Welcome to LIGHT Forum.......The place to be.......Enjoy your stay and have fun ....


No announcement yet.

Protect your STB with Surfshark VPN service!!!

This is a sticky topic.
  • Filter
  • Time
  • Show
Clear All
new posts

  • Protect your STB with Surfshark VPN service!!!

    I am demonstrating this on SurfShark because one can have unlimited number of devices protected with their service!

    NordVPN has a limit of only 6 devices, so for me it was a no-brainer, given the number of Enigma2, Android and laptops and PCs we have in my family...

    SurfShark have Android and Windows special and easy to use apps for VPN and in those one can use IKEv2 encryption, which takes away only about 10% from your full internet connection speed.

    With Enigma2 one must use OpenVPN, for now, and the procedure is carefully described below...



    Pay attention when you sign up and note the following:

    "Surfshark provides you with separate login and password for OpenVPN connection."

    So, you do not use your normal credentials, which you use with your Windows or Android Surfshark apps (your email and password you chose). With NordVPN, for instance, they are the same - but not with SurfShark!

    MENU > Setup > System > Network > OpenVPN setup > confirm.

    When done go back and do not use automatic DHCP but manually set preferred servers in:

    Network > Device Setup > choose your interface (LAN= eth0 or WLAN = wlan0) > Nameserver settings > add the following: > Save and go back to it and yellow button to add another > Save and as above... > Save

    Then follow the tutorial...

    Prepare your SurfShark files from ovpn file given to you by SurfShark...

    Here is the end result, my client.conf (minus the bits that one is not to show publicly)...

    Please, make sure you do it exactly as described by

    -opening an ovpn file using Notepad++, then

    -editing it as below (with your full details, obviously, not the way I am demonstrating it below, since I have changed some bits with XXXX):

    dev tun
    proto udp
    remote XXXXX.XXXX.surfshark.com XXXX
    resolv-retry infinite
    tun-mtu 1500
    tun-mtu-extra 32
    mssfix 1450
    ping 15
    ping-restart 0
    reneg-sec 0
    remote-cert-tls server
    auth-user-pass password.conf
    verb 3
    cipher AES-256-CBC
    auth SHA512
    (...it continues here with various long keys...)
    And here is my password.conf containing my edited username and password - they are given to you (at the bottom of the page, so be careful, if you do not see them, they are to be found lower...) when you create an account with SurfShark VPN:

    Once edited in Notepad++ go to: File > Save As... > Save as type (drop down menu) > All types > client.conf (and password.conf) > Save.

    Start FileZilla Client on your PC > connect it to your STB > choose etc folder > right click on it > Create directory > write "openvpn" (without the "" signs) > OK.

    Now, right click on it > Attributes to > 755. Close FZC (confirm to close if needed).

    (From experience I would advise you to close it to make sure you will see the changes you made.)

    Start FZC, connect to your STB and find the new folder, open it/get inside it.

    Now, send the 2 files just created on your PC ==> into openvpn folder in your STB.

    Give them attributes to 644 and confirm if needed.

    Reboot your STB.

    Once up, go to System > Setup > Network > OpenVPN plugin and start the plugin, plus make it autoconnect/autostart on E2 reboot, if you wish it so... Hit the Exit button a few times...

    You must be patient at this point. If you have done it all correctly eventually you will be connected to OpenVPN SurfShark. First sign to watch out for is loss of a TV channel image, if you were on CS. Usually, this happens when you lose the connection that is typical, before you have gained a VPN connection. Once it is up again - it should be "it"... You should see colours on your TV again... via your VPN, not your ISP's network!

    If it doesn't work, you may need to reboot your STB with the VPN plugin running/on autostart...

    Now, check your STB's IP address via pManager > Network... again...

    Once you connect to VPN Surfshark your IP address will change to 2 types:

    -VPN's internal network which looks like 10.x...

    -usual IP address of the VPN server (for London it starts with 5.xxx...) - usually quite different from one's normal IP address given to one by one's ISP (which you should have noted before you started this VPN business, for reference).

    It's safe to CS or stream now... And it is possible to watch YIFY-FNC, for instance.

    Don't forget to tip the coder, then send him a PM with your name/donation details, so you get your KUD number for higher resolutions...
    Last edited by gorski; 15-02-2020, 05:10.

  • #2
    Username and password for Surfshark's OpenVPN

    For OpenVPN one must use the ones they give you, not the ones you chose!

    You can find them in your account, at the bottom of the page!

    "...get Surfshark service credentials. Those are the credentials, different from the ones that you use to log in to our website or the app. To find them, go to the login page of our website, here https://account.surfshark.com/ and log in.

    Once you log in, go to Devices -> Manual, scroll down to the bottom of the page. You will find your service credentials there."

    There is even a minimal Enigma2 setup manual on their pages now...


    Good luck!


    • #3
      ​New, fresh from the press....​ Of course, PurE2 is featured in this one, too... (see attached the pdf document)

      How to use Surfshark OpenVPN in Enigma2 STB using VPN Manager
      Attached Files


      • #4
        If you're using a different VPN provider - says numsy

        OK, I downloaded the pdf for instructions how to install Surfshark VPN But I use VPN Unlimited.

        Followed all instructions as set out in Pdf file.

        But it didn't work for me, so I changed the xxxx.ovpn to xxxx.conf and voila, it worked!

        So, if anybody else is having this problem this might do the trick for you

        This was done on a Zgemma h2h


        • #5
          For some FNC plugins, as well as some weaker, older machines: try SMART DNS (PROXY)

          There are various such services on the net... Info for SurfShark SmartDNS service is here: https://support.surfshark.com/hc/en-...ark-smart-DNS-

          For Surfshark VPN subscribers: VPN service includes the Smart DNS service, as well!

          So, if an older machine doesn't have the firepower to handle VPN encryption but you need to unblock some services, as geo-restrictions are killjoys - use Smart DNS! Tested on 2 Look*-FNC plugins => working!

          Once you get those 2 Smart DNS addresses go to: MENU > Setup > System > Network > Device Setup > (choose, if you have more, between wlan0 and eth0) > Nameserver Settings > put them in carefully and SAVE (green button), then Restart PurE2!

          Try whatever plugins didn't work before...

          Some FNC plugins, for instance, need a VPN - they will not work with a SmartDNS and vice versa...