VPN Manager for OpenVPN

Quote from sedat1988

Sorry for the long delay. I managed to fix the issue of slowdown by using the DNS fix. But now my vpn is disconnecting within about a minute of starting any video playback in kodi.

I am more than happy to post a log, but at the moment, the log is way too big. Do you know how I can start a fresh log? Also having trouble seeing the log outside of VPN Manager. When I choose to copy I don't get any external media options, just my repo databases.

you can just delete your logs and do the debug thing over again.

Well, I just reset the add on and applied "potential dns fix" and now everything is working fine! Crisis averted!

Quote from bubblegum57

I copied server addresses & certs to a folder I created, on storage, then used the wizard to point to that directory

then used the wizard, it will take time to work, so, just try a few servers to begin with.

I have done this on a Beelink S905, a H96 Pro S912, & a NUC

bubblegum57 are you using Nordvpn to stream and bypass geo-blocking that Netflix does. Canadian Netflix is heavily restricted and much of the US content is not available in Canada. My current VPN supplier, PIA, doesn't or can't provide access to US Netflix. Their pricing is awesome, so I'd like to give Nordvpn a try.

Zombroided, just a minor thing, FYI.

I installed 5.01 over 4.91 (auto update isn't working for me) and when the update completed the message window thanked me for installing 4.93.

I verified 5.01 was installed.

Quote from doggyofone

bubblegum57 are you using Nordvpn to stream and bypass geo-blocking that Netflix does. Canadian Netflix is heavily restricted and much of the US content is not available in Canada. My current VPN supplier, PIA, doesn't or can't provide access to US Netflix. Their pricing is awesome, so I'd like to give Nordvpn a try.

NordVPN was dropped from zombiod support because they kept changing their portals and it was impossible to keep up with them. If you want to use NordVPN then you better be able to do some deep digging into the background code because no plugging will support them in libreelec.

However it is my small experience that any of the major service providers such as Netflix or the BBC are fairly savy to people using VPN's to watch their geo-blocked content and they blacklist VPN portals within days. There are specialist VPN providers which offer unique portal addresses for their customers which avoids this - but they tend to be the most expensive providers.

A modem based VPN service would tend to be a way to avoid a lot of the complexities - but again it will cost and you will need to be tech savy enough to set things up.

Shoog

Quote from Shoog

NordVPN was dropped from zombiod support because they kept changing their portals and it was impossible to keep up with them. If you want to use NordVPN then you better be able to do some deep digging into the background code because no plugging will support them in libreelec.

However it is my small experience that any of the major service providers such as Netflix or the BBC are fairly savy to people using VPN's to watch their geo-blocked content and they blacklist VPN portals within days. There are specialist VPN providers which offer unique portal addresses for their customers which avoids this - but they tend to be the most expensive providers.

A modem based VPN service would tend to be a way to avoid a lot of the complexities - but again it will cost and you will need to be tech savy enough to set things up.

Shoog

Thanks Shoog. Most vpn providers have trials available, so I will experiment a bit and stick with what is available in the app.

I don't use vpn for geo blocking. but I think there is a setting in zomboided's settings, to select a particular vpn server for a particular app.

Hi All

After a year subscribed to IP Vanish I decided to try PIA due to IP Vanish being so overpriced and only 2 Servers in my City.

24 Hours and all good with PIA.

My only query is i don't see a choice of servers in my City. Just my City is listed without a choice of server within that city.

With IP Vanish i had a list of servers in my City.

Probably that's how PIA works by picking best server based on load and ping ?

If someone could confirm PIA works this way. Cheers.

I don't know the answer to your question, but you could install a user defined profile, you will need the servers you want, certificates etc

Quote from zomboided

I use PIA, you have all of the profiles available as of a couple weeks ago. I don't know how they work but likewise I suspect they load balance behind the scenes. I've never had an issue.

Thank you for the reply.

I just found out PIA have 82 Servers in my City as opposed to IP Vanish which only had 2 Servers.

See My Previous Old Post

I used to have issues when the 2 servers were OVERLOADED and it was a pain. In the end i connected to servers in another City which was not ideal.

It seems PIA automatically chooses best server out of the 82 in my City and Load balance which is a much better system.

I recently seem to have the same DNS issues that others have reported recently. I'm using PIA and have been successfully for the past couple of years. This problem has developed recently though not exactly sure when, and I have automatic updates enabled.

Basically, after connecting to PIA I lose the ability to perform DNS lookups since my DNS settings are still set to that of my ISP rather than the PIA DNS servers.

Here are the logfile entries from openvpn.log when I connect:

Wed Jul  4 10:48:05 2018 WARNING: file '/storage/.kodi/addons/service.vpn.manager/PIA/pass.txt' is group or others accessible
Wed Jul  4 10:48:05 2018 OpenVPN 2.4.0 x86_64-libreelec-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [AEAD] built on Apr 15 2018
Wed Jul  4 10:48:05 2018 library versions: OpenSSL 1.0.2o  27 Mar 2018, LZO 2.09
Wed Jul  4 10:48:05 2018 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Wed Jul  4 10:48:05 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]194.187.249.181:1198
Wed Jul  4 10:48:05 2018 Socket Buffers: R=[1880000->1880000] S=[1880000->1880000]
Wed Jul  4 10:48:05 2018 UDP link local: (not bound)
Wed Jul  4 10:48:05 2018 UDP link remote: [AF_INET]194.187.249.181:1198
Wed Jul  4 10:48:05 2018 TLS: Initial packet from [AF_INET]194.187.249.181:1198, sid=11215183 2c6b50e5
Wed Jul  4 10:48:05 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jul  4 10:48:05 2018 VERIFY OK: depth=1, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=Private Internet Access, name=Private Internet Access, [email protected]
Wed Jul  4 10:48:05 2018 Validating certificate key usage
Wed Jul  4 10:48:05 2018 ++ Certificate has key usage  00a0, expects 00a0
Wed Jul  4 10:48:05 2018 VERIFY KU OK
Wed Jul  4 10:48:05 2018 Validating certificate extended key usage
Wed Jul  4 10:48:05 2018 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Jul  4 10:48:05 2018 VERIFY EKU OK
Wed Jul  4 10:48:05 2018 VERIFY OK: depth=0, C=US, ST=CA, L=LosAngeles, O=Private Internet Access, OU=Private Internet Access, CN=7ecfe90795b20f017ca8095e02244cd0, name=7ecfe90795b20f017ca8095e02244cd0
Wed Jul  4 10:48:05 2018 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Wed Jul  4 10:48:05 2018 [7ecfe90795b20f017ca8095e02244cd0] Peer Connection Initiated with [AF_INET]194.187.249.181:1198
Wed Jul  4 10:48:06 2018 SENT CONTROL [7ecfe90795b20f017ca8095e02244cd0]: 'PUSH_REQUEST' (status=1)
Wed Jul  4 10:48:11 2018 SENT CONTROL [7ecfe90795b20f017ca8095e02244cd0]: 'PUSH_REQUEST' (status=1)
Wed Jul  4 10:48:11 2018 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 209.222.18.222,dhcp-option DNS 209.222.18.218,ping 10,comp-lzo no,route 10.57.10.1,topology net30,ifconfig 10.57.10.6 10.57.10.5,auth-token'
Wed Jul  4 10:48:11 2018 OPTIONS IMPORT: timers and/or timeouts modified
Wed Jul  4 10:48:11 2018 OPTIONS IMPORT: compression parms modified
Wed Jul  4 10:48:11 2018 OPTIONS IMPORT: --ifconfig/up options modified
Wed Jul  4 10:48:11 2018 OPTIONS IMPORT: route options modified
Wed Jul  4 10:48:11 2018 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Wed Jul  4 10:48:11 2018 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Jul  4 10:48:11 2018 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul  4 10:48:11 2018 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Wed Jul  4 10:48:11 2018 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Wed Jul  4 10:48:11 2018 TUN/TAP device tun0 opened
Wed Jul  4 10:48:11 2018 TUN/TAP TX queue length set to 100
Wed Jul  4 10:48:11 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Jul  4 10:48:11 2018 /sbin/ip link set dev tun0 up mtu 1500
Wed Jul  4 10:48:11 2018 /sbin/ip addr add dev tun0 local 10.57.10.6 peer 10.57.10.5
Wed Jul  4 10:48:11 2018 /storage/.kodi/userdata/addon_data/service.vpn.manager/PIA/up.sh tun0 1500 1558 10.57.10.6 10.57.10.5 init
Wed Jul  4 10:48:12 2018 /sbin/ip route add 194.187.249.181/32 via 192.168.0.1
Wed Jul  4 10:48:12 2018 /sbin/ip route add 0.0.0.0/1 via 10.57.10.5
Wed Jul  4 10:48:12 2018 /sbin/ip route add 128.0.0.0/1 via 10.57.10.5
Wed Jul  4 10:48:12 2018 /sbin/ip route add 10.57.10.1/32 via 10.57.10.5
Wed Jul  4 10:48:12 2018 Initialization Sequence Completed

I can see the DNS servers in the PUSH reply, but these do not take effect since nslookups are still using my ISPs DNS, and eventually timeout:

# nslookup www.google.com
Server:    194.168.4.100

After reading this thread I tried activating the "Potential DNS Fix" in the advanced settings but this gave the error:

A DNS fix was not possible. Refer to the Kodi log... which looks like this:

11:03:37.389 T:140547394086656  NOTICE: VPN Mgr : (common.py) Creating a new APPEND.txt for Private Internet Access to try and fix DNS issues
11:03:37.399 T:140547394086656   ERROR: VPN Mgr : (common.py) To attempt a DNS fix, you need to install update-resolv-conf script in /etc/openvpn
11:03:37.400 T:140547394086656   ERROR: VPN Mgr : (common.py) Alternatively for systemd enabled installations, install update-systemd-resolved in /etc/openvpn/scripts
11:03:37.400 T:140547394086656   ERROR: VPN Mgr : (common.py) After installation of one of the scripts, apply the DNS fix again.

I'm running LibreELEC 8.2.5.

Any help with resolving this would be greatly received and I'll be happy to run further tests to help debug where it's going wrong.

For the time being, as a workaround, I think I will adjust my LE network settings to point at the google DNS servers.

Quote from zomboided

jahutchi you need to read the error messages you've helpfully shared. If your DNS is not being updated, then running a resolve script will fix this for you.

On LibreELEC the /etc directory is on a squashfs read-only file system.

Any advice on where the scripts need to go to resolve this issue on a LibreELEC system?

In the meantime I adjusted my network settings to use the Google Dns as this works both on and off the VPN. However, I would prefer to use the DNS of my ISP and VPN provider.

Hello,

I use an own VPN to connect two houses but the addon does not work, it connects to the vpn server but I can not connect to the other network's computers (in the server network). The files that I import with the "Import Wizard" into the addon are .opvn and ca.crt, the same ones I use with openvpn for android and they work correctly.

Do I have to do something else besides import the files and put username and password?.

Best regards and thanks.