Disable ip6v with Ovpn files

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
duck_Duck
OpenVpn Newbie
Posts: 5
Joined: Sat Feb 20, 2021 3:17 am

Disable ip6v with Ovpn files

Post by duck_Duck » Sat Feb 20, 2021 3:30 am

Hey everyone,

I’m using openwrt and openVPN. I am using the .ovpn files from express VPN with this setup. I’m having some issues with ipv6 leak. Mostly because express VPN doesn’t use ipv6

Can I put a line in the .ovpn files that tells the router to ignore any ipv6 signals?

I would normally do it with openWRT, but it hasn’t been working. Also if I can do it with the .ovpn, then ipv6 will automatically come back on when I turn off the VPN

Thanks!

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Disable ip6v with Ovpn files

Post by TinCanTech » Sat Feb 20, 2021 3:48 am

Did you try --block-ipv6 ?

duck_Duck
OpenVpn Newbie
Posts: 5
Joined: Sat Feb 20, 2021 3:17 am

Re: Disable ip6v with Ovpn files

Post by duck_Duck » Sat Feb 20, 2021 4:18 am

TinCanTech wrote:
Sat Feb 20, 2021 3:48 am
Did you try --block-ipv6 ?
I’m very new to this. Is it really that simple?

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Disable ip6v with Ovpn files

Post by TinCanTech » Sat Feb 20, 2021 4:50 am

duck_Duck wrote:
Sat Feb 20, 2021 4:18 am
Is it really that simple?
Is it ever simple ? :o

duck_Duck
OpenVpn Newbie
Posts: 5
Joined: Sat Feb 20, 2021 3:17 am

Re: Disable ip6v with Ovpn files

Post by duck_Duck » Sun Feb 21, 2021 4:42 pm

This did nothing unfortunately.

Do I just add it to the opvn file?

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Disable ip6v with Ovpn files

Post by TinCanTech » Sun Feb 21, 2021 5:50 pm

duck_Duck wrote:
Sun Feb 21, 2021 4:42 pm
Do I just add it to the opvn file?
yes.
duck_Duck wrote:
Sun Feb 21, 2021 4:42 pm
This did nothing unfortunately
I guess it is not going to be that simple.

Maybe if you try to explain what you really want .. ?

duck_Duck
OpenVpn Newbie
Posts: 5
Joined: Sat Feb 20, 2021 3:17 am

Re: Disable ip6v with Ovpn files

Post by duck_Duck » Mon Feb 22, 2021 10:50 pm

I am using express vpn with openvpn.

Expressvpn does not support IPv6, so I end up getting 1pv6 leak. my hope was that I can turn it off when the vpn is on.

It looks like I figured it out

adding:

Code: Select all

pull-filter ignore "route-ipv6"
pull-filter ignore "ifconfig-ipv6"
I also had a DNS leak problem, which I fixed with

Code: Select all

dhcp-option DOMAIN-ROUT
to the ovpn files seems to do what I want

as a bonus, I can add those to the openvpn command as arguments like so:

Code: Select all

openvpn --config /ovpnlocation/file.ovpn --script-security 2 --up /etc/openvpn/update-resolv-conf --down /etc/openvpn/update-resolv-conf --dhcp-option DOMAIN-ROUTE --pull-filter ignore "route-ipv6" --pull-filter ignore "ifconfig-ipv6"
Obviously update the path and filename to the OPVN file


I found the solutions Here:
DNS Leak
IPV6 Leak

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Disable ip6v with Ovpn files

Post by TinCanTech » Mon Feb 22, 2021 11:51 pm

--block-ipv6 is meant to do exactly what you want.

duck_Duck
OpenVpn Newbie
Posts: 5
Joined: Sat Feb 20, 2021 3:17 am

Re: Disable ip6v with Ovpn files

Post by duck_Duck » Tue Feb 23, 2021 12:09 am

TinCanTech wrote:
Mon Feb 22, 2021 11:51 pm
--block-ipv6 is meant to do exactly what you want.
I’m sure it is, I just couldn’t get it to work. :(

However the solution I posted did.

Is there any reason I should try and use that instead?

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: Disable ip6v with Ovpn files

Post by TinCanTech » Tue Feb 23, 2021 12:17 am

--block-ipv6 does not disable IPv6 on the VPN interface but it does block it being sent to the server.

Also, it does not block IPv6 from the server, it only blocks IPv6 from the client to the server.

The server cannot use IPv6 to communicate with your client, only IPv4 will work.

Post Reply