OpenVPN with NordVPN has DNS leak

[sammiev]

Excellent.
Thank you sammiev.

I no longer have a DNS leak.

Thanks, I will make a How to with pictures.

Remember, 127.0.0.1 is your best friend.

[mr.travo]

Thank you!!! I have been fighting this problem for some time. I will mark my topic as "solved" that I had going.

Thanks to all you guys!

[linuxosuser]

I have been installing "bind9" like so.

Code: Select all

sudo apt-get install bind9

Edit your network connections and change IPv6 to Ignore.

Edit IPv4 to "Automatic DHCP Address only" and in DNS Servers: type in 127.0.0.1 and select save.

Code: Select all

sudo /etc/init.d/bind9 restart

Edit the configuration file:

Code: Select all

sudo nano /etc/NetworkManager/NetworkManager.conf

Find the line:

Code: Select all

dns=dnsmasq

Replace it with:

Code: Select all

#dns=dnsmasq

Save & close the file with Ctrl+O, Enter, Ctrl+X.

Reboot computer or restart NetworkManager

Restart NetworkManager:

Code: Select all

sudo systemctl restart NetworkManager

Go here to test for leaks with and without your VPN.

https://ipleak.net/

You should have no leaks with and without your VPN.

Been do this for years and 127.0.0.1 is your best friend.

and if you see "Your IP addresses - WebRTC detection"

goto the bottom of the page and it will show you how to fix that as well.

Edit: added a few lines about NetworkManager from my later post.

Hi this doesn work in linux mint 19 cinnamon. Is there any other way to prevent DNS leak?

[majpooper]

Stop DNS leak the easy way with dnscrypt - it is in the Mint repositories
Everything you need to know is here in this How To
http://www.webupd8.org/2014/08/encrypt- ... -with.html

[Captain Brillo]

NordVPN also suggests setting IPv6 to "ignore" - I don't know why, but I did and it worked also.

[jameskga]

Sometimes I wonder: If NordVPN donated money to Linux Mint like PIA did, maybe there would also be a NordVPN application...

[Snafu]

Sometimes I wonder: If NordVPN donated money to Linux Mint like PIA did, maybe there would also be a NordVPN application...

Nordvpn help told me that an app for linux was in development but they couldn't say when it would be ready for release.

+1 for the bind9 solution detailed earlier in this thread. After wrestling with DNS leaks for months I follower those bind9 instructions and have had 0 DNS leaks since.

[Carl]

Tried the original reply to this thread for DNS leaks but it's not working on Linux Mint 19 :/ dnsmasq dosen't sppear to be an option in the config file now so you can't actually remove it either

[catweazel]

Help me to resolve this?? Thanks

Start a new thread. Please read the forum rules.

[catweazel]

Tried the original reply to this thread for DNS leaks but it's not working on Linux Mint 19 :/ dnsmasq dosen't sppear to be an option in the config file now so you can't actually remove it either

This is why you need to start your own thread.

[Carl]

Tried the original reply to this thread for DNS leaks but it's not working on Linux Mint 19 :/ dnsmasq dosen't sppear to be an option in the config file now so you can't actually remove it either

This is why you need to start your own thread.

This thread is only a little older than 6 months and it's quite relevant to the original topic

Anyway I've found a solution that has worked for me from the link below:

https://askubuntu.com/questions/1065568 ... untu-18-04

and the summary:

If you have a DNS leak as indicated by checking on www.browserleaks.com or dnsleaktest.com,

Shut off your VPN connection

Attempt to undo any .conf file edits you've wasted time already making. If you've been trying a lot of various suggestions, your best good chance might be to do a fresh install and ensure you've also installed networkmanager-openvpn-gnome as Ubuntu does not have VPN config importing provided by default.

Install dnsmasq

Code: Select all

sudo apt update

Code: Select all

sudo apt install dnsmasq

Disable resolved

Code: Select all

systemctl disable systemd-resolved.service

Code: Select all

systemctl stop systemd-resolved.service

Remove /etc/resolv.conf and create a new one:

Code: Select all

rm /etc/resolv.conf

Code: Select all

nano /etc/resolv.conf

Enter into your empty .conf file:

Code: Select all

nameserver 127.0.0.1

that's all!

save and exit out of your new resolv.conf file.

Edit your NetworkManager.conf file

Code: Select all

nano /etc/NetworkManager/NetworkManager.conf

and add the following:

Code: Select all

dns=dnsmasq

beneath the lines, [main] and plugins=ifupdown, keyfile

exactly like this with the new line added.

[main]
plugins=ifupdown, keyfile
dns=dnsmasq
save and exit.

9.Back out of the terminal, and reboot the system and check your dnsleak test site for results.

With thanks to Anonymous VPN whose solutions for Leaks on Ubuntu/Network Manager seem well researched and successful. THEY WORK and when no other solutions worked for me, these did. The above shown solution works for Ubuntu 17.x and 18.04 LTS. For 16.04 LTS, [see his other solution]5

[catweazel]

This thread is only a little older than 6 months and it's quite relevant to the original topic

Read the forum rules.

[Carl]

This thread is only a little older than 6 months and it's quite relevant to the original topic

Read the forum rules.

I have thank you