search

andrew-naish / docker-openvpn-proxy

Docker container > :8080 > OpenVPN > Internet
33 stars 17 forks source link

Leaks actual IP when failing to authenticate #11

Open dgraziotin opened 3 years ago

dgraziotin commented 3 years ago

I accidentally provided wrong authentication details. Checked for my public IP via curl (using the proxy) and found out that my public IP was being used.

Here is the output of docker logs:

2021-01-12 10:59:43.104 7f81ea130b48 Info: Listening on port 8080 on IP address 0.0.0.0
Tue Jan 12 10:59:43 2021 AUTH: Received control message: AUTH_FAILED
2021-01-12 10:59:44.643 7f81ea01cb20 Request: icanhazip.com/
Tue Jan 12 10:59:45 2021 AUTH: Received control message: AUTH_FAILED

I wonder if Privoxy should listen to a specific IP tied to openvpn rather than 0.0.0.0?

strictboss commented 2 years ago

Hello! :) Did you solve the problem? I really need to except IP leakage, but i do not how. Any suggestions?

It is need to block all outgoing traffic from all gateways, except openvnp's one, but it is absent, when auth failed. Need feature, called killswitch, which will work automatically. Moreover, traffic from the privoxy must be acceptable and answered with error, if openvpn is not connected.

josearodrigueze commented 9 months ago

Could anyone solve this?