cryptostorm / cryptostorm_client_configuration_files

cryptostorm client configs
196 stars 60 forks source link

DNS leaks on Windows 10 #11

Closed ghost closed 8 years ago

ghost commented 8 years ago

As described here, the config files should include an extra option: block-outside-dns

Plugin functionality has been integrated in OpenVPN 2.3.9. Use block-outside-dns option.

Otherwise Windows 10 is leaking the DNS requests.

df-cryptostorm commented 8 years ago

I was against adding that option at first because if the client is using OpenVPN < 2.3.9 it would result in a fatal error. Now that I think about it though, that's really only a problem for people using the Linux configs on certain embedded devices (routers, etc.) where it's difficult to upgrade OpenVPN. Nobody on Windows should be using an older OpenVPN, so I think I'll go ahead and add block-outside-dns just for the windows configs. DNS leaks usually aren't a problem on Linux anyways.