https://github.com/valdikss/openvpn-fix-dns-leak-plugin

OpenVPN plugin to fix Windows DNS Leaks
https://github.com/valdikss/openvpn-fix-dns-leak-plugin

Last synced: 3 months ago
JSON representation

OpenVPN plugin to fix Windows DNS Leaks

• Host: GitHub
• URL: https://github.com/valdikss/openvpn-fix-dns-leak-plugin
• Owner: ValdikSS
• Created: 2015-10-01T13:06:49.000Z (over 9 years ago)
• Default Branch: master
• Last Pushed: 2016-02-14T09:42:34.000Z (almost 9 years ago)
• Last Synced: 2024-08-04T09:05:02.319Z (5 months ago)
• Language: C
• Size: 352 KB
• Stars: 162
• Watchers: 22
• Forks: 27
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-network-stuff - **147**星

README

        
## OpenVPN plugin to fix Windows DNS Leaks

Windows 10 DNS resolver sends DNS requests in parallel to all available network interfaces and uses the fastest reply to come. If you use DNS from the local network, this problem allows your ISP or a hacker with Wi-Fi ap to hijack your DNS records and steal your data even if you use VPN .

This plugin should fix this issue for Windows 8.1 and Windows 10 users. [Read More](https://medium.com/@ValdikSS/beware-of-windows-10-dns-resolver-and-dns-leaks-5bc5bfb4e3f1).

### How to use

**Functionality of this plugin is integrated into OpenVPN 2.3.9**, just use `--block-outside-dns` configuration option. If you can't use the latest OpenVPN version, follow the steps below:

1. Download `fix-dns-leak-32.dll` for 32 bit system or `fix-dns-leak-64.dll` for 64 bit system

2. Add the following line to your OpenVPN configuration file:  

`plugin fix-dns-leak-32.dll`  

for 32 bit system or  

`plugin fix-dns-leak-64.dll`  

for 64 bit system

### How it works

This plugin implements Windows Filtering Platform userspace filter to block all IPv4 and IPv6 DNS queries from DNS Client service to port 53 except on OpenVPN's TAP interface. It works like a temporary firewall which clears its rules upon termination or crash. This is important as you won't get broken internet connection if OpenVPN client suddenly crashes, unlike with other methods.