cryptofree howto Ubuntu

[sin]

Here are Ubuntu instructions for Cryptofree

prerequisite downloads;
cryptofree config file for linux
ca2.crt certificate file
openVPN;

1) Install openVPN using the terminal;
a. Ctrl+Alt+T to open terminal and type "sudo apt-get install network-manager-openvpn-gnome" (without the quotemarks, just the words), and answer the question that is asked by the terminal once this command has run with "Y"

b. Type into the terminal window: "service network-manager restart"


Cryptofree setup:

1. Edit Connections → Add → Import saved VPN configuration → cryptofree_client_linux_4.conf









2. Change the authentication method to "password" and enter any characters into both the username and password fields, do not leave them blank! - Click on CA Certificate in the network manager, and choose the downloaded CA file.





3. Hit Save and you're done! You should now be able to connect to the cryptofree network from VPN Connections:



If you want to start up your VPN every time you connect to the internet (recommended!) you can do this:

network manager → Edit Connections → Choose the (internet) Connection you use → Edit
Go to the GENERAL tab and check the box for "Automatically connect to VPN when using this connection," and choose cryptofree_client_linux1_4 from the pull-down menu your just-created VPN profile.



Cheers!

[sin]

I have issues connecting to cryptofree using the inbuilt ufw firewall with strict rules -only on initial handshake, I can enable ufw after cryptofree connects without any issues. Are these updated, if so I'll attach a guide or link to the IPtables;
viewtopic.php?f=37&t=8453&p=12643#p12641

nevermind, full list here; https://github.com/cryptostorm/cryptoha ... ctives.txt I'll test and put instructions here.



thanks!

[jlg]

Did you sort this out, sin?

[Anoo Therr]

all good. tested all works. thank you so much. great work gurus.

[df]

Also, IPv6 leaks have been reported in Linux while using Cryptofree.
So a good idea would be to disable that by adding to /etc/sysctl.conf:

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1

then running the command `sysctl -p`, or by using ip6tables to block all ipv6 traffic.

[parityboy]

@df

Is that Cryptofree specifically, or Cryptostorm in general? I can't see anything special about Cryptofree that would encourage IPv6 leaks...

[marzametal]

I haven't noticed any IPv6 leaks in CryptoStorm yet... but I got rules protecting against that anyway, so it is useless even checking! Stop making me think about stuff df!

[ABISprotocol]

Hello,

An easier way (for many users) to disable IPv6 leakage (as per the discussion above, and probably advisable for anyone who hasn't done it yet) would be to do the following:

For Windows Vista and above:
Open cmd prompt and type:
netsh interface teredo set state disabled.

For Ubuntu (10 and up):
Copy and paste the following lines into a terminal one at a time (enter / return after each line, so you can see the result after each time you've entered a command):

echo “#disable ipv6″ | sudo tee -a /etc/sysctl.conf
echo “net.ipv6.conf.all.disable_ipv6 = 1″ | sudo tee -a /etc/sysctl.conf
echo “net.ipv6.conf.default.disable_ipv6 = 1″ | sudo tee -a /etc/sysctl.conf
echo “net.ipv6.conf.lo.disable_ipv6 = 1″ | sudo tee -a /etc/sysctl.conf

FWIW, this works for Ubuntu 14.04 LTS.

Source: https://lilithlela.cyberguerrilla.org/?p=638

This does not include OSX or iOS instructions, so...

from http://www.vpnfan.com/blog/how-to-disab ... ndows-mac/

To disable IPv6 in Mac OS X Yosemite (10.7 or 10.8) you will want to start by going to Applications, then Utilities, and finally click on Terminal. You can get a list of your network interfaces by issuing the following command:

networksetup -listallnetworkservices

Most newer Mac’s only have wi-fi network interfaces. Running the command above will list a LAN interface if you have one. Now you will want to issue these commands to disable IPv6:

networksetup -setv6off Wi-Fi
networksetup -setv6off Ethernet

There is a more comprehensive list for OSX users (10.7.x, 10.8.x, 10.9.x, and 10.11.x) on how to disable IPv6 here:
http://help.unc.edu/help/how-do-i-disab ... -mac-os-x/

Do this.

[ABISprotocol]

Another helpful thing:

Once you've done the above, check this resource out which is a good guide in helping you understand whether you've actually accomplished what you originally set out to do:

http://lifehacker.com/how-to-see-if-you ... 1685180082

[ABISprotocol]

Hello,

An easier way (for many users) to disable IPv6 leakage (as per the discussion above, and probably advisable for anyone who hasn't done it yet) would be to do the following:

(...)

For Ubuntu (10 and up):
Copy and paste the following lines into a terminal one at a time (enter / return after each line, so you can see the result after each time you've entered a command):

echo “#disable ipv6″ | sudo tee -a /etc/sysctl.conf
echo “net.ipv6.conf.all.disable_ipv6 = 1″ | sudo tee -a /etc/sysctl.conf
echo “net.ipv6.conf.default.disable_ipv6 = 1″ | sudo tee -a /etc/sysctl.conf
echo “net.ipv6.conf.lo.disable_ipv6 = 1″ | sudo tee -a /etc/sysctl.conf

FWIW, this works for Ubuntu 14.04 LTS.

(...)

It occurred to me that this doesn't work for everyone who has Linux who is trying to disable ipv6 leakage, so I put in some additional info here:

Once you've done the above, open a fresh terminal and enter following command:

cat /proc/sys/net/ipv6/conf/all/disable_ipv6

(The result: 0 means it's enabled and 1 means it's disabled.)

If it's still enabled, then go here:
http://www.webupd8.org/2009/11/how-to-d ... u-910.html

The above link takes you to instructions on how to disable ipv6 system wide, though to do that first you need to know if you are on grub or grub2. How-to:
(Ubuntu)
https://askubuntu.com/questions/107486/ ... on-of-grub
or
(Debian - Wheezy)
https://unix.stackexchange.com/question ... -not-found

[Aleksander1979]

cryptofree_client_linux_4.conf do not work Where can I get one which work, please?

[df]

@Aleksander1979
See the note at the top of this page:

"Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit GitHub Ξ"

"Github" is a link to https://github.com/cryptostorm/cryptost ... tion_files where there is a "cryptofree" folder that contains all the cryptofree configs.