WireGuard VPN leaking DNS with DNS Director / RT-AX88U

[Groot]

I configured WireGuard client in Asus WRT-Merlin (Firmware: 3004.388.8_2). The way I want it to work is that only selected devices are connected via VPN. It works fine, just that devices connected via VPN have DNS leak. I want them to use different DNS (the one provided by Mullvad VPN). I configured it in DNS director; however, there is still a leak. Do you have any idea what's causes this? I want other devices that are not connected via VPN to have Cloudflare DNS.

 

[Rajjco]

Is the .conf file provided by Mullvad not push dns settings?

you can add in wireguard .conf file this line under [Interface]:

DNS = 1.1.1.1, 1.0.0.1

and set Accept DNS Configuration to Disabled. Which will ignore dns servers pushed by remote vpn server.

 

[Groot]

This is how the Mullvad .conf looks like this. However, I don't see any option "Accept DNS Configuration" in VPN - WireGuard Client settings.

[Interface]
# Device: Name
PrivateKey = ##########################
Address = ##########################
DNS = 10.64.0.1

[Peer]
PublicKey = ##########################
AllowedIPs = 0.0.0.0/0,::0/0
Endpoint = ##########################

 

[ZebMcKayhan]

This is how the Mullvad .conf looks like this. However, I don't see any option "Accept DNS Configuration" in VPN - WireGuard Client settings.

[Interface]
# Device: Name
PrivateKey = ##########################
Address = ##########################
DNS = 10.64.0.1

[Peer]
PublicKey = ##########################
AllowedIPs = 0.0.0.0/0,::0/0
Endpoint = ##########################

In gui VPN->VPN Client->Wireguard under Interface, there is a field DNS Server (optional). Fill in your Wireguard DNS 10.64.0.1 there and remove these entries from DNS Director as they should not be needed.

 

[Rajjco]

Yep the .conf will automatically fill the dns settings in DNS Server (Optional) field.

You don't need to setup Dns Director.

You can check for dns leaks by going to: https://browserleaks.com/ip

 

[Groot]

Ok it works now. Thanks!