Disable ip6v with Ovpn files

duck_Duck

Hey everyone,

I’m using openwrt and openVPN. I am using the .ovpn files from express VPN with this setup. I’m having some issues with ipv6 leak. Mostly because express VPN doesn’t use ipv6

Can I put a line in the .ovpn files that tells the router to ignore any ipv6 signals?

I would normally do it with openWRT, but it hasn’t been working. Also if I can do it with the .ovpn, then ipv6 will automatically come back on when I turn off the VPN

Thanks!

TinCanTech

Did you try --block-ipv6 ?

duck_Duck

TinCanTech wrote Did you try --block-ipv6 ?

I’m very new to this. Is it really that simple?

TinCanTech

duck_Duck wrote Is it really that simple?

Is it ever simple ? :o

duck_Duck

This did nothing unfortunately.

Do I just add it to the opvn file?

TinCanTech

duck_Duck wrote Do I just add it to the opvn file?

yes.

duck_Duck wrote This did nothing unfortunately

I guess it is not going to be that simple.

Maybe if you try to explain what you really want .. ?

duck_Duck

I am using express vpn with openvpn.

Expressvpn does not support IPv6, so I end up getting 1pv6 leak. my hope was that I can turn it off when the vpn is on.

It looks like I figured it out

adding:

pull-filter ignore "route-ipv6"
pull-filter ignore "ifconfig-ipv6"

I also had a DNS leak problem, which I fixed with

dhcp-option DOMAIN-ROUT

to the ovpn files seems to do what I want

as a bonus, I can add those to the openvpn command as arguments like so:

openvpn --config /ovpnlocation/file.ovpn --script-security 2 --up /etc/openvpn/update-resolv-conf --down /etc/openvpn/update-resolv-conf --dhcp-option DOMAIN-ROUTE --pull-filter ignore "route-ipv6" --pull-filter ignore "ifconfig-ipv6"

Obviously update the path and filename to the OPVN file

I found the solutions Here:
DNS Leak
IPV6 Leak

TinCanTech

--block-ipv6 is meant to do exactly what you want.

duck_Duck

TinCanTech wrote --block-ipv6 is meant to do exactly what you want.

I’m sure it is, I just couldn’t get it to work. 🙁

However the solution I posted did.

Is there any reason I should try and use that instead?

TinCanTech

--block-ipv6 does not disable IPv6 on the VPN interface but it does block it being sent to the server.

Also, it does not block IPv6 from the server, it only blocks IPv6 from the client to the server.

The server cannot use IPv6 to communicate with your client, only IPv4 will work.