Jump to content

I bought Express VPN but for me to browse HTTPS sites on my school Wi-Fi, I have to install a proxy profile on my phone. For my VPN to connect, I have to be connected to my VPN with my 4G before I choose my school Wi-FI and log into my account. (it won't work if I try to connect to my VPN after connecting to my School Wi-Fi)

So is my internet browsing totally private?

Main Rig: CPU Intel Xeon X5660 (4.55Ghz @ 1.45v) / MOBO Asus ROG Rampage III Extreme / RAM 16GB Corsair Vengeance LPX1866 MHz / CPU COOLER ID-COOLING Frostflow+ 240 / GPU EVGA Titan X Hybrid (+630 core + 400 memory) / CASE Cooler Master CM 690 II Advanced + transparent side panel / SSD Crucial M550 512GB / PSU Cooler Master Silent Pro Gold 1200W / DISPLAY 1440p monitor / KEYBOARD Topre Realforce RGB / MOUSE Corsair Glaive Aluminum RGB / SOUND Creative Labs. X-Fi SoundBlaster Elite Pro / ROUTER Netgear R9000 X10 Wireless ad / OS Windows 10 Pro / DRIVING WHEEL Logitech G27
 
Web Server Rig: CPU 2x Intel Xeon X5680 / MOBO Supermicro X8DTL-i / RAM 64GB (2X32GB) SK-Hynix ECC LRDIMMs / CPU COOLER ID-COOLING Frostflow+ 120 + Corsair H50 AIO / GPU MSI GTX 1070 Gaming X (+250core +300 memory) / CASE NZXT Lexa S / SSD Kingston 120GB / HDD 4 x 3TB WD RAID 6 / PSU Enermax MaxRevo 1500W / DISPLAY 900p monitor / KEYBOARD Logitech / MOUSE Logitech
 
Actually Portable Laptop: HP Spectre x360 15' (Late 2018) / i7-8750H, 16GB RAM, 512GB SSD, GTX 1050Ti MaxQ, 4K Display / KEYBOARD Ducky One 2 Mini / OS Linux Mint 19 Cinnamon / WIRELESS ADAPTER NETGEAR A6210 USB 3.0
 
Bed Laptop: ASUS VIVOBOOK 15 / i5-8250U, 8GB RAM, 1TB Toshiba HDD, UHD 630, 1080P Display / OS Linux Mint 19 Cinnamon

 

Backup Rig: CPU Intel Xeon X3470 (4Ghz @ 1.4v) / MOBO MSI P55-GD80 / RAM 16GB HyperX 1600Mhz / CPU COOLER ID-COOLING Frostflow+ 120 / GPU Sapphire R9 270X (+150 core + 200 memory) / CASE Cooler Master Elite 343 SSD Crucial MX150 250GB / PSU Seasonic SS430-GB / KEYBOARD Logitech G910 Orion Spark / MOUSE Logitech / DISPLAY Dell SE2417HGR / OS Windows 10 Pro / WIRELESS ADAPTER

TP-LINK Archer T6E PCI-E

 

Server 1: DELL POWEREDGE 1950 / 2x Intel Xeon E5450, 16GB ECC, 4x 3TB Western Digital (Various) 7200RPM SATA HDD in RAID 6, GT 640 / DISPLAY Lenovo L2251p

 

Server 2: DELL POWEREDGE 1950 / 2x Intel Xeon E5420, 8GB ECC, 2 x 160GB SAS, GT 210

Link to comment
https://linustechtips.com/topic/975464-am-i-totally-private/
Share on other sites

Link to post
Share on other sites

Probably not. Even if the VPN is only routing traffic from your mobile device to their proxy servers, the firewall logs at your school would show a VPN connection. Regardless of whether they only see a secure VPN connection or they can see all your traffic in the clear, you'd still get pulled up on it sooner or later. Just a VPN connection appearing the logs would sufficient for them to start looking around and asking questions.

 

However I do not think your VPN stays connected after you connect to the school WiFi. Default configurations on mobile devices tend to see a WiFi connection with Internet as more desirable than 4G - due to it's speed and trying to use as little of your 4G bandwidth tariff. 

 

When you connect your VPN on 4G and then connect to your schools wireless does the VPN stay connected? Have you checked under settings that it's still active, or if the little VPN text box is still next to your battery icon (iOS)?

 

If it is disconnected you can set the VPN app itself to only use mobile data rather than WiFi.

 

Hope that helps.

Link to comment
https://linustechtips.com/topic/975464-am-i-totally-private/#findComment-11785526
Share on other sites

Link to post
Share on other sites

Yes, you are. The school firewall will see that you are using a VPN to connect, but VPNs are not illegal unless it is stated explicitly in the school rules. It may raise some questions, but you can say that you value your privacy and don't want to be monitored or something. Express VPN is a fine choice, though I use NordVPN myself because I can select a specific server and not just random server which Express VPN automatically assigns when you choose a region. Also, be sure to always check on ipleak.net if you are leaking your IP address or not. 

Link to comment
https://linustechtips.com/topic/975464-am-i-totally-private/#findComment-11788242
Share on other sites

Link to post
Share on other sites

20 hours ago, Trapper said:

Probably not. Even if the VPN is only routing traffic from your mobile device to their proxy servers, the firewall logs at your school would show a VPN connection. Regardless of whether they only see a secure VPN connection or they can see all your traffic in the clear, you'd still get pulled up on it sooner or later. Just a VPN connection appearing the logs would sufficient for them to start looking around and asking questions.

 

However I do not think your VPN stays connected after you connect to the school WiFi. Default configurations on mobile devices tend to see a WiFi connection with Internet as more desirable than 4G - due to it's speed and trying to use as little of your 4G bandwidth tariff. 

 

When you connect your VPN on 4G and then connect to your schools wireless does the VPN stay connected? Have you checked under settings that it's still active, or if the little VPN text box is still next to your battery icon (iOS)?

 

If it is disconnected you can set the VPN app itself to only use mobile data rather than WiFi.

 

Hope that helps.

Yes my VPN stays connected after I log into my school Wi-Fi, only if I lock my phone, I have to re log-in (which i don't have to if i am not using a VPN)

32 minutes ago, DeLorian said:

Yes, you are. The school firewall will see that you are using a VPN to connect, but VPNs are not illegal unless it is stated explicitly in the school rules. It may raise some questions, but you can say that you value your privacy and don't want to be monitored or something. Express VPN is a fine choice, though I use NordVPN myself because I can select a specific server and not just random server which Express VPN automatically assigns when you choose a region. Also, be sure to always check on ipleak.net if you are leaking your IP address or not. 

Express VPN allows me to choose any server country I want to connect to.

 

Thanks for the replies guys!

Main Rig: CPU Intel Xeon X5660 (4.55Ghz @ 1.45v) / MOBO Asus ROG Rampage III Extreme / RAM 16GB Corsair Vengeance LPX1866 MHz / CPU COOLER ID-COOLING Frostflow+ 240 / GPU EVGA Titan X Hybrid (+630 core + 400 memory) / CASE Cooler Master CM 690 II Advanced + transparent side panel / SSD Crucial M550 512GB / PSU Cooler Master Silent Pro Gold 1200W / DISPLAY 1440p monitor / KEYBOARD Topre Realforce RGB / MOUSE Corsair Glaive Aluminum RGB / SOUND Creative Labs. X-Fi SoundBlaster Elite Pro / ROUTER Netgear R9000 X10 Wireless ad / OS Windows 10 Pro / DRIVING WHEEL Logitech G27
 
Web Server Rig: CPU 2x Intel Xeon X5680 / MOBO Supermicro X8DTL-i / RAM 64GB (2X32GB) SK-Hynix ECC LRDIMMs / CPU COOLER ID-COOLING Frostflow+ 120 + Corsair H50 AIO / GPU MSI GTX 1070 Gaming X (+250core +300 memory) / CASE NZXT Lexa S / SSD Kingston 120GB / HDD 4 x 3TB WD RAID 6 / PSU Enermax MaxRevo 1500W / DISPLAY 900p monitor / KEYBOARD Logitech / MOUSE Logitech
 
Actually Portable Laptop: HP Spectre x360 15' (Late 2018) / i7-8750H, 16GB RAM, 512GB SSD, GTX 1050Ti MaxQ, 4K Display / KEYBOARD Ducky One 2 Mini / OS Linux Mint 19 Cinnamon / WIRELESS ADAPTER NETGEAR A6210 USB 3.0
 
Bed Laptop: ASUS VIVOBOOK 15 / i5-8250U, 8GB RAM, 1TB Toshiba HDD, UHD 630, 1080P Display / OS Linux Mint 19 Cinnamon

 

Backup Rig: CPU Intel Xeon X3470 (4Ghz @ 1.4v) / MOBO MSI P55-GD80 / RAM 16GB HyperX 1600Mhz / CPU COOLER ID-COOLING Frostflow+ 120 / GPU Sapphire R9 270X (+150 core + 200 memory) / CASE Cooler Master Elite 343 SSD Crucial MX150 250GB / PSU Seasonic SS430-GB / KEYBOARD Logitech G910 Orion Spark / MOUSE Logitech / DISPLAY Dell SE2417HGR / OS Windows 10 Pro / WIRELESS ADAPTER

TP-LINK Archer T6E PCI-E

 

Server 1: DELL POWEREDGE 1950 / 2x Intel Xeon E5450, 16GB ECC, 4x 3TB Western Digital (Various) 7200RPM SATA HDD in RAID 6, GT 640 / DISPLAY Lenovo L2251p

 

Server 2: DELL POWEREDGE 1950 / 2x Intel Xeon E5420, 8GB ECC, 2 x 160GB SAS, GT 210

Link to comment
https://linustechtips.com/topic/975464-am-i-totally-private/#findComment-11788321
Share on other sites

Link to post
Share on other sites

Depends, if the proxy server is in the school LAN then I'd expect it to override the VPN.

 

If the proxy server is on the Internet then it should go over the VPN first, but the proxy will still be able to log what you are doing so still not exactly secure.

 

Either way with this setup I doubt the VPN is really doing its job, as you are still using the proxy for https so the same blocks as before will apply.  Unless the school network is just using the proxy to authenticate and then it allows traffic over the VPN, in which case you should be able to disable the proxy once logged in so all traffic goes over the VPN.

ASUS B650E-F GAMING WIFI + R7 7800X3D + 2x Corsair Vengeance 32GB DDR5-6000 CL30-36-36-76  + ASUS RTX 4090 TUF Gaming OC

Router:  Intel N100 (pfSense) Backup: GL.iNet GL-X3000/ Spitz AX Switches: Netgear MS510TXUP, MS510TXPP, GS110EMX
WiFi6: Zyxel NWA210AX (1.7Gbit peak at 160Mhz) WiFi5: Ubiquiti NanoHD OpenWRT (~500Mbit at 80Mhz)
ISPs: Zen Full Fibre 900 (~930Mbit down, 115Mbit up) + Three 5G (~1200Mbit down, 115Mbit up, variable)
Upgrading Laptop/Desktop CNVIo WiFi 5 cards to PCIe WiFi6e/7

Link to comment
https://linustechtips.com/topic/975464-am-i-totally-private/#findComment-11789247
Share on other sites

Link to post
Share on other sites

21 minutes ago, Alex Atkin UK said:

Depends, if the proxy server is in the school LAN then I'd expect it to override the VPN.

 

If the proxy server is on the Internet then it should go over the VPN first, but the proxy will still be able to log what you are doing so still not exactly secure.

 

Either way with this setup I doubt the VPN is really doing its job, as you are still using the proxy for https so the same blocks as before will apply.  Unless the school network is just using the proxy to authenticate and then it allows traffic over the VPN, in which case you should be able to disable the proxy once logged in so all traffic goes over the VPN.

thanks, certainly thought provoking.

maybe i should be more careful with my Internet browsing in school.

Main Rig: CPU Intel Xeon X5660 (4.55Ghz @ 1.45v) / MOBO Asus ROG Rampage III Extreme / RAM 16GB Corsair Vengeance LPX1866 MHz / CPU COOLER ID-COOLING Frostflow+ 240 / GPU EVGA Titan X Hybrid (+630 core + 400 memory) / CASE Cooler Master CM 690 II Advanced + transparent side panel / SSD Crucial M550 512GB / PSU Cooler Master Silent Pro Gold 1200W / DISPLAY 1440p monitor / KEYBOARD Topre Realforce RGB / MOUSE Corsair Glaive Aluminum RGB / SOUND Creative Labs. X-Fi SoundBlaster Elite Pro / ROUTER Netgear R9000 X10 Wireless ad / OS Windows 10 Pro / DRIVING WHEEL Logitech G27
 
Web Server Rig: CPU 2x Intel Xeon X5680 / MOBO Supermicro X8DTL-i / RAM 64GB (2X32GB) SK-Hynix ECC LRDIMMs / CPU COOLER ID-COOLING Frostflow+ 120 + Corsair H50 AIO / GPU MSI GTX 1070 Gaming X (+250core +300 memory) / CASE NZXT Lexa S / SSD Kingston 120GB / HDD 4 x 3TB WD RAID 6 / PSU Enermax MaxRevo 1500W / DISPLAY 900p monitor / KEYBOARD Logitech / MOUSE Logitech
 
Actually Portable Laptop: HP Spectre x360 15' (Late 2018) / i7-8750H, 16GB RAM, 512GB SSD, GTX 1050Ti MaxQ, 4K Display / KEYBOARD Ducky One 2 Mini / OS Linux Mint 19 Cinnamon / WIRELESS ADAPTER NETGEAR A6210 USB 3.0
 
Bed Laptop: ASUS VIVOBOOK 15 / i5-8250U, 8GB RAM, 1TB Toshiba HDD, UHD 630, 1080P Display / OS Linux Mint 19 Cinnamon

 

Backup Rig: CPU Intel Xeon X3470 (4Ghz @ 1.4v) / MOBO MSI P55-GD80 / RAM 16GB HyperX 1600Mhz / CPU COOLER ID-COOLING Frostflow+ 120 / GPU Sapphire R9 270X (+150 core + 200 memory) / CASE Cooler Master Elite 343 SSD Crucial MX150 250GB / PSU Seasonic SS430-GB / KEYBOARD Logitech G910 Orion Spark / MOUSE Logitech / DISPLAY Dell SE2417HGR / OS Windows 10 Pro / WIRELESS ADAPTER

TP-LINK Archer T6E PCI-E

 

Server 1: DELL POWEREDGE 1950 / 2x Intel Xeon E5450, 16GB ECC, 4x 3TB Western Digital (Various) 7200RPM SATA HDD in RAID 6, GT 640 / DISPLAY Lenovo L2251p

 

Server 2: DELL POWEREDGE 1950 / 2x Intel Xeon E5420, 8GB ECC, 2 x 160GB SAS, GT 210

Link to comment
https://linustechtips.com/topic/975464-am-i-totally-private/#findComment-11789320
Share on other sites

Link to post
Share on other sites

Its an awkward setup for sure.  You'd think they would just transparent-proxy and call it a day.  Seems they REALLY don't want people using VPNs to get round it, surprised they even let you connect to one.

ASUS B650E-F GAMING WIFI + R7 7800X3D + 2x Corsair Vengeance 32GB DDR5-6000 CL30-36-36-76  + ASUS RTX 4090 TUF Gaming OC

Router:  Intel N100 (pfSense) Backup: GL.iNet GL-X3000/ Spitz AX Switches: Netgear MS510TXUP, MS510TXPP, GS110EMX
WiFi6: Zyxel NWA210AX (1.7Gbit peak at 160Mhz) WiFi5: Ubiquiti NanoHD OpenWRT (~500Mbit at 80Mhz)
ISPs: Zen Full Fibre 900 (~930Mbit down, 115Mbit up) + Three 5G (~1200Mbit down, 115Mbit up, variable)
Upgrading Laptop/Desktop CNVIo WiFi 5 cards to PCIe WiFi6e/7

Link to comment
https://linustechtips.com/topic/975464-am-i-totally-private/#findComment-11789537
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×