Mimiko wroteVPN Tunnel is established, so ISP is not blocking you. It's the poor internet connection the problem. And ofcourse the OpenVPN server is not configured for what you want to do.
actually im using vpn in a long time everything is ok then suddenly vpn now is not working and i heard the news that our isp is blocking all vpn now..
may i ask sir what configuration missing in my config?
and one thing sir
Is it possible that our internet service provider use dns poisoning so that our vpn stop working?
or they use Deep Packet Inspection techniques
Using these Deep Packet Inspection (DPI) devices, ISPs are able to block certain kind of traffic (encrypted or unencrypted) on any port. Although the DPI devices cannot decode encrypted traffic, but they can detect and block the flow of encrypted traffic easily.
Cache poisoning attacks
Normally, a networked computer uses a DNS server provided by the computer user's organization or an Internet service provider (ISP). DNS servers are generally deployed in an organization's network to improve resolution response performance by caching previously obtained query results. Poisoning attacks on a single DNS server can affect the users serviced directly by the compromised server or indirectly by its downstream server(s) if applicable.
To perform a cache poisoning attack, the attacker exploits a flaw in the DNS software. If the server does not correctly validate DNS responses to ensure that they are from an authoritative source (for example by using DNSSEC) the server will end up caching the incorrect entries locally and serve them to other users that make the same request.
This technique can be used to direct users of a website to another site of the attacker's choosing. For example, an attacker spoofs the IP address DNS entries for a target website on a given DNS server, replacing them with the IP address of a server he controls. He then creates files on the server they control with names matching those on the target server. These files could contain malicious content, such as a computer worm or a computer virus. A user whose computer has referenced the poisoned DNS server would be tricked into accepting content coming from a non-authentic server and unknowingly download malicious content.
is there a way to bypass this things?
