is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?
is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?. Discuss is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?, on Wireless Forums.
is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?
For example, a VPN company will have you install their own modified
version of OpenVPN, but what about replacing it with the original
installer from Openvpn.net?
Any privacy or security implications from doing this? Are you less
anonymous? Is your vpn encrypted traffic more prone to leaking?
Thanks in advance.
--
An alkaline environment is detrimental to the "flu" organism, hence
alkalizing agents and an alkaline-reacting diet are helpful.
Edgar Cayce for Edgar Cayce Diet Recommendations
MBAM - I put that **** on everything!
Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?
On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
> For example, a VPN company will have you install their own modified
> version of OpenVPN, but what about replacing it with the original
> installer from Openvpn.net?
>
> Any privacy or security implications from doing this? Are you less
> anonymous? Is your vpn encrypted traffic more prone to leaking?
>
> Thanks in advance.
For some services, there may be capabilities in the client that you
wouldn't get with stock OpenVPN. For example, the Mullvad client
includes an option to block traffic if the VPN connection fails.
Using stock OpenVPN, as noted above, you'd need to handle that
yourself. And FWIW, I don't like the method that Mullvad uses, but
that's another conversation.
OTOH, some services use clients that do potentially annoying things.
For example, there's one (which, I forget) that "hides" the TAP
adapter in Windows -- in that it doesn't show up in Network
Connections. Even worse, after uninstalling the software, TAP
adapters created by other VPN services are also hidden. I'm sure that
there's a way to fix that, but I never bothered to find it.
-- heremypants@hushmail.com http://heremypants.weebly.com/
Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?
On Sun, 13 Feb 2011 02:16:44 -0500, hierophant wrote:
> On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
>
>> For example, a VPN company will have you install their own modified
>> version of OpenVPN, but what about replacing it with the original
>> installer from Openvpn.net?
>>
>> Any privacy or security implications from doing this? Are you less
>> anonymous? Is your vpn encrypted traffic more prone to leaking?
>>
>> Thanks in advance.
>
> For some services, there may be capabilities in the client that you
> wouldn't get with stock OpenVPN. For example, the Mullvad client
> includes an option to block traffic if the VPN connection fails.
> Using stock OpenVPN, as noted above, you'd need to handle that
> yourself. And FWIW, I don't like the method that Mullvad uses, but
> that's another conversation.
>
> OTOH, some services use clients that do potentially annoying things.
> For example, there's one (which, I forget) that "hides" the TAP
> adapter in Windows -- in that it doesn't show up in Network
> Connections. Even worse, after uninstalling the software, TAP
> adapters created by other VPN services are also hidden. I'm sure that
> there's a way to fix that, but I never bothered to find it.
Hierophant, so basically OpenVPN.net stock should include all the
basics & critical components of OpenVPN in terms of VPN and encrypted
traffic. Anything that a VPN provider might add would then appear to
be "extra features," which can maybe improve privacy.
I am not sure if our methods are any different but I secure my VPN
connection using a route delete command:
route delete 0.0.0.0 192.168.1.1
After my OpenVPN connection is disconnected, my applications will not
leak my real ip address. (Without this command, my real ip address
will leak).
For example, let's say OpenVPN is connected and my VPN ip address is
"22.222.22.222" If my vpn connection is disconnected, firefox will
leak my real ip address "166.167.166.167". With a route delete
command, firefox will not leak my real ip address and simply not
connect any longer. (As far as I understand)
Is using route delete command not good enough? Am I missing something?
Is your method any better/more secure?
--
An alkaline environment is detrimental to the "flu" organism, hence
alkalizing agents and an alkaline-reacting diet are helpful.
Edgar Cayce for Edgar Cayce Diet Recommendations
MBAM - I put that **** on everything!
Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?
On Sun, 13 Feb 2011 02:18:03 -0500, Searching_____ wrote:
> On Sun, 13 Feb 2011 02:16:44 -0500, hierophant wrote:
>
>> On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
>>
>>> For example, a VPN company will have you install their own modified
>>> version of OpenVPN, but what about replacing it with the original
>>> installer from Openvpn.net?
>>>
>>> Any privacy or security implications from doing this? Are you less
>>> anonymous? Is your vpn encrypted traffic more prone to leaking?
>>>
>>> Thanks in advance.
>>
>> For some services, there may be capabilities in the client that you
>> wouldn't get with stock OpenVPN. For example, the Mullvad client
>> includes an option to block traffic if the VPN connection fails.
>> Using stock OpenVPN, as noted above, you'd need to handle that
>> yourself. And FWIW, I don't like the method that Mullvad uses, but
>> that's another conversation.
>>
>> OTOH, some services use clients that do potentially annoying things.
>> For example, there's one (which, I forget) that "hides" the TAP
>> adapter in Windows -- in that it doesn't show up in Network
>> Connections. Even worse, after uninstalling the software, TAP
>> adapters created by other VPN services are also hidden. I'm sure that
>> there's a way to fix that, but I never bothered to find it.
>
> Hierophant, so basically OpenVPN.net stock should include all the
> basics & critical components of OpenVPN in terms of VPN and encrypted
> traffic. Anything that a VPN provider might add would then appear to
> be "extra features," which can maybe improve privacy.
>
> I am not sure if our methods are any different but I secure my VPN
> connection using a route delete command:
>
> route delete 0.0.0.0 192.168.1.1
>
> After my OpenVPN connection is disconnected, my applications will not
> leak my real ip address. (Without this command, my real ip address
> will leak).
>
> For example, let's say OpenVPN is connected and my VPN ip address is
> "22.222.22.222" If my vpn connection is disconnected, firefox will
> leak my real ip address "166.167.166.167". With a route delete
> command, firefox will not leak my real ip address and simply not
> connect any longer. (As far as I understand)
>
> Is using route delete command not good enough? Am I missing something?
> Is your method any better/more secure?
There are various ways of securing openvpn. The problem is not openvpn
itself, but the way windows does networking altogether. In a linux
system, it is relatively trivial to make openvpn all-or-nothing. In
windows, it is less so: no proper network stack or routing tables,
adapters can fight for metric 1 (like hamachi), leaks are possible.
and it gets worse with leaky protocols added on top.
There are some new methods coming on that should work much better, and
when The Wizard releases Safehouse, it will also act as a free and
leakproof vpn client that you can use with any OpenVPN connection on
any provider.
Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?
On Sun, 13 Feb 2011 02:21:12 -0500, nix wrote:
> On Sun, 13 Feb 2011 02:18:03 -0500, Searching_____ wrote:
>
>> On Sun, 13 Feb 2011 02:16:44 -0500, hierophant wrote:
>>
>>> On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
>>>
>>>> For example, a VPN company will have you install their own modified
>>>> version of OpenVPN, but what about replacing it with the original
>>>> installer from Openvpn.net?
>>>>
>>>> Any privacy or security implications from doing this? Are you less
>>>> anonymous? Is your vpn encrypted traffic more prone to leaking?
>>>>
>>>> Thanks in advance.
>>>
>>> For some services, there may be capabilities in the client that you
>>> wouldn't get with stock OpenVPN. For example, the Mullvad client
>>> includes an option to block traffic if the VPN connection fails.
>>> Using stock OpenVPN, as noted above, you'd need to handle that
>>> yourself. And FWIW, I don't like the method that Mullvad uses, but
>>> that's another conversation.
>>>
>>> OTOH, some services use clients that do potentially annoying things.
>>> For example, there's one (which, I forget) that "hides" the TAP
>>> adapter in Windows -- in that it doesn't show up in Network
>>> Connections. Even worse, after uninstalling the software, TAP
>>> adapters created by other VPN services are also hidden. I'm sure that
>>> there's a way to fix that, but I never bothered to find it.
>>
>> Hierophant, so basically OpenVPN.net stock should include all the
>> basics & critical components of OpenVPN in terms of VPN and encrypted
>> traffic. Anything that a VPN provider might add would then appear to
>> be "extra features," which can maybe improve privacy.
>>
>> I am not sure if our methods are any different but I secure my VPN
>> connection using a route delete command:
>>
>> route delete 0.0.0.0 192.168.1.1
>>
>> After my OpenVPN connection is disconnected, my applications will not
>> leak my real ip address. (Without this command, my real ip address
>> will leak).
>>
>> For example, let's say OpenVPN is connected and my VPN ip address is
>> "22.222.22.222" If my vpn connection is disconnected, firefox will
>> leak my real ip address "166.167.166.167". With a route delete
>> command, firefox will not leak my real ip address and simply not
>> connect any longer. (As far as I understand)
>>
>> Is using route delete command not good enough? Am I missing something?
>> Is your method any better/more secure?
>
> There are various ways of securing openvpn. The problem is not openvpn
> itself, but the way windows does networking altogether. In a linux
> system, it is relatively trivial to make openvpn all-or-nothing. In
> windows, it is less so: no proper network stack or routing tables,
> adapters can fight for metric 1 (like hamachi), leaks are possible.
> and it gets worse with leaky protocols added on top.
>
> There are some new methods coming on that should work much better, and
> when The Wizard releases Safehouse, it will also act as a free and
> leakproof vpn client that you can use with any OpenVPN connection on
> any provider.
>
> Trust My Wizard;;; From OZ he does not come;;;
Re: is it okay to replace your VPN provider's openvpn installer w/ openvpn.net's version?
On Sun, 13 Feb 2011 02:16:44 -0500, hierophant wrote:
> On Sun, 13 Feb 2011 02:15:14 -0500, Searching_____ wrote:
>
>> For example, a VPN company will have you install their own modified
>> version of OpenVPN, but what about replacing it with the original
>> installer from Openvpn.net?
>>
>> Any privacy or security implications from doing this? Are you less
>> anonymous? Is your vpn encrypted traffic more prone to leaking?
>>
>> Thanks in advance.
>
> For some services, there may be capabilities in the client that you
> wouldn't get with stock OpenVPN. For example, the Mullvad client
> includes an option to block traffic if the VPN connection fails.
> Using stock OpenVPN, as noted above, you'd need to handle that
> yourself. And FWIW, I don't like the method that Mullvad uses, but
> that's another conversation.
>
> OTOH, some services use clients that do potentially annoying things.
> For example, there's one (which, I forget) that "hides" the TAP
> adapter in Windows -- in that it doesn't show up in Network
> Connections. Even worse, after uninstalling the software, TAP
> adapters created by other VPN services are also hidden. I'm sure that
> there's a way to fix that, but I never bothered to find it.
hierophant the OPs question was general in nature as it relates to any
VPN, yet you specifically reply starting out talking about
Xerobanks...STOP...
Please stay on topic as this doesn't relate to an particular
company...GROW UP...