Network Lock Not Working (IPv6 becomes visible)

[norono 0]

Hello I'm new to AirVPN and VPN's in general so my apologies in advance for the myriad of dumb questions I will probably ask. I did try searching for my particular issue, but couldn't find anything

 

I am running Eddie 2.12.4 on openSUSE 13.2, I activate Network Lock on startup. In preferences I disabled Allow lan/private and ping. IPv6 is set to disable in the Advanced Settings section.

 

Everything starts out working great. I go to ipleak.net everything looks good (no ipv6) I go to test-ipv6.com everything ipv6 fails, then about 10-15 mins in if I go back to either of those sites it can now see my ipv6. What's going on here?

[Staff 10016]

Hello!

 

1) Please make sure to run Eddie 2.12.4 (latest stable release). Old versions might be not fully compatible with openSUSE 13.2

 

2) Please make sure to enable Network Lock which will block IPv6 packets via ip6tables

 

We are confident to respect the late 2017 planned deadline for full IPv6 support on the vast majority of our VPN servers.

 

Kind regards

[norono 0]

Thanks for the quick reply!

 

I validated that I am indeed using Eddie 2.12.4, and that I have Network Lock on. I see the verbiage that it is locking Linux IPtables...

 

As an update it now doesn't seem to work from the get go (I can immediately see my ipv6 on ipleak.net).

 

Any ideas on what's going on or what I should next try to decipher why it isn't killing off these ipv6 leaks?

 

I was thinking of making the jump to openSUSE Leap (sorry for the pun), would that help, hurt, or not affect my issue?

[Staff 10016]

Hello!

 

The ip6tables rules are very simple and we find it strange, or even impossible, that ip6tables is malfunctioning on your system. Can you please send us a screenshot about the presumed DNS leak? We start to suspect that you see the VPN DNS IPv6 address, not the one assigned to your machine by your ISP.

 

Kind regards

[dwright 25]

I am having a similar problem using Fedora 24 and OpenVPN Gnome (not Eddie).

 

I have tried existing instructions on disabling IPv6 and they have not worked, including nick75's instructions here:

 

https://airvpn.org/topic/22239-need-a-little-advice-on-ipv4-and-ipv6/?hl=%2Bdisable+%2Bipv6

 

Restarting my networking service (sudo service network restart) returns an error message:

Restarting network (via systemctl):  Job for network.service failed because the control process exited with error code.
See "systemctl status network.service" and "journalctl -xe" for details.
                                                           [FAILED]

 

"sudo systemctl status network.service" returns:

● network.service - LSB: Bring up/down networking
   Loaded: loaded (/etc/rc.d/init.d/network; generated; vendor preset: disabled)
   Active: failed (Result: exit-code) since Thu 2017-08-10 11:42:37 BST; 6min ago
     Docs: man:systemd-sysv-generator(8)
  Process: 5619 ExecStart=/etc/rc.d/init.d/network start (code=exited, status=1/FAILURE)

 

Aug 10 11:42:37 host-[identifyinginfo][5619]: RTNETLINK answers: File exists
Aug 10 11:42:37 host-[identifyinginfo][5619]: RTNETLINK answers: File exists
Aug 10 11:42:37 host-[identifyinginfo][5619]: RTNETLINK answers: File exists
Aug 10 11:42:37 host-[identifyinginfo][5619]: RTNETLINK answers: File exists
Aug 10 11:42:37 host-[identifyinginfo][5619]: RTNETLINK answers: File exists
Aug 10 11:42:37 host-[identifyinginfo][5619]: RTNETLINK answers: File exists
Aug 10 11:42:37 host-[identifyinginfo][1]: network.service: Control process exited, code=exited status=1
Aug 10 11:42:37 host-[identifyinginfo] systemd[1]: Failed to start LSB: Bring up/down networking.
Aug 10 11:42:37 host-[identifyinginfo] systemd[1]: network.service: Unit entered failed state.
Aug 10 11:42:37 host-[identifyinginfo] systemd[1]: network.service: Failed with result 'exit-code'.

"sudo journalctl -xe" returns:

 

Aug 10 11:42:37 host-[identifyinginfo] systemd[1]: network.service: Control process exited, code=exited status=1
Aug 10 11:42:37 host-[identifyinginfo] audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=network comm="systemd
Aug 10 11:42:37 host-[identifyinginfo] systemd[1]: Failed to start LSB: Bring up/down networking.
-- Subject: Unit network.service has failed
-- Defined-By: systemd
-- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel
--
-- Unit network.service has failed.
--
-- The result is failed.
Aug 10 11:42:37 host-[identifyinginfo] systemd[1]: network.service: Unit entered failed state.
Aug 10 11:42:37 host-[identifyinginfo] systemd[1]: network.service: Failed with result 'exit-code'.
Aug 10 11:42:37 host-[identifyinginfo] sudo[5597]: pam_unix(sudo:session): session closed for user root
Aug 10 11:42:37 host-[identifyinginfo] audit[5597]: USER_END pid=5597 uid=0 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session
Aug 10 11:42:37 host-[identifyinginfo] audit[5597]: CRED_DISP pid=5597 uid=0 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcre
Aug 10 11:44:59 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: Window manager warning: last_user_time (1425559) is greater than comparison timestamp (1425558).  Th
Aug 10 11:44:59 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: Window manager warning: 0xe002da (Network Lo) appears to be one of the offending windows with a time
Aug 10 11:47:46 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:47:49 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:48:47 host-[identifyinginfo] audit[7271]: USER_AUTH pid=7271 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:aut
Aug 10 11:48:47 host-[identifyinginfo] audit[7271]: USER_ACCT pid=7271 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:acc
Aug 10 11:48:47 host-[identifyinginfo] audit[7271]: USER_CMD pid=7271 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/
Aug 10 11:48:47 host-[identifyinginfo] audit[7271]: CRED_REFR pid=7271 uid=0 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcre
Aug 10 11:48:47 host-[identifyinginfo] sudo[7271]:  [identifyinginfo] : TTY=pts/0 ; PWD=[identifyinginfo] ; USER=root ; COMMAND=/bin/systemctl status network.service
Aug 10 11:48:47 host-[identifyinginfo] sudo[7271]: pam_systemd(sudo:session): Cannot create session: Already occupied by a session
Aug 10 11:48:47 host-[identifyinginfo] audit[7271]: USER_START pid=7271 uid=0 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:sessi
Aug 10 11:48:47 host-[identifyinginfo] sudo[7271]: pam_unix(sudo:session): session opened for user root by (uid=0)
Aug 10 11:48:47 host-[identifyinginfo] sudo[7271]: pam_unix(sudo:session): session closed for user root
Aug 10 11:48:47 host-[identifyinginfo] audit[7271]: USER_END pid=7271 uid=0 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session
Aug 10 11:48:47 host-[identifyinginfo] audit[7271]: CRED_DISP pid=7271 uid=0 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcre
Aug 10 11:49:43 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:50:54 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:50:54 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:50:54 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:50:54 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:50:54 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:50:54 host-[identifyinginfo] org.gnome.Shell.desktop[2010]: libinput error: libinput bug: invalid tap event when fingers are up
Aug 10 11:52:57 host-[identifyinginfo] sudo[7291]:  [identifyinginfo] : TTY=pts/0 ; PWD=[identifyinginfo] ; USER=root ; COMMAND=/bin/journalctl -xe
Aug 10 11:52:57 host-[identifyinginfo] audit[7291]: USER_CMD pid=7291 uid=1000 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/
Aug 10 11:52:57 host-[identifyinginfo] audit[7291]: CRED_REFR pid=7291 uid=0 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcre
Aug 10 11:52:57 host-[identifyinginfo] audit[7291]: USER_START pid=7291 uid=0 auid=1000 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:sessi
Aug 10 11:52:57 host-[identifyinginfo] sudo[7291]: pam_systemd(sudo:session): Cannot create session: Already occupied by a session
Aug 10 11:52:57 host-[identifyinginfo] sudo[7291]: pam_unix(sudo:session): session opened for user root by (uid=0)

 

[okcomputer 0]

I'm using openvpn client on OSX and have the same issue.  ipv6test shows my ip4 address properly masked but ip6 is fully exposed

 

[dwright 25]

Does anyone know how to fix this?