This forum is for admins who are looking to build or expand their OpenVPN setup.
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
-
paulchery21
- OpenVpn Newbie
- Posts: 11
- Joined: Wed Jan 19, 2022 12:48 pm
Post
by paulchery21 » Wed Jan 19, 2022 1:01 pm
Hi guys. I've started a new OpenVPN Server on my VPS. It works fine everything is ok BUT after a month, google apis start blocking my IP Address and I wouldn't be able to reach google ads or developers EVEN SPOTIFY!!! Cause google realizes that i'm from a different country(IRAN). So I should actually change my server ip address and generate new RSA keys too. I understand that google can track me via geo-location service on android phones, but Is there any trick to prevent google from tracing me? Is it ovpn config related?
here's my server config:
Code: Select all
port 18146
proto udp
dev tun0
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server0.crt
key /etc/openvpn/easy-rsa/pki/private/server0.key
dh /etc/openvpn/easy-rsa/pki/dh.pem
topology subnet
server 10.21.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
keepalive 10 120
tls-auth /etc/openvpn/server/ta.key 0
auth-nocache
crl-verify /etc/openvpn/easy-rsa/pki/crl.pem
cipher AES-256-CBC
persist-key
persist-tun
Thanks for your help
-
TinCanTech
- OpenVPN Protagonist
- Posts: 11137
- Joined: Fri Jun 03, 2016 1:17 pm
Post
by TinCanTech » Wed Jan 19, 2022 1:23 pm
Probably google super-cookie ..
-
paulchery21
- OpenVpn Newbie
- Posts: 11
- Joined: Wed Jan 19, 2022 12:48 pm
Post
by paulchery21 » Thu Jan 20, 2022 7:46 am
TinCanTech wrote: ↑Wed Jan 19, 2022 1:23 pm
Probably google super-cookie ..
Maybe changing server private keys & certificates would help. BUT as far as I can remember, OpenVPN-AS could handle this. I don't know how?
-
openvpn_inc
- OpenVPN Inc.
- Posts: 1333
- Joined: Tue Feb 16, 2021 10:41 am
Post
by openvpn_inc » Thu Jan 20, 2022 2:59 pm
paulchery21 wrote: ↑Thu Jan 20, 2022 7:46 am
TinCanTech wrote: ↑Wed Jan 19, 2022 1:23 pm
Probably google super-cookie ..
Maybe changing server private keys & certificates would help. BUT as far as I can remember, OpenVPN-AS could handle this. I don't know how?
Hi Paul,
Tin is right: it's surely something in web browser cookies. Try with a browser with
nothing Google can use to track you. If you like the convenience of a Google account, please understand what Google is in the business for: to track you.
You have redirected all your traffic through the VPN. So the VPS IP address is what websites will see as your address. There are numerous online tools that can check this. Try one (or many) and you will see.
Google has no idea about the certificates used in your OpenVPN tunnel. Sure, you are more than welcome to try
Access Server (and it's free to use for no more than 2 concurrent connections), but if you use a Googlized browser in your new AS, Google has found you again.
regards, rob0
OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support
-
TinCanTech
- OpenVPN Protagonist
- Posts: 11137
- Joined: Fri Jun 03, 2016 1:17 pm
Post
by TinCanTech » Thu Jan 20, 2022 3:42 pm
The email used to register here is a gmail account.
Google has you ... Follow the white rabbit. knock knock !
-
paulchery21
- OpenVpn Newbie
- Posts: 11
- Joined: Wed Jan 19, 2022 12:48 pm
Post
by paulchery21 » Thu Jan 20, 2022 5:02 pm
openvpn_inc wrote: ↑Thu Jan 20, 2022 2:59 pm
Hi Paul,
Tin is right: it's surely something in web browser cookies. Try with a browser with
nothing Google can use to track you. If you like the convenience of a Google account, please understand what Google is in the business for: to track you.
You have redirected all your traffic through the VPN. So the VPS IP address is what websites will see as your address. There are numerous online tools that can check this. Try one (or many) and you will see.
Google has no idea about the certificates used in your OpenVPN tunnel. Sure, you are more than welcome to try
Access Server (and it's free to use for no more than 2 concurrent connections), but if you use a Googlized browser in your new AS, Google has found you again.
regards, rob0
So, you think changing my VPS IP Address would help?
If yes, then how vpn providers struggle with such things? Do they change their ip address constantly?
-
TinCanTech
- OpenVPN Protagonist
- Posts: 11137
- Joined: Fri Jun 03, 2016 1:17 pm
Post
by TinCanTech » Thu Jan 20, 2022 5:24 pm
Google are not identifying you via an IP address.
-
paulchery21
- OpenVpn Newbie
- Posts: 11
- Joined: Wed Jan 19, 2022 12:48 pm
Post
by paulchery21 » Thu Jan 20, 2022 5:47 pm
But it works(At least for 6 weeks)
-
TinCanTech
- OpenVPN Protagonist
- Posts: 11137
- Joined: Fri Jun 03, 2016 1:17 pm
Post
by TinCanTech » Thu Jan 20, 2022 6:03 pm
paulchery21 wrote: ↑Thu Jan 20, 2022 5:47 pm
But it works(At least for 6 weeks)
Which is no
indication of anything.
Google have
the power, the resources, the reason and the will
to use their network services for any purpose which they see fit.
Even to the extent of infringing the Law.
Google like to track you and they are
exceedingly good at it.
You are even using a
gmail account ..
How can you possibly expect to hide from Google when you actively use their services ?
-
paulchery21
- OpenVpn Newbie
- Posts: 11
- Joined: Wed Jan 19, 2022 12:48 pm
Post
by paulchery21 » Thu Jan 20, 2022 6:38 pm
Thanks for your patience to answer my questions Tin
It's not about my gmail account because it's logged off in my computer & I check my emails via my phone(WITHOUT VPN).
OK I understand these. Even if I don't use google, my friends use it all the time. I can't force them to use alternative search engines.
That's my point.
-
TinCanTech
- OpenVPN Protagonist
- Posts: 11137
- Joined: Fri Jun 03, 2016 1:17 pm
Post
by TinCanTech » Thu Jan 20, 2022 7:52 pm
paulchery21 wrote: ↑Thu Jan 20, 2022 6:38 pm
That's my point.
You lost me there ..
paulchery21 wrote: ↑Wed Jan 19, 2022 1:01 pm
I've started a new OpenVPN Server on my VPS. It works fine everything is ok BUT after a month, google apis start blocking my IP Address and I wouldn't be able to reach google ads or developers EVEN SPOTIFY!!!
What google do is none of our business. However, Google recently reneged on a promise to allow Chrome Clones to access their services for free. Google now actively block all Chrome Clones from their services. (There is more in the details but that is the general gist)
paulchery21 wrote: ↑Wed Jan 19, 2022 1:01 pm
Cause google realizes that i'm from a different country(IRAN). So I should actually change my server ip address
You can try but google know lots more tricks than you do.
paulchery21 wrote: ↑Wed Jan 19, 2022 1:01 pm
and generate new RSA keys too
That will make zero difference.
paulchery21 wrote: ↑Wed Jan 19, 2022 1:01 pm
I understand that google can track me via geo-location service on android phones, but Is there any trick to prevent google from tracing me
The only
sure-fire way to completely avoid google is to
not use the internet.
paulchery21 wrote: ↑Wed Jan 19, 2022 1:01 pm
Is it ovpn config related?
No.
Openvpn can give your client a
different IP address but that is it.
https://pi-hole.net/ may help you more..
Editorial:
- Firefox 96.0 reset all my search to google without a single word of warning.
So, if you think you can beat that sort of abuse then go for it and document it.
-
paulchery21
- OpenVpn Newbie
- Posts: 11
- Joined: Wed Jan 19, 2022 12:48 pm
Post
by paulchery21 » Thu Jan 20, 2022 7:55 pm
OK. Thanks a lot <3
-
paulchery21
- OpenVpn Newbie
- Posts: 11
- Joined: Wed Jan 19, 2022 12:48 pm
Post
by paulchery21 » Fri Apr 08, 2022 11:58 pm
I think I've solved this problem. YOU WERE RIGHT.
There is nothing to do with my configuration, But it's all about my address.
I'm just swapping my server IP between 2 public IP addresses every 24 hours & Google didn't detect the location yet(after about 3 months)
-
TinCanTech
- OpenVPN Protagonist
- Posts: 11137
- Joined: Fri Jun 03, 2016 1:17 pm
Post
by TinCanTech » Sat Apr 09, 2022 12:25 am
paulchery21 wrote: ↑Fri Apr 08, 2022 11:58 pm
I'm just swapping my server IP between 2 public IP addresses every 24 hours & Google didn't detect the location yet(after about 3 months)
Or they don't care .. because your browser servers them up dinner ..