Ξ welcome to cryptostorm's member forums ~ you don't have to be a cryptostorm member to post here Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit here or GitHub Ξ
Ξ If you're looking for tutorials/guides, check out the new https://cryptostorm.is/#section6 Ξ
Ξ any OpenVPN configs found on the forum are likely outdated. For the latest, visit here or GitHub Ξ
Ξ If you're looking for tutorials/guides, check out the new https://cryptostorm.is/#section6 Ξ
Search found 39 matches
- Sat Jul 14, 2018 11:02 pm
- Forum: general chat, suggestions, industry news
- Topic: Cryptostorm goes unmentioned -- What a shame!!!
- Replies: 3
- Views: 13418
Re: Cryptostorm goes unmentioned -- What a shame!!!
Weird place for a reply, df. None-the-less, I've switched to Firefox. As for the tutorials, bottom of your post, none cover CSVPN on a router. Thanks.
- Sat Jul 14, 2018 11:00 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
Fox Sports Go.
- Thu Jul 12, 2018 3:18 am
- Forum: general chat, suggestions, industry news
- Topic: Cryptostorm goes unmentioned -- What a shame!!!
- Replies: 3
- Views: 13418
Cryptostorm goes unmentioned -- What a shame!!!
I'm shocked that of the 74 vpn's tested, that CS didn't make the list of those that leak IP, DNS and other unessential infos to whomever want to buy, steal or hack it (or is that them?).
https://thebestvpn.com/vpn-leak-test/
https://thebestvpn.com/vpn-leak-test/
- Tue Jul 03, 2018 11:40 pm
- Forum: guides, HOWTOs & tutorials
- Topic: Tracker Smacker for Modems
- Replies: 2
- Views: 9813
Tracker Smacker for Modems
Yea!!! TS is up. The modem OS is OpenWRT/LEDE My modem has a section for these cronjobs: https://raw.githubusercontent.com/notracking/hosts-blocklists/master/hostnames.txt https://raw.githubusercontent.com/notracking/hosts-blocklists/master/domains.txt but I have no way to know where those text file...
- Tue Jul 03, 2018 11:27 pm
- Forum: member support & tech assistance
- Topic: https://whoer.net Request for comments
- Replies: 9
- Views: 20225
Re: https://whoer.net Request for comments
I would never buy there service. That is why I'm here. But as a noob (of the first order), I like the balloon info. It helped me find and fix the leaks. 'nuff said.
- Mon May 14, 2018 9:48 pm
- Forum: general chat, suggestions, industry news
- Topic: PGP Fail (14May2018)
- Replies: 4
- Views: 16610
PGP Fail (14May2018)
Late Sunday 13May18, I read that PGP's crypto is broken. I post this here as an FYI.
OpenPGP and S/MIME leak plaintext of encrypted emails.
https://efail.de/
OpenPGP and S/MIME leak plaintext of encrypted emails.
https://efail.de/
- Sun May 13, 2018 10:03 pm
- Forum: crypto, VPN & security news
- Topic: Using No Script in browser to defeat cross site tracking XSS
- Replies: 0
- Views: 15450
Using No Script in browser to defeat cross site tracking XSS
If I visit a URL, and the page won't load because I'm running https://noscript.net/ if I "deny" facebook.com as one of the scripts that page wants to run am I preventing cross site tracking? I gotta say the idea that any service is watching all the websites I visit isn't a world I want to be in. I'l...
- Sun May 13, 2018 9:52 pm
- Forum: member support & tech assistance
- Topic: https://whoer.net Request for comments
- Replies: 9
- Views: 20225
Re: https://whoer.net Request for comments
Given that whoer is in Russia, I doubt they will be around much longer as a VPN service. But they feature one nice service. If you click on the balloon that shows your percentage of privacy, it will show where your problems are. Using that I eventually fixed mine and whoer shows 100% privacy. Not be...
- Fri Apr 20, 2018 1:21 am
- Forum: member support & tech assistance
- Topic: USB external hd drive
- Replies: 1
- Views: 10934
USB external hd drive
Is it possible that the CS firewalling or other CS bits would affect mounting/reading/writing to/from a TP-Link, Archer C7 ac1750 router's USB port? I'm trying to obtain NAS.I did plug the drive in after getting to green at cryptostorm.is/test.
- Fri Apr 13, 2018 9:26 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
Yes, the current exit node is:
cstorm_linux-uswest_udp.ovpn
cstorm_linux-uswest_udp.ovpn
- Thu Apr 12, 2018 10:08 pm
- Forum: general chat, suggestions, industry news
- Topic: Howto Guide: Whole House VPN with Ubiquiti + Cryptostorm
- Replies: 1
- Views: 15744
Howto Guide: Whole House VPN with Ubiquiti + Cryptostorm
Excellent guide for those wanting pretty good privacy.
https://tech.michaelaltfield.net/2017/0 ... mment-8611
writer sets up a Debian based router and wifi. Talks about Cryptostorm's transparency. Good guy.
https://tech.michaelaltfield.net/2017/0 ... mment-8611
writer sets up a Debian based router and wifi. Talks about Cryptostorm's transparency. Good guy.
- Thu Apr 12, 2018 10:05 pm
- Forum: member support & tech assistance
- Topic: https://whoer.net Request for comments
- Replies: 9
- Views: 20225
Re: https://whoer.net Request for comments
Using their site, I was able to find a problem in Firefox and that lead to changing a config and now ipleak.net shows Private Use rather than a leak.
- Thu Apr 12, 2018 8:46 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
Sadly, this whole project may come to naught. The Sports App, on seeing the exit node, says: cannot establish a session: geo-location-unreliable So the purpose of having CS now seems in vain. I am not quitting CS. For the tiny price, I never would. My computer is still tunneling. So some devices are...
- Thu Apr 12, 2018 8:38 pm
- Forum: general chat, suggestions, industry news
- Topic: Akamai White Paper on (most) Router Flaws
- Replies: 0
- Views: 15497
Akamai White Paper on (most) Router Flaws
'pologies for not knowing much.
https://www.akamai.com/us/en/multimedia ... -paper.pdf
shows OpenWRT as vulnerable to this attack vector. I'm posting it here for posterity. If anybody knows about it, please comment.
https://www.akamai.com/us/en/multimedia ... -paper.pdf
shows OpenWRT as vulnerable to this attack vector. I'm posting it here for posterity. If anybody knows about it, please comment.
- Wed Apr 11, 2018 9:53 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
Discarding Opera/Mini solved the green/red problem. I'm on the CS "darknet". I don't think of this as "dark" I see it as the light at the end of the tunnel. But that's haberdashery. Sorry. All ISP provided wifi is off . The problem is entirely with Opera and other non-secure browsers wanting to give...
- Tue Apr 10, 2018 9:46 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
Currently, due to tech problems I've not resolved, the modem device (with wifi) has an SSID of: Xx@x7qDD or like that. The OpenWRT/OpenVPN/Cryptostorm device has an SSID of a (pronouncable) noun. Both devices' wifi are working. I'll be shutting the modem's wifi off this week. I am absolutely certain...
- Mon Apr 09, 2018 8:19 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
Yes, separate device. The ISP supplied device is a modem-router-wifi unit. Only one ethernet cable runs from it's LAN port to the OpenWRT's WAN port. Only one cable from the OpenWRT device LAN port runs to an unmanaged switch. All connected devices (computer, Raspberry PI, DVD player) obtain 'net ac...
- Sun Apr 08, 2018 10:02 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
192.168.1.254 is the IP address of the ISP. It is the device (modem, router, wifi) through which I have Internet access.
- Sat Apr 07, 2018 9:26 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
[code]Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.33.0.1 128.0.0.0 UG 0 0 0 tun0 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 eth0.2 10.33.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun0 104.238.195.140 192.168.1.254 255.255.255.255 UGH 0 0 0 eth0.2 128.0.0.0 10.33.0.1 ...
- Fri Apr 06, 2018 11:28 pm
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
Re: 'Puter is up at CS.is/test but wifi is isp ip addresses
'puter's ip: 192.168.1.185
wifi device ip: 192.168.1.109
wifi device ip: 192.168.1.109
- Fri Apr 06, 2018 1:55 am
- Forum: member support & tech assistance
- Topic: 'Puter is up at CS.is/test but wifi is isp ip addresses
- Replies: 18
- Views: 23514
'Puter is up at CS.is/test but wifi is isp ip addresses
Viewing ipleak.net, the CSVPN is up and no leaks. But the wifi isn't. Pardon. I've no idea whether I'm running as a "client". I see there is no bridge mode as client in OpenWRT/LuCI. I see How-Tos to bridge the ethernet to wifi, but have no idea which ethernet/wifi.
- Fri Mar 30, 2018 1:34 am
- Forum: member support & tech assistance
- Topic: https://whoer.net Request for comments
- Replies: 9
- Views: 20225
https://whoer.net Request for comments
https://whoer.net
offers interesting info about my VPN service, or lack thereof at the moment. As I am bareback 'cause I blew up my CS router, I'm asking for your opinion of this site.
offers interesting info about my VPN service, or lack thereof at the moment. As I am bareback 'cause I blew up my CS router, I'm asking for your opinion of this site.
- Sat Mar 24, 2018 9:37 pm
- Forum: member support & tech assistance
- Topic: How I stopped Leaking IP Addresses and Learned to Love CryptoStorm
- Replies: 1
- Views: 10402
How I stopped Leaking IP Addresses and Learned to Love CryptoStorm
Imagine you know literally nothing about networking, VPN, Infosec. Newer than noob. That's me. After 2 weeks of 4 to 6 hours daily trying to get my VPN up and running properly I have success. Four or five times I had to re-flash my router before I understood enough to not damage it. I am using LEDE ...
- Mon Mar 19, 2018 1:16 am
- Forum: member support & tech assistance
- Topic: IBM's Quad9 DNS
- Replies: 4
- Views: 11672
Re: IBM's Quad9 DNS
https://github.com/cryptostorm/cstorm_deepDNS/blob/master/dnscrypt-resolvers.csv I'm having DNS Leaks on my CS/OpenVPN enabled router. This number from the above URL: 173.208.95.75:443 is this the number that goes into the alternate DNS numbers of the router? Why does is have :443? The example the r...
- Sun Mar 18, 2018 9:26 pm
- Forum: general chat, suggestions, industry news
- Topic: For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks
- Replies: 5
- Views: 15520
Re: For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks
The following should give an understanding as to how little I understand the "work" I'm doing. When I determined I had a DNS leak via https://ipleak.net/ (Cryptostorm's "Goodies" page), I tried to find my own solution. When I saw the info about Ubuntu I jumped to a false conclusion. I thought, becau...
- Sun Mar 18, 2018 1:24 am
- Forum: general chat, suggestions, industry news
- Topic: For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks
- Replies: 5
- Views: 15520
For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks
I have a DNS leak. I am "some Ubuntu user". Into what file are the following lines added? Which file and which directory? script-security 2 up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf from: https://github.com/cryptostorm/cryptostorm_client_configuration_files/tree/master/...
- Sat Mar 17, 2018 10:34 pm
- Forum: general chat, suggestions, industry news
- Topic: GitHUB's Config Files NOTES and spaces
- Replies: 1
- Views: 11856
GitHUB's Config Files NOTES and spaces
Is there a reason for spaces in the info notes differing from the top three commands and the bottom three about disabling IPv6? Is one set correct and the other incorrect? It reads: README.md Don't forget to disable IPv6 with the commands: sysctl -w net.ipv6.conf.all.disable_ ipv6=1 sysctl -w net.ip...
- Thu Mar 15, 2018 11:24 pm
- Forum: guides, HOWTOs & tutorials
- Topic: HOWTO: OpenWRT Routers
- Replies: 22
- Views: 104404
Re: HOWTO: OpenWRT Routers
Following the purpose built guide, created for me, I did the steps: Router OpenVPN Configuration Router Tunnel Configuration Router Firewall Configuration Router DNS Configuration [create] Router Killswitch Configuration [create] 99-killswitch file. Additionally, I added connection to the NTP time s...
- Tue Mar 13, 2018 4:54 am
- Forum: guides, HOWTOs & tutorials
- Topic: HOWTO: OpenWRT Routers
- Replies: 22
- Views: 104404
Re: HOWTO: OpenWRT Routers
Active IPv4-Routes
Code: Select all
Network Target IPv4-Gateway Metric Table
wan 0.0.0.0/0 192.168.1.254 0 main
wan 192.168.1.0/24 0 main
wan 192.168.1.254 0 main
lan 192.168.11.0/24 0 main
- Tue Mar 13, 2018 12:38 am
- Forum: guides, HOWTOs & tutorials
- Topic: HOWTO: OpenWRT Routers
- Replies: 22
- Views: 104404
Re: HOWTO: OpenWRT Routers
root@LEDE:/# uci set firewall.@forwarding[-1].src='lan' root@LEDE:/# uci set firewall.@forwarding[-1].dest='vpnfirewall' root@LEDE:/# uci commit firewall root@LEDE:/# uci set network.wan.peerdns='0' root@LEDE:/# uci del network.wan.dns uci: Entry not found Does Entry not found matter? Do I proceed w...
- Fri Feb 23, 2018 5:32 am
- Forum: guides, HOWTOs & tutorials
- Topic: HOWTO: OpenWRT Routers
- Replies: 22
- Views: 104404
Re: HOWTO: OpenWRT Routers
I am at a loss of words to properly express my gratitude. You are an 
I'm working on it now. I'll say OK when all is OK.

I'm working on it now. I'll say OK when all is OK.
- Tue Feb 20, 2018 10:56 pm
- Forum: guides, HOWTOs & tutorials
- Topic: HOWTO: OpenWRT Routers
- Replies: 22
- Views: 104404
Re: HOWTO: OpenWRT Routers
At the LEDE/LuCI forum, I read that changing the .ovpn was needed. To cstorm_linux-lisbon_udp.ovpn I added the following: auth-user-pass /tmp/auth.conf redirect-gateway def1 auth-nocache The router's admin page, under the VPN tab shows 4 entries Cryptostorm sample_server sample_client provider statu...
- Tue Feb 20, 2018 12:20 am
- Forum: member support & tech assistance
- Topic: --remote-cert-tls file that is not configged for Windows
- Replies: 1
- Views: 7439
--remote-cert-tls file that is not configged for Windows
Please pardon my ignorance. My router's log files have this: Sun Feb 18 21:56:07 2018 daemon.warn openvpn(CRYPTOSTORM)[19288]: WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. and Sun Feb 18 21:55:59 2018 daemon.notice openvpn(CRYPTOSTORM)[19285]: AUTH: Received control message:...
- Mon Feb 19, 2018 9:56 pm
- Forum: guides, HOWTOs & tutorials
- Topic: HOWTO: OpenWRT Routers
- Replies: 22
- Views: 104404
Re: HOWTO: OpenWRT Routers
I think it worthy of note, that after searching the OpenVPN.net Forum for the keyword: cryptostorm, that there is only one entry. That that post's request goes un-responded to is irrelevant. Believe me when I say that I'm glad CS "flies under the radar". It's why I pay, monthly, for a token I have y...
- Sat Feb 17, 2018 11:06 pm
- Forum: member support & tech assistance
- Topic: Cryptostorm, OpenWRT, Dynamic DNS (DDNS), OpenVPN
- Replies: 1
- Views: 7194
Cryptostorm, OpenWRT, Dynamic DNS (DDNS), OpenVPN
I'm so new at this, I often don't know where to begin. I have the instructions for putting OpenVPN on a router. https://loganmarchione.com/2015/08/openwrt-with-openvpn-server-on-tp-link-archer-c7/#Setup_DDNS In this post, the author writes about Dynamic DNS as necessary to OpenVPN. But I read some a...
- Sat Feb 17, 2018 12:57 am
- Forum: guides, HOWTOs & tutorials
- Topic: HOWTO: OpenWRT Routers
- Replies: 22
- Views: 104404
Re: HOWTO: OpenWRT Routers
The OpenWRT page on setting up the OpenVPN shows: touch /tmp/auth.conf echo "YOUR_VPN_USER_NAME" > /tmp/auth.conf echo "YOUR_VPN_PASSWORD" >> /tmp/auth.conf I've read but cannot find at this Forum, words about you CS doesn't use a "user name" or maybe the username is the hashed token but no password...
- Tue Feb 13, 2018 12:50 am
- Forum: member support & tech assistance
- Topic: Another $50 router blown up.
- Replies: 2
- Views: 7538
Another $50 router blown up.
For the last week, I've posted help requests at CS' Twitter, IRC, and via email about setting up CS on a OpenWRT-LEDE-LuCI router. Not getting a timely answer, I used the backup-OpenWrt-2013-11-07-Cleansed.tar.gz at the Forum page on OpenWRT. Prior to that, I asked, repeatedly, if that was current. ...
- Sat Feb 10, 2018 11:38 pm
- Forum: member support & tech assistance
- Topic: IBM's Quad9 DNS
- Replies: 4
- Views: 11672
IBM's Quad9 DNS
Please give your opinion of IBM/Global Cyber Alliance (GCA) Quad9.
Quad9 Domain Name System (DNS) service
https://www-03.ibm.com/press/us/en/pres ... /53388.wss
Would you use it yourself?
Quad9 Domain Name System (DNS) service
https://www-03.ibm.com/press/us/en/pres ... /53388.wss
Would you use it yourself?
- Fri Feb 09, 2018 6:40 am
- Forum: guides, HOWTOs & tutorials
- Topic: HOWTO: OpenWRT Routers
- Replies: 22
- Views: 104404
Re: HOWTO: OpenWRT Routers
The last reply to this post is quite old at 2016. I have put CS's .ovpn and .crt in the OpenWRT/LuCI's /etc/openvpn. I've hashed the Token and put that string in Local Startup. But then this post get a little cloudy. So is CS now IvP6 capable? Do I need to use backup-OpenWrt-2013-11-07-Cleansed.tar....