VPN privacy/dns leak/dns over tls diversion question

[Dee dee]

Anything wrong with all these pics below

 

[Dee dee]

Set to strict pics added on bottom

Yes you can use NordVPN’s servers under “Connect to....automatically” setting changed to “No”. Or, you could use those from Cloudflare (1.1.1.1/1.0.0.1).

Choose your DOT setting to be “Strict”

Then further below choose the Cloudflare servers as your DOT servers (or any other ones on the pull down menu for that matter).


Sent from my iPhone using Tapatalk

 

[Dee dee]

Usually if you have your jffs backed up you can restore the nvram values you need back.

Can you explain in layman's terms how to do this please?

 

[skeal]

Anything wrong with all these pics below

I would also enable DNSSEC but that's just me.

 

[skeal]

Can you explain in layman's terms how to do this please?

First you would need the jffs.tar from before this happened and extract it. If you never saved this then there is no way it works for you. manually adding is the only option. When done I highly recommend enabling jffs and backing it up once finished playing with static addresses. Look under Administration>System tab for jffs settings and you can save jffs by looking at the Save/Restore/Update Tab.

 

[skeal]

Enable jffs support before entering your static addresses.

 

[Dee dee]

It is remembered just doesn't show in static it says already added to list.

Very odd perhaps fixing the host name you discussed will fix this how can I do that

 

[skeal]

It is remembered just doesn't show in static it says already added to list.

Ok sounds like you do need a reset to defaults. Capture your settings with screenshots of the pages you cannot memorize.

 

[dave14305]

Enable jffs support before entering your static addresses.

@Dee dee has an AC68U, which doesn’t save it to jffs like an HND router does.

 

[Dee dee]

I would also enable DNSSEC but that's just me.

Dnssec added,anything else I missed

 

[skeal]

@Dee dee has an AC68U, which doesn’t save it to jffs like an HND router does.

Whoops! My AC68U is set to AP mode. Missed that.

 

[skeal]

Dnssec added,anything else I missed

Enable DNS Rebind Protection.

 

[Marin]

Dnssec added,anything else I missed

You could also add NordVPNs or Cloudflare’s servers under the WAN DNS section (change “Connect to....automatically” to No and then add them there).




Sent from my iPhone using Tapatalk

 

[skeal]

Before resetting to defaults load the dhcp page where the static addresses are stored and chose ctrl+f5 or shift+f5 and see if they magically appear.

 

[skeal]

If they don't I suspect that the conversion of the host names didn't work right and you will have to reset and reload manually.

 

[dave14305]

If you are comfortable with SSH, login to the router command line and check:

cd /etc
cat hosts.dnsmasq
grep "^dhcp-host=" dnsmasq.conf

 

[Dee dee]

If they don't I suspect that the conversion of the host names didn't work right and you will have to reset and reload manually.

No dice I'll write down what I recall. Guess I need to reconfigure my router totally

Sent from my SM-A505U1 using Tapatalk

 

[Dee dee]

If you are comfortable with SSH, login to the router command line and check:

cd /etc
cat hosts.dnsmasq
grep "^dhcp-host=" dnsmasq.conf

I'll try this first

Sent from my SM-A505U1 using Tapatalk

 

[dave14305]

I'll try this first

Sent from my SM-A505U1 using Tapatalk

While you’re there run this to see if there’s any problem with the stored values:

nvram get dhcp_staticlist
nvram get dhcp_hostnames

 

[Dee dee]

While you’re there run this to see if there’s any problem with the stored values:

nvram get dhcp_staticlist
nvram get dhcp_hostnames

I'll be able to see this about 6 7 est today.

Thanks for your help dave

Sent from my SM-A505U1 using Tapatalk