Advice for DNS leak

juliebob_00juliebob_00
in Linux VPN Setup
I got my first warning from my ISP yesterday while downloading.  It was puzzling since i had my vpn engaged, but after troubleshooting, I determined that my dns is leaking.  Tested it both before and after engaging vpn and both were positive for a leak.  IPv6 is working and not a problem.  I'm not very tech savvy so i could use some help in determining what I need to do from here. 

A few months ago I reinstalled my laptop with Linux 16.04.  Since then, I haven't been able to connect my vpn directly to the little robot icon at the top of the page.  Instead, Ive been engaging my vpn through the wifi icon at the top of my page (I don't know if this is considered OPENVPN).  Could the source of the dns leak be because I haven't been connecting directly to the robot icon?  If so, could someone please tell me how to fix my connection?  When I try to engage, the robot goes grey but ultimately turns back red, unable to make the connection.  Suggestions?  Advice?  I welcome it all.

Comments

  • juliebob_00juliebob_00
    Update:  Seems like my dns leak is a little more glitchy than I expected.  Ive been testing it all day (with vpn engaged) and some results claim the dns is leaking while other results claim everything is secure.  And there was one baffling result that said both.  if this has happened to anyone else, I'd love to know what you did to fix the problem.
  • [Deleted User][Deleted User]
    Since OpenVPN is working and the PIA application is not, it is likely that you have an encrypted home directory. If you'd prefer to use the PIA application, you should be able to do so by moving PIA to /opt/.

    As for your DNS leak — the easiest solution is simply to use PIA DNS system-wide. DNS leak protection just forces your system to use PIA DNS, so using our DNS provides another layer of protection should something go awry. 

    You can change your DNS settings through Network Manager by doing the following:
    1. Go to "System Settings"
    2. Click on "Network" 
    3. Select the NON-VPN connection 
    4. Click "Configure" 
    5. Click on "Method" and set it to "Automatic (DHCP) addresses only" 
    6. Enter our DNS servers ( 209.222.18.222 and 209.222.18.218 ) 
    7. Click Save
  • juliebob_00juliebob_00
    My robot icon goes green now, so thank you so much.  I'm moving on to the dns issue.  In step #6, i just have to enter the number sequence, correct?  did that and hit Apply System Wide.  Thanks for the help.  I'll be in touch if I am still encountering problems.  thanks again!
  • [Deleted User][Deleted User]
    Awesome, glad to hear you're now able to connect!
  • purplepizzapurplepizza
    edited December 2017
    Since OpenVPN is working and the PIA application is not, it is likely that you have an encrypted home directory. If you'd prefer to use the PIA application, you should be able to do so by moving PIA to /opt/.

    As for your DNS leak — the easiest solution is simply to use PIA DNS system-wide. DNS leak protection just forces your system to use PIA DNS, so using our DNS provides another layer of protection should something go awry. 

    You can change your DNS settings through Network Manager by doing the following:
    1. Go to "System Settings"
    2. Click on "Network" 
    3. Select the NON-VPN connection 
    4. Click "Configure" 
    5. Click on "Method" and set it to "Automatic (DHCP) addresses only" 
    6. Enter our DNS servers ( 209.222.18.222 and 209.222.18.218 ) 
    7. Click Save
    Is this the only way to fix the DNS leaks for OpenVPN connection on Ubuntu 16.04?

    I have seen suggestions to add the following lines at the end of the the *.ovpn configuration file:

    script-security 2
    up /etc/openvpn/update-resolv-conf
    down /etc/openvpn/update-resolv-conf

    Is this a solution with PIA or if it could be added to the "Ubuntu OpenVPN Setup" provided by PIA?

  • d4rkcatd4rkcat
    @juliebob_00 @purplepizza
    You can block DNS leaks easily if you use my script to connect to PIA.
    Just uninstall all other PIA software and use my script with -d switch to change DNS to PIA thereby preventing any possibility of DNS leaks.
    https://github.com/d4rkcat/pia
  • purplepizzapurplepizza
    @d4rkcat Thanks.  I will give your script a shot.  It seems to do everything PIA APP does.

    @juliebob_00 ; I may have come across another fix.  I saw on another forum to comment out the "dns=dnsmasq" in the /etc/NetworkManager/NetworkManager.conf.  This works for me with all OpenVPN connections so far.

  • kevrichardskevrichards
    I got my first warning from my ISP yesterday while downloading.  It was puzzling since i had my vpn engaged, but after troubleshooting, I determined that my dns is leaking.  Tested it both before and after engaging vpn and both were positive for a leak.  IPv6 is working and not a problem.  I'm not very tech savvy so i could use some help in determining what I need to do from here. 

    A few months ago I reinstalled my laptop with Linux 16.04.  Since then, I haven't been able to connect my vpn directly to the little robot icon at the top of the page.  Instead, Ive been engaging my vpn through the wifi icon at the top of my page (I don't know if this is considered OPENVPN).  Could the source of the dns leak be because I haven't been connecting directly to the robot icon?  If so, could someone please tell me how to fix my connection?  When I try to engage, the robot goes grey but ultimately turns back red, unable to make the connection.  Suggestions?  Advice?  I welcome it all.
    It's seems like your DNS must be leaking, but I have tested many times with private internet access its fine with me, it could be issue with the tool site. which tools you are using? I'm using https://www.vpninsights.com/dns-leak-test its also possibles  that you been using some other provider tool which suppose to give you wrong information 
  • PIASteveGPIASteveG
    Let me help you stay protected with PIA. Please send us a ticket to [email protected] ATTN:SteveG and let me know what your ticket number is. Please include the device with OS you are using and any troubleshooting steps you may have already performed to prevent duplicate efforts, Once i hear back from you I'll be happy to help you out further.
  • PIASteveGPIASteveG
    Disregard my previous statement please submit a ticket at https://www.privateinternetaccess.com/helpdesk/new-ticket so we can help you out further. You can use ATTN SteveG in the subject line just let me know your ticket number once submitted. 
Sign In or Register to comment.