Page 1 of 1

Voracle Vulnerability

Posted: Tue Aug 28, 2018 12:41 pm
by mark143
Eric,

To address this vulnerability, VPN Providers turned off their compression protocol in their respective apps. Subsequently, they have modified their manual config files by adding "comp-lzo no"

However, under viscosity app, "Options -> Compression", this needs to be set to "Automatic", instead to "Off", otherwise, you will get no internet connection even though you have a "Connected Status"

Any thoughts?

Re: Voracle Vulnerability

Posted: Wed Aug 29, 2018 9:17 am
by Eric
Hi mark,

"comp-lzo no" and it's replacement command "compress" do not turn compression off, they simply turn compression off by default but allow the server to push a command to turn compression back on as well as support packet framing compression. Please have a look at the OpenVPN manual for more information on this.

I recommend you contact your VPN Provider.

Regards,
Eric