Jump to content
Not connected, Your IP: 3.90.204.40
Paximus

DNS leak when using openVPN configs

Recommended Posts

I get a leak when I use the configs for openVPN.  No leaks with airVPN client, though.  I seem to get a marginally better speed when using the openVPN configs, so I'd like to figure out what's causing it.

Share this post


Link to post

You can add the "block-outside-dns" directive in your OpenVPN config - requires OpenVPN 2.3.9 and above.

 

There is no explanation for the speed difference, but you can verify that the same configs are present both in

the configs downloaded from the client area and Eddie. Except the server address they are identical.

Besides that there is no difference in the way it should work - both are using the OpenVPN binary.


Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.

Share this post


Link to post

There's simply no need for additional software to manage DNS (except for when you want to use DNSSEC). Just set your primary network interface's DNS settings to 10.4.0.1 and DNS issues are gone.


Four simple things:
There's a guide to AirVPN. Before you ask questions, take 30 minutes of your time to go through it.

Amazon IPs are not dangerous here. It's the fallback DNS.
Running TOR exits is discouraged. They're subject to restrictions on the internet and harm all AirVPN users.

Furthermore, I propose that your paranoia is to be destroyed. If you overdo privacy, you'll be unique among the mass again.

 

XMPP: gigan3rd@xmpp.airvpn.org or join our lounge@conference.xmpp.airvpn.org

Share this post


Link to post

I think I figured it out.  I had an alternate DNS set up through googles DNS server.  The AirVPN client took care of it but OpenVPN wasn't.

Share this post


Link to post

Hello!

 

You could use the Air-supported OpenNic if you want . Have you tried the AirVPN Eddie client at all?

 

Sent to you from me with datalove


Moderators do not speak on behalf of AirVPN. Only the Official Staff account does. Please also do not run Tor Exit Servers behind AirVPN, thank you.
Did you make a guide or how-to for something? Then contact me to get it listed in my new user guide's Guides Section, so that the community can find it more easily.


Tired of Windows? Why Linux Is Better.

Share this post


Link to post

Hello!

 

You could use the Air-supported OpenNic if you want . Have you tried the AirVPN Eddie client at all?

 

Sent to you from me with datalove

 

Using Eddie now, sorry for not being more clear.

Share this post


Link to post

There is really no need to prefer the generic OpenVPN client over Eddie. The network lock feature is something very powerful and far outweighs the minor speed improvements with the generic OpenVPN client.

 

And Eddie is open source and trustworthy.

 

So i would definitely go with Eddie here, it is just the safest thing to do. No DNS and no IP leaks. Problems solved.

Share this post


Link to post

In your case, Eddie is the way to go. Nicer interface, FOSS software, additional features such as network lock, plenty flexibility in the form of custom directives and such, as well as matching speeds. It's just great to use Airs own software & hardware ^=^.

 

OpenNIC is a good alternative, in the sense that you can thus avoid using googles DNS (as it's otherwise a little self-defeating potentially haha). I don't otherwise see any advantages to not using Airs DNS, when they run things so well. If you don't use their DNS, I also don't think you can make use of their neat little micro-routing scheme.

 

Sent to you from me with datalove


Moderators do not speak on behalf of AirVPN. Only the Official Staff account does. Please also do not run Tor Exit Servers behind AirVPN, thank you.
Did you make a guide or how-to for something? Then contact me to get it listed in my new user guide's Guides Section, so that the community can find it more easily.


Tired of Windows? Why Linux Is Better.

Share this post


Link to post

I found this topic while reading in the forum for a solution to the very same problem.

I am using OpenVPN on Raspberry Pi, and I'm trying to reproduce all the features of Eddie without having to run the GUI, to save the memory to bring up the desktop.

 

I found useful information on how to get something that looks like the Network lock from here, but I don't understand how to fix the DNS issue.

 

Any advice is more than welcome.

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...