DNS leak with openwrt and kill switch ?

[Moat 11]

I followed the guide on the airvpn forums to airvpn an openwrt router and add a kill switch: https://airvpn.org/topic/20303-airvpn-configuration-on-openwrt-preventing-traffic-leakage-outside-tunnel/?hl=openwrt

 

For some reason my router has a DNS leak to IP: 213.183.51.45

 

ipleak.net reports it is in the Netherlands. This is no where near where I live, nor am I connecting through a Dutch airvpn.

 

Anyone knows this DNS / IP?

 

Any suggestions on why this is happening and how to make it no longer happening?

[zhang888 1067]

One of OpenNIC (DNSCrypt) resolvers.

[Moat 11]

I see, The router is set to query OpenNIC DNS in order to establish the connection with airvpn. Once connection is established it should no longer be queried though ...

 

Any idea why it is queried after the router connects to VPN?

[Staff 10693]

I see, The router is set to query OpenNIC DNS in order to establish the connection with airvpn. Once connection is established it should no longer be queried though ...

 

Hello!

 

That's not correct. It should be queried, but only when the primary (and any previous) DNS fails to resolve a name. ipleak.net forces this situation to discover all the DNS servers that your system can potentially query. According to your description this is fine. Also, the queries to other DNS are tunneled as well, unless you use some Operating System which does not have the concept of global DNS and is therefore affected by the so called "DNS leaks" (typically, only Windows: in particular, DNS leaks do NOT exist in GNU/Linux). Also consider that the DNS settings of the devices behind the router "override" the router DNS settings.

 

Kind regards