ANSWERED DNS issues with Linux Mint 17.2

[doomced 1]

Hello,

 

If words are that important ( they are ), I'm glad there is no DNS leaks on Linux.
https://airvpn.org/topic/22715-leaking-dns-with-ubuntu-1704/

 

I tried to search the forum before writing this. For example https://airvpn.org/topic/9608-how-to-accept-dns-push-on-linux-systems-with-resolvconf/ does not help me either.

 

However, DNS leaks or not, here is the problem.

 

Several AirVPN.ovpn were tested ( Netherlands, Switzerland, Austria, Singapore, Hong-Kong ): Each time, connection has been successfully established.

But these connections are of no use with such a surprise :

 

 

( there is no france AirVPN server actually ; this indeed is my country ; it's not what I expected at all  )

- Linux Mint 17.2 [Edit: it's 18.2]
- IPV6 disabled in /etc/sysctl.conf
- Do not want to use Eddie
- Firewal rules :

sudo ufw default allow outgoing
sudo ufw default deny incoming

No change at all were noted with or without dns=none in /etc/NetworkManager/NetworkManager.conf

 

With

 

 

Without ( by default )

 

 

I would  appreciate if you could you help me to solve this problem.

 

____________________

 

 

Edit : I changed DNS with https://www.opennic.org/

 

Network manager : my connection > Edit > IPv4 settings :

- Method: Automatic (VPN) adresses only

- 2 opennic adresses in IPv4 settings separated by commas

 

Problem seems to be solved, thanks to opennic.

But since I would like to use AirVPN's DNS, I am not entirely satisfied with the situation.

Edited ... by doomced

[pr1v 36]

Does it work adding this line in the .conf, .ovpn, or "Openvpn Directives" inside Eddie preferences:

 

block-outside-dns

 

and restarting the connection?

[doomced 1]

I thank you for your help, pr1v.

 

I tried to add block-outside-dns to a test .ovpn.

No success.

 

I tried to add block-outside-dns to the [Main] part of /etc/NetworkManager/NetworkManager.conf ( were you talking about this file ? ).

No success.

 

I won't try this in Eddie preferences, since I won't use Eddie.

 

But, now, without understanding why, it seems to work as it should : no leaks ( and this time, no opennic DNS was needed ).

Since the mystery remains ( why was it leaking ; why it's not leaking anymore ? ) : I'm not satisfied of the situation at all.

I'll then perform a clean install of Mint 18.2 and will try again.

 

Thanks anyway.

Edited ... by doomced

[Staff 10015]

Does it work adding this line in the .conf, .ovpn, or "Openvpn Directives" inside Eddie preferences:

 

block-outside-dns

 

and restarting the connection?

 

This is a directive aimed to prevent DNS leaks, so it is a Windows-only directive. Anyway superfluous in systems like GNU/Linux where DNS leaks do not exist.

 

@doomced One of the possible solutions for your case is exactly described in the article that you already posted. However, you should not use network-manager-openvpn, because it could break your script to accept DNS push. We would recommend that you either run Eddie or OpenVPN directly.

 

Kind regards

[doomced 1]

I reinstalled Mint 18.2 to be sure.

Staff, thank you for your answer.

I would rather not use Eddie, without wanting to disrespect.
You're right, it's working fine with sudo openvpn AirVPN_OfYourChoice.ovpn. *

No problem on https://ipleak.net/ or https://www.dnsleaktest.com ; I'll then probably use this procedure counting from today.

 

* This is what has been used, following AirVPN tutorial (  I hope as meticulously as possible ) :

 

 

I understand it seems that holding firmly to network-manager-openvpn does not make much sense, but again, it's seems to work fine coupled with opennic's DNS.

OpenVPN directly : understood.

 

[Edit]: It's not what I expected, but thanks for your help. Let's consider this solved.

Edited ... by doomced

[Dosenfleisch 4]

I am running Ubuntu 16.04LTS on one machine and Linux KDE Mint 18.1 on another.  Both machines were leaking DNS IP's for whatever was input into my IP's router.  I thought if I simply put some OpenNic dns addresses in there, that that would solve the problem.  It did, but the router keeps crashing unless I let it take the IP's dns servers. 

 

Nowhere on the net, but on this YOUTUBE channel was there a plain and simple solution.  Search on YOUTUBE:

DNS leak after UBUNTU update | Утечка DNS после обновления UBUNTU

It's kinda hard to see what this guy is doing, so this is the terminal routine:

 

1.  Get admin privileges:  Sudo su

2.  give your pword

3.  type in apt-get install openresolv nscd unbound

4.  hit Yes when it asks, and OK when it suggests to reboot (which doesn't happen)

5.  engage a VPN server from your NetManager list

6.  go to https://ipleak.net/ and test it out.

 

It has worked for me on both Ubuntu and Linux KDE Mint.    How come nobody here or anywhere else, particularly from Ubuntu or Mint can come up with this?

[warner 0]

Also for me, the standard openvnp setup in Ubuntu 16.04 is leaking (on https://ipleak.net/ as per above and also on https://hidester.com/dns-leak-test/).

 

The suggested solution (sudo apt install openresolv nscd unbound, and reboot) worked for me.

 

Thanks a lot for the tip.