For some Ubuntu versions, you may need to add this to your OpenVPN config in order to prevent DNS leaks

[FoodMaven]

I have a DNS leak. I am "some Ubuntu user".

Into what file are the following lines added? Which file and which directory?

script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

from:

https://github.com/cryptostorm/cryptost ... ster/linux

at the very bottom of that page.

I just got CS up and running and after 6 months of working on this (one and off), I don't want to do it all again, I won't remember how.

[josh]

Go to the directory you have the configs (*.ovpn files)

Hidden Content

This board requires you to be registered and logged-in to view hidden content.

Done. This adds the 3 lines to each .ovpn file which fixes DNS leaks.

[FoodMaven]

The following should give an understanding as to how little I understand the "work" I'm doing.

When I determined I had a DNS leak via https://ipleak.net/ (Cryptostorm's "Goodies" page), I tried to find my own solution. When I saw the info about Ubuntu I jumped to a false conclusion. I thought, because my router is OpenWRT/LEDE, that it is Linux/Ubuntu based. My bad.

I did the following:

ssh root@192.168.xxx.xxx and entered the pw.

cd /etc/openvpn

then nano cstorm_linux-rumplestiltskin_udp.ovpn

next copy the text starting "for x" in the above post (and without quotes) next, holding ctrl & shift, this was pasted into cstorm_linux-rumplestiltskin_udp.ovpn. Ctrl-O, Enter, Ctrl-X.

As a double check open the modified .ovpn. Nope, not 3 lines of text, only one. Manually 3 lines separated at >> with no spaces before or after. Ctrl-O, Ctrl-X. Double check: see 3 lines.

Reboot. Odd I can ping google.com, but cannot get to a common web page such as ipleak.net.

So I had to remove the Ubuntu text. And I still have a DNS leak.

Thank you for your concern.

[josh]

Hidden Content

This board requires you to be registered and logged-in to view hidden content.