Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Will they be resolved by my VPN provider, or by my original ISP (if left on "automatic" settings)? Would I have to manually configure a dns server, to make sure my requests will not be resolved by my ISP (constituting a privacy risk)?

share|improve this question

4 Answers 4

up vote 1 down vote accepted

The requests will be passed to the IP that's configured. So if your DNS is still your ISP's DNS, then yes you will still be asking your ISP to resolve a domain name for you.

share|improve this answer
1  
Windows Vista has an "automatic" setting, the default setting for finding a domain name server (no ip is explicitly set with this setting). If left on automatic, do you think this would mean any dns requests go to my ISP? –  Samuel Apr 18 '12 at 8:55
    
I would just set an explicit IP, I don't know what would happen if you use the automatic setting. It might be you do get a new DNS configuration if the VPN provider sends you one when you request an IP. Just test it I guess :) –  Lucas Kauffman Apr 18 '12 at 9:01
    
Ok, that makes sense. Thanks! –  Samuel Apr 18 '12 at 9:06
    
@Samuel Yes. If you have a standard set up: Router using DHCP then 'automatic' will obtain a DNS server over DHCP which will point to your local router, your local router will then use your ISPs DNS servers for DNS lookups. –  Andy Smith Apr 18 '12 at 9:07
    
What if the VPN tunnel is a virtual interface with it's own DNS configuration? How would the Windows OS's choose DNS server? For Linux, I assume the /etc/resolv.conf will be updated with the newest interface... –  Dog eat cat world Apr 20 '12 at 14:40

Depending on how your VPN is configured, you might or might not use the same DNS for your VPN and for Internet. VPN's are (typically) like an additional IP stack on your system, and can have a separate DNS server address configured. But not all systems do this.

  1. If your VPN does not assign a new DNS for the VPN session then you will continue to use the DNS server(s) configured in your main Internet IP Stack. This can present a problem if the external DNS cannot resolve internal addresses (or as you indicate, if you don't want internal addresses to be known externally).
  2. If your VPN does assign a new DNS - for example by using DHCP option 6 "DNS Server" - then you can have different DNS servers for the VPN and for Internet. Your OS must support this, as must the VPN service. If you send traffic out both stacks at once this would be "Split Mode".
  3. A final option is that you might operate your VPN in Tunnel Mode, sending all communications (including Internet) through the VPN stack. In this case, when you are on the VPN all DNS would use the VPN's DNS. This is probably the most secure way since all internal traffic is sure to stay in the VPN.
share|improve this answer
2  
Excellent answer, covered all the options here. One other thing to note is that how it is configured can also depend on which VPN you're using - not all vendors' products support all the options. –  AviD Apr 18 '12 at 22:20

Depends on how your 0.0.0.0 route is setup after making a vpn connection. If it goes through your vpn GW, then it won't matter what ip you use, but how its getting there.

You can always define persistant routes to get your local GW to egress for your dns requests.

share|improve this answer

I was looking for an answer and have tested it out. I changed the following settings and watched my adapters with wireshark.

In Windows you can set up a priority for LAN-Adapters. If your vpn adapter recieved its own ip-settings e.g. from dhcp with its own dns-server entry, and your primary physical lan adapter has also a dns-entry configured, windows will use the dns server from the adapter with the highest priority. In Windows you can set this priority in the options menue from where the different lan-adapter can be configured (ip-adress etc.). Press Alt (to see the extended menue-bar) and navigate to "Advanced"-> "Advanced Settings". In the list the priority is determined by the top-down order of the adapters which can be changed by the arrow-symbols.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.