Proposal for adding DNS Leak Prevention feature

kmille / riseup-vpn-configurator

a simple command line tool to get RiseupVPN up and running

https://riseup.net/en/vpn

GNU General Public License v3.0

25 stars 5 forks source link

Proposal for adding DNS Leak Prevention feature #7

Open shopnobuzz opened 5 months ago

shopnobuzz commented 5 months ago

Hi there,

It's a great project you've develop. I'm using it. I have an additional request. Although it's changing user IP, it doesn't prevent DNS leak. Can you do something about it?

kmille commented 5 months ago

Hey, good point. I'm using an encrypted and privacy focused DNS server, independent of VPN. This is my systemd-resolved configuration:

DNS=194.242.2.4#base.dns.mullvad.net
DNSOverTLS=yes
FallbackDNS=
Domains=~. # do not use the one pushed by DHCP

There is more information in the Arch wiki.