3

I have to go out for some days and I'll stay in a hotel. During these days I will also have to work on some websites code and VMs that call external APIs.

Not being a system administrator nor a security specialist, my concerns are about someone can sniff the wireless traffic of my hotel room.

My question is: Does turning-on a vpn protect all traffic that comes out from ones pc or I've to apply some specific configuration? Even the Filezilla and VirtualBox traffic would be encrypted?

I know few about this, but from what I know, my notebook will connect throught a secure tunnel, and once the request arrive at the other end of the VPN tunnel then there will be the open sea, and this is ok for me. It would be just like connecting from home, using an ftp connection at home is not secure, but I'm confident that no one is sniffing me at home.

I just would like to know that the connection from the hotel room to the other VPN endpoint is encrypted even for ftp and VMs. Beyond this I think that it would be the same as from my home, so using ftp and http will let someone else to read sent data.

I just wonna be sure that what I do in the room is not in plain text at least until the request reaches the VPN endpoint.

Any clarifications is appreciated

Thanks

4

If your VPN is configured properly all traffic is included. But, proper configuration is not guaranteed and in fact many VPN are not properly configured by default or cannot be configured properly at all. Typical problems are that they fail to support IPv6 or that the DNS lookup is still done through the local resolver and not through the VPN.

There are sites like dnsleaktest.com and ipv6leak.com which help you to determine if one of these typical problems affect you. It would be best to check this not only from the main system but from the virtual machines too to be sure.

The most secure way would be of course to use dedicated VPN hardware. In this case all traffic is going through this hardware and as long you don't have any additional network access (like WiFi in parallel to VPN) you can be more sure that there is no leak compared to a software only solution.

  • Thanks Steffen Ullrich I've checked 2 sites you talked about and both of these test showed that no leak was found. – webose Jul 27 '17 at 13:05
2

I just would like to know that the connection from the hotel room to the other VPN endpoint is encrypted even for ftp and VMs. Beyond this I think that it would be the same as from my home, so using ftp and http will let someone else to read sent data.

I just wonna be sure that what I do in the room is not in plain text at least until the request reaches the VPN endpoint.

If your VPN is correctly configure (with cipher), all trafic from the device where the VPN is installed to the VPN endpoint will be encrypted, even the trafic from your Virtual Machine.

If you want you can check yourself when the VPN is up, you can use Wireshark to check if the trafic is encrypted.

  • Thanks Florian, I voted up and I'll check my connection with Wireshark. – webose Jul 27 '17 at 13:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.