DNS Filtering

[wheels83 0]

Hello.  I'm new, and just installed Eddie.  I intend to use it with Wireguard.  Everything has been good so far; speeds have been great, the killswitch is effective, and server connections have been quick and painless.  One thing I was curious about was AirVPN's DNS filtering.  I am using AirVPN DNS servers, as verified by IPleak and DNSleaktest, and DNS filtering is active according to the green light in AirVPN's client area.  I've added the Hagezi filterlist, and tried my hand at creating a custom block rule.  Is there a way to see if anything is really being filtered out?  My block rule seemed completely ineffective.

[OpenSourcerer 1447]

Post the custom answer you configured, and also tell us what you want to do.

[wheels83 0]

16 hours ago, OpenSourcerer said:

Post the custom answer you configured, and also tell us what you want to do.

I'm hoping that by "answer" you mean rule.  Is that right?  Sorry, I've never heard it called that before.  Essentially, I'm trying to block p*rn access via dns filtering.  I have DNS filtering active, with the P*rn / NSFW filter active as well.  That list doesn't seem to be effective; nothing was blocked.  That's why I'm here, to see what I'm doing wrong.  (Maybe I've set things up wrong and the DNS filtering is not being used?)  As a test, I created a rule that says Match: "p*rnhub.com" (sans asterisk) Mode: Domain Action: Deny.    That didn't function as I'd expect either, so I assume I'm doing something wrong because none of the active filters appear to be working.

[OpenSourcerer 1447]

12 hours ago, wheels83 said:

I'm hoping that by "answer" you mean rule.  Is that right?  Sorry, I've never heard it called that before.

It's literally called Custom answers in the client area…

 

12 hours ago, wheels83 said:

(Maybe I've set things up wrong and the DNS filtering is not being used?)

Probably. Are you sure you're using AirDNS after connection? Check ipleak.net for example.

[wheels83 0]

23 minutes ago, OpenSourcerer said:

It's literally called Custom answers in the client area…

 
Probably. Are you sure you're using AirDNS after connection? Check ipleak.net for example.

Ha!  So it is.  I'm getting my brain fart done early today.  What still seems like an odd phrase, given that there needs to be a question and answer for a dns lookup.  But, I digress.  In answer to your question, yes I am using airvpn DNS.  ipleak.net, dnsleaktest.com, whoer.net, browserleaks.com/dns, and tools.iplocation.net/dns-leak-test all verify it.

[OpenSourcerer 1447]

Wait.. just noticed: Where did you enable the Hagezi lists? I don't have those selectable… the current status is still a proposition.

Please try the OISD NSFW list which contains a wild variation of Pornhub domains. Disconnect if connected, then reconnect. If then Pornhub is still viewable, we must dig deeper.

[wheels83 0]

9 hours ago, OpenSourcerer said:

Wait.. just noticed: Where did you enable the Hagezi lists? I don't have those selectable… the current status is still a proposition.

Please try the OISD NSFW list which contains a wild variation of Pornhub domains. Disconnect if connected, then reconnect. If then Pornhub is still viewable, we must dig deeper.

You are correct @OpenSourcerer.  I mis(typed).  I am not using hagezi, but rather OISD NSFW.  But even with that list I am still able to access things that should be blocked

[OpenSourcerer 1447]

Ooooh I can confirm that it doesn't work indeed.

• Enabled the DNS filter, and enabled OISD NSFW alone.
• Set network profile to one with AirDNS as the exclusive DNS server on both v4 and v6.
• Connected with OpenVPN, Muliphein (US) here.
• pornhub.com is viewable.

I know for a fact this DNS request went through AirDNS.

• It's blocked in Pi-Hole using the same list, and testing confirmed it's being blocked off-VPN as expected.
• Other DNS servers are not allowed in my network, be they internal or external.

[wheels83 0]

Ok.  So this is a confirmed bug then? It's not just me going crazy?  If it's a bug, should I open a ticket or does support read these threads?

[OpenSourcerer 1447]

On 1/14/2025 at 9:52 PM, wheels83 said:

If it's a bug, should I open a ticket or does support read these threads?

A ticket should do it.

[Staff 10051]

On 1/11/2025 at 6:03 AM, wheels83 said:

Hello.  I'm new, and just installed Eddie.  I intend to use it with Wireguard.  Everything has been good so far; speeds have been great, the killswitch is effective, and server connections have been quick and painless.  One thing I was curious about was AirVPN's DNS filtering.  I am using AirVPN DNS servers, as verified by IPleak and DNSleaktest, and DNS filtering is active according to the green light in AirVPN's client area.  I've added the Hagezi filterlist, and tried my hand at creating a custom block rule.  Is there a way to see if anything is really being filtered out?  My block rule seemed completely ineffective.

Hello!

From your report and OpenSourcerer's confirmation it looks like something is indeed wrong. We will investigate. Please open a ticket as recommended in any case: the support people could ask you for specific tests or information that may help. We will update the thread accordingly.

Kind regards
 

[wheels83 0]

I apologize for my unresponsiveness.  I was AFK due to an unexpected family funeral.  I will open a ticked right now.