Nov 25, 2016 2:30 pm
Forum: member support & tech assistance
Topic: Serious Drops and packet loss South node
Replies: 60
Views: 2694

Re: Serious Drops and packet loss South node

I've read this whole thread. It doesn't seem to be restricted to USSouth, is this assumption correct? Inactivity timeout (--ping-restart), restarting ... RESOLVE: Cannot resolve host address: xxx.cryptostorm.net: Temporary failure in name resolution seems to be the common denominator, correct? ping ...
by Fermi
Tue Sep 06, 2016 11:15 am
Forum: member support & tech assistance
Topic: AUTH_FAILED On New Account
Replies: 1
Views: 459

Re: AUTH_FAILED On New Account

Please check your token/hash @ cryptostorm.nu
Also the token is case sensitive material. If issues remain, mail the token to [email protected], so we can do further diagnostics on it.

/fermi
by Fermi
Sat Aug 13, 2016 12:44 pm
Forum: member support & tech assistance
Topic: Getting exception while trying to connect with cryptostorm
Replies: 3
Views: 1159

Re: Getting exception while trying to connect with cryptostorm

Hi, The clue is in iptables -A INPUT -d(estination) 212.129.34.154 -j ACCEPT should be: iptables -A INPUT -s 212.129.34.154 -j ACCEPT because if you consider input, 212.129.34.154 is the source of the traffic. You could also use: iptables -A INPUT -i lo -j ACCEPT -m comment --comment "Allow loo...
by Fermi
Sun Jul 31, 2016 8:03 pm
Forum: member support & tech assistance
Topic: That token has reached the maximum number of sessions.
Replies: 3
Views: 718

Re: That token has reached the maximum number of sessions.

Hi, "That token has reached the maximum number of sessions." is a message you will get if you used the maximum number of sessions allowed with one token. If you indicate you are only trying to use one session, we'll need to have a look at the token and correct this. Can you email the token...
by Fermi
Fri Jul 29, 2016 8:30 pm
Forum: member support & tech assistance
Topic: iPhone VPN logon not working
Replies: 2
Views: 887

Re: iPhone VPN logon not working

Hi,

Please do the following:

Code: Select all

1) Go to iOS settings
2) Scroll down to the settings panel for OpenVPN
3) Look for "Force AES-CBC ciphersuites" in advanced settings
4) Enable it. It's off by default.


Regards,

/fermi
by Fermi
Thu Jul 28, 2016 5:16 pm
Forum: member support & tech assistance
Topic: VPN noob
Replies: 8
Views: 2200

Re: VPN noob

Hi,

The exit node you've selected is down atm:
UDP OpenVPN is DOWN on 76.164.234.13 port 443

Please try other nodes and evaluate.

/fermi
by Fermi
Wed Jul 27, 2016 11:14 am
Forum: member support & tech assistance
Topic: No longer connecting using Cryptostorm 2.2 Widget
Replies: 19
Views: 10200

Re: No longer connecting using Cryptostorm 2.2 Widget

Hi JDR,

This is perhaps something we can fix ... .
Please send a mail to [email protected] or visit our IRC channel: cryptostorm.is/irc or give a more detailed description of your problem here.

You shouldn't have to go back to PIA!

Regards,

/fermi
by Fermi
Wed Jul 27, 2016 11:10 am
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: TLS timeout when connecting.
Replies: 1
Views: 820

Re: TLS timeout when connecting.

Hi, No this actually means that the end node cannot be reached. Either the node is down or there is a firewall issue on your side, ... . In this case: 195.154.33.73 isn't among our midst anymore. So please update your nodes: https://github.com/cryptostorm/cryptostorm_client_configuration_files Regar...
by Fermi
Mon Jul 11, 2016 8:05 pm
Forum: member support & tech assistance
Topic: VPN noob
Replies: 8
Views: 2200

Re: VPN noob

Hi,

You can use the following command:

Code: Select all

nslookup windows-balancer.cryptostorm.net


This will look up all Windows nodes.

Code: Select all

nslookup linux-balancer.cryptostorm.net


for linux ... .

/fermi
by Fermi
Wed Jul 06, 2016 1:25 am
Forum: member support & tech assistance
Topic: DNS Leak test
Replies: 3
Views: 1226

Re: DNS Leak test

Hi

The IP's of the Cryptofree DNS servers are:
    195.154.61.33
    or
    212.83.175.31

Depending on the Cryptofree server you are connected to.

/fermi
by Fermi
Fri Apr 29, 2016 9:04 pm
Forum: member support & tech assistance
Topic: Error: the plugin doesn't support import capability, Ubuntu 16.04 LTS
Replies: 4
Views: 2390

Re: Error: the plugin doesn't support import capability, Ubuntu 16.04 LTS

Hi, Next to: sudo apt-get install network-manager-openvpn-gnome did you also : sudo apt-get install network-manager-openvpn followed by: service network-manager restart ? Later I saw this: http://askubuntu.com/questions/760345/cannot-import-saved-openvpn-configuration-file-in-ubuntu-16-04-lts You ca...
by Fermi
Tue Apr 26, 2016 6:09 pm
Forum: member support & tech assistance
Topic: What's happened to PJ ?
Replies: 28
Views: 10211

Re: What's happened to PJ ?

df here, just noticed this thread so thought I might as well comment on some of what was said: (yea, yea, I know. I don't visit the forum often enough.) Question is: what will be the future of Crypto VPN? CS will continue regardless of whatever happens to PJ. To continue in the same way: Fermi here...
by Fermi
Sat Apr 16, 2016 2:00 pm
Forum: member support & tech assistance
Topic: ASUS Router Padavan Firmware
Replies: 6
Views: 2289

Re: ASUS Router Padavan Firmware

Of course it is advised to use the hash to keep the disconnect between the delivered token and member in place. But if you are lazy or have a situation where the hash isn't an option, one can choose to use the token. The widget will indeed hash the token before connecting. If you use OpenVPN to conn...
by Fermi
Fri Apr 15, 2016 8:48 pm
Forum: member support & tech assistance
Topic: ASUS Router Padavan Firmware
Replies: 6
Views: 2289

Re: ASUS Router Padavan Firmware

Hi,

If the 'Login' field accepts to token (not the hash), you should be able to authenticate, as nodes accept both plain token and hash.
The standard password is: 93b66e7059176bbfa418061c5cba87dd (but can have any value)

Regards,

/fermi
by Fermi
Fri Apr 01, 2016 6:12 pm
Forum: cryptofree: no-cost cryptostorm network access
Topic: .onion sites not loading
Replies: 2
Views: 8802

Re: .onion sites not loading

Hi,

.onion sites will not resolve within Cryptofree. This is reserved for paid connections.

Regards,

/fermi
by Fermi
Thu Mar 17, 2016 8:14 pm
Forum: member support & tech assistance
Topic: ISP throttling VPN or other issue?
Replies: 8
Views: 5140

Re: ISP throttling VPN or other issue?

marzametal,

Including the use of dnscrypt?

/fermi
by Fermi
Sat Feb 06, 2016 1:16 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: 宮本 Tokyo (Japan) exitnode cluster | anchor node = miyamoto 宮本
Replies: 37
Views: 33053

Re: 宮本 Tokyo (Japan) exitnode cluster | anchor node = miyamoto 宮本

I would propose to send an email to both [email protected] and [email protected].
So I can update IRC topic and other channels.

Regards,

/fermi
by Fermi
Fri Feb 05, 2016 11:06 pm
Forum: member support & tech assistance
Topic: Can't really browse with CS connected
Replies: 5
Views: 5125

Re: Can't really browse with CS connected

Hi, The Fri Feb 05 13:53:13 2016 us=305538 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:6: block-outside-dns (2.3.6) entry is related to the implementation of the fix-leak-dns plugin from ValdikSS: https://community.openvpn.net/openvpn/ticket/605 This new directive ha...
by Fermi
Mon Jan 25, 2016 8:02 pm
Forum: member support & tech assistance
Topic: Site not sending emails
Replies: 1
Views: 3707

Re: Site not sending emails

Hi, You've sent a mail to [email protected].is right? The token has been sent out automatically and I've sent it to tha two email addresses in your mail. Perhaps the mails have been dropped in your spam folders or the cryptostorm.is domain is blocked by the mail servers you use ... . If you want y...
by Fermi
Sun Dec 27, 2015 7:44 pm
Forum: member support & tech assistance
Topic: Bitmessage contact
Replies: 2
Views: 4127

Re: Bitmessage contact

Hi,

Sure, I just responded to a message.

Regards,

/fermi
by Fermi
Tue Dec 15, 2015 3:39 pm
Forum: member support & tech assistance
Topic: Questions about new client config
Replies: 4
Views: 4036

Re: Questions about new client config

Hi,

No problem at all.
We encourage that our customers have a critical mind. This keeps us sharp, and this is also beneficial for the community.

Thanks!

/Fermi
by Fermi
Mon Dec 14, 2015 1:07 pm
Forum: member support & tech assistance
Topic: Questions about new client config
Replies: 4
Views: 4036

Re: Questions about new client config

replay-window 128 30 # settings which determine when to throw out UDP datagrams that are out of order... # either temporally or via sequence number uses the default values: replay-window 64 15 Sun Dec 13 18:52:29 2015 us=200345 replay = ENABLED Sun Dec 13 18:52:29 2015 us=200391 mute_replay_warning...
by Fermi
Mon Dec 14, 2015 12:52 am
Forum: member support & tech assistance
Topic: Questions about new client config
Replies: 4
Views: 4036

Re: Questions about new client config

Hi DESUs better half, Actually this 'challenge' is a good thing. Starting with: reneg-sec 0 The documentation indicates: --reneg-sec n Renegotiate data channel key after n seconds (default=3600). When using dual-factor authentication, note that this default value may cause the end user to be challen...
by Fermi
Wed Dec 09, 2015 2:38 pm
Forum: member support & tech assistance
Topic: Netgear R6400 DD-WRT tls-error issues
Replies: 2
Views: 3861

Re: Netgear R6400 DD-WRT tls-error issues

TLS Error: TLS key negotiation failed to occur within 37 seconds (check your network connectivity) is an indication that the VPN node cannot be reached. Also: 198.204.245.2:1194 Isn't a address of a Cryptostorm VPN node atm. Please consult: https://github.com/cryptostorm/cryptostorm_client_configur...
by Fermi
Sat Dec 05, 2015 1:18 pm
Forum: member support & tech assistance
Topic: Fix for CS config files and Tunnelblick (OS X)
Replies: 4
Views: 4851

Re: Fix for CS config files and Tunnelblick (OS X)

Hi,

4. You need to delete or uncomment "fragment 1400" line in every .ovpn file you want to use in Tunnelblick. Save file (Thanks to Fermi from Cryptostorm!!)


The configuration files have been fixed (fragment 1400 has been replaced with mssfix 1400).

/fermi
by Fermi
Sat Nov 28, 2015 3:17 pm
Forum: member support & tech assistance
Topic: Auth failed except 5 eyes???
Replies: 1
Views: 3284

Re: Auth failed except 5 eyes???

kittenrocke1,

You have one of those tokens that are degenerating in an odd fashion.
This has nothing to do with the 5 eyes.
Eventually your token will die on all nodes.

We are aware of the problem and are looking out for a solution.

Regards,

/fermi
by Fermi
Sat Nov 28, 2015 3:15 pm
Forum: independent cryptostorm token resellers, & tokens 101
Topic: HOWTO: buying access tokens w/ bitcoins
Replies: 8
Views: 14519

Re: HOWTO: buying access tokens w/ bitcoins

BMwannabebuyer,

I don't think the BM is very often used ... .
You can send an encrypted or unencrypted mail to [email protected].
Or pop in on IRC.

In the mean time I'll talk to df about the BM mailbox.

Regards,

/fermi
by Fermi
Sat Oct 31, 2015 6:45 pm
Forum: DeepDNS.net - cryptostorm's no-compromise DNS resolver framework
Topic: Cryptofree DNS on dnsleak.net
Replies: 2
Views: 6099

Re: Cryptofree DNS on dnsleak.net

Volg,

Depending on the cluster that is picked during connection, it should be one of the following addresses:

Code: Select all

212.83.175.31
195.154.61.33


Regards,

/fermi
by Fermi
Sat Oct 31, 2015 6:02 pm
Forum: member support & tech assistance
Topic: Windows 10 - Privacy, leaks, ...
Replies: 0
Views: 7289

Windows 10 - Privacy, leaks, ...

A post to consolidate/discuss all Windows 10 (8, 8.1 and 7) behaviour and countermeasures wrt. Privacy and leaks... . some interesting links: http://hardenwindows10forsecurity.com/Harden%20Windows%2010%20Home.html [ h/t ntldr ] https://www.safer-networking.org/spybot-anti-beacon/ [ h/t Tealc ] http:...
by Fermi
Sat Oct 31, 2015 5:50 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015
Replies: 56
Views: 246546

Re: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015

Hi, After further investigation the behaviour is the following: The widget has a a DNS leak prevention option, what is does is the following: 1) runs "netsh interface ipv4 show dnsserv" to get the current DNS settings for all interfaces 2) skips any interface that has no DNS settings 3) ch...
by Fermi
Thu Oct 29, 2015 3:05 pm
Forum: member support & tech assistance
Topic: How to put cryptostorm on tails?
Replies: 5
Views: 4583

Re: How to put cryptostorm on tails?

Delirium, These packages have to come from the debian repositories. There's a desciption here: https://cryptostorm.org/viewtopic.php?f=37&t=8623&p=14292&hilit=tails#p14292 https://tails.boum.org/doc/advanced_topics/additional_software/index.en.html Regards, /fermi
by Fermi
Thu Oct 29, 2015 2:55 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015
Replies: 56
Views: 246546

Re: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015

Redneck Ninja, This seems to be the third occurrence of this issue (2nd if Redneck Ninja already sent a mail to [email protected].is). If “Obtain DNS server address automatically” is the initial setting it should remain that way during and after the use of the widget. I've tested this on W7 and it...
by Fermi
Tue Oct 27, 2015 4:07 am
Forum: member support & tech assistance
Topic: DNS forwarder for NAT?
Replies: 2
Views: 4253

Re: DNS forwarder for NAT?

I have a Debian box configured as wifi hotspot connected to cryptostorm with OpenVPN. I set up the DNS on the Debian box to forward DNS to Google's public DNS ip addresses (8.8.8.8 and) in named.conf.options. Is that dangerous? Is it more safe to use a DNS IP from cstorm, and how do I find the addr...
by Fermi
Mon Oct 19, 2015 12:00 am
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: HOWTO: cryptostorm on Android non-root | cryptostorm.org/android
Replies: 90
Views: 117911

Re: HOWTO: cryptostorm on Android non-root | cryptostorm.org/android

Hi,

my bad.
Please try with fragment 1400 commented out.

Regards,

/Fermi
by Fermi
Sat Oct 17, 2015 4:37 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: HOWTO: cryptostorm on Android non-root | cryptostorm.org/android
Replies: 90
Views: 117911

Re: HOWTO: cryptostorm on Android non-root | cryptostorm.org/android

Hi,

When having:
2015-09-27 05:41:01 FRAG_IN error flags=0xfa2a187b: FRAG_TEST not implemented

in the logfile, try commenting the following directive in the .ovpn file:
mssfix 1400


Regards,

/Fermi
by Fermi
Mon Oct 12, 2015 4:13 am
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: endpoint VPN IP change
Replies: 14
Views: 10796

Re: endpoint VPN IP change

Hi, Deneb - Cygnus:Cygnus:windows:windows-balancer.cstorm.pw will pick a random exit node (considering DNS TTL of course) Russia:Russia:windows:windows-stpetersburg.cstorm.pw makes IP 95.110.228.44 Italy. This is a DNS redirect due to the fact that windows-stpetersburg has been taken out the exit no...
by Fermi
Mon Oct 12, 2015 4:03 am
Forum: member support & tech assistance
Topic: Auth failed
Replies: 2
Views: 3738

Re: Auth failed

Hi, Auth failed indicates that there's most likely something wrong with the username (the hashed token in this case). Can you please double check the hashing process. Be sure empty the tokenizer when you paste the token in it. Check both hash and token on cryptostorm.nu Also consider Parityboy's exc...
by Fermi
Mon Oct 12, 2015 3:56 am
Forum: member support & tech assistance
Topic: Support still really slow
Replies: 2
Views: 3913

Re: Support still really slow

Hi,

Do you have an open support request?
We'll be happy to look at it.

Can you resend your question to support, referring to this forum topic please (we don't have a record of 'balockae' in the support mailbox)?

Thanks and regards,

/Fermi
by Fermi
Fri Oct 02, 2015 3:15 pm
Forum: member support & tech assistance
Topic: Unable to connect!
Replies: 2
Views: 4605

Re: Unable to connect!

drheath, Mon Sep 28 14:35:49 2015 us=349824 config = '..\user\custom.conf' indicates you're on Windows and you are using the widget. The server 69.30.211.213 (sly) wasn't available at the moment the logging was taken. It has been removed from the balancer pool since. I suggest you update your nodeli...
by Fermi
Fri Sep 18, 2015 11:12 am
Forum: member support & tech assistance
Topic: Connecting Using TCP Rather Than UDP
Replies: 8
Views: 7867

Re: Connecting Using TCP Rather Than UDP

Marzametal, custom.conf can be used to add additional directives when using the widget. These directives are than added to the built-in directives. Adding the proxy stuff should be tested, as according to the manual it has to be done in the connection section, a section that already is generated by ...
by Fermi
Thu Sep 17, 2015 5:38 pm
Forum: member support & tech assistance
Topic: Connecting Using TCP Rather Than UDP
Replies: 8
Views: 7867

Re: Connecting Using TCP Rather Than UDP

Hi Johnny, Normally all nodes should be able to accept TCP connection. I suspect that the conf file isn't proxy aware. Please try the following changes in the conf file: <connection> remote [cryptostorm node] 443 tcp http-proxy [proxy IP] [proxy port] http-proxy-retry </connection> source: https://c...
by Fermi
Mon Aug 31, 2015 6:49 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015
Replies: 56
Views: 246546

Re: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015

KonamiCodeNeeded, Can you try the following please: * uninstall all tap adapters in device manager>network adapters reinstall : https://cryptostorm.org/download/file.php?id=948 * add string value/data ComponentId/tap0901 (REG_SZ) with regedit value name=ComponentId value data=tap0901 to key HKEY_LOC...
by Fermi
Sat Aug 29, 2015 2:13 am
Forum: member support & tech assistance
Topic: Connection on any node rejected
Replies: 2
Views: 3638

Re: Connection on any node rejected

As discussed on IRC, problem has been solved and solution verified.
More info:

https://cryptostorm.org/viewtopic.php?t=8818&p=14534#p14534


Regards,

/Fermi
by Fermi
Fri Aug 28, 2015 6:41 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: Cryptostorm.is redirect due to Leaseweb 'abuse' - temporary path to IRC
Replies: 2
Views: 6090

Re: Cryptostorm.is redirect due to Leaseweb 'abuse' - temporary path to IRC

As per: https://twitter.com/df_cryptostorm/status/637073443834298368 @neo11 @__Fermi__ @cryptostorm_is cs.is is running on a backup server atm due to leaseweb abuse crap, which means some scripts aren't there cryptostorm.is pages have been moved to onyx. As the ircd hasn't been moved, IRC isn't rea...
by Fermi
Fri Aug 28, 2015 12:31 pm
Forum: general chat, suggestions, industry news
Topic: Sorry for the disconnect ppl, you'll thank me later :-P
Replies: 10
Views: 10852

Re: Sorry for the disconnect ppl, you'll thank me later :-P

my alph token is still being refused auth network wide. and irc.. Connecting to cryptostorm.nu (212.83.185.245:6667) * Connection failed (Connection refused) remains down. bahhblahblah, Please join IRC through .org instead of .nu to sort this out ... Why? : https://cryptostorm.org/viewtopic.php?t=8...
by Fermi
Fri Aug 28, 2015 12:29 pm
Forum: general chat, suggestions, industry news
Topic: Sorry for the disconnect ppl, you'll thank me later :-P
Replies: 10
Views: 10852

Re: Sorry for the disconnect ppl, you'll thank me later :-P

During all that lol... something's changed. Could it be possible that the above has changed routing process? Prior to disconnect, my VPNetMon widget used to display 10.44.0.x or 10.66.0.x when connected to CS. Post disconnect, it shows stuff like 10.44.9.99 or 10.66.212.112. Updating firewall rules...
by Fermi
Fri Aug 28, 2015 12:16 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: Cryptostorm.is redirect due to Leaseweb 'abuse' - temporary path to IRC
Replies: 2
Views: 6090

Cryptostorm.is redirect due to Leaseweb 'abuse' - temporary path to IRC

As per: https://twitter.com/df_cryptostorm/status/637073443834298368 @neo11 @__Fermi__ @cryptostorm_is cs.is is running on a backup server atm due to leaseweb abuse crap, which means some scripts aren't there cryptostorm.is pages have been moved to onyx. As the ircd hasn't been moved, IRC isn't reac...
by Fermi
Wed Aug 26, 2015 9:15 pm
Forum: member support & tech assistance
Topic: Is anyone there?
Replies: 8
Views: 6512

Re: Is anyone there?

Jack Black,

If you have issues, you can have a chat in the Cryptostorm IRC channel:
web: cryptostorm.is/irc
or
irc://cryptostorm.is:6697/#cryptostorm

/Fermi
by Fermi
Thu Aug 13, 2015 7:49 pm
Forum: member support & tech assistance
Topic: WNR3500U/L/V2 - Tomato 1.28 - Speed issues
Replies: 5
Views: 5459

Re: WNR3500U/L/V2 - Tomato 1.28 - Speed issues

nymnom,

Indeed your router CPU will be the bottleneck. Encryption and decryption are fairly demanding.
This is a typical observation when running openvpn on a router.

Regards,

/Fermi
by Fermi
Thu Aug 13, 2015 7:46 pm
Forum: member support & tech assistance
Topic: Narwhal 2.22 drop down node list needs updating
Replies: 2
Views: 3451

Re: Narwhal 2.22 drop down node list needs updating

sysfu,

The 'mystery' Rochester node is the replacement for Maple. Node is located in Canada.
Geo location still mentions New York, because the geo location databases aren't updated yet, this could take a while.
(info from df)

Regards,

/Fermi
by Fermi
Mon Aug 10, 2015 8:43 pm
Forum: member support & tech assistance
Topic: is montreal node offline?
Replies: 19
Views: 13136

Re: is montreal node offline?

privangle, Indeed, Iceland (Fenrir) is redirected to Portugal. Montreal (Maple) is redirected to St. Petersburg (Laika). From what I've heard, staff was busy looking for alternatives for the above nodes. I can connect to St. Petersburg (Laika), and location indicates St. Petersburg. IP addresses are...
by Fermi
Wed Jul 29, 2015 12:56 am
Forum: member support & tech assistance
Topic: no token sent
Replies: 7
Views: 5450

Re: no token sent

To all, I concur with parityboy, Cryptostorm is not a scam. I've bought several tokens, directly and through reseller channels. Delivery has always been correct. Of course a delay can occur, or something can go wrong. But ..., exercising some patience and communicating through the proper channels wi...
by Fermi
Fri Jul 24, 2015 11:46 pm
Forum: member support & tech assistance
Topic: is montreal node offline?
Replies: 19
Views: 13136

Re: is montreal node offline?

Hi spotshot,

see twitter messages involved:
https://twitter.com/cryptostorm_is/stat ... 5291235328
Our anchor node in Canada - 'maple' - appears to have been offlined by content oligarchy pressure. Rolling to failover capacity for cluster.

/Fermi
by Fermi
Sat Jul 18, 2015 5:02 am
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: Connecting from Raspberry PI
Replies: 8
Views: 9233

Re: Connecting from Raspberry PI

Hi dastardly, This should do the trick: sudo apt-get install liblzo2-dev sudo apt-get install libpam0g-dev sudo apt-get install libssl-dev cd /tmp wget --no-check-certificate https://www.openssl.org/source/openssl-1.0.2d.tar.gz;tar zxf openssl-1.0.2d.tar.gz;rm -f openssl-1.0.2d.tar.gz;cd openssl-1.0...
by Fermi
Thu Jul 09, 2015 10:30 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: Fermi's github -This is a git repository containing Cryptostorm related stuff.-
Replies: 7
Views: 10594

Re: Fermi's github -This is a git repository containing Cryptostorm related stuff.-

Improved version: https://github.com/cryptostorm/cryptohaven/blob/master/iptables_linux/iptables_cryptostorm.sh or https://github.com/fermi-cryptostorm/fermi-cryptostorm-git/blob/master/iptables_cryptostorm.sh also drops IPv6 traffic, in case IPv6 wasn't disabled in the kernel. again, use :thumbup: ...
by Fermi
Thu Jul 09, 2015 1:50 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: 宮本 Tokyo (Japan) exitnode cluster | anchor node = miyamoto 宮本
Replies: 37
Views: 33053

Re: 宮本 Tokyo (Japan) exitnode cluster | anchor node = miyamoto 宮本

Hi,

Connected to Miyamoto. Deepdns resolves fine, but indeed no connection to the outside world.
Will DM staff.


Regards,

/Fermi
by Fermi
Mon Jun 29, 2015 9:44 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: Cryptostorm Breeze v1.0
Replies: 13
Views: 14614

Re: Cryptostorm Breeze v1.0

Charlie,

Nice work, surely this will be of use for a lot of users.
Thanks!

/Fermi
by Fermi
Sun Jun 28, 2015 5:38 pm
Forum: member support & tech assistance
Topic: What dns servers to use if Iceland is down?
Replies: 3
Views: 3235

Re: What dns servers to use if Iceland is down?

Charlie, Parityboy,

All node and DNS info is condensed in here:

Code: Select all

https://github.com/cryptostorm/cryptohaven/blob/master/cstorm_networkstuff/NodesOfCryptostorm.txt


/Fermi
by Fermi
Sun Jun 28, 2015 4:16 pm
Forum: #cleanVPN ∴ encouraging transparency & clean code in network privacy service
Topic: DotVPN — better than VPN.
Replies: 3
Views: 6767

Re: DotVPN — better than VPN.

extracted js to cleanvpn.org/dotvpn/extension_2_0_20.crx

/Fermi
by Fermi
Thu Jun 11, 2015 3:50 am
Forum: member support & tech assistance
Topic: OpenVPN terminal window filled with multiple replay warnings per minute
Replies: 5
Views: 4304

Re: OpenVPN terminal window filled with multiple replay warnings per minute

sysfu, I've experienced this during heavy torrent sessions, especially when using transmission as a torrent client. Didn't find a reason until now. :? Can you perhaps test if there's a difference when: - connecting to another node - using a port other than 443 to connect to Cryptostorm - using TCP i...
by Fermi
Wed Jun 10, 2015 9:07 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: The CryptoStorm Speed Test Thread
Replies: 65
Views: 62650

Re: The CryptoStorm Speed Test Thread

curl -o /dev/null http://mirror.nl.leaseweb.net/speedtest/100mb.bin Leaseweb Amsterdam Connection: 200Mb/20Mb Cable without VPN % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 95.3M 100 95.3M 0 0 21.2M 0 0:00:04 0:00:04 --:--:-- 21.2M Exit Nod...
by Fermi
Sat Jun 06, 2015 11:32 am
Forum: independent cryptostorm token resellers, & tokens 101
Topic: vpndark.net feedback
Replies: 3
Views: 7924

Re: vpndark.net feedback

Lectori salutem,

I bought my very first token from vpnDark.net. I must say this was a very smooth and correct transaction.
So vpnDark.net is a good reseller choice ... .

Regards,

/Fermi
by Fermi
Tue May 26, 2015 9:38 pm
Forum: member support & tech assistance
Topic: Arrgh...How to use CS DNS for entire LAN?
Replies: 2
Views: 2373

Re: Arrgh...How to use CS DNS for entire LAN?

Yosemite Sam,

Depends on how your lan is configured, which operating systems you're using. Please elaborate on that, or drop in the IRC channel and discuss with peers.

Regards,

/Fermi
by Fermi
Wed May 20, 2015 6:19 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015
Replies: 56
Views: 246546

Re: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015

The things you see in the cache, that's generated from the browser. You should expect not to see websites that you're currently not visiting, but ... . The TTL in W7 will be the same as in W8.1, as this value is pushed from the DNS server. Disabling the DNS cache on W7 is done in the same way as in ...
by Fermi
Wed May 20, 2015 4:46 pm
Forum: cryptostorm in-depth: announcements, how it works, what it is
Topic: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015
Replies: 56
Views: 246546

Re: widget version 2.22 ('sexy narwhal') released in the wild | 4.2.2015

DudeOfLondon, Is is most likely due to the OS DNS caching mechanism. The first time windows-balancer.cryptostorm.net (or other TLD) is resolved, all related IP's are put in the DNS cache in a certain order. Every time the widget is connecting, it will use the first entry. To consult these records: i...
by Fermi
Tue May 19, 2015 4:14 pm
Forum: member support & tech assistance
Topic: Issue with network manager/openvpn.
Replies: 8
Views: 4188

Re: Issue with network manager/openvpn.

Avax,

That would be:
sudo openvpn --config /etc/openvpn/cstorm_linux_dynamic_1-4.conf
replace: /etc/openvpn/cstorm_linux_dynamic_1-4.conf by path and conf file you've chosen.

/Fermi
by Fermi
Mon May 18, 2015 9:08 pm
Forum: member support & tech assistance
Topic: Issue with network manager/openvpn.
Replies: 8
Views: 4188

Re: Issue with network manager/openvpn.

Avax, Due you get the message : Initialization Sequence Completed in your log file when you connect? If positive, it could be an issue with DNS. Can you post the outcome of: nslookup google.com ? If google.com can't be resolved, please post the outcome of: nslookup google.com - 198.100.159.249 or ns...
by Fermi
Sun May 17, 2015 11:18 pm
Forum: member support & tech assistance
Topic: Issue with network manager/openvpn.
Replies: 8
Views: 4188

Re: Issue with network manager/openvpn.

Hi Avax,

The mechanics behind this warning is described in: viewtopic.php?f=32&t=8474&p=12711&hilit=cache+passwords+in+memory#p12711

So in fact nothing to worry about.

/Fermi

Go to advanced search

Nothing to display.

Login