Hi all,
Firstly, you'll have to forgive me as I've never used OpenVPN before and I'm trying to get my head around it.
We currently have a DNS leak issue where Windows 10 appears to use the ISP DNS instead of the OpenVPN DNS. My temporary fix was to change the metric interfaces on the network settings, but I've read recently that you can add a configuration setting on the server-side called 'block-outside-dns'.
I've used Putty to log-in to our IPCOP server and I've added the line "block-outside-dns" underneath the 'push "dhcp-option DOMAIN"' and 'push "dhcp-option DNS"' to the server.conf file. However, I'm not sure if this is right. My understanding is that this "block-outside-dns" setting needs to be pushed to the clients running Windows 10. Is this the way to do it? Does it update the config file for the client when you download it from the certificates page on the web portal of the server? If so, does that mean I simply need to download the certificates again for each client?
Any help with this would be appreciated
Push block-outside-dns (DNS leak/Windows 10)
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
-
- OpenVpn Newbie
- Posts: 3
- Joined: Fri Jul 01, 2016 1:02 pm
-
- OpenVPN Protagonist
- Posts: 11137
- Joined: Fri Jun 03, 2016 1:17 pm
Re: Push block-outside-dns (DNS leak/Windows 10)
That is correct.TitianRob16 wrote:My understanding is that this "block-outside-dns" setting needs to be pushed to the clients running Windows 10. Is this the way to do it?
Code: Select all
# server.conf
push "dhcp-option DNS x.x.x.x" # Push your preferred VPN DNS - google eg. 8.8.8.8
push "block-outside-dns" # Block access to any other DNS
-
- OpenVpn Newbie
- Posts: 3
- Joined: Fri Jul 01, 2016 1:02 pm
Re: Push block-outside-dns (DNS leak/Windows 10)
That's great - thanks! Is there a way to check to see if this is working through the GUI logs at all?
-
- OpenVPN Protagonist
- Posts: 11137
- Joined: Fri Jun 03, 2016 1:17 pm
Re: Push block-outside-dns (DNS leak/Windows 10)
Check your client log files ..
-
- OpenVpn Newbie
- Posts: 3
- Joined: Fri Jul 01, 2016 1:02 pm
Re: Push block-outside-dns (DNS leak/Windows 10)
Thanks for the help!