Voracle Vulnerability

[mark143]

Eric,

To address this vulnerability, VPN Providers turned off their compression protocol in their respective apps. Subsequently, they have modified their manual config files by adding "comp-lzo no"

However, under viscosity app, "Options -> Compression", this needs to be set to "Automatic", instead to "Off", otherwise, you will get no internet connection even though you have a "Connected Status"

Any thoughts?

[Eric]

Hi mark,

"comp-lzo no" and it's replacement command "compress" do not turn compression off, they simply turn compression off by default but allow the server to push a command to turn compression back on as well as support packet framing compression. Please have a look at the OpenVPN manual for more information on this.

I recommend you contact your VPN Provider.

Regards,
Eric