WIndows 10 / DNS Leak

[Jack.Vaneden 2]

Was going through the forum but i can´t find a solution. My settings Win 10pro / AirVPN Client 2.10.03

 

All the DNS leak tests show my original DNS

 

Using "Active Network Lock" (at startup)

DNS is static: 10.4.0.1

TAP-WIndow 9.21.01

FritzBox is updatetd with the current OS

 

Settings from the AirVPN Client

 

IPV 6 None

In the Advanced settings:

Switch DHCP to Statistic

DNS Switch mode "Automatic"

Network Lock "automatic"

 

Would be great if someone can explain me in simple steps, who to stop the leak

 

 

 

 

 

 

 

[zhang888 1066]

Do you use the Windows Firewall? This is required for the Network Lock to work.

Make sure you don't run 2 concurrent firewalls.

[Jack.Vaneden 2]

Yes I use the Windows Firewall. I am also wondering, that my Windows Firewall is getting switched off, when i deactivate the AirVPN Client.

[Thalium 4]

Was going through the forum but i can´t find a solution. My settings Win 10pro / AirVPN Client 2.10.03

 

All the DNS leak tests show my original DNS

 

Using "Active Network Lock" (at startup)

DNS is static: 10.4.0.1

TAP-WIndow 9.21.01

FritzBox is updatetd with the current OS

 

Settings from the AirVPN Client

 

IPV 6 None

In the Advanced settings:

Switch DHCP to Statistic

DNS Switch mode "Automatic"

Network Lock "automatic"

 

Would be great if someone can explain me in simple steps, who to stop the leak

 

Any chance of a log copy?

[Jack.Vaneden 2]

Any chance of a log copy?

Was going through the forum but i can´t find a solution. My settings Win 10pro / AirVPN Client 2.10.03

 

All the DNS leak tests show my original DNS

 

Using "Active Network Lock" (at startup)

DNS is static: 10.4.0.1

TAP-WIndow 9.21.01

FritzBox is updatetd with the current OS

 

Settings from the AirVPN Client

 

IPV 6 None

In the Advanced settings:

Switch DHCP to Statistic

DNS Switch mode "Automatic"

Network Lock "automatic"

 

Would be great if someone can explain me in simple steps, who to stop the leak

 

Sure. Hope this part of the log has enough informations:

I 2016.06.14 08:51:02 - AirVPN client version: 2.10.3 / x64, System: Windows, Name: Microsoft Windows NT 6.2.9200.0 / x64

. 2016.06.14 08:51:03 - Reading options from C:\Users\XXXXXXXXX\AppData\Local\AirVPN\AirVPN.xml

. 2016.06.14 08:51:06 - Data Path: C:\Users\XXXXXXXXX\AppData\Local\AirVPN

. 2016.06.14 08:51:06 - App Path: C:\Program Files\AirVPN

. 2016.06.14 08:51:06 - Executable Path: C:\Program Files\AirVPN\AirVPN.exe

. 2016.06.14 08:51:06 - Command line arguments (1): path="home"

. 2016.06.14 08:51:06 - Operating System: Microsoft Windows NT 6.2.9200.0

. 2016.06.14 08:51:06 - Updating systems & servers data ...

I 2016.06.14 08:51:07 - OpenVPN Driver - TAP-Windows Adapter V9, version 9.21.1

I 2016.06.14 08:51:07 - OpenVPN - Version: OpenVPN 2.3.8 (C:\Program Files\AirVPN\openvpn.exe)

I 2016.06.14 08:51:07 - SSH - Version: plink 0.63 (C:\Program Files\AirVPN\plink.exe)

I 2016.06.14 08:51:07 - SSL - Version: stunnel 5.17 (C:\Program Files\AirVPN\stunnel.exe)

! 2016.06.14 08:51:07 - Activation of Network Lock - Windows Firewall

. 2016.06.14 08:51:13 - Systems & servers data update completed

I 2016.06.14 08:51:38 - Session starting.

I 2016.06.14 08:51:38 - IPv6 disabled.

I 2016.06.14 08:51:38 - Checking authorization ...

! 2016.06.14 08:51:38 - Connecting to Wezen (Germany, Frankfurt)

. 2016.06.14 08:51:39 - OpenVPN > OpenVPN 2.3.8 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [iPv6] built on Aug 13 2015

. 2016.06.14 08:51:39 - OpenVPN > library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.08

. 2016.06.14 08:51:39 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100

. 2016.06.14 08:51:39 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file

. 2016.06.14 08:51:39 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.06.14 08:51:39 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.06.14 08:51:39 - OpenVPN > Socket Buffers: R=[65536->131072] S=[65536->131072]

. 2016.06.14 08:51:39 - OpenVPN > UDPv4 link local: [undef]

. 2016.06.14 08:51:39 - OpenVPN > UDPv4 link remote: [AF_INET]178.162.198.102:443

. 2016.06.14 08:51:39 - OpenVPN > TLS: Initial packet from [AF_INET]178.162.198.102:443, sid=dca7ae40 fa34fa4a

. 2016.06.14 08:51:39 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

. 2016.06.14 08:51:39 - OpenVPN > Validating certificate key usage

. 2016.06.14 08:51:39 - OpenVPN > ++ Certificate has key usage  00a0, expects 00a0

. 2016.06.14 08:51:39 - OpenVPN > VERIFY KU OK

. 2016.06.14 08:51:39 - OpenVPN > Validating certificate extended key usage

. 2016.06.14 08:51:39 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

. 2016.06.14 08:51:39 - OpenVPN > VERIFY EKU OK

. 2016.06.14 08:51:39 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

. 2016.06.14 08:51:39 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2016.06.14 08:51:39 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.06.14 08:51:39 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2016.06.14 08:51:39 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.06.14 08:51:39 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA

. 2016.06.14 08:51:39 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]178.162.198.102:443

. 2016.06.14 08:51:41 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

. 2016.06.14 08:51:41 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.8.148 255.255.0.0'

 

[Thalium 4]

You may find this helpful https://ipleak.net/#webrtcleak


If you don't have one already I'd suggest getting an extension for your browser to block Web-RTC leaks. I forget the exact names for each browser but a quick google (or duckduckgo  )  of " your-browser-name webrtc leak" should return the result for the extension you need.

[Jack.Vaneden 2]

Thanks Thalium, i did that, but it don´t prevents the dns leak.

[Thalium 4]

Thanks Thalium, i did that, but it don´t prevents the dns leak.

You mentioned earlier about "network lock" you are finding your windows firewall turned off. When the eddie client is open and connected, network lock on is win firewall active?

[Jack.Vaneden 2]

The Windows Firewall is actived, when the AirVPN Client is running. But when I exit the AirVPN client, it turns also the Windows Firewall off for a reason.

[Thalium 4]

The Windows Firewall is actived, when the AirVPN Client is running. But when I exit the AirVPN client, it turns also the Windows Firewall off for a reason.

 

I can't think of a reason in a normal windows setup that with network lock and webrtc leak protection and correct dns you will still be exposing your local net. Something must be being stopped at some point in the process.

 

can you supply the following info:

 

Which browser you are using (list extensions / addons please)

The DNS setup of your ethernet adpater

your ipconfig details whilst connected to airvpn

Antivirus (in case it has built in firewall) any firewall not win built in.

are you running ondemand scanners / cleaners?

Is the hosts file altered?

 

At the moment I have no clue without further information so please take someone elses advice if they can see the issue without further information.

[Jack.Vaneden 2]

firefox 43 and adblocker

IP and DNS see the attach files
avira antivirus
scanners / cleaners non
host file altered? no

 

it is a new thinkpad with a clean win 10 installation.

 

 

 

[Thalium 4]

Thanks Jack, 

In Eddie can you go to preferences and untick 'Switch DHCP static' please

There is a bit of a language barrier as I don;t think you are using win 10?
networking and sharing centre, capture 3 is
In any case I'd like you to follow the screen shots as per numbers please. capture one is control panel ofc, capture 2 is networking and sharing centre (click 'change adapter settings') , capture 3 is adapter settings.  In adapter settings right click your ethernet adapter and click 'properties' this will be capture 4. select 'internet protocol version 4', now click 'properties' ( capture 5) and set the same.

 

[Jack.Vaneden 2]

Hey Thalium,

 

yes i use to 100% Win 10

 

I unlocked "Switch DHCP statistic"

 

If i set DNS on automatic AirVPN is loosing the connection.

 

So i have to disconnect AirVPN and connect it again. AirVPN is setting my DNS then on "Use the following DNS server addresses" back and set it to 10.4.0.1

[dj77 6]

Why you dont add in your fritzbox Google DNS or opendns or better https://www.opennicproject.org/ that should fix your DNS leak

[Jack.Vaneden 2]

Why you dont add in your fritzbox Google DNS or opendns or better https://www.opennicproject.org/ that should fix your DNS leak

 

That´s a good tip and i did it, but it is not a general solution, because it helps me only as long i am at home.

 

I am wondering if i am the only person with this Win 10 leak. It is brand new computer with a Win 10 P64 installation. So I am sure i haven´t changed any settings that could be responsible for this leak.

[dj77 6]

Can you Try this? https://www.bestvpn.com/blog/28318/warning-windows-10-vpn-users-big-risk-dns-leak/

[Jack.Vaneden 2]

Can you Try this? https://www.bestvpn.com/blog/28318/warning-windows-10-vpn-users-big-risk-dns-leak/

 

I have already enabled the "Smart Multi-Homed Name Resolution". About this OpenVPN plugin, i don´t know how or where I should add it or if it is neccesary at all.

 

thats how it looks at the moment when i test my dns leaks with https://ipleak.net/. I am connected to Switzerland / Virginis at the moment with the Air VPN client.

 

[zhang888 1066]

@Jack.Vaneden

 

You don't seem to have any DNS leak. All the DNS servers on your ipleak.net test are public DNS servers.

A leak is considered when you have your ISP DNS in the test.

[Jack.Vaneden 2]

@Jack.Vaneden

 

You don't seem to have any DNS leak. All the DNS servers on your ipleak.net test are public DNS servers.

A leak is considered when you have your ISP DNS in the test.

 

But the reason, why you can´t see my provider DNS, is due the fact, that i have changed the DNS manuel in my fritzbox. As far as i understand it, as soon as I would connect me with, let say a friends router, i will leak the DNS from his provider again. Right?

 

I checked my old notebook with the same AirVPN settings as on this system, with the only different, that my old one has Win7 and the DNS leak test shows only the DNS from your server that I have chosen.

[bnrrteterstnjrsj45 0]

Hi, you can use DNSCrypt - Index of /dnscrypt-proxy/ - if you was didn't faced with that, just specify DNSCrypt's address 127.0.0.1 in AirVPN's client settings. I'm too on Win 10 and using router, and I'm doesn't having any ISP's DNS leaks, only specified servers in DNSCrypt's settings. 

 

Don't forget downloading and extracting to DNSCrypt's folder follow files - "dnscrypt-resolvers.csv, dnscrypt-resolvers.csv.minisig, dnscrypt-resolvers.csv.sig" - as they actually list of servers in DNSCrypt. My regards. 

[RidersoftheStorm 20]

Before you deactivate the eddie client, you must turn off the network lock or the network lock still has control of the firewall.

Happened to me in my first week of using AirVPN.

[Jack.Vaneden 2]

Is there still no one who can confirm the same problems with Win 10 Pro and Eddi? Or has a solution to fix that?? Hello AirVPN Support?

 

Used different Browser, turned off the Firewall, and followed all the other tips from here and the DNS from my provider is still always visible!

 

[Jack.Vaneden 2]

I fixed it!!

 

After I disconnected completely IPv6 on my FritzBox router, and in my adapter settings, both WiFi and TAP-Windows Adapter V9 , there is no longer a DNS leak!