Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
∞ take a peek at our legendary cryptostorm_is twitter feed if you're into that kind of thing ∞
Ξ we're rolling out voodoo network security across cryptostorm - big things happening, indeed! Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ

All connections down?

Looking for assistance with a cryptostorm connection issue? Post here & we'll help out. Also: if you're not sure where to post, do so here & we'll move things around as needed. Also: for quickest support, email our oddly calm & easygoing support reps at support@cryptostorm.is :)
User avatar

Topic Author
privangle
Posts: 93
Joined: Thu Apr 25, 2013 5:57 am

All connections down?

Postby privangle » Thu Feb 02, 2017 3:27 pm

Hello,

since this morning no one of the connections works any more.
Yesterday (and for months) everything worked fine.

I didn't change anything on my system (Linux opensuse).

My openvpn version is 2.3.2-3.4.1
OpenSSL 1.0.1k

My configuration files are from august 2016, which I imported in my NetworkManager.

I did a token verification on cryptostorm.nu: token and its sha512 value are valid.

Has there been any update or change on servers side?
Certificate, version of openvpn or openssl or anything else?

Should I take new configuration files from Github?

I see that there are some changes and new countries.

But england, canadaeast, denmark, frankfurt, lisbon files are from the 28 of june 2016, so I guess that the problem does not come from the configuration files.

Perhaps an important remark:
the 2 free connections work! (= the connections you can use without buying a token).

May be that this is a hint to a authentication problem?

Thank you for any help.

Here is the verb 4 message for canada connection try: http://pastebin.com/362HL3MY


Rubadub
Posts: 3
Joined: Sun Apr 24, 2016 11:14 am

Re: All connections down?

Postby Rubadub » Thu Feb 02, 2017 3:52 pm

I'm experiencing the same thing, though I didn't try the free connections.


vat

Re: All connections down?

Postby vat » Thu Feb 02, 2017 3:58 pm

Same here. :eh:
I'm getting TLS key negotiation errors.
The free connections aren't working for me.


Ruben

Re: All connections down?

Postby Ruben » Thu Feb 02, 2017 4:06 pm

Same issue here. Using Debian Jessy & openvpn. No problems since this morning. Getting an error that the TLS handshake has failed. For several configurations (either UDP or TCP), though I haven't tried the free ones either.


dowdyhowdy

Re: All connections down?

Postby dowdyhowdy » Thu Feb 02, 2017 4:20 pm

Same here.


deep_patience

Re: All connections down?

Postby deep_patience » Thu Feb 02, 2017 4:39 pm

Same here.
Like 3-4 hours can't use anything linux-balancer.cryptostorm.net returns.
Dusseldorf was working for some time, but then started to timeout.
I thought, it could be some software update, but found no news on forum.


Guys should really start use their twitter, because web-chat (https://cryptostorm.nu/chat) is inaccessible too.


1random

Re: All connections down?

Postby 1random » Thu Feb 02, 2017 4:39 pm

Experiencing the same thing on Windows.

Update servers only shows Global Random and Cryptofree as options.

I've been down for about 7 hours now.

User avatar

Topic Author
privangle
Posts: 93
Joined: Thu Apr 25, 2013 5:57 am

Re: All connections down?

Postby privangle » Thu Feb 02, 2017 5:04 pm

Ok, thank you for your message.

So I think they are doing some work and in some time it will work again.

User avatar

df
Site Admin
Posts: 285
Joined: Thu Jan 01, 1970 5:00 am

Re: All connections down?

Postby df » Thu Feb 02, 2017 5:09 pm

There's a pretty heavy DDoS going on right now against almost all of the servers, including cryptostorm.nu.
Oddly enough, this website and the main one weren't part of the attack.
The web chat connects to the IRC server on cryptostorm.is (port 6697 for ssl, 6667 for plain), and that's still accessible.

The attack is mostly over now, but because most of our data centers have their own flavors of "anti-ddos" features, they are ironically causing a DoS against legit traffic.

I can access all the servers (except cryptostorm.nu, still being hit the hardest), but there's not really anything I can do at this point besides wait for the data centers to clear out their temporary firewall rules.


Throaway1991
Posts: 2
Joined: Thu Feb 02, 2017 5:44 pm

Re: All connections down?

Postby Throaway1991 » Thu Feb 02, 2017 5:45 pm

Still happening hopefulyl get resolved soon


Rubadub
Posts: 3
Joined: Sun Apr 24, 2016 11:14 am

Re: All connections down?

Postby Rubadub » Thu Feb 02, 2017 9:45 pm

NL working now. Thanks for keeping us posted.

User avatar

Topic Author
privangle
Posts: 93
Joined: Thu Apr 25, 2013 5:57 am

Re: All connections down?

Postby privangle » Fri Feb 03, 2017 3:52 am

Thank you for the information about the ddos attack.
The storm seems to be over.

I took this "occasion" to update my config-files or rather to add new connections.

This is great, I found 10(!) new nodes since summer 2016 which I added and tested right now.
They work fine.

Thank you very much, CS-Team!!! :D

User avatar

df
Site Admin
Posts: 285
Joined: Thu Jan 01, 1970 5:00 am

Re: All connections down?

Postby df » Fri Feb 03, 2017 6:58 am

@privangle
Yea, the attack appears to be over now, but the primary France server is still down because the data center there suspended it. Talking with them now to try to get them to bring it back up.

Also, we do need a better system in place to let users know about new nodes. In Windows, widget users would just click the update button and the client would grab https://cryptostorm.nu/nodelist.txt (or nodelist3.txt if on v3 widget), but cryptostorm.nu is hosted on the primary France server. For Linux and everything else, most people just check the GitHub configs repo for new nodes, since all new nodes get added there.

Another way to check for new nodes is to simply resolve the balancers (windows-balancer.cstorm.pw [or .cryptostorm.net or .cryptostorm.nu or .cryptostorm.org] and linux-balancer.cstorm.pw [same TLDs]).

You could also use the same white list that https://cryptostorm.is/test uses, it's at https://cryptostorm.is/whitelist
In that list is a commented (#) out internal node name followed by the raw/nix instance IP of that node, then the win instance IP. So the format is:
# internal node name
linux ip
win ip
# next node name
linux ip
win ip
# etc. etc. etc.

DeepDNS/DNSCrypt IPs can be found by resolving public.deepdns.net, or by using https://github.com/cryptostorm/cstorm_d ... olvers.csv


Rubadub
Posts: 3
Joined: Sun Apr 24, 2016 11:14 am

Re: All connections down?

Postby Rubadub » Fri Feb 03, 2017 12:55 pm

Woke up this morning and even though I'm able to connect to several nodes (no TLS errors like yesterday), I get no data coming through. No error messages in log file, just no data moving in or out.

More DDOS issues or was something changed that we should be aware of?


Lan

Re: All connections down?

Postby Lan » Fri Feb 03, 2017 1:29 pm

I thought my ISP had magically started filtering out Cryptostorm! Every node had a series of TLS failures, as reported. Do you have any more information about what happened -- e.g. exactly what type of attack was it? Are you going to try and find out who was behind the (d)DoS?


Throaway1991
Posts: 2
Joined: Thu Feb 02, 2017 5:44 pm

Re: All connections down?

Postby Throaway1991 » Fri Feb 03, 2017 7:00 pm

Although I can connect I am now having issues with slow speed and constant spikes in connection

User avatar

df
Site Admin
Posts: 285
Joined: Thu Jan 01, 1970 5:00 am

Re: All connections down?

Postby df » Fri Feb 03, 2017 7:24 pm

Oops, forgot to update this forum post.
All the servers have been back up for a few hours now, and they are all responding correctly.

The primary France server (and cryptostorm.nu) was down the longest, the switch behind it automatically shut down the server because of the attack, but the data center has since restored power to the server.


big bird

Re: All connections down?

Postby big bird » Fri Feb 03, 2017 8:48 pm

df wrote:..

Another way to check for new nodes is to simply resolve the balancers (windows-balancer.cstorm.pw [or .cryptostorm.net or .cryptostorm.nu or .cryptostorm.org] and linux-balancer.cstorm.pw [same TLDs]).
.
.


This got me thinking. I like to list node ips and locations on the cli. I'm not very experienced with bash, so if anyone can suggest a better way (which I strongly suspect there is) I'm keen to hear it. I might try and add a column for ping times. Doesn't work with voodoo, it seems.

Code: Select all

#!/bin/bash

# Displays cryptostorm node IPs and location using info from geoiplookup

dig linux-balancer.cstorm.pw | grep -o '[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}\.[0-9]\{1,3\}' > /tmp/a
cat ./a | xargs -n 1 geoiplookup { } > /tmp/a2

pr -m -t --page-width=90 /tmp/a /tmp/a2


GFSF

Re: All connections down?

Postby GFSF » Mon Feb 06, 2017 11:11 pm

dear df/ fermi ..

Would you care to share what the data-centers have uncovered on the denial of service outages ? Seems pretty 'massive'.

Need to know if it was from a 'nation-state capable' adversary or a bunch of low-life skiddies.


Khariz
Posts: 161
Joined: Sun Jan 17, 2016 7:48 am

Re: All connections down?

Postby Khariz » Tue Feb 07, 2017 11:28 am

Pretty sure it was script kiddy botnets. This wasn't the only the vpn service to get hit either. I have four vpn services they were affected on the the same day.

User avatar

Topic Author
privangle
Posts: 93
Joined: Thu Apr 25, 2013 5:57 am

Re: All connections down?

Postby privangle » Tue Feb 07, 2017 3:28 pm

Hi,

since this morning the connection to all servers are rejected again.

The latency period of rejection seems very short to me.

Sometime, I can connect to one of the 23 nodes, but this is an exception.

Is there another attack?

Thank you.

User avatar

Fermi
Site Admin
Posts: 218
Joined: Tue Jun 17, 2014 11:42 am

Re: All connections down?

Postby Fermi » Tue Feb 07, 2017 3:59 pm

Just ran a test towards all nodes. Good results ... .
Something wrong on your side?

/fermi

User avatar

Topic Author
privangle
Posts: 93
Joined: Thu Apr 25, 2013 5:57 am

Re: All connections down?

Postby privangle » Tue Feb 07, 2017 5:56 pm

@Fermi

Thank you for your answer and the test.

So it seems to be a problem on my side.

A strange behavior: after an hour of no connection, the first connection works. I deconnect and then all the next connections fail.

Strange behavior. No changings on my side.

I keep you informed when I find something.

User avatar

Fermi
Site Admin
Posts: 218
Joined: Tue Jun 17, 2014 11:42 am

Re: All connections down?

Postby Fermi » Tue Feb 07, 2017 6:00 pm

Hi,

Sounds like a 'max sessions reached' problem ... . Please check token @ cryptostorm.nu for this message.
If positive, please mail token top support@ or fermi@ so we can reset it.

/fermi

User avatar

Topic Author
privangle
Posts: 93
Joined: Thu Apr 25, 2013 5:57 am

Re: All connections down?

Postby privangle » Tue Feb 07, 2017 8:30 pm

@Fermi

You are right: the message is

That token has reached the maximum number of sessions.

Is it better to sent you a mail with pgp, and if the answer is yes, what is the public key?

The support or fermi emails, are they cryptostorm.is or .org?

/privangle

User avatar

Fermi
Site Admin
Posts: 218
Joined: Tue Jun 17, 2014 11:42 am

Re: All connections down?

Postby Fermi » Tue Feb 07, 2017 9:38 pm


User avatar

Topic Author
privangle
Posts: 93
Joined: Thu Apr 25, 2013 5:57 am

Re: All connections down?

Postby privangle » Wed Feb 08, 2017 6:30 am

@fermi
Perfect, thank you! :thumbup:


Return to “member support & tech assistance”

Who is online

Users browsing this forum: Boorbun21 and 29 guests

cron

Login