tigervpn.com Push block-outside-dns (DNS leak/Windows 10)

danj210

This doesn't seem to be working at all actually. Not only does it do absolutely nothing, DNS tests still show the same exact DNS leaks, no change with or without any of the lines of code that are shown above... Not only that but viewing the log shows no difference at all than the log shows when the code was not in the config file...

I want this to work so bad and I've been reasearching, trying, changing, learning, anything and everything about this block-outside-dns feature and so far, all results have shown that this does not work at all. Can someone who claims this does work, show their log that shows this working?

-----Below I've pasted from my log with all these lines of code added, hoping this worked, push block-outside-dns push "dhcp-option DNS 8.8.8.8" push "block-outside-dns" block-outside-dns --------

Fri Aug 12 13:55:04 2016 OpenVPN 2.3.11 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 10 2016
Fri Aug 12 13:55:04 2016 Windows version 6.2 (Windows 8 or greater) 64bit
Fri Aug 12 13:55:04 2016 library versions: OpenSSL 1.0.1t 3 May 2016, LZO 2.09
Enter Management Password:
Fri Aug 12 13:55:16 2016 UDPv4 link local (bound): [undef]
Fri Aug 12 13:55:16 2016 UDPv4 link remote: [AF_INET]00.00.00.10:0000
Fri Aug 12 13:55:17 2016 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Fri Aug 12 13:55:17 2016 [tigervpn.com] Peer Connection Initiated with [AF_INET]00.00.00.10:0000
Fri Aug 12 13:55:19 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri Aug 12 13:55:19 2016 open_tun, tt->ipv6=0
Fri Aug 12 13:55:19 2016 TAP-WIN32 device [Ethernet 3] opened: \\.\Global\{0CDFA3E8-0A4C-40EE-A1D4-47A1B253557E}.tap
Fri Aug 12 13:55:19 2016 Set TAP-Windows TUN subnet mode network/local/netmask = 10.157.21.0/10.157.21.25/255.255.255.0 [SUCCEEDED]
Fri Aug 12 13:55:19 2016 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.157.21.25/255.255.255.0 on interface {0CDFA3E8-0A4C-40EE-A1D4-47A1B253557E} [DHCP-serv: 10.157.21.254, lease-time: 31536000]
Fri Aug 12 13:55:19 2016 Successful ARP Flush on interface [3] {0CDFA3E8-0A4C-40EE-A1D4-47A1B253557E}
Fri Aug 12 13:55:24 2016 Initialization Sequence Completed

danj210

Can anyone help me please? Everyone says that all I have to do is put block-outside-dns in my client config file... But no one ever says where... If I add it to the beginning of the file then it breaks the config file, same happens if I add it anywhere in the middle. Putting it at the very end does allow me to connect but I see no blocking of DNS servers at all in the log, log never ever changes. Please help. If anyone can tell me where I have to place this command, I would so much appreciate it, below is what I have which does not work.

block-outside-dns 
client
remote atl.tigervpn.com 1194 udp
remote atl.tigervpn.com 443 tcp-client

pull
auth-user-pass 
comp-lzo adaptive
ca ca.crt
dev tun
tls-client
script-security 2
cipher AES-256-CBC
mute 10

route-delay 5
redirect-gateway def1
resolv-retry infinite
#dhcp-renew
#dhcp-release
persist-key
persist-tun
remote-cert-tls server
mssfix



# Get help and more information by visiting https://help.tigervpn.com
# With love from Bratislava, happy tigerVPN’ing!

danj210

I've searched and searched and searched, I've posted to any I've found but have gotten no response. I'm starting a new thread in hopes someone will help me.

This is my config file copied and pasted exact, I did no editing except adding the block-outside-dns to the first line which breaks the config and does not work. I read everyone saying just add this "block-outside-dns" and check your log and all good!!!! But not all good because that's not entirely correct. Where does this need to be placed and if placement matters then why doesn't anyone state that? If placement doesn't matter then why is it mattering for my config file? I'm on the latest openVPN version.

Please help, I'm desperate. Thank You.

block-outside-dns client
remote atl.tigervpn.com 1194 udp
remote atl.tigervpn.com 443 tcp-client

pull
auth-user-pass 
comp-lzo adaptive
ca ca.crt
dev tun
tls-client
script-security 2
cipher AES-256-CBC
mute 10

route-delay 5
redirect-gateway def1
resolv-retry infinite
#dhcp-renew
#dhcp-release
persist-key
persist-tun
remote-cert-tls server
mssfix



# Get help and more information by visiting https://help.tigervpn.com
# With love from Bratislava, happy tigerVPN’ing!

TinCanTech

danj210 wrote

block-outside-dns client

This should be:

block-outside-dns 
client

Set --verb 4 and remove --mute 10 in your client config then restart openvpn and post your log file.

* Please do not unnecessarily hijack other peoples threads *

danj210

TinCanTech wrote

danj210 wrote

block-outside-dns client

This should be:

block-outside-dns 
client

Set --verb 4 and remove --mute 10 in your client config then restart openvpn and post your log file.

* Please do not unnecessarily hijack other peoples threads *

Hi-jack someone elses thread? I'm not sure I follow. Can I not join the thread that had helped me and further post where someone else has gotten results? I have no problem following any rules which is why I'm only trying to understand this one. Hijacking someone else's thread seems kind of harsh as I've got only the most pure, genuine intentions...

Also, thank you for your response and help I will be trying this out immediately to see what happens and I'll let you know if it works or not. Thank you so much for responding.

danj210

The only thing I'm unclear on is the block-outside-dns client thing, because it really looks like this: "block-outside-dns clientremote..." I'm still doing what you said above and putting everything one line down except for the block-outside-dns...

Also, when you say set --verb 4 and remove --mute 10, I suppose setting just means typing "verb 4" anywhere in the config file and removing mute 10... Does placement of "verb 4" matter? And obviously without the "--" dashes, but I can place verb 4 anywhere in the config file? Middle, beginning, end, doesn't matter?

I'm going to try some things, I get very excited when there may be a fix so I'm sorry if I start saying lots. I want to follow rules and be very considerate to others.

danj210

WAIT!!! The removal and verb 4 line may have fixed it!!! Omg! I think you've just made my day! The log is showing stuff I've never seen before that I've been looking for. I won't post the entire log so I'll just show a screenshot but it looks like the commands you gave me are working!

Omg thank you just so so so much. I've gotta play around with this some more but so far the log shows this working! Thank you man, I just can't say it enough, I've spent days trying to get this working and have spent a little over a week learning this all starting completely from scratch and never using a VPN before.

TinCanTech

Great .. thanks for letting us know you found the solution 8-)

About hijacking other threads, your first three posts were merged (by a mod) from other threads which you unnecessarily added to .. as you said yourself

danj210 wroteI get very excited when there may be a fix so I'm sorry if I start saying lots.

so, take your time, a well thought out question is always better to read than crazy excitement 😉

danj210 wroteI want to follow rules and be very considerate to others.

No problem .. if you want to help others by sharing your experience, we welcome you.

Also, I am adding this link to your thread, from one of OpenVPN developers:
https://www.reddit.com/r/VPN/comments/3n3kab/openvpn_plugin_to_fix_windows_dns_leaks_for/

I have not tried this, yet, myself .. so if you do try it, please let me know how you get on.

danj210

You're absolutely right and I didn't think about it at first but realized what the issue was after I responded. Yea the night before I was so close to figuring it all out but got stumped on what you solved for me, that night it was late and I was frustrated and tired and pumped becuase of how much progress I did make in a short time. So I posted on three different threads hoping at least one of them would get seen to where I would get some help. I didn't think at the time how disruptive that could be, disrespectful even as I'm a teamplayer and I never want to take away from anyone else who's on the same team! So you're absolutely right, I apologize and understand, thanks for handling it well.

Back to the main topic here, this has been working marvelous for me and before I responded I wanted to understand a little more. I found the manual for all openVPN commands and learned what mute was for and what verb was for. Mute basically categorizes messages and verbage, 1-4 is normal usage while higher gives different devloper like news in the log. I even learned how to use the dhcp-option DNS 8.8.8.8 which I learned from the manual and the openVPN help in the CMD prompt. I've been able to follow the log and see that I've gotten the dchp-option enabled but it does not push the google dns server I applied even though it shows the IP I'm applying in the log. This is actually no big deal I was just playing around, all I cared about it getting the DNS leaks stopped and only using the DNS through the tunnel.

Anyway, you solved a great thing for me as I'm not sure if I would have ever figured out how to get block-outside-dns working so much appreciated. I'm going to check out that link you showed me above and I'll let you know what I learn and experience. So I'll be back shortly

Thanks again for this fix!!! So happy!

TinCanTech

Thank you for your positive feedback .. but .. You worked it out yourself .. with a tiny nudge in the right direction. 8-)