-
Notifications
You must be signed in to change notification settings - Fork 10
FAQ
فارسی: سوالات متداول
Do I need a server to use KevinNet?
Yes. KevinNet is the client app — it connects to a VPN server that you (or someone you know) runs on a VPS outside Iran. Without a server, there is nothing to tunnel through.
Which VPN engine should I choose — MasterDNS or VayDNS?
Both work well. MasterDNS uses many resolvers simultaneously and is generally more stable. VayDNS uses Noise protocol encryption and automatically falls through resolvers. If you're unsure, start with MasterDNS.
Do I need to scan every time I want to use the VPN?
No. After the first scan and save, the profile is stored in the Profiles tab. You can launch from there any time without scanning again. Scan again only when your existing resolvers stop working (Iranian DNS servers change over time).
How often should I re-scan?
When you notice more disconnections or slower speed than usual — Iranian authorities periodically block DNS resolvers. Running a fresh scan every few weeks is a good habit.
Can I use the same scan results for both MasterDNS and VayDNS?
Yes. The scanned IPs are just DNS resolver addresses. You can save the same scan as both a MasterDNS profile and a VayDNS profile by clicking each save button separately.
Why does the scan find different results each time?
Each scan picks a random subset of IPs from the selected pool size (e.g. 200,000 IPs). Running multiple times increases your chances of finding more working resolvers.
What is the difference between Phase 2 and Phase 3?
Phase 2 scores resolvers on DNS-level criteria (do they respond correctly to NS queries, TXT records, etc.). Phase 3 actually tunnels data through the resolver to your server. A resolver can pass Phase 2 but fail Phase 3 if your server is misconfigured or the resolver blocks the specific NS delegation.
Why does testing from Australia (or anywhere outside Iran) fail?
The scanned resolvers are Iranian public DNS servers. They only forward queries for your NS-delegated tunnel domain when accessed from inside Iran. From outside Iran, these resolvers either don't know about your tunnel domain or refuse to forward it. This is expected behaviour.
Can multiple people share one server?
Yes — multiple clients can connect to the same MasterDnsVPN or VayDNS server simultaneously. Each client needs the same domain and key. You can give family members the same scan results (resolver list) and key.
The VPN is connected but my browser still shows my real IP. Why?
You need to configure your browser to use the SOCKS5 proxy:
- MasterDNS:
SOCKS5 127.0.0.1:18000 - VayDNS:
SOCKS5 127.0.0.1:7000
The VPN does not automatically redirect all traffic — it provides a local SOCKS5 proxy that you configure your apps to use. A browser extension like Proxy SwitchyOmega makes this easy.
Can I change the local port (18000 / 7000)?
Yes. In the Profiles tab, change the Listen Port setting, click Save Changes, then reconnect. Update your browser proxy setting to the new port.
Is KevinNet open source?
Yes — MIT License. Source code is in the GitHub repository.
Which version should I download — v3.2.2 or v4.1.6?
Pick v4.1.6 unless you have a specific reason not to. It has everything 3.2.2 had plus a redesigned interface, light/dark themes, the new Scan DoH/DoT button, right-click context menu, last-launched indicator on profiles, persisted UI state, and security hardening. Profile files are compatible between versions, so you can switch back and forth without losing your data.
Pick v3.2.2 only if you have a working setup you don't want to change, or if you've reported a 4.1.6 regression that hasn't been fixed yet.
What is the Scan DoH/DoT button and when should I use it?
The 🔒 Scan DoH/DoT button (visible only in VayDNS mode) probes encrypted DNS endpoints — DNS-over-HTTPS on port 443 and DNS-over-TLS on port 853. Because the traffic looks like normal HTTPS, Iranian DPI has a much harder time identifying it as a tunnel than plain UDP/53.
Use it when:
- Your regular UDP scan isn't finding enough working resolvers
- UDP-based VPN connections keep getting throttled or blocked
- You want a more resilient fallback for when UDP isn't surviving DPI
Save the results with the same "Save to VayDNS Profiles" button you use for UDP scans — KevinNet automatically creates the right profile type.
Why does the theme toggle ask me to restart?
Tkinter (the GUI library KevinNet uses) doesn't have a real theme system — widget colors are set when the window is built and don't update automatically. Live theme switching produced a half-themed UI that looked worse than the consistent option, so the toggle saves your preference and asks you to restart. Restart once after switching and everything will be consistently styled.
The Help, Theme, and Language buttons stopped working — what happened?
They're locked while a scan is running, to prevent accidentally disrupting it. You'll see a toast saying "Wait until the scan finishes" if you click them. They re-enable automatically when the scan completes or you click Stop.
How do I update KevinNet?
Download the latest version from the Releases page and replace the old file. Your profiles and settings are stored separately in the masterdns_profiles/ and vaydns_profiles/ folders next to the app — they are not affected by updating.
I have a feature request or found a bug.
Please open an issue on GitHub Issues. Include your OS, KevinNet version, and a clear description.