Page 1 of 1

Disable ip6v with Ovpn files

Posted: Sat Feb 20, 2021 3:30 am
by duck_Duck
Hey everyone,

I’m using openwrt and openVPN. I am using the .ovpn files from express VPN with this setup. I’m having some issues with ipv6 leak. Mostly because express VPN doesn’t use ipv6

Can I put a line in the .ovpn files that tells the router to ignore any ipv6 signals?

I would normally do it with openWRT, but it hasn’t been working. Also if I can do it with the .ovpn, then ipv6 will automatically come back on when I turn off the VPN

Thanks!

Re: Disable ip6v with Ovpn files

Posted: Sat Feb 20, 2021 3:48 am
by TinCanTech
Did you try --block-ipv6 ?

Re: Disable ip6v with Ovpn files

Posted: Sat Feb 20, 2021 4:18 am
by duck_Duck
TinCanTech wrote:
Sat Feb 20, 2021 3:48 am
Did you try --block-ipv6 ?
I’m very new to this. Is it really that simple?

Re: Disable ip6v with Ovpn files

Posted: Sat Feb 20, 2021 4:50 am
by TinCanTech
duck_Duck wrote:
Sat Feb 20, 2021 4:18 am
Is it really that simple?
Is it ever simple ? :o

Re: Disable ip6v with Ovpn files

Posted: Sun Feb 21, 2021 4:42 pm
by duck_Duck
This did nothing unfortunately.

Do I just add it to the opvn file?

Re: Disable ip6v with Ovpn files

Posted: Sun Feb 21, 2021 5:50 pm
by TinCanTech
duck_Duck wrote:
Sun Feb 21, 2021 4:42 pm
Do I just add it to the opvn file?
yes.
duck_Duck wrote:
Sun Feb 21, 2021 4:42 pm
This did nothing unfortunately
I guess it is not going to be that simple.

Maybe if you try to explain what you really want .. ?

Re: Disable ip6v with Ovpn files

Posted: Mon Feb 22, 2021 10:50 pm
by duck_Duck
I am using express vpn with openvpn.

Expressvpn does not support IPv6, so I end up getting 1pv6 leak. my hope was that I can turn it off when the vpn is on.

It looks like I figured it out

adding:

Code: Select all

pull-filter ignore "route-ipv6"
pull-filter ignore "ifconfig-ipv6"
I also had a DNS leak problem, which I fixed with

Code: Select all

dhcp-option DOMAIN-ROUT
to the ovpn files seems to do what I want

as a bonus, I can add those to the openvpn command as arguments like so:

Code: Select all

openvpn --config /ovpnlocation/file.ovpn --script-security 2 --up /etc/openvpn/update-resolv-conf --down /etc/openvpn/update-resolv-conf --dhcp-option DOMAIN-ROUTE --pull-filter ignore "route-ipv6" --pull-filter ignore "ifconfig-ipv6"
Obviously update the path and filename to the OPVN file


I found the solutions Here:
DNS Leak
IPV6 Leak

Re: Disable ip6v with Ovpn files

Posted: Mon Feb 22, 2021 11:51 pm
by TinCanTech
--block-ipv6 is meant to do exactly what you want.

Re: Disable ip6v with Ovpn files

Posted: Tue Feb 23, 2021 12:09 am
by duck_Duck
TinCanTech wrote:
Mon Feb 22, 2021 11:51 pm
--block-ipv6 is meant to do exactly what you want.
I’m sure it is, I just couldn’t get it to work. :(

However the solution I posted did.

Is there any reason I should try and use that instead?

Re: Disable ip6v with Ovpn files

Posted: Tue Feb 23, 2021 12:17 am
by TinCanTech
--block-ipv6 does not disable IPv6 on the VPN interface but it does block it being sent to the server.

Also, it does not block IPv6 from the server, it only blocks IPv6 from the client to the server.

The server cannot use IPv6 to communicate with your client, only IPv4 will work.