General

Hi

im using ubuntu 10.04 but both pptp and openvpn connections to the london server dont connect. I get error messages that 'the connection has timed out' and the 'vpn service has not started'. Ive used this account on a windows machine on the same network and it worked on windows. Is there something wrong with ubuntu?

EDIT-this is the output i get when i try to use openvpn on ubuntu 10.04-perhaps someone will understand what it means...

Aug 19 04:30:05 daddy-laptop NetworkManager: <info>  Starting VPN service 'org.freedesktop.NetworkManager.openvpn'...
Aug 19 04:30:05 daddy-laptop NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' started (org.freedesktop.NetworkManager.openvpn), PID 1822
Aug 19 04:30:05 daddy-laptop NetworkManager: <info>  VPN service 'org.freedesktop.NetworkManager.openvpn' just appeared, activating connections
Aug 19 04:30:05 daddy-laptop NetworkManager: <info>  VPN plugin state changed: 1
Aug 19 04:30:05 daddy-laptop NetworkManager: <info>  VPN plugin state changed: 3
Aug 19 04:30:05 daddy-laptop NetworkManager: <info>  VPN connection 'tuvpn' (Connect) reply received.
Aug 19 04:30:05 daddy-laptop nm-openvpn[1826]: OpenVPN 2.1.0 x86_64-pc-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [MH] [PF_INET6] [eurephia] built on Jul 20 2010
Aug 19 04:30:05 daddy-laptop nm-openvpn[1826]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Aug 19 04:30:05 daddy-laptop nm-openvpn[1826]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Aug 19 04:30:06 daddy-laptop nm-openvpn[1826]: WARNING: file '/home/daddy/var/www/tuvpn/downloads/tuvpn/usuario.key' is group or others accessible
Aug 19 04:30:06 daddy-laptop nm-openvpn[1826]: /usr/bin/openssl-vulnkey -q -b 1024 -m <modulus omitted>
Aug 19 04:30:06 daddy-laptop nm-openvpn[1826]: WARNING: file '/home/daddy/var/www/tuvpn/downloads/tuvpn/ta.key' is group or others accessible
Aug 19 04:30:06 daddy-laptop nm-openvpn[1826]: Control Channel Authentication: using '/home/daddy/var/www/tuvpn/downloads/tuvpn/ta.key' as a OpenVPN static key file
Aug 19 04:30:06 daddy-laptop nm-openvpn[1826]: LZO compression initialized
Aug 19 04:30:06 daddy-laptop nm-openvpn[1826]: Attempting to establish TCP connection with [AF_INET]83.170.117.203:1194 [nonblock]
Aug 19 04:30:16 daddy-laptop nm-openvpn[1826]: TCP: connect to [AF_INET]83.170.117.203:1194 failed, will try again in 5 seconds: Connection timed out
Aug 19 04:30:31 daddy-laptop nm-openvpn[1826]: TCP: connect to [AF_INET]83.170.117.203:1194 failed, will try again in 5 seconds: Connection timed out
Aug 19 04:30:46 daddy-laptop NetworkManager: <info>  VPN connection 'tuvpn' (IP Config Get) timeout exceeded.
Aug 19 04:30:46 daddy-laptop nm-openvpn[1826]: SIGTERM[hard,init_instance] received, process exiting
Aug 19 04:30:46 daddy-laptop NetworkManager: <info>  Policy set 'Auto myhomenetwork ' (eth1) as default for routing and DNS.
Aug 19 04:30:58 daddy-laptop NetworkManager: <debug> [1282188658.002317] ensure_killed(): waiting for vpn service pid 1822 to exit
Aug 19 04:30:58 daddy-laptop NetworkManager: <debug> [1282188658.002456] ensure_killed(): vpn service pid 1822 cleaned up

 

Moggy,

Is this Ubuntu server or Ubuntu desktop you have tried on,

try re-installing or upgrade the network-manager package, if it is ubuntu desktop than please follow the tutorial guide.

It is a common problem with the network manage package on ubuntu server. however you should be able to connect using the command line openvpn connection.

Post Reply

First day i use this VPN Service, so i've got some topics i would like to discuss.

1.)My First Day Feedback: Until now i am satisfied with the latency and possibilitys for the price, but not so much with the provided speed. I can only use half the speed of my provider which is in my case acceptable but still a negativ point. (25 Mbps -> about 12,5 Mbps). Why is that?

2.)It would be nice if you could add a Comodo Firewall Tutorial to the FAQ-Question "How to block all outgoing Internet traffic when my VPN connection (OpenVPN or PPTP) goes down (so, how to make sure that all outgoing Internet traffic goes just over VPN) ?" because i was unable to carry over the Information into my Comodo Firewall. (Windows 7 x64) :/

3.)I would like to have a fixed Open Port because each time I reconnect I get a new internal IP which changes the Open Port -> I have to reconfigure my Router...

4.)If you keep this Service up and increase your Server Speed i may stay a while :)

4.)©2009 TUVPN.COM -> 2010?

That's it from me for now.

Hi,

Well I'm not admin or work for TUVPN but can help you on some questions you have.

1) You cant expect your natural ISP speed to be the same when running through a VPN or indeed a Proxy! It will be slowed down to some degree, especially since with this service and most importantly its being ENCRYPTED and that slows the connection down alittle. 

From what you mention the speed your getting is really good so dont knock it and other VPN providers will do no better I can tell you. I'm on 20 mbps ISP aswell.

2) I would agree with you, Comodo is the best firewall

3) Cant help you mate

4) Thats true but easily missed out, hardly a crime. Sounds to me like your more bothered about speed than privacy because you need to expect some knock on effect to your speed with encryptian or just use standard transparent proxies which are ten a penny. 

Thank you for the reply Natalie. I aprreciate it :]

1.)Thought so. So probably most gets "used up" because of the encryption.

2.)Well... it works for me. Easy to handle and still complex possibilitys :)

3.)Admin stuff.

4.) Just noticed it. If i need my full speed i simply disable the service, but if i need privacy... well speed isn't that important as stated before. =)

Have a good week,

Michael

Hello Michael,

1. Had already been well explained by Natali. 

2. Yes certainley there are many firewalls better than Sygate, but the issue we had is that not many of the firewall filters the traffic on the basis of Interface Card / Connection or the Profile based filteration. I have tried to acheive this task with Comod, Bit Commander and few other Free Firewalls (windows based) but without any success, and only found Sygate which do the filteration on connection basis. 

If you know any firewall which can have such type of logical/rule based setup, please let us know and we will definitley look into this.

3. Unfortunatley this is not possible with current setup, this measure has been put in place for security reasons and not to have ourselves flooded with attacks and such sort of abusive users. 

4. You already have answered it. :)

5. Thanks for letting us know, this has been corrected :)

Regards,

Admin, TuVPN

Hello Michael,

1. Had already been well explained by Natali. 

2. Yes certainley there are many firewalls better than Sygate, but the issue we had is that not many of the firewall filters the traffic on the basis of Interface Card / Connection or the Profile based filteration. I have tried to acheive this task with Comod, Bit Commander and few other Free Firewalls (windows based) but without any success, and only found Sygate which do the filteration on connection basis. 

If you know any firewall which can have such type of logical/rule based setup, please let us know and we will definitley look into this.

3. Unfortunatley this is not possible with current setup, this measure has been put in place for security reasons and not to have ourselves flooded with attacks and such sort of abusive users. 

4. You already have answered it. :)

5. Thanks for letting us know, this has been corrected :)

Regards,

Admin, TuVPN

Thanks for the two posts with the explainations and you're welcome =)

Thanks for the Comodo Firewall Tutorial :)

Unfortunaly it didn't work the first time. So i changed the Direction of the Dateflow of the first and second Rule to "Out" and well... i am hearing my internet radio station right now. You might want to change/mention that in the Tutorial.

Hello Michael,

Thanks for letting us know,

Though it doesn't make sense, logically you'd need 2 rules 1 for inbound and another for outbound routing in any firewall, but we will look into this.. if this is working for you than this should work for us as well :)
Also, could you let us know when you have tried our suggested rules, were your able to browse anything on the web or was it just an internet radio not working ?

You're welcome.

I was suprised as well, but it simply worked only then.

No, every application which i applyed the rules to had the same Problem when the first and second were on inbound instead of out.

The log of my firewall confirmed the blocking.

Indeed it is surprising that the rules didn't work, however I'm able to browse everything with the rules you have suggested and rules which we have defined, as a matter I didn't any think different with both set of rules.

Anyway we will definitley look into this.

I was racking my head trying to figure out why the comodo rules weren't working, it just blocked my program from passing any traffic.  I then changed the data flow of the 2nd rule to "out" (keeping the 1st rule as "In" as per the tutorial)and it works perfectly! I disconnected from the VPN whilst keeping the program running to make sure no data was being passed through and thankfully comodo blocked it as it should.  Iv'e emailed TUVPN so hopefully they can update the tutorial.

Dipal,

We will update the FAQ as soon as we finish with the testing, at the moment we are involve working in different projects and quite busy these days but thanks for letting us know we will revise the tutorial soon :)

Post Reply

Hi there !

We have just launched our latest server in Malaysia, and we are already thinking about the next one! Options in our mind are Canada, to provide best latency performance to our American continent users, or Russia, to add further options for our European users.

What do you think about these locations? Any other options you would like us to consider?

On a bigger picture, we are thinking about where we should apply most effort and attention :

1) To deploy more servers as fast as we can.

2) To add new services to our current portfolio of services associated with each TUVPN account, while of course keeping the same price!

We think that what currently differentiates us from the competition is the number of features we offer and the stability and professional support linked to the service. We can't/don't want to fight on pricing with other VPN providers precisely because of the quality of service we are trying to build, but of course we can fight on services.

Therefore, it is on our mind to deploy SSH2 VPNs to all our servers (we are in initial stages of research). With an SSH2 VPN, you would be able to encrypt specific applications while leaving some others out of the VPN, giving you a new range of options and much more flexibility when protecting your digital life.

What do you think about this? What is the path you would prefer us to take? Any other feature that you would like added to TUVPN in the future ?

Let us know !

Thanks for helping to build the best VPN service out there :)

TUVPN.COM Team

Hello TUVPN,

This is why you are the BEST in this field and always will be I hope. Listening to the customer and not feeding them BS like with other VPN services.

Okay well I think you should strive for a nice balance. One month you could work more on service improvements and additions, than the next month bring out the additional server.

What I would like to see included is the ability to chain the current proxies you offer in a proxy chain for additional anonymity. So for example one could use Swiss VPN and than connect to Spain Proxy, than from Spanish proxy connect to UK proxy and than internet. 

The SSH2 option is very good and also would give more security and privacy. I wouldn't mind seeing aswell the addition of Socks 5 proxys for that additional option. I think than it could be easier maybe to chain the port 8080 HTTP proxies currently installed through to these?

Now regarding the location of the next server. I wouldn't really want one in Russia at the moment. We have plenty in Europe and I think the Ukraine or Estonia would offer much better options than Russia. I have used proxies from both nations and found the Ukraine much better but if you were to use Russia than I would much prefer it if the server was not based in Moscow or to the West of the country. It would be allot better if the server was more central or even more to the east of Russia, making it based more in Asia than Europe. 

Canada would be a good candidate as they have strong privacy laws, unlike the USA they dont bow down easily to demands. I have a few locations in mind such as Costa Rica which is offshore based and has good privacy laws again. The speeds arent insane but its the location and jurisdiction that is attractive, plus it opens up the market for the South American's to use. I have a contact for a Costa Rican service, if you want that just let me know.

My biggest want would be for the ability to proxy chain the TUVPN servers, currently it cant be done to my knowledge.

Kind regards

Nat

Forgot to mention that something else that should be changed (Improved) here is the option on renewing our subscription, that be monthly or yearly ... whatever, but the option to change the default user name we got on registering. As it stands we are with the same user name for the life of our contract here and that in my opinion could put privacy at risk. Upon renewal or even each month for those who pay yearly, the ability to change the USER NAME to what the member would like or if that's not possible being issued a new one.

No one else has replied so I'll post a few more ideas;

* Support for L2TP

* Support for SSLP (Newer versions of Windows support this)

* Change these forums to conventional easier to navigate forums that are arranged in sections

Personally I think you guys should keep releasing new servers in different locations, as you already do but do it bi-monthly and with the month in between focus on the service improvements, such as adding support for example Socks 5 proxies.

Please let us know your thoughts on all this. 

Damn, forgot to incl in the last post and it relates to future locations of servers. Latvia or Lithuania would be good options as they both are in the top 5 world wide for speeds. Also good privacy laws.

Hi,

I would suggest to add a new server in Russia : quality bandwidth at reasonable price, pretty accomodative laws...

Hi - 1. I would agree with Nat with respect to be able to chain several proxies in a row e.g. node Lux -> proxy Uk -> proxy Us -> proxy Malaysia -> internet. 2. Also, everything else equal in terms of speed best would be to choose the jurisdiction which preserve best the privacy of the users, so I'd go for Russia too. 3. Then choose more of the latam area to diversify the jurisdiction risk which when couple with a 'proxy chaining" feature would really be ideal in terms of privacy protection. Very soon with government crack down on all privacy of citizen having the availability to a higher privacy protection will be a very valuable business proposiion for TUVPN and attract more and more costumers..

Yes that ability to chain several proxies in a row would be brilliant for privacy. Also TUVPN I would like to mention that oneday in the near future it would be nice if you could look into an African server. They are not all spammers & scammers, some of the companies in Africa are going really well and I know of one based in Kenya here http://www.kdn.co.ke/index.php 

No other VPN provider offers Africa and thats through IGNORANCE and misplaced fear, when a massive market exists in the region. Just stay clear of countries like Nigeria and the Ivory Coast.

Hi Nat & others !

Thx for your extremely valuable input. We are really busy now with the preps for dedicated IPs deployment next week (hopefully!). But we have already started to check on the proxy chaining option and how to integrate it into our service.

Regarding this, any software that you use or have used that can accomplish this ? Or which is the experience with other companies regarding the use of this functionality ? (I mean how it is achieved).

Thx again for your help !

TUVPN.COM Team

Hello Tuvpn team and all,

I have a question about the choice of new servers. What's the need of more "relax" jurisdictions ? Hasn't Tuvpn a no-logging policy on all their servers ? 

Anyway my suggestions by priority :

- Install OpenSSH on all servers

- Disable reverse DNS and add few public IPs, randomly assigned at each connection

- Accept more "private" ways of payment like Liberty Reserve

- And is it really impossible to bypass the 5min waiting time after a server change ?

Regards.

Yes, I agree with disabling Reverse DNS..

why not in Island ?

Canada it's the best choice ;)

Post Reply

I followed the tutorial to setup TUVPN in ubuntu 10.4 but it does not connect.  The error message says "The VPN connection has failed because the connection attempt has timed out."

I tried changing the node from vpn.tuvpn.com to madrid or london but neither works.

PPTP however works fine.  Any ideas? 

Hi there,

The error you mention "The VPN connection has failed because the connection attempt has timed out." is for OpenVPN ?

If it is, please post the openvpn log here so we can check where it fails ?

Typically it is the other way round: OpenVPN does work but not PPTP (also typically because ISP is blocking it).

Let us know and remember that you can open a ticket in your client area for any issue you have.

TUVPN.COM Team

 Was this ever solved ? I'm having the same issue. PPTP works on lucid right away but openvpn timeouts.

Post Reply

Leave us your feedback about it !

Hello, me I'd like a server located in Russia or in luxembourg.

If anyone that location, either in Asia or in Australia for me.
Thank you for setting up a server each month.

Yes Russia is the best choice.

Hello alipaxe it kaneez, you know me eh! his pleasure to see you here.
You would be confirmed in Russia's top eh? especially for p2p. a + vpn on the blog or forum TUVPN

Hello, yes I can confirm that an implementation of a server in Russia is a very good strategy.
On the site blogvpn.com full of people awaiting a decision to join this superb vpn

Russia I think would be good idea for the future bit not for the Asia/Australasia option. Part of Russia is in Asia sure, but the fast servers probably reside in the Moscow area which is Eastern europe and not counted in this.

Okay well Australia is one option for Australians and New Zealanders to use, plus pacific islanders and others from the far east could use it with better speeds. Hong Kong has very good privacy and security alongwith Taiwan which also has nice speed. Singapore also tends to have decent speeds.

The nation chosen ideally would need to have good speeds, good privacy & security in place for that nation and also not like somewhere such as China.

Malaysia, Indonesia, Taiwan, Japan, Australia, Singapore and Hong Kong I know of that have decent to good speeds. Some like Australia are very strict in how users use the internet BUT I think we also need to think about other users in the region and Aussies cant access Paypal.au from outside Australia ... has to be Aussie IP and hey at the end of the day the connection we use is encrypted SSL blowfish plus you can use a proxy via that.

That would be my next request, ability to chain TUVPN proxy's in a chain.

I will have a scout around for some providers and more info for the area.

Found two decent suppliers in Singapore http://www.vodien.com & http://www.limebox.com.sg/

Thx to all for your input ! We have just started contacting datacenters. Will update you about the progress !

TUVPN.COM Team

Post Reply

Tonight I was connected through the London server and all was well. Later on I checked my icon (hidden lower right of screen Win7) and saw that I had been disconnected. There was no warning and I wouldn't have known without  checking mself. Is this normal and can it be prevented or at least a warning issued?

Hi Ian,

First thing would be to make OpenVPN GUI icon always visible, this will give you a quick visual reference of the status of the connection.

Connection can be broken for a number of reasons (issues with your adsl, issues along the route to the servers, issues with our servers ...). If broken icon will change to yellow/red and password re-asked.

TUVPN.COM Team

It happened again yesterday. The problem is that this means that the system can't be left unsupervised. Is there any way of setting up so that a dropping out of the TUVPN can trigger a closing down or blockage of the ADSL connection? This would certainly be a useful option.

Hi Ian,

Most of the times a connection is broken it is a customer side issue and we can't control the state of the customer internet connection afterwards.

If you want to ensure that no traffic leaves your computer without vpn protection what you can do is use your firewall to block ALL outgoing traffic except for 1194/udp (openvpn default port). This way if the vpn is down no traffic will reach internet from your computer.

This should achieve what you want.

TUVPN.COM Team

Thank you - that is very helpful. I will try to implement this.

I'm a bit surprised that it is a "customer side issue" though. I've tried deliberately cutting my ADSL and it does not cause TUVPN dropout and I didn't notice any instability in the ADSL anyway. I had the impression that it was the TUVPN itself that was cutting off. Perhaps you could enlighten me a little on that one please. Regardless - the firewall solution you recommend soundl like what I'm interested in.

Thanks again.

I found out how to configure the Windows 7 Firewall to block all outgoingtraffic - but not how to then permit 1194/udp. Spent some time on this but Windows 7 Firewall is quite complicated adn I can't see how to do it.

Hi again Ian,

No enlightenment needed. To put it simply, we don't cut customers connections for any reason. Other customers can testify here, but we have seen connections of up to 170h. Customers have different usage patters, but we don't cut connection either by time or traffic.

That said, connections can be lost for a number of issues: we doing maintenance with the servers, ISPs issues, customer issues ... we try to provide the smoothest possible experience to most of our users. This is capital for us. We assume that we can't succeed with 100% of them, but we try to fix as many particular issues as we can (again, other customers can testify for this).

About your issue and how to block all outgoing connection except for 1194/udp, as we consider it to be of interest to all our users will try to set up a FAQ about it during this week.

TUVPN.COM Team

Thanks again. There hasn't been another dropout. If I get my own solution to setting up Windows 7 firewall I'll post it here anyway. I tried another option that only permits a certain IP number to be used for outbound traffic - and the normal IP number to be blocked - but that didn't work. Look forward to your FAQ.

Ian

Post Reply

How do I use them along with OpenVPN ?

Thanks,

Please check: http://www.tuvpn.com/faqs.php?ln=en#251

TUVPN.COM Team

Post Reply

When i first signed up for the VPN service with TUVPN, I used a PPTP connection. Initially everything worked well, however, after about a week i could not connect to the VPN network. I contacted TUVPN support and they were quick to help.

One of the potential weaknesses of PPTP connections is that your ISP can create problems. I was advised by TUVPN to use their OpenVPN connection option. This involves the installation of OpenVPN software. The easy installation process is covered in TUVPN's tutorials. Just wanted to let others with PPTP issues know that OpenVPN is a great option....and changing nodes with OpenVPN is much easier than PPTP.

Hi,

We cover the potential issues with PPTP here.

As said OpenVPN will fix most of the situations where PPTP for any reason is failing. We want to offer maximum flexibility and range of options to our clients and in this sense we are even studying the option of adding additional VPN connection methods.

TUVN.COM Team

Post Reply

When will the content of the blog be translated to English ? For what I can understand I assume it to be interesting and should be in English on the English site.

Very true. We plan having it working and translated beginning next week.

We have done it faster :). Blog already available in English. Use the menu bar link.

Team TUVPN

.

Post Reply