Hi guys. I've started a new OpenVPN Server on my VPS. It works fine everything is ok BUT after a month, google apis start blocking my IP Address and I wouldn't be able to reach google ads or developers EVEN SPOTIFY!!! Cause google realizes that i'm from a different country(IRAN). So I should actually change my server ip address and generate new RSA keys too. I understand that google can track me via geo-location service on android phones, but Is there any trick to prevent google from tracing me? Is it ovpn config related? here's my server config: [code] port 18146 proto udp dev tun0 ca /etc/openvpn/easy-rsa/pki/ca.crt cert /etc/openvpn/easy-rsa/pki/issued/server0.crt key /etc/openvpn/easy-rsa/pki/private/server0.key dh /etc/openvpn/easy-rsa/pki/dh.pem topology subnet server 10.21.0.0 255.255.255.0 push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 208.67.222.222" push "dhcp-option DNS 208.67.220.220" keepalive 10 120 tls-auth /etc/openvpn/server/ta.key 0 auth-nocache crl-verify /etc/openvpn/easy-rsa/pki/crl.pem cipher AES-256-CBC persist-key persist-tun [/code] Thanks for your help :)

[quote=TinCanTech post_id=104394 time=1642598626 user_id=37053] Probably google super-cookie .. [/quote] Maybe changing server private keys & certificates would help. BUT as far as I can remember, OpenVPN-AS could handle this. I don't know how?

The email used to register here is a [b]gmail[/b] account. [i]Google has you ... Follow the white rabbit. knock knock[/i] !

[quote=paulchery21 post_id=104436 time=1642703892 user_id=55962] That's my point. [/quote]You lost me there .. :?: [quote=paulchery21 post_id=104392 time=1642597262 user_id=55962] I've started a new OpenVPN Server on my VPS. It works fine everything is ok BUT after a month, google apis start blocking my IP Address and I wouldn't be able to reach google ads or developers EVEN SPOTIFY!!! [/quote]What google do is none of our business. However, Google recently reneged on a promise to allow Chrome Clones to access their services for free. Google now actively block all Chrome Clones from their services. (There is more in the details but that is the general gist) [quote=paulchery21 post_id=104392 time=1642597262 user_id=55962] Cause google realizes that i'm from a different country(IRAN). So I should actually change my server ip address [/quote]You can try but google know lots more tricks than you do. [quote=paulchery21 post_id=104392 time=1642597262 user_id=55962] and generate new RSA keys too [/quote]That will make zero difference. [quote=paulchery21 post_id=104392 time=1642597262 user_id=55962] I understand that google can track me via geo-location service on android phones, but Is there any trick to prevent google from tracing me [/quote]The only [i]sure-fire[/i] way to completely avoid google is to [b]not[/b] use the internet. [quote=paulchery21 post_id=104392 time=1642597262 user_id=55962] Is it ovpn config related? [/quote]No. Openvpn can give your client a [i]different[/i] IP address but that is it. https://pi-hole.net/ may help you more.. [b]Editorial[/b]: [list][b]Firefox 96.0[/b] reset all my search to [b]google[/b] without a single word of warning. So, if you think you can beat that sort of [b]abuse[/b] then go for it and document it.[/list]

Google detects my precise location

paulchery21

Hi guys. I've started a new OpenVPN Server on my VPS. It works fine everything is ok BUT after a month, google apis start blocking my IP Address and I wouldn't be able to reach google ads or developers EVEN SPOTIFY!!! Cause google realizes that i'm from a different country(IRAN). So I should actually change my server ip address and generate new RSA keys too. I understand that google can track me via geo-location service on android phones, but Is there any trick to prevent google from tracing me? Is it ovpn config related?
here's my server config:

port 18146
proto udp
dev tun0

ca      /etc/openvpn/easy-rsa/pki/ca.crt
cert    /etc/openvpn/easy-rsa/pki/issued/server0.crt
key     /etc/openvpn/easy-rsa/pki/private/server0.key
dh      /etc/openvpn/easy-rsa/pki/dh.pem

topology subnet

server 10.21.0.0 255.255.255.0

push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"

keepalive 10 120

tls-auth /etc/openvpn/server/ta.key 0
auth-nocache

crl-verify /etc/openvpn/easy-rsa/pki/crl.pem

cipher AES-256-CBC

persist-key
persist-tun

Thanks for your help 🙂

TinCanTech

Probably google super-cookie ..

paulchery21

TinCanTech wrote Probably google super-cookie ..

Maybe changing server private keys & certificates would help. BUT as far as I can remember, OpenVPN-AS could handle this. I don't know how?

openvpn_inc

paulchery21 wrote
TinCanTech wrote Probably google super-cookie ..
Maybe changing server private keys & certificates would help. BUT as far as I can remember, OpenVPN-AS could handle this. I don't know how?

Hi Paul,

Tin is right: it's surely something in web browser cookies. Try with a browser with nothing Google can use to track you. If you like the convenience of a Google account, please understand what Google is in the business for: to track you.

You have redirected all your traffic through the VPN. So the VPS IP address is what websites will see as your address. There are numerous online tools that can check this. Try one (or many) and you will see.

Google has no idea about the certificates used in your OpenVPN tunnel. Sure, you are more than welcome to try Access Server (and it's free to use for no more than 2 concurrent connections), but if you use a Googlized browser in your new AS, Google has found you again.

regards, rob0

TinCanTech

The email used to register here is a gmail account.

Google has you ... Follow the white rabbit. knock knock !

paulchery21

openvpn_inc wrote Hi Paul,

Tin is right: it's surely something in web browser cookies. Try with a browser with nothing Google can use to track you. If you like the convenience of a Google account, please understand what Google is in the business for: to track you.

You have redirected all your traffic through the VPN. So the VPS IP address is what websites will see as your address. There are numerous online tools that can check this. Try one (or many) and you will see.

Google has no idea about the certificates used in your OpenVPN tunnel. Sure, you are more than welcome to try Access Server (and it's free to use for no more than 2 concurrent connections), but if you use a Googlized browser in your new AS, Google has found you again.

regards, rob0

So, you think changing my VPS IP Address would help?
If yes, then how vpn providers struggle with such things? Do they change their ip address constantly?

TinCanTech

Google are not identifying you via an IP address.

paulchery21

But it works(At least for 6 weeks)

TinCanTech

paulchery21 wrote But it works(At least for 6 weeks)

Which is no indication of anything.

Google have the power, the resources, the reason and the will
to use their network services for any purpose which they see fit.
Even to the extent of infringing the Law.

Google like to track you and they are exceedingly good at it.

You are even using a gmail account ..

How can you possibly expect to hide from Google when you actively use their services ?

paulchery21

Thanks for your patience to answer my questions Tin
It's not about my gmail account because it's logged off in my computer & I check my emails via my phone(WITHOUT VPN).
OK I understand these. Even if I don't use google, my friends use it all the time. I can't force them to use alternative search engines.
That's my point.

TinCanTech

paulchery21 wrote That's my point.

You lost me there .. :?:

paulchery21 wrote I've started a new OpenVPN Server on my VPS. It works fine everything is ok BUT after a month, google apis start blocking my IP Address and I wouldn't be able to reach google ads or developers EVEN SPOTIFY!!!

What google do is none of our business. However, Google recently reneged on a promise to allow Chrome Clones to access their services for free. Google now actively block all Chrome Clones from their services. (There is more in the details but that is the general gist)

paulchery21 wrote Cause google realizes that i'm from a different country(IRAN). So I should actually change my server ip address

You can try but google know lots more tricks than you do.

paulchery21 wrote and generate new RSA keys too

That will make zero difference.

paulchery21 wrote I understand that google can track me via geo-location service on android phones, but Is there any trick to prevent google from tracing me

The only sure-fire way to completely avoid google is to not use the internet.

paulchery21 wrote Is it ovpn config related?

No.

Openvpn can give your client a different IP address but that is it.

https://pi-hole.net/ may help you more..

Editorial:

Firefox 96.0 reset all my search to google without a single word of warning.
So, if you think you can beat that sort of abuse then go for it and document it.

paulchery21

OK. Thanks a lot <3

paulchery21

I think I've solved this problem. YOU WERE RIGHT.
There is nothing to do with my configuration, But it's all about my address.
I'm just swapping my server IP between 2 public IP addresses every 24 hours & Google didn't detect the location yet(after about 3 months)

TinCanTech

paulchery21 wrote I'm just swapping my server IP between 2 public IP addresses every 24 hours & Google didn't detect the location yet(after about 3 months)

Or they don't care .. because your browser servers them up dinner ..