cryptostorm's community forum

FoodMaven

Weird place for a reply, df. None-the-less, I've switched to Firefox. As for the tutorials, bottom of your post, none cover CSVPN on a router. Thanks.

FoodMaven

Fox Sports Go.

FoodMaven

I'm shocked that of the 74 vpn's tested, that CS didn't make the list of those that leak IP, DNS and other unessential infos to whomever want to buy, steal or hack it (or is that them?).

https://thebestvpn.com/vpn-leak-test/

FoodMaven

Yea!!! TS is up. The modem OS is OpenWRT/LEDE My modem has a section for these cronjobs: https://raw.githubusercontent.com/notracking/hosts-blocklists/master/hostnames.txt https://raw.githubusercontent.com/notracking/hosts-blocklists/master/domains.txt but I have no way to know where those text file...

FoodMaven

I would never buy there service. That is why I'm here. But as a noob (of the first order), I like the balloon info. It helped me find and fix the leaks. 'nuff said.

FoodMaven

Late Sunday 13May18, I read that PGP's crypto is broken. I post this here as an FYI.

OpenPGP and S/MIME leak plaintext of encrypted emails.

https://efail.de/

FoodMaven

If I visit a URL, and the page won't load because I'm running https://noscript.net/ if I "deny" facebook.com as one of the scripts that page wants to run am I preventing cross site tracking? I gotta say the idea that any service is watching all the websites I visit isn't a world I want to be in. I'l...

FoodMaven

Given that whoer is in Russia, I doubt they will be around much longer as a VPN service. But they feature one nice service. If you click on the balloon that shows your percentage of privacy, it will show where your problems are. Using that I eventually fixed mine and whoer shows 100% privacy. Not be...

FoodMaven

Is it possible that the CS firewalling or other CS bits would affect mounting/reading/writing to/from a TP-Link, Archer C7 ac1750 router's USB port? I'm trying to obtain NAS.I did plug the drive in after getting to green at cryptostorm.is/test.

FoodMaven

Yes, the current exit node is:

cstorm_linux-uswest_udp.ovpn

FoodMaven

Excellent guide for those wanting pretty good privacy.

https://tech.michaelaltfield.net/2017/0 ... mment-8611

writer sets up a Debian based router and wifi. Talks about Cryptostorm's transparency. Good guy.

FoodMaven

Using their site, I was able to find a problem in Firefox and that lead to changing a config and now ipleak.net shows Private Use rather than a leak.

FoodMaven

Sadly, this whole project may come to naught. The Sports App, on seeing the exit node, says: cannot establish a session: geo-location-unreliable So the purpose of having CS now seems in vain. I am not quitting CS. For the tiny price, I never would. My computer is still tunneling. So some devices are...

FoodMaven

'pologies for not knowing much.

https://www.akamai.com/us/en/multimedia ... -paper.pdf

shows OpenWRT as vulnerable to this attack vector. I'm posting it here for posterity. If anybody knows about it, please comment.

FoodMaven

Discarding Opera/Mini solved the green/red problem. I'm on the CS "darknet". I don't think of this as "dark" I see it as the light at the end of the tunnel. But that's haberdashery. Sorry. All ISP provided wifi is off . The problem is entirely with Opera and other non-secure browsers wanting to give...

FoodMaven

Currently, due to tech problems I've not resolved, the modem device (with wifi) has an SSID of: Xx@x7qDD or like that. The OpenWRT/OpenVPN/Cryptostorm device has an SSID of a (pronouncable) noun. Both devices' wifi are working. I'll be shutting the modem's wifi off this week. I am absolutely certain...

FoodMaven

Yes, separate device. The ISP supplied device is a modem-router-wifi unit. Only one ethernet cable runs from it's LAN port to the OpenWRT's WAN port. Only one cable from the OpenWRT device LAN port runs to an unmanaged switch. All connected devices (computer, Raspberry PI, DVD player) obtain 'net ac...

FoodMaven

192.168.1.254 is the IP address of the ISP. It is the device (modem, router, wifi) through which I have Internet access.

FoodMaven

[code]Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 10.33.0.1 128.0.0.0 UG 0 0 0 tun0 0.0.0.0 192.168.1.254 0.0.0.0 UG 0 0 0 eth0.2 10.33.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun0 104.238.195.140 192.168.1.254 255.255.255.255 UGH 0 0 0 eth0.2 128.0.0.0 10.33.0.1 ...

FoodMaven

'puter's ip: 192.168.1.185
wifi device ip: 192.168.1.109

FoodMaven

Viewing ipleak.net, the CSVPN is up and no leaks. But the wifi isn't. Pardon. I've no idea whether I'm running as a "client". I see there is no bridge mode as client in OpenWRT/LuCI. I see How-Tos to bridge the ethernet to wifi, but have no idea which ethernet/wifi.

FoodMaven

https://whoer.net

offers interesting info about my VPN service, or lack thereof at the moment. As I am bareback 'cause I blew up my CS router, I'm asking for your opinion of this site.

FoodMaven

Imagine you know literally nothing about networking, VPN, Infosec. Newer than noob. That's me. After 2 weeks of 4 to 6 hours daily trying to get my VPN up and running properly I have success. Four or five times I had to re-flash my router before I understood enough to not damage it. I am using LEDE ...

FoodMaven

https://github.com/cryptostorm/cstorm_deepDNS/blob/master/dnscrypt-resolvers.csv I'm having DNS Leaks on my CS/OpenVPN enabled router. This number from the above URL: 173.208.95.75:443 is this the number that goes into the alternate DNS numbers of the router? Why does is have :443? The example the r...

FoodMaven

The following should give an understanding as to how little I understand the "work" I'm doing. When I determined I had a DNS leak via https://ipleak.net/ (Cryptostorm's "Goodies" page), I tried to find my own solution. When I saw the info about Ubuntu I jumped to a false conclusion. I thought, becau...

FoodMaven

I have a DNS leak. I am "some Ubuntu user". Into what file are the following lines added? Which file and which directory? script-security 2 up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf from: https://github.com/cryptostorm/cryptostorm_client_configuration_files/tree/master/...

FoodMaven

Is there a reason for spaces in the info notes differing from the top three commands and the bottom three about disabling IPv6? Is one set correct and the other incorrect? It reads: README.md Don't forget to disable IPv6 with the commands: sysctl -w net.ipv6.conf.all.disable_ ipv6=1 sysctl -w net.ip...

FoodMaven

Following the purpose built guide, created for me, I did the steps: Router OpenVPN Configuration Router Tunnel Configuration Router Firewall Configuration Router DNS Configuration [create] Router Killswitch Configuration [create] 99-killswitch file. Additionally, I added connection to the NTP time s...

FoodMaven

Active IPv4-Routes

Code: Select all

Network		Target		IPv4-Gateway	Metric		Table
wan	      0.0.0.0/0	        192.168.1.254	0		main
wan	      192.168.1.0/24		        0               main
wan	      192.168.1.254		        0               main
lan	      192.168.11.0/24		        0               main

FoodMaven

root@LEDE:/# uci set firewall.@forwarding[-1].src='lan' root@LEDE:/# uci set firewall.@forwarding[-1].dest='vpnfirewall' root@LEDE:/# uci commit firewall root@LEDE:/# uci set network.wan.peerdns='0' root@LEDE:/# uci del network.wan.dns uci: Entry not found Does Entry not found matter? Do I proceed w...

FoodMaven

I am at a loss of words to properly express my gratitude. You are an

I'm working on it now. I'll say OK when all is OK.

FoodMaven

At the LEDE/LuCI forum, I read that changing the .ovpn was needed. To cstorm_linux-lisbon_udp.ovpn I added the following: auth-user-pass /tmp/auth.conf redirect-gateway def1 auth-nocache The router's admin page, under the VPN tab shows 4 entries Cryptostorm sample_server sample_client provider statu...

FoodMaven

Please pardon my ignorance. My router's log files have this: Sun Feb 18 21:56:07 2018 daemon.warn openvpn(CRYPTOSTORM)[19288]: WARNING: --ns-cert-type is DEPRECATED. Use --remote-cert-tls instead. and Sun Feb 18 21:55:59 2018 daemon.notice openvpn(CRYPTOSTORM)[19285]: AUTH: Received control message:...

FoodMaven

I think it worthy of note, that after searching the OpenVPN.net Forum for the keyword: cryptostorm, that there is only one entry. That that post's request goes un-responded to is irrelevant. Believe me when I say that I'm glad CS "flies under the radar". It's why I pay, monthly, for a token I have y...

FoodMaven

I'm so new at this, I often don't know where to begin. I have the instructions for putting OpenVPN on a router. https://loganmarchione.com/2015/08/openwrt-with-openvpn-server-on-tp-link-archer-c7/#Setup_DDNS In this post, the author writes about Dynamic DNS as necessary to OpenVPN. But I read some a...

FoodMaven

The OpenWRT page on setting up the OpenVPN shows: touch /tmp/auth.conf echo "YOUR_VPN_USER_NAME" > /tmp/auth.conf echo "YOUR_VPN_PASSWORD" >> /tmp/auth.conf I've read but cannot find at this Forum, words about you CS doesn't use a "user name" or maybe the username is the hashed token but no password...

FoodMaven

For the last week, I've posted help requests at CS' Twitter, IRC, and via email about setting up CS on a OpenWRT-LEDE-LuCI router. Not getting a timely answer, I used the backup-OpenWrt-2013-11-07-Cleansed.tar.gz at the Forum page on OpenWRT. Prior to that, I asked, repeatedly, if that was current. ...

FoodMaven

Please give your opinion of IBM/Global Cyber Alliance (GCA) Quad9.

Quad9 Domain Name System (DNS) service

https://www-03.ibm.com/press/us/en/pres ... /53388.wss

Would you use it yourself?

FoodMaven

The last reply to this post is quite old at 2016. I have put CS's .ovpn and .crt in the OpenWRT/LuCI's /etc/openvpn. I've hashed the Token and put that string in Local Startup. But then this post get a little cloudy. So is CS now IvP6 capable? Do I need to use backup-OpenWrt-2013-11-07-Cleansed.tar....

Search found 39 matches