--------------
So, I got some info that may help to clarify what is the problem and I also noticed that when running the route command over ssh, in STRICT mode and EXCLUSIVE dns mode, the command takes up to 15 seconds to answer the routing table... when in RELAXED or DISABLED, it is instantenous.
-----------------------------------------------------------------
DNS in STRICT mode: (slow on DNS query over WAN and even slower over VPN)
Code:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
193.105.134.81 62.178.91.1 255.255.255.255 UGH 0 0 0 eth0
10.10.40.17 * 255.255.255.255 UH 0 0 0 tun11
62.178.91.1 * 255.255.255.255 UH 0 0 0 eth0
192.168.0.0 * 255.255.255.0 U 0 0 0 br0
62.178.91.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 62.178.91.1 0.0.0.0 UG 0 0 0 eth0
-----------------------------------------------------------------
DNS in EXCLUSIVE mode: (DNS not working over WAN or VPN)
Code:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
91.236.116.46 62.178.91.1 255.255.255.255 UGH 0 0 0 eth0
10.10.40.5 * 255.255.255.255 UH 0 0 0 tun11
62.178.91.1 * 255.255.255.255 UH 0 0 0 eth0
192.168.0.0 * 255.255.255.0 U 0 0 0 br0
62.178.91.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default 62.178.91.1 0.0.0.0 UG 0 0 0 eth0
-----------------------------------------------------------------
DNS in RELAXED mode: (DNS working over VPN and WAN, but with DNS leak...)
Code:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
91.236.116.46 chello062178791 255.255.255.255 UGH 0 0 0 eth0
10.10.40.5 * 255.255.255.255 UH 0 0 0 tun11
62.178.91.1 * 255.255.255.255 UH 0 0 0 eth0
192.168.0.0 * 255.255.255.0 U 0 0 0 br0
62.178.91.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default chello062178791 0.0.0.0 UG 0 0 0 eth0
-----------------------------------------------------------------
DNS ins DISABLED mode: (DNS working over VPN and WAN, but with DNS leak...)
Code:
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
91.236.116.46 chello062178791 255.255.255.255 UGH 0 0 0 eth0
10.10.40.5 * 255.255.255.255 UH 0 0 0 tun11
62.178.91.1 * 255.255.255.255 UH 0 0 0 eth0
192.168.0.0 * 255.255.255.0 U 0 0 0 br0
62.178.91.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default chello062178791 0.0.0.0 UG 0 0 0 eth0
-----------------------------------------------------------------
My openvpn config file:
--------------------------------------
Code:
remote se1.vpn.ac 6112 udp
dev tun
tls-client
persist-tun
persist-key
auth-user-pass
nobind
pull
redirect-gateway def1
route-delay 5
verb 1
explicit-exit-notify 1
remote-cert-tls server
setenv CLIENT_CERT 0
<ca>
-----BEGIN CERTIFICATE-----
<CERT>
-----END CERTIFICATE-----
</ca>
--------------------------------------
My VPN provider informs something about forcing a update in resolv.conf when running openvpn from linux, does this have anything to do with Merlin ?
https://forum.vpn.ac/discussion/13/running-openvpn-in-linux-terminal-with-no-dns-leaks
Well, thanks again for any help!