Voracle Vulnerability

Got a problem with Viscosity or need help? Ask here!

mark143

Posts: 19
Joined: Wed Aug 03, 2011 6:58 am

Post by mark143 » Tue Aug 28, 2018 12:41 pm
Eric,

To address this vulnerability, VPN Providers turned off their compression protocol in their respective apps. Subsequently, they have modified their manual config files by adding "comp-lzo no"

However, under viscosity app, "Options -> Compression", this needs to be set to "Automatic", instead to "Off", otherwise, you will get no internet connection even though you have a "Connected Status"

Any thoughts?

Eric

User avatar
Posts: 1146
Joined: Sun Jan 03, 2010 3:27 am

Post by Eric » Wed Aug 29, 2018 9:17 am
Hi mark,

"comp-lzo no" and it's replacement command "compress" do not turn compression off, they simply turn compression off by default but allow the server to push a command to turn compression back on as well as support packet framing compression. Please have a look at the OpenVPN manual for more information on this.

I recommend you contact your VPN Provider.

Regards,
Eric
Eric Thorpe
Viscosity Developer

Web: http://www.sparklabs.com
Support: http://www.sparklabs.com/support
Twitter: http://twitter.com/sparklabs
2 posts Page 1 of 1