Asus 86u Router with Kill switch but want another!

[JoeBee]

I have my Asus 86u Router set up with my VPN provider, policy routing and "Block routed clients if tunnel goes down" ticked to give me a kill switch, it all works perfectly fine.

Maybe its paranoia kicking in, but I always felt it's nice to have 2 or 3 fail-safe measures in place or at least another kill switch to prevent my real IP address from leaking.

I checked online with Firewall (comodo, Windows firewall) guides to block and prevent leaking your real IP address but these all appear tap, network adaptor or client app based firewall guides so had no joy.

Is it possible to use Asus router and Windows Firewall to only allow internet traffic with my external remote VPN server (Mullvad) or any router scripts, add-ons in the router to give me my extra kill switch ?

 

[Val D.]

Maybe its paranoia kicking in

Yes.

always felt it's nice to have 2 or 3 fail-safe measures

Since it's a wired forum, disconnect the wire not only from the modem, but from the router also.

 

[JoeBee]

I knew I should not have bought snagless design Ethernets cables

I still like 2-3 fail safes in life if the option is there. For example yesterday I was testing if an old Intel nic card was still working, my Asus router is set up with policy routing Strict with static ip but with the change over to intel nic card, clear net was on by accident and I almost forgot !

Is there no additional software or router options to act as a secondary kill switch ?

 

[JoeBee]

Not quite a secondary kill switch but its perhaps another option for the paranoid.

https://gitlab.com/Marnes/public-ip-display

firefox or chrome addon, which will notify you if your IP address changes.

Did try to look for a windows 10 software which does the same but tried them but not as reliable or good some are using java and others don't seem to work well but the public ip display works well but does take a few minutes to alert you.

 

[Val D.]

Where the fear of IP leaks is coming from? Your Mullvad VPN is Sweden based, one of the countries in 14 Eyes surveillance agreement. If some authority really wants to know who you are, they will. All commercial VPN services claim no logs policy. Are you sure?

 

[JoeBee]

Well more user error from myself or even a bad hacked firmware upgrade, software glitch etc

But sure that is a valid point I guess no vpn can be 100% trusted.

 

[Val D.]

Well more user error from myself or even a bad hacked firmware upgrade, software glitch etc

I believe you've got on your email copyright infringement notice and now you're panicking... yes?

 

[JoeBee]

I believe you've got on your email copyright infringement notice and now you're panicking... yes?

Nope, just genuinely prefer fail safes really

Its kinda like 2 form factor authentication, most could probably do with just entering one password but that 2nd part gives peace of mind.

 

[JoeBee]

Another one to assist here, a registry on and off switch to prevent control panel access in case a user changes
or an external or unknown program modifies the network settings:

https://www.tenforums.com/tutorials/70002-enable-disable-control-panel-settings-windows-10-a.html

Not so much a kill switch but could possibly help stop someone changing network settings.