VPNBook a fake? (OpenVPN client must run as administrator)

[mxnerd]

Just curious about the service and tested its free account today.

Found that when I used provided OpenVPN files, none of the connection has a default gateway, be it Canada, US, Europe or German servers.

I checked the my online IP address and found it's the same before & after VPN connection.

So basically although you are connected to its server, you still use your ISP's route. Your traffic never goes through its server.

I tried FreeVPN.me and same thing. No default gateway was set.

So these sites try to trick you so you believe you got a fast VPN so you will open an account with them later?

Did I miss something?

 

[AnonymouseUser]

Wow, that's actually a problem with the OpenVPN client! Huge security flaw in the latest package (2.3.8-I601). I got the same results you did with that client, but uninstalled and installed 2.3.6-I603 (64bit) and my external IP address changed appropriately. Tested with VPNBook and VPN Gate, same results with both clients. Submit a bug report ASAP!

FWIW, the default gateway is blank even with the working version.

 

[mxnerd]

Wow. It's like what you said. I downgraded the client and it works, really a huge security flaw!

Sent an email to pfSense (oops, it was OpenVPN, kind of sleepy), hope it gets resolved soon.

 

[mxnerd]

Found that OpenVPN client must be "run as administrator" and enter a password to make it work, or the client was not able to create new routes, even if you login as administrator. Confirmed with OpenVPN developer.

The problem is, you get an IP address message at the system tray anyway even if there is an error, but if you don't check log file, you never know!

 

[AnonymouseUser]

Found that OpenVPN client must be "run as administrator" and enter a password to make it work, or the client was not able to create new routes, even if you login as administrator. Confirmed with OpenVPN developer.

The problem is, you get an IP address message at the system tray anyway even if there is an error, but if you don't check log file, you never know!

Hmm, seems I must have run it immediately after install for the older client, but not the latest. Is it that hard to code the launcher to ask for elevated privileges? Seems like a simple fix for a simple but serious problem. (For example, launching a partition editor immediately asks for admin permission.)

 

[mxnerd]

Hmm, seems I must have run it immediately after install for the older client, but not the latest. Is it that hard to code the launcher to ask for elevated privileges? Seems like a simple fix for a simple but serious problem. (For example, launching a partition editor immediately asks for admin permission.)

I stated it incorrectly.

If you login as administrator account, you don't need to re-enter password if use "run as administrator" to lauch OpenVPN client. If you login as standard user, then you do have to provide a password.

Here is the way to save the credential.

http://www.howtogeek.com/124087/how...ard-user-run-an-application-as-administrator/