search

gnuton / asuswrt-merlin.ng

Extends the support of Merlin firmware to more ASUS routers
Other
1.29k stars 75 forks source link

DNS leak on VPN client #185

Open quaningeneva opened 2 years ago

quaningeneva commented 2 years ago

Router Model Affected Models: AX-XT8

Firmware Version Affected 386.5_2

Is this bug present in upstream Merlin releases too? I don't know.

Describe the bug When doing the DNS leak test (www.dnsleaktest.com), the IP address correctly comes from the VPN but the DNS server shows the local server and not the VPN server.

To Reproduce

Expected behavior VPN connection should show DNS server of VPN and not of local router.

Screenshots

ghost commented 2 years ago

Is your DNS behind a VPN? I have the director routing to my pihole forcing all traffic through it. When conducting a leak test it passes.

quaningeneva commented 2 years ago

I am not running the DNS behind a VPN. When I use OpenVPN on the device itself, I don’t get a leak.

ghost commented 2 years ago

Force it be behind a vpn it'll fix the leak.

quaningeneva commented 2 years ago

Force it be behind a vpn it'll fix the leak.

This defeats the purpose of having the VPN client and routing on the router. I am hoping that this DNS leak can be fixed in a future firmware release.

trebleta commented 2 years ago

It also depends on the vpn rule for dns. It needs to be set exclusive, if you are not using a vpn for all traffic, else strict / relaxed will leak your dns.