NordVPN

From ArchWiki
Revision as of 07:49, 29 August 2019 by ABOhiccups (talk | contribs) (→‎Installation: nordvpn-cli don't exist in AUR anymore.)
Jump to navigation Jump to search

NordVPN is a personal virtual private network service provider. NordVPN is based in Panama. The country has no mandatory data retention laws and does not participate in the Five Eyes or Fourteen Eyes alliances. The Linux Version only use Command-line.

Create Account

In order to use NordVPN, you must create your own account on the official NordVPN website. http://nordvpn.com

There are different payment options to choose.

Installation

NordVPN can be installed with a package nordvpn-binAUR, available in the AUR.

Systemd

In order to use NordVPN. You must enable nordvpnd service.

$ sudo systemctl enable nordvpnd.service
$ sudo systemctl start nordvpnd.service

Configuration

Here are many different commands to use NordVPN.

Login/Logout

$ nordvpn login

Logs you in to your NordVPN Account.

$ nordvpn logout

Logs you out from your NordVPN Account.

Connect to VPN

$ nordvpn connect [[country]/[server]/[country_code]/[city] or [country] [city]]
Provide a [country] argument to automatically connect to a specific country. For example: 'nordvpn set autoconnect on Australia'
Provide a [country_code] argument to automatically connect to a specific country. For example: 'nordvpn set autoconnect on us'
Provide a [city] argument to automatically connect to a specific city. For example: 'nordvpn set autoconnect on Hungary Budapest'

Connect you to VPN.

$ nordvpn disconnect

Disconnect you from VPN.

$ nordvpn status

Shows the connection status.

Settings

$ nordvpn set protocol [protocol]
Supported values for [protocol]: TCP, UDP
Example: nordvpn set protocol TCP

Sets the protocol.

$ nordvpn set killswitch [enabled]/[disabled]
Supported values for [disabled]: 0, false, disable, off, disabled
Example: nordvpn set killswitch off

Supported values for [enabled]: 1, true, enable, on, enabled
Example: nordvpn set killswitch on

Enables or disables Kill Switch. This security feature blocks your device from accessing the Internet outside the secure VPN tunnel, in case connection with a VPN server is lost.

$ nordvpn set cybersec [enabled]/[disabled]
Supported values for [disabled]: 0, false, disable, off, disabled
Example: nordvpn set cybersec off

Supported values for [enabled]: 1, true, enable, on, enabled
Example: nordvpn set cybersec on

Enables or disables CyberSec. When enabled, the CyberSec feature will automatically block suspicious websites so that no malware or other cyber threats can infect your device. Additionally, no flashy ads will come into your sight. More information on how it works: https://nordvpn.com/features/cybersec/.

$ nordvpn set autoconnect [enabled]/[disabled] [[country]/[server]/[country_code]/[city] or [country] [city]]
Supported values for [disabled]: 0, false, disable, off, disabled
Example: nordvpn set autoconnect off

Supported values for [enabled]: 1, true, enable, on, enabled
Example: nordvpn set autoconnect on

Provide a [country] argument to automatically connect to a specific country. For example: 'nordvpn set autoconnect on Australia'
Provide a [country_code] argument to automatically connect to a specific country. For example: 'nordvpn set autoconnect on us'
Provide a [city] argument to automatically connect to a specific city. For example: 'nordvpn set autoconnect on Hungary Budapest'

Enables or disables auto connect. When enabled, this feature will automatically try to connect to VPN on operating system startup.

$ nordvpn set obfuscate [enabled]/[disabled]
Supported values for [disabled]: 0, false, disable, off, disabled
Example: nordvpn set obfuscate off

Supported values for [enabled]: 1, true, enable, on, enabled
Example: nordvpn set obfuscate on

Enables or disables obfuscation. When enabled, this feature allows to bypass network traffic sensors which aim to detect usage of the protocol and log, throttle or block it.

$ nordvpn set dns [servers]/[disabled]
Supported values for [disabled]: 0, false, disable, off, disabled
Example: nordvpn set dns off

Arguments [servers] is a list of IP addresses separated by space
Example: nordvpn set dns 0.0.0.0 1.2.3.4

Sets DNS servers.

$ nordvpn whitelist command [command options] [arguments...]
Commands:
     add     Adds option to whitelist
     remove  Removes option from whitelist

Adds or removes option from whitelist.

$ nordvpn settings

Shows the current settings.

Server List

$ nordvpn countries

Shows the country list.

$ nordvpn cities [country]
Use this command to show cities of specific country.
Example: nordvpn cities United_States

Shows the city list.

Alternative Method : connecting to NordVPN using NetworkManager

Installation

1. Install networkmanager and networkmanager-openvpn.

2. Choose an appropriate server using the NordVPN servers page : https://nordvpn.com/servers/ Download the corresponding openvpn configuration file on the NordVPN site : https://nordvpn.com/ovpn/ Save the file to a place in your user home directory or elsewhere that is memorable for future access.

Configuration

1. Right click on the NetworkManager applet from your desktop environment, and click Edit Connections. Click the Plus sign in the bottom left corner of the Network Connections window that appears.

2. When you choose a connection type, click the drop down menu and scroll all the way down until you reach "Import a saved VPN configuration". Select that option. Now, click Create.

3. Navigate to the directory you extracted all of the openvpn files to earlier, then open one of the files from that folder. Generally speaking, you will want to open the file that is associated with the connection you specifically want.

4. After you have opened one of the openvpn files, the window that appears should be "Editing <connection type>". Type in your NordVPN Username and Password. There is an icon in the password box indicating user permission of the credentials; change the settings as you wish ("Save for all users" if you don't want to enter your password every time you connect).

Avoid DNS leak

To prevent DNS leak you must :

1. click on the "ipv4 settings"

2. On method : choose "automatic adresses only (VPN)" and manually enter the NordVPN DNS adresses in "DNS servers" : "103.86.96.100, 103.86.99.100" (Separated by a coma)

3. Click Save at the bottom left of the "Editing <connection type>" window.

Automatic connection to the VPN

1. Right click on the NetworkManager applet from your desktop environment, and click Edit Connections.

2. Double click on the ethernet or Wifi connection for whom you want to automatically connect to the VPN

3. On the "General" tab, click on "Automatically connect to VPN when using this connection" in every connection you want, and choosing the right configuration file.

4. Repeat the operation for the other connections you'll use with the VPN.

Disable ipv6

NordVPN is not ipv6 compatible. You may want to completely disable it.

Or you can also :

1. Right click on the NetworkManager applet from your desktop environment, and click Edit Connections.

2. Double click on the ethernet or Wifi connection for whom you want to automatically connect to the VPN

3. On the "ipv6" tab, choose "ignore" in the method box.

Use a killswitch

The NordVPN killswitch won't work with this method, you'll have to create your own using ufw or iptables.

Here is an example with UFW.

Test your configuration

You can use these site :

https://ipleak.net/

https://www.dnsleaktest.com/

http://ipv6leak.com/