How to prevent IPv6 leaks under Linux, using OpenVPN?

[ChrisHoot 0]

Hi all,

I've followed the instructions at https://airvpn.org/topic/11431-using-airvpn-with-linux-from-terminal/ in order to set up my account. This works fine and leak-free, when my local networks gives me an IPv4 address -- but if I get an IPv6 address, that address is leaked to remote sites according to https://ipleak.net/ . How do I prevent that?

Thanks, Chris

[nick75 25]

Hi,

 

See here to disable IPv6.

[air-fun 2]

​Or try add this parameter to end of kernel boot line:

ipv6.disable=1

​

[cm0s 118]

say yer drive is incrypted your grub would look like this:

GRUB_CMDLINE_LINUX_DEFAULT="quiet"
GRUB_CMDLINE_LINUX="cryptdevice=/dev/sda3:cryptroot ipv6.disable=1 video=1360x768"

 

then recheck/build...
# grub-install --recheck /dev/sda
# grub-mkconfig -o /boot/grub/grub.cfg

 

if you do an ip link command or ifconfig and don't see ipv6 addr good sign

here's another link for debian ubuntu etc:

 

http://www.binarytides.com/disable-ipv6-ubuntu/

 

arch basically above but more info:

https://wiki.archlinux.org/index.php/IPv6

 

same info but mohr detail as above:

https://askubuntu.com/questions/440302/how-to-disable-ipv6-when-connecting-to-an-openvpn-server-using-network-manager-o

 

iptables stuff:

https://unix.stackexchange.com/questions/108029/is-it-better-to-set-rules-in-ip6tables-or-disable-ipv6

https://superuser.com/questions/488341/block-ipv6-traffic-using-iptables-on-linux-using-layer-2-info

[Staff 10014]

Hello,

 

disabling IPv6 might be too problematic in some circumstances, and in general it's an overkill solution.

 

Setting two or three ip6tables rules is a much more practical approach, and of course it is faster, you just need a second. Network Lock feature does that, in case you run Eddie for GNU/Linux.

 

Kind regards

[ChrisHoot 0]

Thanks, I'll try the sysctl thing the next time I'm in such a network. Or ip6tables, if that doesn't work.

[cstreet 3]

Activating the AirVPN "network lock" does stop my ISP IPv6 address from showing up on ipleak.net ... but I can't use Thunderbird to fetch email with the network lock activated.

 

So I tried disabling IPv6 in Firefox (1. "about:config" in url address box; 2. "network.dns.disableIPv6" in search box; 3. double tapping (or clicking) to change default of "false" to "true").  That seems to work fine, as ipleak.net shows "IPv6 test not reachable."

 

But does this mean that:  -A. my IPv6 address is still leaking, and I'm just not seeing it in Firefox because IPv6 is disabled; or -B. that Firefox is actually stopping my IPv6 address from being shown on the web?

 

[3017 0]

Hi friends

Excuse me, I'll get a VPN server that has the ipv6
Does not anyone know?
Please 
Very necessary 🙏🏼🙏🏼

[nick75 25]

On 7/23/2019 at 3:14 PM, 3017 said:

Hi friends

Excuse me, I'll get a VPN server that has the ipv6
Does not anyone know?
Please 
Very necessary 🙏🏼🙏🏼

AirVPN now handles IPv6.
This is an old thread.
See here.