search

binhex / arch-sabnzbdvpn

Docker build script for Arch Linux base with SABnzbd, Privoxy and OpenVPN
GNU General Public License v3.0
49 stars 9 forks source link

DNS lookups broken #5

Closed ghost closed 6 years ago

ghost commented 6 years ago

Good afternoon I've found that builds post this one, dns lookups to my internal network DNS are not working https://github.com/binhex/arch-sabnzbdvpn/commit/fa9910dd8729464179dff9c79daf8e3b0d501c43

Adding the two firewall rules that you removed in this commit does indeed get them working again This is true for both the sabnzbd and the deluge dockers

binhex commented 6 years ago

dns lookups to my internal network DNS are not working

This is correct, to prevent ip leakage via dns lookup over your lan, all dns queries are now blocked whilst the vpn is running forcing all ns queries to go over the vpn tunnel, what exactly is your issue with this being in place?.

ghost commented 6 years ago

Gotcha I was using my internal dns server before so that explains why it stopped working Should be good if I switch it to just use google dns or something On Mon, Aug 21, 2017 at 07:17 binhex notifications@github.com wrote:

dns lookups to my internal network DNS are not working

This is correct, to prevent ip leakage via dns lookup over your lan, all dns queries are now blocked whilst the vpn is running forcing all ns queries to go over the vpn tunnel, what exactly is your issue with this being in place?.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/binhex/arch-sabnzbdvpn/issues/5#issuecomment-323717721, or mute the thread https://github.com/notifications/unsubscribe-auth/AEDapRdeGcmQUhInKRgxmXsQRiPOKhYbks5saWcugaJpZM4O8suE .

binhex commented 6 years ago

yes, i would advise using opendns, or if your with pia you can use their name servers, but to be honest it doesnt matter too much, as you cannot be tracked back now due to all queries having your vpn ip address only and not your isp's ip address (default would be good enough).