IPv4 reconnection leaks

[dougiepunk 1]

Hi,

 

A report has been posted on redddit which shows that AirVPN has IPv4 leakage during reconnection in Mac OSX. What are the AirVPN team's and/or customers' thoughts on this? Thanks.

 

https://vpntesting.info/

https://www.reddit.com/r/VPN/comments/4xvvc4/ive_updated_my_vpn_testing_site_and_added_results/

[Guest]

As far as I know, Mac OSX has no way of preventing leaks during a reconnection, because when you reconnect, it disconnects and then connects again, and as the staff has said the AirVPN client uses OpenVPN and doesn't modify it in any major way so the cause is OpenVPN not AirVPN and when OpenVPN disconnects it restores your routes to default meaning all traffic is back to going through your ISP connection.

[go558a83nk 362]

I haven't looked at the link in the OP but if network lock was used there should be no "leak" even during reconnection. 

[me.moo@posteo.me 80]

So, in short, what the author/tester is saying is that you can't be totally secure unless you have a Mac using iVPN.

Bull ...

[Guest]

I haven't looked at the link in the OP but if network lock was used there should be no "leak" even during reconnection. 

 

Network lock is only for windows.

[go558a83nk 362]

 

I haven't looked at the link in the OP but if network lock was used there should be no "leak" even during reconnection. 

 

Network lock is only for windows.

 

certainly not.  network lock works in linux using iptables.  I assume it uses iptables in OSX too.

[Guest]

 

 

I haven't looked at the link in the OP but if network lock was used there should be no "leak" even during reconnection. 

 

Network lock is only for windows.

 

certainly not.  network lock works in linux using iptables.  I assume it uses iptables in OSX too.

 

I see my mistake, looking at the network lock information thread on here it seems different versions have different network locks.

[zhang888 1066]

OSX uses pf not iptables.

But something in that report seems a little biased for me.

First of all, if leak prevention is a priority, why the test was done without network lock.

Second, the funding entity - these tests were "sponsored" by IVPN, which surprisingly gave them highest scores.

Third:

https://vpntesting.info/For-VPN-Providers.html

 

I also offer testing as a service for VPN providers. In that case, results will remain confidential until the provider has authorized publication. Please contact mirimir to discuss terms.

 

Sounds it can be a little rigged and you can get different results if you bribe the tester. Not something I would expect from a neutral person.

[apofis 0]

you can use a firewall rule that blocks you main wan interface from connecting to anything but your airvpn ip, if not using airvpn you would have disable it of course