Disable ip6v with Ovpn files
Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
-
- OpenVpn Newbie
- Posts: 5
- Joined: Sat Feb 20, 2021 3:17 am
Disable ip6v with Ovpn files
Hey everyone,
I’m using openwrt and openVPN. I am using the .ovpn files from express VPN with this setup. I’m having some issues with ipv6 leak. Mostly because express VPN doesn’t use ipv6
Can I put a line in the .ovpn files that tells the router to ignore any ipv6 signals?
I would normally do it with openWRT, but it hasn’t been working. Also if I can do it with the .ovpn, then ipv6 will automatically come back on when I turn off the VPN
Thanks!
I’m using openwrt and openVPN. I am using the .ovpn files from express VPN with this setup. I’m having some issues with ipv6 leak. Mostly because express VPN doesn’t use ipv6
Can I put a line in the .ovpn files that tells the router to ignore any ipv6 signals?
I would normally do it with openWRT, but it hasn’t been working. Also if I can do it with the .ovpn, then ipv6 will automatically come back on when I turn off the VPN
Thanks!
-
- OpenVPN Protagonist
- Posts: 11138
- Joined: Fri Jun 03, 2016 1:17 pm
Re: Disable ip6v with Ovpn files
Did you try --block-ipv6 ?
-
- OpenVpn Newbie
- Posts: 5
- Joined: Sat Feb 20, 2021 3:17 am
Re: Disable ip6v with Ovpn files
I’m very new to this. Is it really that simple?
-
- OpenVPN Protagonist
- Posts: 11138
- Joined: Fri Jun 03, 2016 1:17 pm
-
- OpenVpn Newbie
- Posts: 5
- Joined: Sat Feb 20, 2021 3:17 am
Re: Disable ip6v with Ovpn files
This did nothing unfortunately.
Do I just add it to the opvn file?
Do I just add it to the opvn file?
-
- OpenVPN Protagonist
- Posts: 11138
- Joined: Fri Jun 03, 2016 1:17 pm
-
- OpenVpn Newbie
- Posts: 5
- Joined: Sat Feb 20, 2021 3:17 am
Re: Disable ip6v with Ovpn files
I am using express vpn with openvpn.
Expressvpn does not support IPv6, so I end up getting 1pv6 leak. my hope was that I can turn it off when the vpn is on.
It looks like I figured it out
adding:
I also had a DNS leak problem, which I fixed with
to the ovpn files seems to do what I want
as a bonus, I can add those to the openvpn command as arguments like so:
Obviously update the path and filename to the OPVN file
I found the solutions Here:
DNS Leak
IPV6 Leak
Expressvpn does not support IPv6, so I end up getting 1pv6 leak. my hope was that I can turn it off when the vpn is on.
It looks like I figured it out
adding:
Code: Select all
pull-filter ignore "route-ipv6"
pull-filter ignore "ifconfig-ipv6"
Code: Select all
dhcp-option DOMAIN-ROUT
as a bonus, I can add those to the openvpn command as arguments like so:
Code: Select all
openvpn --config /ovpnlocation/file.ovpn --script-security 2 --up /etc/openvpn/update-resolv-conf --down /etc/openvpn/update-resolv-conf --dhcp-option DOMAIN-ROUTE --pull-filter ignore "route-ipv6" --pull-filter ignore "ifconfig-ipv6"
I found the solutions Here:
DNS Leak
IPV6 Leak
-
- OpenVPN Protagonist
- Posts: 11138
- Joined: Fri Jun 03, 2016 1:17 pm
Re: Disable ip6v with Ovpn files
--block-ipv6 is meant to do exactly what you want.
-
- OpenVpn Newbie
- Posts: 5
- Joined: Sat Feb 20, 2021 3:17 am
Re: Disable ip6v with Ovpn files
I’m sure it is, I just couldn’t get it to work.
However the solution I posted did.
Is there any reason I should try and use that instead?
-
- OpenVPN Protagonist
- Posts: 11138
- Joined: Fri Jun 03, 2016 1:17 pm
Re: Disable ip6v with Ovpn files
--block-ipv6 does not disable IPv6 on the VPN interface but it does block it being sent to the server.
Also, it does not block IPv6 from the server, it only blocks IPv6 from the client to the server.
The server cannot use IPv6 to communicate with your client, only IPv4 will work.
Also, it does not block IPv6 from the server, it only blocks IPv6 from the client to the server.
The server cannot use IPv6 to communicate with your client, only IPv4 will work.