baumi's blog

baumi's personal blog … Linux, OS X, Windows, Random things, …

IPv6 leaks, DNS leaks, OpenVPN, IPSEC, L2TP

Test for DNS and IPv6 leaks:
https://dnsleaktest.com/
https://wtfismyip.com/ (shows your VPN IPv4 address *and* leaked IPv6, if applicable)

Prevent DNS leaks:
https://www.pcsuggest.com/check-and-fix-dns-leak-linux/
add “redirect-gateway def1” to your openvpnclient.conf file …

Prevent IPv6 leaks (i.e. temporarily disable IPv6):
sudo sysctl -w net.ipv6.conf.all.disable_ipv6=1
sudo sysctl -w net.ipv6.conf.wlp2s0.disable_ipv6=1
sudo sysctl -w net.ipv6.conf.lo.disable_ipv6=1
sudo sysctl -w net.ipv6.conf.default.disable_ipv6=1

China VPN:
Tested VPN protocols are working nicely (openvpn, ipsec/l2tp). That’s not surprising, using VPNs is legal in China for company/enterprise use.
Only requirement: connect to VPN IP directly, don’t use hostnames that require DNS lookups (DNS lookups for VPN providers are blocked).

Comments are currently closed.