Astrill Application:OpenVPN Features

Site Filter

Site Filter is one of the OpenVPN features that will give you options which sites you want to go through VPN. Note that you have to be in Expert mode to see the additional features under your Settings menu, see how to switch to Expert mode.

1. Site Filter feature is under the Settings Menu.
2. Once you click on the Site Filter feature, you will see it is set to "Tunnel all sites" mode as default.
3. Site Filter modes, click on the drop down arrow button to show the Site Filter modes.

Tunnel all sites

This mode will allow all sites to go through VPN and is best for your privacy protection. This mode is more secure among other options since all sites are encrypted and protected.

1. To choose Tunnel all sites mode, go to Settings menu then choose Site Filter.
2. By default it is set to Tunnel all sites mode.
3. Click OK, now all sites will go through VPN even the local sites.

Tunnel only those sites

This mode will allow you to specify the only sites that you wish to tunnel through VPN. You will have to specify a list of IP addresses(one per line). You can use IP blocks in CIDR format as well, e.g. 12.13.14.0/24.

1. To choose Tunnel only these sites mode, go to Settings menu then choose Site Filter.
2. Click the drop down arrow to show the other Site filter modes.
3. Choose Tunnel only these sites.
4. Specify the list of IP addresses that you wish to tunnel through VPN. Shown example is the IP address of facebook.
5. Click OK.
6. A message box will appear that you need to disconnect from the server, click OK.

Exclude these sites

This mode will allow you to specify the sites that you do not want to tunnel through VPN. You will have to specify a list of IP addresses(one per line as well). You can use IP blocks in CIDR format as well, e.g. 12.13.14.0/24.

1. To choose Exclude these sites mode, go to Settings menu then choose Site Filter.
2. Click the drop down arrow to show the other Site filter modes.
3. Choose Exclude these sites.
4. Specify the list of IP addresses that you wish not to tunnel through VPN.
5. Click OK.
6. A message box will appear that you need to disconnect from the server, click OK.

Only International sites

This mode will allow you to unlock geo-locked contents, for example streaming TV, and all local sites will load directly thus their speed will not be affected.

1. To choose Only international sites mode, go to Settings menu then choose Site Filter.
2. Click the drop down arrow to show the other Site filter modes.
3. Choose Only international sites.
4. Click OK.
5. A message box will appear that you need to disconnect from the server, click OK.

Unblock sites

If you are located in China, use this mode to tunnel only blocked sites through VPN. All other sites will go directly.

1. To choose Unblock sites mode, go to Settings menu then choose Site Filter.
2. Click the drop down arrow to show the other Site filter modes.
3. Choose Unblock sites.
4. Specify the list of IP addresses that you wish to tunnel through VPN. Shown example is the IP address of facebook.
5. Click OK.
6. A message box will appear that you need to disconnect from the server, click OK.

Application Filter

Application Filter is one of the OpenVPN features that will give you options which applications you want to go through VPN. Note that you have to be in Expert mode to see the additional features under your Settings menu, see how to switch to Expert mode.

1. Application Filter feature is under the Settings Menu.
2. Once you click on the Application Filter feature, you will see it is set to "Tunnel all apps" mode as default.
3. Application Filter modes, click on the drop down arrow button to show the Application Filter modes.

Tunnel all apps

This mode will allow all applications to go through VPN and is best for your privacy protection. This mode is more secure among other options since all applications are protected.

1. To choose Tunnel all apps mode, go to Settings menu then choose Application Filter.
2. By default it is set to Tunnel all apps mode.
3. Click OK, now all applications will go through VPN.

Tunnel only these apps

This mode will allow you to specify the only application/s you wish to go through VPN.

File:Only1.jpg

1. Click the drop down arrow and select Tunnel only these apps.
2. Click the add button and select a program that you want to tunnel (Example: Skype).
3. Click OK.

Exclude these apps

Exclude these apps, this mode will allow you to exclude selected application/s to go through VPN.

File:Exclude2.jpg

1. Click the drop down arrow and select Exclude these apps.
2. Click the add button and select a program that you want to exclude (Example: Skype).
3. Click OK.

Port Forward

This function forwards a port from VPN IP(external IP) to your computer. This is useful for Bittorent download programs.

File:Example1.jpg File:Example2.jpg File:Example3.jpg

1. Click Help>> Switch to Expert.
2. Click Settings>> Port Forwarding options.
3. Tick the Enable Port Forwarding box (A specific ports will be assigned to you).
4. Click OK.

Web Cache

Web Caching is used to speed up web surfing by keeping static web files on your hard disk.

File:Webcache3.jpg

1. Click Help>> Switch to expert.
2. Click Settings>> Web Cache options.
3. Tick Enable Web Caching box.
4. Click OK.

OpenVPN Options

This OpenVPN features will allow you to choose OpenVPN mode whether UDP or TCP mode and connection port for better speed and stability.

1. OpenVPN Options is under the Settings menu.
2. By default, OpenVPN mode is set to Fast (UDP).
3. By default, the connection port is set to 8292.
4. By default, the MSS size value is set to 1400. MSS Size is only enabled in Fast (UDP) mode. If you have problem with connection speed, you can lower it's value to 1300 or 1200.
5. By default, the Keep connection alive check box is unchecked. You can check this box if you want to keep the connection with VPN server alive. You can use this option only if you experience frequent disconnects.
6. Click on the drop down arrow on Mode to show other OpenVPN modes. It has Fast (UDP), Reliable (TCP) and Stealth (TCP) mode.
7. For stability, you can choose Stealth (TCP) mode.
8. Set the connection port to 443.
9. You will notice that the MSS Size box will be disabled if you choose any (Reliable or Stealth) TCP mode.
10. Click OK.
11. Click OK, you have to disconnect from the server and then reconnect for the changes to take effect.