Force All Network Interfaces for DNS

[B00ze 1]

Good day.

 

Today I updated my AirVPN client from 2.10 -> 2.13.

 

Played around with settings (the new UI needs to be wider than before to show all fields in the server list) then connected...

 

To my surprise, my Windows Firewall Notifier tool (which opens a pop-up for blocked connections) started popping-up non-stop; the Windows DNS Client and other Windows Services were all trying to get DNS resolution from my router (the normal DNS address is the router on my system). This wasn't happening with previous AirVPN client.

 

Started looking for the source of the problem and found that the DNS entry in my normal network adapter had not been changed to AirVPN's, as it was with the older Eddie client. AirVPN had apparently configured the Windows Filtering Platform to correctly block DNS queries to anything but the AirVPN servers (which triggered a Blocked-Connection event, which made Windows Firewall Notifier open a pop-up.) And for some reason Windows kept on querying the non-VPN DNS server. This was really annoying, since I could not create a firewall rule to block access to the regular DNS (thereby silencing the Windows Firewall Notifier tool) because then I would not have been able to resolve DNS when the AirVPN client wasn't running.

 

Went into Advanced Options in Eddie and found this "Force All Network Interfaces for DNS" -> Woohoo, problem resolved!

 

Please make sure this option doesn't get deprecated in future Eddie clients; without this I would have to manually edit the DNS entry of my NIC every time I connected the VPN.

 

Thank you.

Best Regards,

[p9974839 2]

What exactly is "Force All Network Interfaces for DNS"

???

[OpenSourcerer 1435]

3 hours ago, p9974839 said:

What exactly is "Force All Network Interfaces for DNS"

It's an anti-DNS leaks workaround for Windows' Smart Multihomed Name Resolution mechanic, or Smart DNS for short. If you connect OpenVPN, you will end up having at least two connected interfaces with DNS servers set. Smart DNS will query the DNS servers of both interfaces, thus introducing DNS leaks.
This option forces the AirDNS servers on all interfaces so that queries are sent to AirDNS in all cases.