Jump to content
Not connected, Your IP: 35.171.22.220
Sign in to follow this  
Jack.Vaneden

WIndows 10 / DNS Leak

Recommended Posts

Was going through the forum but i can´t find a solution. My settings Win 10pro / AirVPN Client 2.10.03

 

All the DNS leak tests show my original DNS

 

Using "Active Network Lock" (at startup)

DNS is static: 10.4.0.1

TAP-WIndow 9.21.01

FritzBox is updatetd with the current OS

 

Settings from the AirVPN Client

 

IPV 6 None

In the Advanced settings:

Switch DHCP to Statistic

DNS Switch mode "Automatic"

Network Lock "automatic"

 

Would be great if someone can explain me in simple steps, who to stop the leak

 

 

 

 

 

 

 

Share this post


Link to post

Yes I use the Windows Firewall. I am also wondering, that my Windows Firewall is getting switched off, when i deactivate the AirVPN Client.

Share this post


Link to post

Was going through the forum but i can´t find a solution. My settings Win 10pro / AirVPN Client 2.10.03

 

All the DNS leak tests show my original DNS

 

Using "Active Network Lock" (at startup)

DNS is static: 10.4.0.1

TAP-WIndow 9.21.01

FritzBox is updatetd with the current OS

 

Settings from the AirVPN Client

 

IPV 6 None

In the Advanced settings:

Switch DHCP to Statistic

DNS Switch mode "Automatic"

Network Lock "automatic"

 

Would be great if someone can explain me in simple steps, who to stop the leak

 

Any chance of a log copy?

Share this post


Link to post

Any chance of a log copy?

Was going through the forum but i can´t find a solution. My settings Win 10pro / AirVPN Client 2.10.03

 

All the DNS leak tests show my original DNS

 

Using "Active Network Lock" (at startup)

DNS is static: 10.4.0.1

TAP-WIndow 9.21.01

FritzBox is updatetd with the current OS

 

Settings from the AirVPN Client

 

IPV 6 None

In the Advanced settings:

Switch DHCP to Statistic

DNS Switch mode "Automatic"

Network Lock "automatic"

 

Would be great if someone can explain me in simple steps, who to stop the leak

 

Sure. Hope this part of the log has enough informations:

I 2016.06.14 08:51:02 - AirVPN client version: 2.10.3 / x64, System: Windows, Name: Microsoft Windows NT 6.2.9200.0 / x64

. 2016.06.14 08:51:03 - Reading options from C:\Users\XXXXXXXXX\AppData\Local\AirVPN\AirVPN.xml

. 2016.06.14 08:51:06 - Data Path: C:\Users\XXXXXXXXX\AppData\Local\AirVPN

. 2016.06.14 08:51:06 - App Path: C:\Program Files\AirVPN

. 2016.06.14 08:51:06 - Executable Path: C:\Program Files\AirVPN\AirVPN.exe

. 2016.06.14 08:51:06 - Command line arguments (1): path="home"

. 2016.06.14 08:51:06 - Operating System: Microsoft Windows NT 6.2.9200.0

. 2016.06.14 08:51:06 - Updating systems & servers data ...

I 2016.06.14 08:51:07 - OpenVPN Driver - TAP-Windows Adapter V9, version 9.21.1

I 2016.06.14 08:51:07 - OpenVPN - Version: OpenVPN 2.3.8 (C:\Program Files\AirVPN\openvpn.exe)

I 2016.06.14 08:51:07 - SSH - Version: plink 0.63 (C:\Program Files\AirVPN\plink.exe)

I 2016.06.14 08:51:07 - SSL - Version: stunnel 5.17 (C:\Program Files\AirVPN\stunnel.exe)

! 2016.06.14 08:51:07 - Activation of Network Lock - Windows Firewall

. 2016.06.14 08:51:13 - Systems & servers data update completed

I 2016.06.14 08:51:38 - Session starting.

I 2016.06.14 08:51:38 - IPv6 disabled.

I 2016.06.14 08:51:38 - Checking authorization ...

! 2016.06.14 08:51:38 - Connecting to Wezen (Germany, Frankfurt)

. 2016.06.14 08:51:39 - OpenVPN > OpenVPN 2.3.8 x86_64-w64-mingw32 [sSL (OpenSSL)] [LZO] [iPv6] built on Aug 13 2015

. 2016.06.14 08:51:39 - OpenVPN > library versions: OpenSSL 1.0.2d 9 Jul 2015, LZO 2.08

. 2016.06.14 08:51:39 - OpenVPN > MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:3100

. 2016.06.14 08:51:39 - OpenVPN > Control Channel Authentication: tls-auth using INLINE static key file

. 2016.06.14 08:51:39 - OpenVPN > Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.06.14 08:51:39 - OpenVPN > Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.06.14 08:51:39 - OpenVPN > Socket Buffers: R=[65536->131072] S=[65536->131072]

. 2016.06.14 08:51:39 - OpenVPN > UDPv4 link local: [undef]

. 2016.06.14 08:51:39 - OpenVPN > UDPv4 link remote: [AF_INET]178.162.198.102:443

. 2016.06.14 08:51:39 - OpenVPN > TLS: Initial packet from [AF_INET]178.162.198.102:443, sid=dca7ae40 fa34fa4a

. 2016.06.14 08:51:39 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org

. 2016.06.14 08:51:39 - OpenVPN > Validating certificate key usage

. 2016.06.14 08:51:39 - OpenVPN > ++ Certificate has key usage  00a0, expects 00a0

. 2016.06.14 08:51:39 - OpenVPN > VERIFY KU OK

. 2016.06.14 08:51:39 - OpenVPN > Validating certificate extended key usage

. 2016.06.14 08:51:39 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication

. 2016.06.14 08:51:39 - OpenVPN > VERIFY EKU OK

. 2016.06.14 08:51:39 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=server, emailAddress=info@airvpn.org

. 2016.06.14 08:51:39 - OpenVPN > Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2016.06.14 08:51:39 - OpenVPN > Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.06.14 08:51:39 - OpenVPN > Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key

. 2016.06.14 08:51:39 - OpenVPN > Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication

. 2016.06.14 08:51:39 - OpenVPN > Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 4096 bit RSA

. 2016.06.14 08:51:39 - OpenVPN > [server] Peer Connection Initiated with [AF_INET]178.162.198.102:443

. 2016.06.14 08:51:41 - OpenVPN > SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)

. 2016.06.14 08:51:41 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 10.4.0.1,comp-lzo no,route-gateway 10.4.0.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.4.8.148 255.255.0.0'

 

Share this post


Link to post

You may find this helpful https://ipleak.net/#webrtcleak


If you don't have one already I'd suggest getting an extension for your browser to block Web-RTC leaks. I forget the exact names for each browser but a quick google (or duckduckgo  )  of " your-browser-name webrtc leak" should return the result for the extension you need.

Share this post


Link to post

Thanks Thalium, i did that, but it don´t prevents the dns leak.

You mentioned earlier about "network lock" you are finding your windows firewall turned off. When the eddie client is open and connected, network lock on is win firewall active?

Share this post


Link to post

The Windows Firewall is actived, when the AirVPN Client is running. But when I exit the AirVPN client, it turns also the Windows Firewall off for a reason.

Share this post


Link to post

The Windows Firewall is actived, when the AirVPN Client is running. But when I exit the AirVPN client, it turns also the Windows Firewall off for a reason.

 

I can't think of a reason in a normal windows setup that with network lock and webrtc leak protection and correct dns you will still be exposing your local net. Something must be being stopped at some point in the process.

 

can you supply the following info:

 

Which browser you are using (list extensions / addons please)

The DNS setup of your ethernet adpater

your ipconfig details whilst connected to airvpn

Antivirus (in case it has built in firewall) any firewall not win built in.

are you running ondemand scanners / cleaners?

Is the hosts file altered?

 

At the moment I have no clue without further information so please take someone elses advice if they can see the issue without further information.

Share this post


Link to post

firefox 43 and adblocker

IP and DNS see the attach files
avira antivirus
scanners / cleaners non
host file altered? no

 

it is a new thinkpad with a clean win 10 installation.

 

 

 

Share this post


Link to post

Thanks Jack, 

In Eddie can you go to preferences and untick 'Switch DHCP static' please

There is a bit of a language barrier as I don;t think you are using win 10?
networking and sharing centre, capture 3 is
In any case I'd like you to follow the screen shots as per numbers please. capture one is control panel ofc, capture 2 is networking and sharing centre (click 'change adapter settings') , capture 3 is adapter settings.  In adapter settings right click your ethernet adapter and click 'properties' this will be capture 4. select 'internet protocol version 4', now click 'properties' ( capture 5) and set the same.

 

Share this post


Link to post

Hey Thalium,

 

yes i use to 100% Win 10

 

I unlocked "Switch DHCP statistic"

 

If i set DNS on automatic AirVPN is loosing the connection.

 

So i have to disconnect AirVPN and connect it again. AirVPN is setting my DNS then on "Use the following DNS server addresses" back and set it to 10.4.0.1

Share this post


Link to post

Why you dont add in your fritzbox Google DNS or opendns or better https://www.opennicproject.org/ that should fix your DNS leak

 

That´s a good tip and i did it, but it is not a general solution, because it helps me only as long i am at home.

 

I am wondering if i am the only person with this Win 10 leak. It is brand new computer with a Win 10 P64 installation. So I am sure i haven´t changed any settings that could be responsible for this leak.

Share this post


Link to post

 

I have already enabled the "Smart Multi-Homed Name Resolution". About this OpenVPN plugin, i don´t know how or where I should add it or if it is neccesary at all.

 

thats how it looks at the moment when i test my dns leaks with https://ipleak.net/. I am connected to Switzerland / Virginis at the moment with the Air VPN client.

 

Share this post


Link to post

@Jack.Vaneden

 

You don't seem to have any DNS leak. All the DNS servers on your ipleak.net test are public DNS servers.

A leak is considered when you have your ISP DNS in the test.

 

But the reason, why you can´t see my provider DNS, is due the fact, that i have changed the DNS manuel in my fritzbox. As far as i understand it, as soon as I would connect me with, let say a friends router, i will leak the DNS from his provider again. Right?

 

I checked my old notebook with the same AirVPN settings as on this system, with the only different, that my old one has Win7 and the DNS leak test shows only the DNS from your server that I have chosen.

Share this post


Link to post

Hi, you can use DNSCrypt - Index of /dnscrypt-proxy/ - if you was didn't faced with that, just specify DNSCrypt's address 127.0.0.1 in AirVPN's client settings. I'm too on Win 10 and using router, and I'm doesn't having any ISP's DNS leaks, only specified servers in DNSCrypt's settings. 

 

Don't forget downloading and extracting to DNSCrypt's folder follow files - "dnscrypt-resolvers.csv, dnscrypt-resolvers.csv.minisig, dnscrypt-resolvers.csv.sig" - as they actually list of servers in DNSCrypt. My regards. 

Share this post


Link to post

Before you deactivate the eddie client, you must turn off the network lock or the network lock still has control of the firewall.

Happened to me in my first week of using AirVPN.

Share this post


Link to post

Is there still no one who can confirm the same problems with Win 10 Pro and Eddi? Or has a solution to fix that?? Hello AirVPN Support?

 

Used different Browser, turned off the Firewall, and followed all the other tips from here and the DNS from my provider is still always visible!

 

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image
Sign in to follow this  

×
×
  • Create New...