DNS Leak. Need some help.

Ambertos

Hi! Hope someone can help me. Any help or advice would be appreciated.

So the problem is that i configured my openvpn server on Centos VPS. All works fine. I am receiving another ip, after making dns leak test on https://www.dnsleaktest.com i see only 5-6 Google ISP with USA ip adresses, so it seems that everything is ok. But on the forth dns leak test my isp shown up. After some tests i see that in 30% of attempts i have dns leak. So the problem is that dns is working ok, changing my isp on google but sometimes it doesnt work.

Please give me some advice on some dns settings to make no dns leak at all or at least show me the direction on what i need to do))) Thanks a lot for any help.

Server.conf

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
comp-lzo
status openvpn-status.log
verb 3

client.conf

client
dev tun
proto udp
remote x.x.x.x 1194 #my server ip
nobind
persist-key
persist-tun
ca C:/key/ca.crt
cert C:/key/client1.crt
key C:/key/client1.key
ns-cert-type server
comp-lzo
verb 3

Have a nice day and hope on your help. Good luck for all 8))

Ambertos

Please, tell me do i understood correctly that:

1) In your case you should block

DNS Servers . . . . . . . . . . . : 10.1.101.1     <- Preset DNS Server before and after OpenVPN Connected

If it is not a secret what software firewall do you use?

2) Can you also explain why do you have these dns servers - 208.67.222.222, 208.67.220.220, because in my configuration i have only 8.8.8.8 8.8.4.4 google public dns.

3) I am also interested what dnc servers should i use. In my server conf i used

push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"

Is it better to add DNS server of my vpn server? How to do this?

push "dhcp-option DNS 10.8.0.1"

?????

Thanks for great help. Wish you happy day 8)

Ambertos

Thanks for help. Well tested on home pc today and there is no dns leak, openvpn works woth dns perfectly. I think i had leacks because of testing on work pc, because it is connected to corporation network. Maybe the problem was there. Anyway thanks for help and good Luck!