☄️AstroVPN | Ad/Malware Blocking ✨Early Access $4/mo [USE CODE PLOX25]

PebbleHost
High performance, consistent uptime and fast support. Minecraft hosting that just works.

RileyN

Net Sys Admin | AstroVPN CEO
Premium
Feedback score
3
Posts
350
Reactions
193
Resources
0
Last edited:

utaninja

( ̄^ ̄ )ゞ
Supreme
Feedback score
36
Posts
1,360
Reactions
940
Resources
0
How do your prices compare to Vypr, PIA, Express, also stats?
 

kev626

Feedback score
2
Posts
223
Reactions
143
Resources
0
Have you considered independent auditing of your infrastructure to prove that you don’t save logs? (I’d be willing to bet you have logs with info you don’t know about). Also with your DNS hole, how do you know that 35% of traffic is ads if you don’t log any data???
 

RileyN

Net Sys Admin | AstroVPN CEO
Premium
Feedback score
3
Posts
350
Reactions
193
Resources
0
Have you considered independent auditing of your infrastructure to prove that you don’t save logs? (I’d be willing to bet you have logs with info you don’t know about). Also with your DNS hole, how do you know that 35% of traffic is ads if you don’t log any data???
We're actively looking for 3rd party companies that offer security audits. Security is something we can't press enough, I like your idea of having another organization conduct research. We will also be conducting an internal investigation once we're closer to release. Also, in regards to the DNS statement, we don't log anything search-related. If the ad server is recognized by our system, it's blocked and an integer counter is increased. I'd be happy to chat over Discord and show you some of the backend-works we have going to Astro in depth.

I hope this cleared some stuff up, thanks!
Riley.
 

kev626

Feedback score
2
Posts
223
Reactions
143
Resources
0
We're actively looking for 3rd party companies that offer security audits. Security is something we can't press enough, I like your idea of having another organization conduct research. We will also be conducting an internal investigation once we're closer to release. Also, in regards to the DNS statement, we don't log anything search-related. If the ad server is recognized by our system, it's blocked and an integer counter is increased. I'd be happy to chat over Discord and show you some of the backend-works we have going to Astro in depth.

I hope this cleared some stuff up, thanks!
Riley.
Ok so it’s PiHole.

you still haven’t addressed that, because of that server, and probably other stuff you have, you are probably unknowingly logging stuff without even knowing it.
 

RileyN

Net Sys Admin | AstroVPN CEO
Premium
Feedback score
3
Posts
350
Reactions
193
Resources
0
Ok so it’s PiHole.

you still haven’t addressed that, because of that server, and probably other stuff you have, you are probably unknowingly logging stuff without even knowing it.
We do run instances of Pi-Hole, yes. And no, we do not store any logs. Contact me over discord and I'd be happy to show you the service live.
 

younghyena

Supreme
Feedback score
0
Posts
5
Reactions
6
Resources
0



Okay, I got some questions for you.


1. When you say no logging is that on your end?
1a. Does the datacenter Log?
1b. Are you using OPENVPN's default security.
1c. For auth are you using freeradius Black Hat
1d. Do you rent the servers or own a direct line to physical hardware (Important as logs ;)
1e. Do you use authpam?
1f. When u claim no logging how do u achieve this, do you do it the standard way of writing to a unwritable directy, do u have it constantly deleting or have u actually changed it to not secure any logs (PS. Dont lie)


2a. How can you ensure us the information such as our IP and payment information is secure? when you are using a host that easily will hand out information ?


I look forward to your answers, thanks in advance.[DOUBLEPOST=1579397651][/DOUBLEPOST]
We do run instances of Pi-Hole, yes. And no, we do not store any logs. Contact me over discord and I'd be happy to show you the service live.


So you keep no logs, but your Datacenter does? Bit confused. Datacenters have to keep logs. Please answer the above questions.
 
Last edited:

RileyN

Net Sys Admin | AstroVPN CEO
Premium
Feedback score
3
Posts
350
Reactions
193
Resources
0
Okay, I got some questions for you.


1. When you say no logging is that on your end?
1a. Does the datacenter Log?
1b. Are you using OPENVPN's default security.
1c. For auth are you using freeradius Black Hat
1d. Do you rent the servers or own a direct line to physical hardware (Important as logs ;)
1e. Do you use authpam?
1f. When u claim no logging how do u achieve this, do you do it the standard way of writing to a unwritable directy, do u have it constantly deleting or have u actually changed it to not secure any logs (PS. Dont lie)


2a. How can you ensure us the information such as our IP and payment information is secure? when you are using a host that easily will hand out information ?


I look forward to your answers, thanks in advance.[DOUBLEPOST=1579397651][/DOUBLEPOST]


So you keep no logs, but your Datacenter does? Bit confused. Datacenters have to keep logs. Please answer the above questions.
This is a lot, and to be completely transparent I’m limited to mobile right now. I will DM you in the morning with more thorough answers.

Sorry for the inconvenience.
 

hgbf

Confirm onsite ≋ hgbf#6395
Supreme
Feedback score
24
Posts
854
Reactions
629
Resources
0
This is a lot, and to be completely transparent I’m limited to mobile right now. I will DM you in the morning with more thorough answers.

Sorry for the inconvenience.
I think it may be better just to post it here, as more people may have the same questions...
 

younghyena

Supreme
Feedback score
0
Posts
5
Reactions
6
Resources
0
I think it may be better just to post it here, as more people may have the same questions...


This is a lot, and to be completely transparent I’m limited to mobile right now. I will DM you in the morning with more thorough answers.

Sorry for the inconvenience.


You shouldn't be transparent with your customers. These are real questions that need to be answered on the thread and not in a DM as others will want to know. You can say you keep no logs all you want but your Datacenter has to by law. So I think you should go into a little detail or else it makes you look bad. Either way good luck with sales! Btw I use to run a VPN company so I was just curious. Website and thread look good.
 
Last edited:

Spyproof

Supreme
Feedback score
8
Posts
348
Reactions
69
Resources
0
I am only seeing 1 server available to connect to. and Its over loaded?
 

RileyN

Net Sys Admin | AstroVPN CEO
Premium
Feedback score
3
Posts
350
Reactions
193
Resources
0
1. When you say no logging is that on your end?
1a. Does the datacenter Log?
1b. Are you using OPENVPN's default security.
1c. For auth are you using freeradius / other auth?
1d. Do you rent the servers or own a direct line to physical hardware (Important as logs ;)
1e. Do you use authpam?
1f. When u claim no logging how do u achieve this, do you do it the standard way of writing to a unwritable directy, do u have it constantly deleting or have u actually changed it to not secure any logs (PS. Dont lie)

I'd like to formally apologize for my lack of activity in the past few days. Please let me know if there is anything else I can do.

1. When you say no logging is that on your end?
a. Correct. None of our VPN severs log VPN traffic, logins, sessions, or any such data. I will post below an example of an in-production OpenVPN configuration.
1a. Does the datacenter Log?
a. At the moment, we own all of our hardware. We're very limited location-wise, and are relying on our initial release to gain profit to expand. We're currently looking into several providers in multiple countries. We fully intend on owning all hardware used as we move forward.
1b. Are you using OPENVPN's default security.
a. No, we do not. To connect to our servers, you must authenticate with our user database. All traffic is running through SSL (website and vpn).
1c. For auth are you using freeradius / other auth?
a. We do not use freeraduis.
1d. Do you rent the servers or own a direct line to physical hardware (Important as logs ;)
a. We own all physical hardware.
1e. Do you use authpam?
a. Yes.
1f. When u claim no logging how do u achieve this, do you do it the standard way of writing to a unwritable directy, do u have it constantly deleting or have u actually changed it to not secure any logs (PS. Dont lie)
a. We have edited OpenVPN, and our running instances of Pi-Hole to write zero logs. When it comes to upstream, all traffic appears as the VPN server's public IPv4 address.

2a. How can you ensure us the information such as our IP and payment information is secure? when you are using a host that easily will hand out information ? Any VpN provider should be able to answer these questions with ease.
a. Payment information is processed through coinpayments, and we only accept PayPal and Bitcoin transactions. On the host-side, clients have the option to just give us their username, an email, and a matching password, no other information is required to register. Our website does store members' IP addresses in the case of abuse. Password are encrypted using SHA-256 and are salted. In no instance of our website is the information passed through raw text.

port 443 #- port
proto tcp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf
client-cert-not-required
username-as-common-name
local 192.168.1.50
server 10.9.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 1.1.1.1"
push "dhcp-option DNS 1.0.0.1"
keepalive 5 30
comp-lzo
persist-key
persist-tun
verb 3


[DOUBLEPOST=1579571842][/DOUBLEPOST]
I am only seeing 1 server available to connect to. and Its over loaded?
We're not at a public point yet, so we're still working to get servers online and functional. The page you are seeing will be updated soon.
 
Last edited:

Pro

Sir
Supreme
Feedback score
21
Posts
51
Reactions
85
Resources
0
For anyone interested this vpn bypasses the vpn ban on some small servers that ban vpns, so... there's that lol
 

RileyN

Net Sys Admin | AstroVPN CEO
Premium
Feedback score
3
Posts
350
Reactions
193
Resources
0
I can't seem to scroll on the Personal Details section of the registration process.
Interesting, I'll have our web developer take another look at the registration page. We've had issues before with users pressing TAB to switch to the next entry box. I'll post an update if we find anything on our end.

Thank you!
 
Top