https://github.com/valdikss/openvpn-block-incoming-udp-plugin

OpenVPN plugin to prevent IP leak via UDP requests
https://github.com/valdikss/openvpn-block-incoming-udp-plugin

Last synced: 16 days ago
JSON representation

OpenVPN plugin to prevent IP leak via UDP requests

• Host: GitHub
• URL: https://github.com/valdikss/openvpn-block-incoming-udp-plugin
• Owner: ValdikSS
• Created: 2015-12-20T12:15:55.000Z (almost 9 years ago)
• Default Branch: master
• Last Pushed: 2015-12-26T11:04:23.000Z (almost 9 years ago)
• Last Synced: 2023-10-20T23:38:20.886Z (about 1 year ago)
• Language: C
• Size: 331 KB
• Stars: 19
• Watchers: 9
• Forks: 3
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
## OpenVPN plugin to block all incoming UDP packets via non-VPN interface

When you're connected to the VPN, replies to incoming UDP packets to the ISP interface may go via VPN interface. Technically you can't call it IP address leak, but it allows malicious persons (such as copyright trolls) to identify your real IP address. This OpenVPN plugin will protect you from said routing issue.

### How to use

1. Download `block-incoming-udp-32.dll` for 32 bit system or `block-incoming-udp-64.dll` for 64 bit system

2. Add the following line to your OpenVPN configuration file:  

`plugin block-incoming-udp-32.dll`  

for 32 bit system or  

`plugin block-incoming-udp-64.dll`  

for 64 bit system

### How it works

This plugin implements Windows Filtering Platform userspace filter to block all IPv4 and IPv6 incoming UDP packets which were received neither from LAN subnets nor from Internet to OpenVPN TAP Adapter interface to prevent IP address leak. It works like a temporary firewall which clears its rules upon termination or crash. This is important as you won't get broken internet connection if OpenVPN client suddenly crashes, unlike with other methods.

### More information

[In English](https://medium.com/@ValdikSS/another-critical-vpn-vulnerability-and-why-port-fail-is-bullshit-352b2ebd22e2#.1xoft0v97)  

[In Russian](http://habrahabr.ru/post/273523/)