DNS leak when using openVPN configs

[Paximus 0]

I get a leak when I use the configs for openVPN.  No leaks with airVPN client, though.  I seem to get a marginally better speed when using the openVPN configs, so I'd like to figure out what's causing it.

[foxmulder 43]

To prevent DNS leaks when using the generic OpenVPN client, you can use software like DNSJumper or SimpleDNSCrypt. Then you should be fine.

 

https://simplednscrypt.org/

 

http://www.sordum.org/7952/dns-jumper-v2-0/

 

Regards

 

Fox

[zhang888 1066]

You can add the "block-outside-dns" directive in your OpenVPN config - requires OpenVPN 2.3.9 and above.

 

There is no explanation for the speed difference, but you can verify that the same configs are present both in

the configs downloaded from the client area and Eddie. Except the server address they are identical.

Besides that there is no difference in the way it should work - both are using the OpenVPN binary.

[OpenSourcerer 1441]

There's simply no need for additional software to manage DNS (except for when you want to use DNSSEC). Just set your primary network interface's DNS settings to 10.4.0.1 and DNS issues are gone.

[Paximus 0]

I think I figured it out.  I had an alternate DNS set up through googles DNS server.  The AirVPN client took care of it but OpenVPN wasn't.

[LZ1 673]

Hello!

 

You could use the Air-supported OpenNic if you want . Have you tried the AirVPN Eddie client at all?

 

Sent to you from me with datalove

[Paximus 0]

Hello!

 

You could use the Air-supported OpenNic if you want . Have you tried the AirVPN Eddie client at all?

 

Sent to you from me with datalove

 

Using Eddie now, sorry for not being more clear.

[foxmulder 43]

There is really no need to prefer the generic OpenVPN client over Eddie. The network lock feature is something very powerful and far outweighs the minor speed improvements with the generic OpenVPN client.

 

And Eddie is open source and trustworthy.

 

So i would definitely go with Eddie here, it is just the safest thing to do. No DNS and no IP leaks. Problems solved.

[LZ1 673]

In your case, Eddie is the way to go. Nicer interface, FOSS software, additional features such as network lock, plenty flexibility in the form of custom directives and such, as well as matching speeds. It's just great to use Airs own software & hardware ^=^.

 

OpenNIC is a good alternative, in the sense that you can thus avoid using googles DNS (as it's otherwise a little self-defeating potentially haha). I don't otherwise see any advantages to not using Airs DNS, when they run things so well. If you don't use their DNS, I also don't think you can make use of their neat little micro-routing scheme.

 

Sent to you from me with datalove

[ntropia 0]

I found this topic while reading in the forum for a solution to the very same problem.

I am using OpenVPN on Raspberry Pi, and I'm trying to reproduce all the features of Eddie without having to run the GUI, to save the memory to bring up the desktop.

 

I found useful information on how to get something that looks like the Network lock from here, but I don't understand how to fix the DNS issue.

 

Any advice is more than welcome.