PROTECT YOUR STB WITH SURFSHARK VPN SERVICE

This guide shows how to protect your set-top box with a VPN using the SurfShark service. SurfShark is used here because it allows an unlimited number of devices on one account (NordVPN limits you to six) — handy if you run several Enigma2 boxes, Android devices and PCs.

SurfShark's Android and Windows apps support IKEv2 (which costs only about 10% of your connection speed), but on Enigma2 you must use OpenVPN. The full procedure is below.

Sign up for SurfShark here:

https://satellitedirect4u.com/…nigma2-unlimited-devices/

Preparation

When you sign up, note this carefully:

"Surfshark provides you with a separate login and password for the OpenVPN connection."

So you do not use your normal SurfShark credentials (the email and password you chose) for OpenVPN. With NordVPN they are the same, but with SurfShark they are not.

Network setup on the box

On the receiver, go to MENU > Setup > System > Network > OpenVPN setup and confirm.

Then set your nameservers manually (do not rely on automatic DHCP): Network > Device Setup > choose your interface (LAN = eth0 or WLAN = wlan0) > Nameserver settings, and add the following, saving after each (use the yellow button to add another):

• 1.1.1.1
• 1.0.0.1
• 8.8.8.8
• 8.8.4.4

Preparing your config files

Now prepare the files from the .ovpn file SurfShark gives you. Open the .ovpn file in Notepad++ and edit it with your own details (the example below has some parts changed to XXXX — use your real details, not these):

client
dev tun
proto udp
remote XXXXX.XXXX.surfshark.com XXXX
resolv-retry infinite
remote-random
nobind
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
persist-key
persist-tun
ping 15
ping-restart 0
ping-timer-rem
reneg-sec 0

remote-cert-tls server

auth-user-pass password.conf

#comp-lzo
verb 3
pull
fast-io
cipher AES-256-CBC

auth SHA512

(...it continues here with various long keys...)

And here is the matching password.conf, containing your edited username and password:

XXxXXXxxxxxXxXXXXxxxxXXX
xXXXXxxXXXXXxxxxXXXXXxxx

Copying the files to your box

Using FileZilla (FZC), create a folder called openvpn on the box (type openvpn without quotes, then OK). Right-click it and set Attributes to 755. Close FileZilla (worth doing so your changes take), then reopen it, connect to your box and open the new folder.

Copy the two files you created on your PC into the openvpn folder on the box, set their Attributes to 644, and confirm if prompted.

Reboot your box.

Starting the VPN

Once it's back up, go to System > Setup > Network > OpenVPN plugin and start the plugin. Enable autoconnect / autostart on reboot if you want it to come up automatically, then press Exit a few times.

Be patient now. If everything is correct you'll eventually connect to OpenVPN SurfShark. The first sign is usually a brief loss of the TV picture (if you were watching via CS) as the normal connection drops before the VPN comes up — once it returns, you're connected, and you should see your channels again via the VPN rather than your ISP's network.

If it doesn't work, try rebooting the box with the VPN plugin set to autostart.

Finally, check your box's IP and compare it with the one you noted before you started. It should now be safe to stream — and you can watch YIFY-FNC, for example. Don't forget to tip the coder, then send a PM with your name and donation details to get your KUD number for higher resolutions.