Live data from Hacker News

PureVPN IPv6 Leak

anagogistis.com

41–50 of 93 posts

Re: PureVPN IPv6 Leak

#41

For the love of God, don't use PureVPN ! They have been proven in court to log traffic, despite claiming not to.[1] [1] https://cyberinsider.com/vpn-logs-lies/

They are one of the few VPN providers that give out public IPv4 addresses, and you can even get a static one. So, if you are using them for having a public IP, not for privacy, please continue doing so.

Interesting, do you know if they actually assign them to the VPN interface (rather than just passing through inbound connections to a public IP to the private IP of the VPN interface)?

That could come in handy for hosting things behind double NAT.

Re: PureVPN IPv6 Leak

#42
post #5

Earlier quoted context omitted.

I strongly suggest you disable ipv6, as nothing will break by disabling it but many things break with it enabled.

That's not really true anymore. I've used a connection with both IPv4 and 6 for the past two years. There's a number of times where my stuff magically works, whiles others have issues, because my traffic is mostly over IPv6. Not once have I had an issue because my setup is dual stacked.

This is still true for ISPs that don't monitor their IPv6 connectivity. I was forced to disable IPv6 recently because of this: https://www.reddit.com/r/ipv6/comments/1nf3ytq/how_do_i_comp...

And before you say "change the ISP": Globe is the only one that does not refuse to provide services to foreigners and does not lock you up into a 24-month non-cancellable contract, which is longer than any available non-resident visa.

Re: PureVPN IPv6 Leak

#43
post #40
post #39

Earlier quoted context omitted.

Do you know if it's supported using OS-native VPN client implementations as well (i.e. Wirecard, IKEv2, or maybe OpenVPN), or only using their official client?

You can download the WireGuard/OpenVPN config files all at once in their web interface.

I've seen that, but I just wasn't sure if that also works for IPv6.

According to their own docs, it seems to work for at least OpenVPN:

> Those not using the Mullvad client program can just add the directive "tun-ipv6" to their OpenVPN configuration file.

Re: PureVPN IPv6 Leak

#44
post #41

Earlier quoted context omitted.

They are one of the few VPN providers that give out public IPv4 addresses, and you can even get a static one. So, if you are using them for having a public IP, not for privacy, please continue doing so.

Interesting, do you know if they actually assign them to the VPN interface (rather than just passing through inbound connections to a public IP to the private IP of the VPN interface)? That could come in handy for hosting things behind double NAT.

They assign it directly to the interface, and letting others connect to stuff behind CGNAT is indeed my use case.

Two other VPNs working for this purpose are OVPN (+1 for them using WireGuard, but their Singapore node is slow) and SwissVPN (limited to only 30 Mbps by contract, but they do provide these contracted 30 Mbps).

Re: PureVPN IPv6 Leak

#45
post #43
post #40

Earlier quoted context omitted.

You can download the WireGuard/OpenVPN config files all at once in their web interface.

I've seen that, but I just wasn't sure if that also works for IPv6. According to their own docs, it seems to work for at least OpenVPN: > Those not using the Mullvad client program can just add the directive "tun-ipv6" to their OpenVPN configuration file.

Yas. When you download the config files you can choose between IPv4 and IPv6

Re: PureVPN IPv6 Leak

#46
post #28

Earlier quoted context omitted.

$5/month vs eg $2/month with a long running sub with e.g. PIA (Chinese owners) though... I wish mullvad provided long running subs with better prices then what they currently provide.

Would love a source for Chinese owners of PIA. Last I knew, it was Israeli owners. -source, former employee.

[deleted]

Re: PureVPN IPv6 Leak

#47
post #3

network namespaces provide a clean host/vpn split. https://blog.thea.codes/nordvpn-wireguard-namespaces/

I just built the same thing using `systemd-nspawn --directory=/ -b`. The nice part about using nspawn is that you have access to all of the normal network configuration tools like systemd-networkd to configure the devices and networks, rather than using a python script. It also provides a nice place for running services inside of the container, since process management is also included.

Re: PureVPN IPv6 Leak

#48
post #38

Earlier quoted context omitted.

Would love a source for Chinese owners of PIA. Last I knew, it was Israeli owners. -source, former employee.

You are correct: "Kape Technologies is a United Kingdom-based cybersecurity software company. Kape owns VPN services and cybersecurity tools, including CyberGhost, Private Internet Access (PIA), ZenMate, ExpressVPN, and Intego." https://en.m.wikipedia.org/wiki/Teddy_Sagi#Kape_Technologies

[deleted]

Re: PureVPN IPv6 Leak

#49
post #12
post #9

Separately, PureVPN is one of the providers you can’t trust [1]. [1] https://www.makeuseof.com/worst-vpns-you-shouldnt-trust/

I'm not surprised, given that I received 140% cashback(!) on their 2 year plan a while ago. Unless the hope is that most users forget to cancel before it renews, I'm assuming that I'm paying with my personal information. It still does the trick for accessing bank and other websites from abroad (that somehow consider a VPN IP more trustworthy than a residential ISP in a Western European country, but that's a different…

There are many VPNs on TopCashback offering 100%+ cashback. I assumed most of them were trying to build up user numbers in order to sell or get acquired, since I can't logically understand why a VPN would pay so much for an affiliate bonus.

Re: PureVPN IPv6 Leak

#50
post #38

Earlier quoted context omitted.

Would love a source for Chinese owners of PIA. Last I knew, it was Israeli owners. -source, former employee.

You are correct: "Kape Technologies is a United Kingdom-based cybersecurity software company. Kape owns VPN services and cybersecurity tools, including CyberGhost, Private Internet Access (PIA), ZenMate, ExpressVPN, and Intego." https://en.m.wikipedia.org/wiki/Teddy_Sagi#Kape_Technologies

Yes, I missremembered. It was bought by Isreali after all. I dont think my point is affected by this however.

And I feel quite illiterate right now. I somehow managed to misread both your comments twice

Post reply on HN