wfg / docker-openvpn-client

OpenVPN client with killswitch and proxy servers; built on Alpine
MIT License
353 stars 107 forks source link

Prevent leakage while killswitch setup is performed #80

Open twiebe opened 2 years ago

twiebe commented 2 years ago

DNS resolution for all vpn endpoints can take time. I've seen this take more than a minute.

Meanwhile, connections would be opened through the original gw effectively leaking details about the regular connection.

This change makes sure to only let through what is necessary to setup the killswitch, namely dns resolvers.