DNS Leaking when connected to Ethernet

[MonkeyB]

Hello everyone,

I am using a ASUS GT AC2900 with latest Merlin firmware installed in it. I have set up an Open VPN Config file at my home in US and currently traveling in Canada. I have successfully logged into the VPN and my IP address shows the USA IP. But when I tried to loo into the DNS leak tests I see Canada and USA servers. As this is related to my work, I want to be absolutely sure of the connection before I log into it using my work laptop.

NOTE: Surprisingly this issue is not replicated when I use Wifi to connect. But I wanted to use ethernet to get a fast stable connection. Also, this router is connected to a XD4 Mini Asus mesh node. Also, I saw another thread and changed my DNS config to "Strict" and "Exclusive". I have the same results.

Below are the screenshots of my settings and the DSN page. Please let me now what I am doing wrong. I need all my pointers to be towards USA. Any help is greatly appreciated.

 

[bbunge]

pretty sure you should delete this post and change your VPN settings. With only a password to guess your VPN/router is almost compromised. Sorry but exposing your router IP address and port number is an invite for hackers to bang away at it.

 

[ColinTaylor]

pretty sure you should delete this post and change your VPN settings. With only a password to guess your VPN/router is almost compromised. Sorry but exposing your router IP address and port number is an invite for hackers to bang away at it.

I doubt anyone is analysing the hundreds of pictures on this site, trying to understand what they contain, and extract IP addresses. Then combine that with a password and a certificate, neither of which they have.

 

[MonkeyB]

Thanks. I changed my setting. But my original questions still remains. Please help.

 

[ColinTaylor]

@MonkeyB I know you said you tried it, but I think that DNS = Exclusive would be the appropriate choice. That doesn't explain the difference between ethernet and Wi-Fi connections though.

If your VPN server router and VPN client router are both using Google for their WAN DNS try changing one or the other to something different, like 1.1.1.1.

P.S. Is the GT-AC2900 the client or the server? What is the other VPN device?

 

[MonkeyB]

@ColinTaylor , I have currently set it up as "Exclusive". I tried changing the WAN of the Client (GT-AC2900) to 1.1.1.1 as you suggested by going into the WAN settings and Assigning an IP. I still see Toronto in DNS Leak test.

Also, the other router (Server) is the ASUS ExpertWifi EBG15. I currently do not have access to this. I reset my router and now both ethernet and wifi shows leaked DNS

Note: I tried OpenVPN on my iPhone and there is no problem at all with DNS on the phone.

 

[PR3MIUM]

Setting DNS over TLS to OFF and DNS Rebind Protection to ON.

Had this problem some time ago with Quad9 wich showed up as "WOODY" in the DNS Leak Test.

Cloud9 DNS

https://en.wiktionary.org/wiki/kiboze Other things to do, yes, but Quad9 is a high priority for us, and heck, I'm just sitting around an airport lounge waiting for my next plane, so I might as well be useful, right? Sure. Relative to those two, the answer is the same: privacy and...

www.snbforums.com

A other User reported that in OpenVPN the Option

block-outside-dns

maybe will also work but i used the above config in the picture.

 

[Caesar the Dictator]

Are you sure that the OpenVPN server configuration is correctly set? Can you try adding the following line to the active client conf file?

For Google DNS:
dhcp-option DNS 8.8.8.8