AdguardTeam / VpnLibs

Open bug tracker for AdGuard VPN core library
6 stars 0 forks source link

Broken internet connection with Dr.Web #45

Closed Aydinv13 closed 1 year ago

Aydinv13 commented 2 years ago

Issue Details

  1. Install Dr.Web (Security space in my case)
  2. Install the latest version of Adguard VPN
  3. Reboot your system
  4. Open browser

Expected Behavior

No internet connection issues

Actual Behavior

Webpage doesn't load

Screenshots

Screenshot: ![](https://uploads.adguard.com/up85_x4mmy.png)
ngorskikh commented 1 year ago

I'm assuming that this is a Windows issue.

The only way to fix this is to add an exception for AdGuardVpnSvc to Dr. Web, like this:

image

Alternatively, one can wait until the Windows team implements WinTun mode and use that.

The issue is that Dr. Web seems to be using a kernel module to redirect traffic at the transport layer to a local proxy process called dwnetfilter.exe, which then makes outbound connections (which is the same exact approach used by the VPN service on Windows). Connections made by the VPN service get redirected to dwnetfilter.exe, which then makes a connection, which gets redirected to the VPN service, resulting in an infinite loop. However, if you add a VPN exception for dwnetfilter.exe, then no traffic will go through the VPN at all, since all traffic is routed through dwnetfilter.exe. Therefore, the only way to break the infinite loop is to exclude the VPN service from being filtered through dwnetfilter.exe.