Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit here or GitHub Ξ
Ξ If you're looking for tutorials/guides, check out the new https://cryptostorm.is/#section6 Ξ

Search found 39 matches

by FoodMaven
Sat Jul 14, 2018 11:02 pm
Forum: general chat, suggestions, industry news
Topic: Cryptostorm goes unmentioned -- What a shame!!!
Replies: 3
Views: 12951

Re: Cryptostorm goes unmentioned -- What a shame!!!

Weird place for a reply, df. None-the-less, I've switched to Firefox. As for the tutorials, bottom of your post, none cover CSVPN on a router. Thanks.
by FoodMaven
Thu Jul 12, 2018 3:18 am
Forum: general chat, suggestions, industry news
Topic: Cryptostorm goes unmentioned -- What a shame!!!
Replies: 3
Views: 12951

Cryptostorm goes unmentioned -- What a shame!!!

I'm shocked that of the 74 vpn's tested, that CS didn't make the list of those that leak IP, DNS and other unessential infos to whomever want to buy, steal or hack it (or is that them?).

https://thebestvpn.com/vpn-leak-test/
by FoodMaven
Tue Jul 03, 2018 11:40 pm
Forum: guides, HOWTOs & tutorials
Topic: Tracker Smacker for Modems
Replies: 2
Views: 9383

Tracker Smacker for Modems

Yea!!! TS is up. The modem OS is OpenWRT/LEDE My modem has a section for these cronjobs: https://raw.githubusercontent.com/notracking/hosts-blocklists/master/hostnames.txt https://raw.githubusercontent.com/notracking/hosts-blocklists/master/domains.txt but I have no way to know where those text file...
by FoodMaven
Tue Jul 03, 2018 11:27 pm
Forum: member support & tech assistance
Topic: https://whoer.net Request for comments
Replies: 9
Views: 19540

Re: https://whoer.net Request for comments

I would never buy there service. That is why I'm here. But as a noob (of the first order), I like the balloon info. It helped me find and fix the leaks. 'nuff said.
by FoodMaven
Mon May 14, 2018 9:48 pm
Forum: general chat, suggestions, industry news
Topic: PGP Fail (14May2018)
Replies: 4
Views: 16203

PGP Fail (14May2018)

Late Sunday 13May18, I read that PGP's crypto is broken. I post this here as an FYI.

OpenPGP and S/MIME leak plaintext of encrypted emails.

https://efail.de/
by FoodMaven
Sun May 13, 2018 10:03 pm
Forum: crypto, VPN & security news
Topic: Using No Script in browser to defeat cross site tracking XSS
Replies: 0
Views: 15079

Using No Script in browser to defeat cross site tracking XSS

If I visit a URL, and the page won't load because I'm running https://noscript.net/ if I "deny" facebook.com as one of the scripts that page wants to run am I preventing cross site tracking? I gotta say the idea that any service is watching all the websites I visit isn't a world I want to be in. I'l...
by FoodMaven
Sun May 13, 2018 9:52 pm
Forum: member support & tech assistance
Topic: https://whoer.net Request for comments
Replies: 9
Views: 19540

Re: https://whoer.net Request for comments

Given that whoer is in Russia, I doubt they will be around much longer as a VPN service. But they feature one nice service. If you click on the balloon that shows your percentage of privacy, it will show where your problems are. Using that I eventually fixed mine and whoer shows 100% privacy. Not be...
by FoodMaven
Fri Apr 20, 2018 1:21 am
Forum: member support & tech assistance
Topic: USB external hd drive
Replies: 1
Views: 10733

USB external hd drive

Is it possible that the CS firewalling or other CS bits would affect mounting/reading/writing to/from a TP-Link, Archer C7 ac1750 router's USB port? I'm trying to obtain NAS.I did plug the drive in after getting to green at cryptostorm.is/test.
by FoodMaven
Fri Apr 13, 2018 9:26 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

Yes, the current exit node is:

cstorm_linux-uswest_udp.ovpn
by FoodMaven
Thu Apr 12, 2018 10:08 pm
Forum: general chat, suggestions, industry news
Topic: Howto Guide: Whole House VPN with Ubiquiti + Cryptostorm
Replies: 0
Views: 15254

Howto Guide: Whole House VPN with Ubiquiti + Cryptostorm

Excellent guide for those wanting pretty good privacy.

https://tech.michaelaltfield.net/2017/0 ... mment-8611

writer sets up a Debian based router and wifi. Talks about Cryptostorm's transparency. Good guy.
by FoodMaven
Thu Apr 12, 2018 10:05 pm
Forum: member support & tech assistance
Topic: https://whoer.net Request for comments
Replies: 9
Views: 19540

Re: https://whoer.net Request for comments

Using their site, I was able to find a problem in Firefox and that lead to changing a config and now ipleak.net shows Private Use rather than a leak.
by FoodMaven
Thu Apr 12, 2018 8:46 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

Sadly, this whole project may come to naught. The Sports App, on seeing the exit node, says: cannot establish a session: geo-location-unreliable So the purpose of having CS now seems in vain. I am not quitting CS. For the tiny price, I never would. My computer is still tunneling. So some devices are...
by FoodMaven
Thu Apr 12, 2018 8:38 pm
Forum: general chat, suggestions, industry news
Topic: Akamai White Paper on (most) Router Flaws
Replies: 0
Views: 15111

Akamai White Paper on (most) Router Flaws

'pologies for not knowing much.

https://www.akamai.com/us/en/multimedia ... -paper.pdf

shows OpenWRT as vulnerable to this attack vector. I'm posting it here for posterity. If anybody knows about it, please comment.
by FoodMaven
Wed Apr 11, 2018 9:53 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

Discarding Opera/Mini solved the green/red problem. I'm on the CS "darknet". I don't think of this as "dark" I see it as the light at the end of the tunnel. But that's haberdashery. Sorry. All ISP provided wifi is off . The problem is entirely with Opera and other non-secure browsers wanting to give...
by FoodMaven
Tue Apr 10, 2018 9:46 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

Currently, due to tech problems I've not resolved, the modem device (with wifi) has an SSID of: Xx@x7qDD or like that. The OpenWRT/OpenVPN/Cryptostorm device has an SSID of a (pronouncable) noun. Both devices' wifi are working. I'll be shutting the modem's wifi off this week. I am absolutely certain...
by FoodMaven
Mon Apr 09, 2018 8:19 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

Yes, separate device. The ISP supplied device is a modem-router-wifi unit. Only one ethernet cable runs from it's LAN port to the OpenWRT's WAN port. Only one cable from the OpenWRT device LAN port runs to an unmanaged switch. All connected devices (computer, Raspberry PI, DVD player) obtain 'net ac...
by FoodMaven
Sun Apr 08, 2018 10:02 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

192.168.1.254 is the IP address of the ISP. It is the device (modem, router, wifi) through which I have Internet access.
by FoodMaven
Sat Apr 07, 2018 9:26 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

[code]Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.33.0.1 128.0.0.0 UG 0 0 0 tun0 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 eth0.2 10.33.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun0 104.238.195.140 192.168.1.254 255.255.255.255 UGH 0 0 0 eth0.2 128.0.0.0 10.33.0.1 ...
by FoodMaven
Fri Apr 06, 2018 11:28 pm
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

Re: 'Puter is up at CS.is/test but wifi is isp ip addresses

'puter's ip: 192.168.1.185
wifi device ip: 192.168.1.109
by FoodMaven
Fri Apr 06, 2018 1:55 am
Forum: member support & tech assistance
Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
Replies: 18
Views: 22582

'Puter is up at CS.is/test but wifi is isp ip addresses

Viewing ipleak.net, the CSVPN is up and no leaks. But the wifi isn't. Pardon. I've no idea whether I'm running as a "client". I see there is no bridge mode as client in OpenWRT/LuCI. I see How-Tos to bridge the ethernet to wifi, but have no idea which ethernet/wifi.
firewal zone.png
by FoodMaven
Fri Mar 30, 2018 1:34 am
Forum: member support & tech assistance
Topic: https://whoer.net Request for comments
Replies: 9
Views: 19540

https://whoer.net Request for comments

https://whoer.net

offers interesting info about my VPN service, or lack thereof at the moment. As I am bareback 'cause I blew up my CS router, I'm asking for your opinion of this site.
by FoodMaven
Sat Mar 24, 2018 9:37 pm
Forum: member support & tech assistance
Topic: How I stopped Leaking IP Addresses and Learned to Love CryptoStorm
Replies: 1
Views: 10205

How I stopped Leaking IP Addresses and Learned to Love CryptoStorm

Imagine you know literally nothing about networking, VPN, Infosec. Newer than noob. That's me. After 2 weeks of 4 to 6 hours daily trying to get my VPN up and running properly I have success. Four or five times I had to re-flash my router before I understood enough to not damage it. I am using LEDE ...
by FoodMaven
Mon Mar 19, 2018 1:16 am
Forum: member support & tech assistance
Topic: IBM's Quad9 DNS
Replies: 4
Views: 11407

Re: IBM's Quad9 DNS

https://github.com/cryptostorm/cstorm_deepDNS/blob/master/dnscrypt-resolvers.csv I'm having DNS Leaks on my CS/OpenVPN enabled router. This number from the above URL: 173.208.95.75:443 is this the number that goes into the alternate DNS numbers of the router? Why does is have :443? The example the r...
by FoodMaven
Sun Mar 18, 2018 9:26 pm
Forum: general chat, suggestions, industry news
Topic: For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks
Replies: 5
Views: 15102

Re: For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks

The following should give an understanding as to how little I understand the "work" I'm doing. When I determined I had a DNS leak via https://ipleak.net/ (Cryptostorm's "Goodies" page), I tried to find my own solution. When I saw the info about Ubuntu I jumped to a false conclusion. I thought, becau...
by FoodMaven
Sun Mar 18, 2018 1:24 am
Forum: general chat, suggestions, industry news
Topic: For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks
Replies: 5
Views: 15102

For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks

I have a DNS leak. I am "some Ubuntu user". Into what file are the following lines added? Which file and which directory? script-security 2 up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf from: https://github.com/cryptostorm/cryptostorm_client_configuration_files/tree/master/...
by FoodMaven
Sat Mar 17, 2018 10:34 pm
Forum: general chat, suggestions, industry news
Topic: GitHUB's Config Files NOTES and spaces
Replies: 1
Views: 11526

GitHUB's Config Files NOTES and spaces

Is there a reason for spaces in the info notes differing from the top three commands and the bottom three about disabling IPv6? Is one set correct and the other incorrect? It reads: README.md Don't forget to disable IPv6 with the commands: sysctl -w net.ipv6.conf.all.disable_ ipv6=1 sysctl -w net.ip...
by FoodMaven
Thu Mar 15, 2018 11:24 pm
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 23
Views: 102946

Re: HOWTO: OpenWRT Routers

Following the purpose built guide, created for me, I did the steps: Router OpenVPN Configuration Router Tunnel Configuration Router Firewall Configuration Router DNS Configuration [create] Router Killswitch Configuration [create] 99-killswitch file. Additionally, I added connection to the NTP time s...
by FoodMaven
Tue Mar 13, 2018 4:54 am
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 23
Views: 102946

Re: HOWTO: OpenWRT Routers

Active IPv4-Routes

Code: Select all

Network		Target		IPv4-Gateway	Metric		Table
wan	      0.0.0.0/0	        192.168.1.254	0		main
wan	      192.168.1.0/24		        0               main
wan	      192.168.1.254		        0               main
lan	      192.168.11.0/24		        0               main
by FoodMaven
Tue Mar 13, 2018 12:38 am
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 23
Views: 102946

Re: HOWTO: OpenWRT Routers

root@LEDE:/# uci set firewall.@forwarding[-1].src='lan' root@LEDE:/# uci set firewall.@forwarding[-1].dest='vpnfirewall' root@LEDE:/# uci commit firewall root@LEDE:/# uci set network.wan.peerdns='0' root@LEDE:/# uci del network.wan.dns uci: Entry not found Does Entry not found matter? Do I proceed w...
by FoodMaven
Fri Feb 23, 2018 5:32 am
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 23
Views: 102946

Re: HOWTO: OpenWRT Routers

I am at a loss of words to properly express my gratitude. You are an :angel:

I'm working on it now. I'll say OK when all is OK.
by FoodMaven
Tue Feb 20, 2018 10:56 pm
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 23
Views: 102946

Re: HOWTO: OpenWRT Routers

At the LEDE/LuCI forum, I read that changing the .ovpn was needed. To cstorm_linux-lisbon_udp.ovpn I added the following: auth-user-pass /tmp/auth.conf redirect-gateway def1 auth-nocache The router's admin page, under the VPN tab shows 4 entries Cryptostorm sample_server sample_client provider statu...
by FoodMaven
Tue Feb 20, 2018 12:20 am
Forum: member support & tech assistance
Topic: --remote-cert-tls file that is not configged for Windows
Replies: 1
Views: 7236

--remote-cert-tls file that is not configged for Windows

Please pardon my ignorance. My router's log files have this: Sun Feb 18 21:56:07 2018 daemon.warn openvpn(CRYPTOSTORM)[19288]: WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. and Sun Feb 18 21:55:59 2018 daemon.notice openvpn(CRYPTOSTORM)[19285]: AUTH: Received control message:...
by FoodMaven
Mon Feb 19, 2018 9:56 pm
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 23
Views: 102946

Re: HOWTO: OpenWRT Routers

I think it worthy of note, that after searching the OpenVPN.net Forum for the keyword: cryptostorm, that there is only one entry. That that post's request goes un-responded to is irrelevant. Believe me when I say that I'm glad CS "flies under the radar". It's why I pay, monthly, for a token I have y...
by FoodMaven
Sat Feb 17, 2018 11:06 pm
Forum: member support & tech assistance
Topic: Cryptostorm, OpenWRT, Dynamic DNS (DDNS), OpenVPN
Replies: 1
Views: 7006

Cryptostorm, OpenWRT, Dynamic DNS (DDNS), OpenVPN

I'm so new at this, I often don't know where to begin. I have the instructions for putting OpenVPN on a router. https://loganmarchione.com/2015/08/openwrt-with-openvpn-server-on-tp-link-archer-c7/#Setup_DDNS In this post, the author writes about Dynamic DNS as necessary to OpenVPN. But I read some a...
by FoodMaven
Sat Feb 17, 2018 12:57 am
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 23
Views: 102946

Re: HOWTO: OpenWRT Routers

The OpenWRT page on setting up the OpenVPN shows: touch /tmp/auth.conf echo "YOUR_VPN_USER_NAME" > /tmp/auth.conf echo "YOUR_VPN_PASSWORD" >> /tmp/auth.conf I've read but cannot find at this Forum, words about you CS doesn't use a "user name" or maybe the username is the hashed token but no password...
by FoodMaven
Tue Feb 13, 2018 12:50 am
Forum: member support & tech assistance
Topic: Another $50 router blown up.
Replies: 2
Views: 7286

Another $50 router blown up.

For the last week, I've posted help requests at CS' Twitter, IRC, and via email about setting up CS on a OpenWRT-LEDE-LuCI router. Not getting a timely answer, I used the backup-OpenWrt-2013-11-07-Cleansed.tar.gz at the Forum page on OpenWRT. Prior to that, I asked, repeatedly, if that was current. ...
by FoodMaven
Sat Feb 10, 2018 11:38 pm
Forum: member support & tech assistance
Topic: IBM's Quad9 DNS
Replies: 4
Views: 11407

IBM's Quad9 DNS

Please give your opinion of IBM/Global Cyber Alliance (GCA) Quad9.

Quad9 Domain Name System (DNS) service

https://www-03.ibm.com/press/us/en/pres ... /53388.wss

Would you use it yourself?
by FoodMaven
Fri Feb 09, 2018 6:40 am
Forum: guides, HOWTOs & tutorials
Topic: HOWTO: OpenWRT Routers
Replies: 23
Views: 102946

Re: HOWTO: OpenWRT Routers

The last reply to this post is quite old at 2016. I have put CS's .ovpn and .crt in the OpenWRT/LuCI's /etc/openvpn. I've hashed the Token and put that string in Local Startup. But then this post get a little cloudy. So is CS now IvP6 capable? Do I need to use backup-OpenWrt-2013-11-07-Cleansed.tar....