IPv6 Leak • DNS Leak • E-Mail IP Leak

SupportSupport
edited December 2013 in VPN Setup Support
To our beloved customers and all VPN users everywhere,

In order to test our application's strength, we have long used internal tools run under different circumstances/environments.  We would like to make all of these tools available to all netizens, everywhere:


DNS Leak

Test to ensure that your DNS requests are not leaking out of the VPN tunnel.



IPv6 Leak

Test to ensure that your machine is not able to submit requests to IPv6 Networks.



E-Mail IP Leak

Test to ensure that your e-mail client is not including your local IP address on send.


With these tools, we hope you will be able to better ensure your personal security and privacy.

Thank you and Happy Holidays,
Private Internet Access®
«1

Comments

  • nezzznezzz
    According to the report. My DNS is leaking. I'm using OpenVPN over DDWRT. Is there a way of making it not leak???
  • martywdmartywd
    edited December 2013
    Using the PIA VPN Beta Linux client I'm getting ten red bar warnings referencing various 'DNS IP's' and 'Hostname's' identified as belonging to Google when clicking on the http://dnsleak.com/ link.  This is throught the 'US West' gateway, BTW.
    .
    Edit: (Mon Dec  9 11:57 CST 2013)
    OK, I see what's going on now.  The PIA VPN Linux Beta client at this point has _no_ DNS leak prevention option and defaults to writing google's DNS servers to my '/etc/resolv.conf' file when a VPN connection is initiated.  Hence, the DNS Leak red bar warnings when I click on dnsleak.com .

    If I replace google's DNS servers in my /etc/resolv.conf' file with PIA's DNS entries like so:

    nameserver 209.222.18.222
    nameserver 209.222.18.218

    And then click on dnsleak.com , when the test finishes, I see the following positive message: 'Looks like your DNS is not leaking...'

    Of course, everytime my PIA VPN beta linux client reconnects, it overwrites my '/etc/resolv.conf' file, and the DNS Leak test fails once again.
    .

  • 2np22np2
    edited December 2013
    Question: Result from test says DNS leak but the leaked IP is no where near to the correct one. It seems to be from another server. Is this alright?

    P.S. thanks for the tools, nice work!
  • ciphernoelieciphernoelie
    edited December 2013
    Looks like your DNS might be leaking...

    • Your IP: 216.155.131.75
    • DNS IP: 74.125.19.214
    • Hostname: 74.125.19.214
    • ISP: Google
    • Country: United States
    • City: Mountain View

    Then again I'm using Windows 8.1 so it's my fault.
  • 2np22np2
    Changing dns to what martywd mentioned fixed the issue of google dns popping through
  • 2np22np2
    This is pretty good too: https://www.dns-oarc.net/oarc/services/dnsentropy
  • ciphernoelieciphernoelie
    Thank you 2np2 that worked.

  • 2np22np2
    Np! :)
  • detective1detective1
    How do you plug an e-mail leak?
  • martywdmartywd
    @ciphernoelie -- 'Then again I'm using Windows 8.1 so it's my fault.'

    Do you have 'DNS Leak Protection' ticked in 'Advanced' options of the Windows PIA VPN client?  If so and the DNS Leak Test continues to fail, you should report this as a possible bug to PIA support.

    @2np2

    The latest Linux Beta PIA VPN app download was updated to correct the incorrect DNS server entries in '/etc/resolv.conf' when the *nix PIA VPN client is connected.  If you use the Linux Beta PIA VPN app, try installing the latest download ==> here....
    .


  • p0019486p0019486
    Hi Im using you VPN client on Windows 7 and its working fine, but when i try the DNS Leak, it tells me that it is leaking. how can I change that on windows ?
    and why do I have more than one DNS with the same IP?
    tanks


    Looks like your DNS might be leaking...

    • Your IP: 85.159.236.219
    • DNS IP: 217.237.149.149
    • Hostname: h-dns-a07.isp.t-ipnet.de
    • ISP: Deutsche Telekom AG
    • Country: Germany





    Looks like your DNS is not leaking...


    • Your IP: 85.159.236.219
    • DNS IP: 85.159.236.219
    • Hostname: tsn85-159-236-219.dyn.nltelcom.net
    • ISP: NForce Entertainment B.V.
    • Country: Netherlands
  • FazoneFazone
    Does anyone know how long the test approximately takes ?

  • VPNVPN
    Fazone, some users reported that the DNS leak test provided by PIA might be broken at the moment, so that could be why you're waiting a long time.
  • FazoneFazone
    Thanks. Was wondering why it was taking along time to report results.

  • p5085126p5085126
    How about this test:
    http://www.cloakfish.com/?tab=proxy-analysis

    Leaking local ISP IP address... (running OpenVPN client on DD-WRT)
  • martywdmartywd
    I'll just note here that dnsleak.com is working for me as I type.  Thanks PIA!
    .

  • jjcoolausjjcoolaus
    How about this test:
    http://www.cloakfish.com/?tab=proxy-analysis

    Leaking local ISP IP address... (running OpenVPN client on DD-WRT)
    On your DD-WRT router, set the DNS manually to be Google DNS. (otherwise it will just get your ISP ones either from your host modem/router or from your ISP directly if the DD-WRT box is your main router)
  • PoLyGLoTPoLyGLoT
    The IPv6 worked and said I was NOT leaking.

    The email leak test worked and said I was NOT leaking.

    The DNS leak test did not work - it just hangs and never produces a result.
  • martywdmartywd
    @PoLyGLoT typed...
    The DNS leak test did not work - it just hangs and never produces a result.

    Yup, broke again.  Notice that a couple or more days ago.

    This one works ==>  https://www.dnsleaktest.com/
    .

  • PoLyGLoTPoLyGLoT
    @martywd

    I ran the test at "dnsleaktest.com" and here were my results (I don't think I'm leaking because only 1 server kept getting detected, and it seems like the gateway to the VPN):

    Test complete

    Query round Progress... Servers found
      1          
    image.image.image.image.image.image.              1
      2          image.image.image.image.image.image.              1
      3          image.image.image.image.image.image.              1
      4          image.image.image.image.image.image.              1
      5          image.image.image.image.image.image.              1
      6          image.image.image.image.image.image.              1
    IPHostnameISPCountry
    XXXXXXxxxxxxxChoopa, LLCUnited Statesimage
  • omeromer
    @PoLyGLoT

    You are not leaking. PIA uses servers from Choopa.
  • martywdmartywd
    @PoLyGLoT typed:
    I ran the test at "dnsleaktest.com" and here were my results...

    @omer typed:
    You are not leaking. PIA uses servers from Choopa.

    Agreed.  Just one server is good.  More than one ... well NOT so good.

    And yes 'Choopa' is usually what I see when using PIA's 'US East' gateway.  Other PIA gateways show different ISP names.

    In a *nix terminal you could run 'whois -H' followed by the IP number you see when testing at 'DNS Leak test' for more info.

    You can also plug in the IP number for more info here ==> http://whois.domaintools.com/
    .

  • PoLyGLoTPoLyGLoT
    Thank you both for the information.  Very helpful.
  • funkyfunky
    edited June 2014
    Hi, So how do i know my DNS is not leaking. I cannot find a list of servers PIA uses.

    Currently showing:
    5.63.147.4
    053f9304.rdns.100tb.com

    Thanks
  • martywdmartywd
    Hi, So how do i know my DNS is not leaking. I cannot find a list of servers PIA uses.

    Currently showing:
    5.63.147.4
    053f9304.rdns.100tb.com

    Thanks
    The numbers you are posting are most likely via PIA's 'UK London' gateway?  I know this because I just connected using the PIA VPN Beta Linux client to the 'UK London' gateway and ran the DNS Leak test.  The IP I'm seeing looks very similar to yours.

    The 'list of servers PIA uses' is mostly _irrelevant_.  What's important is what you see, via a PIA VPN connection when you click on a DNS leak test website link.  As I suggested above since PIA's DNS leak test seems to be malfunctioning at this time, this link instead ==> https://www.dnsleaktest.com/

    Click on the link connected via PIA's VPN, doesn't matter what PIA VPN gateway you use!  If you see '1 server found' you're good.  If you see others as well like say google.com... or anything else additional?  Then there is DNS leaking.

    The 'whois' info I posted may have confuse this issue?  I apologize if it did.
    .

  • SkittlerSkittler
    edited July 2014
    Erm, I have IPv6 disabled under my adapter settings disabled but it says I'm leaking??? I even have the IPv6 leak protection checked in the PIA desktop app.
  • p3463407p3463407
    How would you go about testing a NAS for a DNS leak? For example I know there are torrent tests you can use to see if your IP is masked, however I'm not aware of a test you can run on a NAS (server) to discover if it's DNS is safe.

    I'm unable to run a webpage from my server so ideally it would need to be tested via a torrent or something of that nature, any ideas?
  • markcmarkc
    I'm a newer client and I initially had issue with my authenticated outgoing email not working.  I had the SMTP add to your white list, now the email works fine, although it appears I've opened a "crack" in protection as when I run the Email Leak Test it fails.  I'm sure it has to do with me using my local ISP's authenticated outgoing email server.   To maintain privacy, do most people just abandon any POP3/IMAP accounts from their ISP's and just use the free email from Gmail and other free services
  • p4707263p4707263
    edited January 2015
    I've recently (last couple of days) started receiving failed email sends of emails that I've never sent. ...so thought I'd better investigate it further. The failed email "from" is actually one of mine but the destination addresses are completely unknown. Had a quick look in this forum and found the DNS and email leakage tools. The email leaking tool said that I was leaking my local IP addsress with message "The IP on your email was 185.*.*.*"However, I don't recognise this IP as my local (via my router) IPs all start with 192.*. ...but guess it could be referring to the PIA VPN server IP details. The DNS leak test seems to just hang with the message "Waiting for results...".

    I'm no expert but something has gone wrong somewhere and any help or advice will be greatly appreciated. I you need further details then please ask.

    Edit: Found that my Mozilla Thunderbird has a bug allowing the IP to be leaked. Attempted to fix using an add-on called TorBirdy (instructions followed) but this didn't allow me to send emails because of some incompatibility. So, still have a problem.
  • Osborne_CoxOsborne_Cox
    edited January 2015
    @p4707263, try this site instead:
    http://dnsleaktest.com/
Sign In or Register to comment.