2

My ISP is using a transparent proxy to intercept my DNS lookup requests when using VPN. Is there a way to prevent that? I am using Lubuntu if that makes any differance.

  • Umm that's not good. I would be inclined to part company with that service provider. – voices Nov 6 '15 at 7:37
2

With a properly setup VPN all DNS traffic will be done through the VPN and cannot be intercepted. So you might check the configuration of your unknown VPN solution you use. Apart from that - how did you determine that your ISP is doing what you claim?

  • dnsleaktest.com only my ISP shows up. On other networks the VPN provider shows up (have tried on multiple networks and providers). – Rectifier Nov 6 '15 at 7:22
  • @Rectifier: which still leaves the question what kind of VPN you have and how did you configure it. BTW, some VPN don't handle environments properly where IPv6 is available, that is only IPv4 is sent through the VPN. If you are in such environments it might be that DNS traffic, youtube etc is done with IPv6 and thus bypasses the VPN. – Steffen Ullrich Nov 6 '15 at 7:45
  • openvpn, I used the guide on the site of my vpn provider (ovpn [swedish]). Here is the solution for my problem on windows: dnsleaktest.com/how-to-fix-a-dns-leak.html. I dont know how to do this on ubuntu though. – Rectifier Nov 6 '15 at 8:19
  • @Rectifier: OpenVPN is one of the VPN solutions which seems to be affected by the IPv6 problem. But I don't know if this the relevant in your case since I don't know if you have IPv6 connectivity. See also askubuntu.com/questions/440302/… – Steffen Ullrich Nov 6 '15 at 8:26
0

DoT (DNS over TLS) or DoH (DNS over HTTPS) are common keywords nowadays, these big internet players such as Cloudflare or Google already had their resolvers supported.

You can set up your own servers/client while connecting via VPN to prevent this.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.