Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN Client Issue with VPN.S (VPNSecure.me) after upgrading 2.6 -> 2.7

    Scheduled Pinned Locked Moved OpenVPN
    41 Posts 3 Posters 6.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @walternet
      last edited by johnpoz

      @walternet I love how their locations page shows all of their nodes up ;) Yeah they might be up, but nobody can get to them because dns is borked.

      As to you not believing coincidence - Here is how it could of gone down.. You last looked up that fqdn at 1pm, it had a ttl off say 24 hours, or even just 2 hours, etc.. The dns on pfsense would cache that result, lets say its 1.2.3.4

      So until your cache expired, you could ask pfsense or pfsense itself looking up that fqdn would get it from its cache say 1.2.3.4.. Even if public dns broke.. You would still resolve it to 1.2.3.4.

      Now you did an upgrade of pfsense, which going to reboot, and clear the dns cache.. So when pfsense comes back up, it will not be able to resolve that fqdn.. Because the dns is not working currently.

      So working at 1pm, dns broke at 130pm, you updated pfsense at 2pm - now it looks like to you that the update to pfsense broke it. But that is not the case, the case was that dns broke at 130 and you just didn't notice because you had it cached.

      edit: It could of even been longer than their ttl.. Once the connection is made, its not like pfsense has to look up that fqdn again.. It would of not had to look up that fqdn again until for whatever reason the vpn connection had to be remade.. Either way its just coincidence that you only noticed the problem when you updated pfsense.

      For all we know their dns might of been broken for days or even weeks? But since you had an active connection didn't matter, you would of not noticed the dns is down until you needed to resolve it.. Which is currently not working.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 1
      • W
        walternet
        last edited by

        yes, your explanation is coherent

        maybe they provide new infrastructures ...
        the last version of their Android app dates from August 30th 2023
        They explain in the release list "server list updated" ...

        but I cannot get the server list in the app, because I cannont open it ...

        to be continued after some additional tests ..

        W.

        H johnpozJ 2 Replies Last reply Reply Quote 0
        • H
          heuvep @walternet
          last edited by

          @walternet

          I did find the vpnsecure app running on my ipad and see the same problem. Can not receive server list. So vpnsecure has a big problem and communicate nothing about it. It seems they are still selling accounts while there infrastructure is not working!

          1 Reply Last reply Reply Quote 0
          • johnpozJ
            johnpoz LAYER 8 Global Moderator @walternet
            last edited by johnpoz

            @walternet said in OpenVPN Client Issue with VPN.S (VPNSecure.me) after upgrading 2.6 -> 2.7:

            but I cannot get the server list in the app, because I cannont open it ...

            Does the app work? If that was the case, then yeah that would point to they changed maybe the domain so maybe its now at2.newdomain.tld which might be working??

            If the app works, unless its doing something like doh or dot or something, it would be easy enough to get the fqdn they are connecting to.. Or maybe their app only uses hard coded IPs now?

            What I can say for sure - is that domain your trying to resolve in your vpn log, the error is spot on because that does not resolve.. And I tried many of their other location names, like they have us1, 2 and 3 and many more all over the place.. but using that domain vpnsecure.me and all of the names they have on the other nodes, none of the ones I tried resolved.

            An intelligent man is sometimes forced to be drunk to spend time with his fools
            If you get confused: Listen to the Music Play
            Please don't Chat/PM me for help, unless mod related
            SG-4860 24.11 | Lab VMs 2.8, 24.11

            1 Reply Last reply Reply Quote 0
            • W
              walternet
              last edited by

              I connect to my private area on the vpnsecure website

              I find in servers item following informations, for example : proxy-at1.vpnsecure.me

              each server has for prefix "proxy-" with port 8080 but ... nothing else better in results !! :'-)

              I maybe have to read some docs before have some ideas ...

              to be continued ...

              W.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @walternet
                last edited by

                @walternet said in OpenVPN Client Issue with VPN.S (VPNSecure.me) after upgrading 2.6 -> 2.7:

                proxy-at1.vpnsecure.me

                that doesn't resolve either, and that is not what the log says it was trying to connect too.. So if their plan is to move to naming scheme like that - its isn't currently working..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                W 1 Reply Last reply Reply Quote 1
                • W
                  walternet @johnpoz
                  last edited by

                  that doesn't resolve either, and that is not what the log says it was trying to connect too.. So if their plan is to move to naming scheme like that - its isn't currently working..

                  I saw that, yes ... :'-(

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ johnpoz referenced this topic on
                  • H
                    heuvep
                    last edited by

                    Some one any news on this problem?

                    grt

                    Pierre

                    W 1 Reply Last reply Reply Quote 0
                    • W
                      walternet @heuvep
                      last edited by

                      @heuvep nope
                      I asked them via Facebook
                      I published a twit on X

                      Nothing ... Cerebral death

                      W.

                      H 1 Reply Last reply Reply Quote 0
                      • H
                        heuvep @walternet
                        last edited by

                        @walternet

                        Still nothing found?

                        johnpozJ 1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator @heuvep
                          last edited by

                          @heuvep I still do not show them resolving..

                          Contact the company - sure hope you didn't pay for a year in advance..

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          H 1 Reply Last reply Reply Quote 0
                          • H
                            heuvep @johnpoz
                            last edited by

                            @johnpoz

                            I did install the app on my phone and then the vpn did work. So there is something wrong in the settings icw pfsense. Does anyone has the right serverlist?

                            grt

                            Pierre

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @heuvep
                              last edited by johnpoz

                              @heuvep said in OpenVPN Client Issue with VPN.S (VPNSecure.me) after upgrading 2.6 -> 2.7:

                              here is something wrong in the settings icw pfsense

                              Maybe the app uses a hard coded IP? What I can tell you is the names they list on their sites for the end points do not resolve on the public internet. That is just fact..

                              Its quite possible maybe they changed them - what I would be really concerned with is zero answer to support request.. If they changed their fqdn they use for their end points, they clearly should list them or let their clients know etc..

                              Per their own instructions says to use a list from here.

                              https://www.vpnsecure.me/vpn-locations//

                              None of those resolve..

                              $ dig us1.vpnsecure.me
                              
                              ; <<>> DiG 9.16.44 <<>> us1.vpnsecure.me
                              ;; global options: +cmd
                              ;; Got answer:
                              ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55199
                              ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
                              
                              ;; OPT PSEUDOSECTION:
                              ; EDNS: version: 0, flags:; udp: 1232
                              ;; QUESTION SECTION:
                              ;us1.vpnsecure.me.              IN      A
                              
                              ;; AUTHORITY SECTION:
                              vpnsecure.me.           3600    IN      SOA     darwin.ns.cloudflare.com. dns.cloudflare.com. 2321840821 10000 2400 604800 1800
                              
                              ;; Query time: 42 msec
                              ;; SERVER: 192.168.3.10#53(192.168.3.10)
                              ;; WHEN: Mon Oct 09 14:35:39 Central Daylight Time 2023
                              ;; MSG SIZE  rcvd: 109
                              

                              So no it would not be possible for pfsense to connect to some fqdn that does not resolve on the public internet. That is not something wrong with pfsense.

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              H 1 Reply Last reply Reply Quote 0
                              • H
                                heuvep @johnpoz
                                last edited by

                                @johnpoz

                                I did find out that they not use dns anymore but hard ip adres. I did regenerate a new config zip file and then you get a email with the config files and then you see it uses ip adres and not dns.

                                client
                                proto udp
                                dev tun
                                remote 212.83.133.203 1281
                                cipher AES-128-CBC
                                verb 3
                                mute 20
                                keepalive 10 120
                                comp-lzo
                                float
                                persist-key
                                persist-tun
                                resolv-retry infinite
                                nobind
                                auth-nocache
                                remote-cert-tls server

                                johnpozJ 1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator @heuvep
                                  last edited by

                                  @heuvep well that would explain the problem - so nice of them to let their users know ;)

                                  So you should update your config on pfsense to use IP vs fqdn (that doesn't resolve) and you should be good to go then.

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  H 1 Reply Last reply Reply Quote 0
                                  • H
                                    heuvep @johnpoz
                                    last edited by

                                    @johnpoz

                                    Thats correct, if you login with your account ont there portal and generate a new config for your self it uses ip adres instead of fqdn. it will be update in the back in the app but they have not communicate at all. Yesterday i did receive a mail and that triggert me. I will test today to see if it works.
                                    So if you do not use the app you need the new ip adresses and hope they do no change all the time!

                                    H 1 Reply Last reply Reply Quote 0
                                    • H
                                      heuvep @heuvep
                                      last edited by

                                      @heuvep

                                      Yes it works now. So you need to use the ipadres.

                                      W 1 Reply Last reply Reply Quote 0
                                      • W
                                        walternet @heuvep
                                        last edited by

                                        @heuvep & all

                                        Hi guys !

                                        Thanx for this tip / generation of new config
                                        I tested with success with remote 212.83.133.203 1281 => I have connexion, but a very bad rate ... :-(

                                        Of course, I asked a new config server, but I just receive .. nothing !

                                        So, can we share a list of IP adresses please ? Besides 212.83.133.203, do we know another IP adresses ?
                                        Can we also share location for each IP ?

                                        Have a nice day !

                                        Regards

                                        W.

                                        H 2 Replies Last reply Reply Quote 0
                                        • H
                                          heuvep @walternet
                                          last edited by

                                          @walternet

                                          When you login the portal you can generate the config file your self. You then get a zip file with lot of ovpn files from diffrent country's. You can find the ipadres in that file

                                          H 1 Reply Last reply Reply Quote 0
                                          • H
                                            heuvep @heuvep
                                            last edited by

                                            @heuvep

                                            usa -> 216.105.168.250

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.