Forums

Mansoor
Mansoor
Offline
Resolved
0 votes
Many streaming services implement DNS check and block any user with IP and DNS in different geo locations. Unfortunately, the ibVPN app in ClearOS suffers from a DNS leak, which renders it useless with many video streaming providers.

I check the DNS leak using dnsleak.com and dnsleaktest.com. There is always a leak when connecting via ClearOS. No leak appears when connecting directly from a client computer using ibVPN's ovpn configuration file. Attached are the /etc/clearos/ibvpn.d/ibvpn.ovpn from ClearOS and ibVPN_reference.ovpn for comparison.

I tried to solve the leak in ClearOS by using ibVPN DNS in Network -> IP Settings -> Network -> DNS, but without success. The DNS server I entered only appears as one of many servers used for resolving names.

I also edited /etc/resolv.conf in ClearOS by commenting out "nameserver 127.0.0.1" and by forcing another nameserver, but the leak is always there.

There are scripts in github, such as this one, for OpenVPN to prevent the leak but I'm not sure if they are compatible with ClearOS.

So, any suggestions to solve this issue?

Thank you.
In ibVPN
Thursday, November 09 2017, 02:13 AM
Share this post:
Responses (3)
  • Accepted Answer

    Thursday, February 08 2018, 12:50 PM - #Permalink
    Resolved
    0 votes
    That makes sense. I think Gateway Management tries to manipulate the DNS settings to achieve its control and therefore conflicts with ibVPN trying to force DNS through the VPN. It sounds like the Gateway Management won the battle.
    The reply is currently minimized Show
  • Accepted Answer

    Mansoor
    Mansoor
    Offline
    Wednesday, February 07 2018, 05:12 PM - #Permalink
    Resolved
    0 votes
    I'd found the source of the DNS leak in my system. It was the "Gateway Management Community" under Gateway>Filtering menu. The DNS leak stopped once that service was turned off.
    The reply is currently minimized Show
  • Accepted Answer

    Thursday, November 09 2017, 03:33 PM - #Permalink
    Resolved
    0 votes
    I have a thought/suggestion for Darryl.

    First, can you tell me if you are using ClearOS as your DNS server? If so, I don't think the routing script, /etc/clearos/ibvpn.d/route-down.sh, is going to work for DNS as I think the requests will be serviced by ClearOS before they get routed to ibVPN. Can you try overriding your client DNS servers to GoogleDNS (8.8.8.8 and 8.8.4.4) or OpenDNS and then testing for the leak?

    @Darryl, is a PREROUTING firewall script needed to redirect DNS lookups to a DNS server specified in in the ibvpn_clearos.ovpn file or to anywhere to prevent ClearOS doing the lookup? This will mess up LAN lookups but may prevent the leaks.
    The reply is currently minimized Show
Your Reply