VPN DNS leak test
dnsleaktest.com
VPN DNS leak test
1–10 of 46 posts
Re: VPN DNS leak test
#2Crap, failed on my home road-warrior setup. Now I have to go figure out which OpenVPN config settings to change to forward DNS better.
Re: VPN DNS leak test
#3Crap, failed on my home road-warrior setup. Now I have to go figure out which OpenVPN config settings to change to forward DNS better.
See `--dhcp-option` (https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage)
Re: VPN DNS leak test
#4This is also a handy way to see if your outbound DNS requests are being hijacked and sent to another resolver instead of your chosen ones. One router I tested redirected everything to OpenDNS if parental controls were in use, some networks redirect everything to their internal resolvers, etc. Mainly for interest purposes/spotting configuration mistakes than anything else.
Re: VPN DNS leak test
#5VPN is not supposed to hide you, it just provides access to some resources that are not available without VPN.
Re: VPN DNS leak test
#6Be carful here. You might not see the IP you expected even if everything is fine. BGP anycast and other load balancing technologies can make it look like the wrong IP. Make sure the IP is owned by the service you expect vs. being the exact IP you have configured.
Re: VPN DNS leak test
#7This is also a handy way to see if your outbound DNS requests are being hijacked and sent to another resolver instead of your chosen ones. One router I tested redirected everything to OpenDNS if parental controls were in use, some networks redirect everything to their internal resolvers, etc. Mainly for interest purposes/spotting configuration mistakes than anything else.
There's a page about transparent DNS proxies [0] on the same site. They also have a page about how to fix dns leaks when using OpenVPN [1].
One way to ensure that DNS responses have not been tampered with is to use DNSCrypt [2].
Can someone confirm that I understand this correctly : if I don't use DNSCrypt and if my DNS responses are tampered with in a phishing attempt, on a site that uses https, the browser will raise a cert error since the attacker won't have a valid certificate. So phishing attempts by spoofing DNS responses are only effective when the site uses plain http.
[0] https://www.dnsleaktest.com/what-is-transparent-dns-proxy.ht...
Re: VPN DNS leak test
#8VPN is not supposed to hide you, it just provides access to some resources that are not available without VPN.
Well, not always or not always like that. For example, I use VPN so I can achieve my true download speed when downloading from Steam, since my ISP limits to download speed in that case.
Re: VPN DNS leak test
#9VPN is not supposed to hide you, it just provides access to some resources that are not available without VPN.
Well, not always or not always like that. For example, I use VPN so I can achieve my true download speed when downloading from Steam, since my ISP limits to download speed in that case.
Which country, which ISP, please?
Re: VPN DNS leak test
#10There's a lot of talk about various services being vulnerable to dns leak tests or not. Which I think is slightly funny, since you're WAY more likely to suffer data leaks via the innumerable ways your browser can do it.
For what it's worth though, a modern openvpn configuration can beat it handily. An example of a service that passes with flying colors is ProtonVPN, which I just checked last night since they've got a crazy discount going right now.