Jump to content


Photo
- - - - -

IPv4 reconnection leaks

IPv4 leaks

  • Please log in to reply
8 replies to this topic

#1 dougiepunk

dougiepunk

    Member

  • Members
  • PipPip
  • 11 posts

Posted 17 August 2016 - 08:39 AM

Hi,

 

A report has been posted on redddit which shows that AirVPN has IPv4 leakage during reconnection in Mac OSX. What are the AirVPN team's and/or customers' thoughts on this? Thanks.

 

https://vpntesting.info/

https://www.reddit.com/r/VPN/comments/4xvvc4/ive_updated_my_vpn_testing_site_and_added_results/



#2 EdensSpire

EdensSpire

    Advanced Member

  • Members
  • PipPipPip
  • 459 posts

Posted 17 August 2016 - 10:20 AM

As far as I know, Mac OSX has no way of preventing leaks during a reconnection, because when you reconnect, it disconnects and then connects again, and as the staff has said the AirVPN client uses OpenVPN and doesn't modify it in any major way so the cause is OpenVPN not AirVPN and when OpenVPN disconnects it restores your routes to default meaning all traffic is back to going through your ISP connection.



#3 go558a83nk

go558a83nk

    Advanced Member

  • Members
  • PipPipPip
  • 1656 posts

Posted 17 August 2016 - 12:47 PM

I haven't looked at the link in the OP but if network lock was used there should be no "leak" even during reconnection. 



#4 me.moo@posteo.me

me.moo@posteo.me

    Advanced Member

  • Members
  • PipPipPip
  • 335 posts

Posted 17 August 2016 - 01:29 PM

So, in short, what the author/tester is saying is that you can't be totally secure unless you have a Mac using iVPN.

Bull ...



#5 EdensSpire

EdensSpire

    Advanced Member

  • Members
  • PipPipPip
  • 459 posts

Posted 17 August 2016 - 01:42 PM

I haven't looked at the link in the OP but if network lock was used there should be no "leak" even during reconnection. 

 

Network lock is only for windows.



#6 go558a83nk

go558a83nk

    Advanced Member

  • Members
  • PipPipPip
  • 1656 posts

Posted 17 August 2016 - 01:50 PM

I haven't looked at the link in the OP but if network lock was used there should be no "leak" even during reconnection. 

 

Network lock is only for windows.

 

certainly not.  network lock works in linux using iptables.  I assume it uses iptables in OSX too.



#7 EdensSpire

EdensSpire

    Advanced Member

  • Members
  • PipPipPip
  • 459 posts

Posted 17 August 2016 - 02:05 PM

 

I haven't looked at the link in the OP but if network lock was used there should be no "leak" even during reconnection. 

 

Network lock is only for windows.

 

certainly not.  network lock works in linux using iptables.  I assume it uses iptables in OSX too.

 

I see my mistake, looking at the network lock information thread on here it seems different versions have different network locks.



#8 zhang888

zhang888

    Donald Trump of IT/Security

  • Moderators
  • 2214 posts

Posted 17 August 2016 - 02:32 PM

OSX uses pf not iptables.

But something in that report seems a little biased for me.

First of all, if leak prevention is a priority, why the test was done without network lock.

Second, the funding entity - these tests were "sponsored" by IVPN, which surprisingly gave them highest scores.

Third:

https://vpntesting.info/For-VPN-Providers.html

 

I also offer testing as a service for VPN providers. In that case, results will remain confidential until the provider has authorized publication. Please contact mirimir to discuss terms.

 

Sounds it can be a little rigged and you can get different results if you bribe the tester. Not something I would expect from a neutral person.


  • LZ1 likes this

Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.


#9 apofis

apofis

    Newbie

  • New Members
  • Pip
  • 4 posts

Posted 22 August 2016 - 02:13 PM

you can use a firewall rule that blocks you main wan interface from connecting to anything but your airvpn ip, if not using airvpn you would have disable it of course







Similar Topics Collapse

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Servers online. Online Sessions: 15015 - BW: 57385 Mbit/sYour IP: 54.224.150.24Guest Access.