3 ms·
>DNS leaks can be prevented by using a generic DNS provider such as 8.8.8.8 You mean leaking to Google doesn't count as leaking? Your namespaces suggestion is
by fauigerzigerk 9y ago
>DNS leaks can be prevented by using a generic DNS provider such as 8.8.8.8
You mean leaking to Google doesn't count as leaking?
Your namespaces suggestion is interesting, but easy and foolproof?
- the8472 9y agoYou can run a DNS resolver in the network namespace that forwards¹ to google DNS through the VPN. ¹ Or run your own recursive resolver
- fauigerzigerk 9y agoVPNs do exactly that when they are not broken. Ubuntu is broken and dangerously so.
- rsync 9y agoYour parent said: "DNS leaks can be prevented by using a generic DNS provider such as 8.8.8.8." ... and you replied: "You mean leaking to Google doesn't count as leaking?" But I don't understand where the DNS leaks would be coming from if you are using an actual VPN for your entire network stack - wouldn't that tunnel all traffic (TCP and UDP) to your endpoint ? How are you leaking DNS in that scenario ?
- fauigerzigerk 9y agoTwo things should happen: 1) All network traffic should go through the VPN tunnel. 2) All DNS requests should be sent to the VPN provider's DNS server and not to the one configured in the OS. If either or both of these two things isn't happening then it's a DNS leak. If I understood correctly, then mahkoh was saying that (2) doesn't matter if the host DNS is configured to use Google's public DNS server 8.8.8.8. That's what I called "leaking to Google".