Question How to resolve a DNS leak ?

[Deleted member 2783327]

I use a VPN with OpenVPN. I do not use VPN client software because of the bloat, telemetry and silly number of processes they need just to provide a connection to a "secure" tunnel.

I want to increase the security of my connection. I don't use it for working around geo-blocking - I just don't use streaming services. But places like eBay, Google, Paypal and dozens of others hate VPNs and either don't work at all or just give me constant grief. Server obfuscation is not available here.

As I was looking at ways of making my connection more secure I noted I have a DNS leak. My ISP, which is local to me, seems to be using a DNS server in Singapore. No matter what I do I cannot plug the leak.

I've configured my router to use only the VPN servers DNS. I prefer to use DHCP for PCs, but I even tried configuring the DNS servers on the NICs. I've flushed DNS Cache. I've even tried blocking the IP address of the rogue DNS server in the router, which doesn't work at all - I can still ping it. I even blocked the entire sub net.

But when I go to sites like ipleak.net and dnsleaktest.com they both show the singapore based DNS Server. The company name for that server is Datacamp, which seems wierd as they are a skills company.

Any ideas on how to get rid of this darned DNS server? I want all DNS traffic only going to the VPN's DNS servers, even when not connected to the VPN (which is rare).

FWIW: I did try the NordVPN client software, but it doesn't resolve the issue and their tech support knows less about VPN & Tech than I do.

 

[Deleted member 2783327]

Turns out most, if not all Australian ISPs are engaged in DNS hijacking, using transparent DNS proxies. Of the 5 I tested ALL were using the same DNS Proxy - datacamp - 89.187.162.162 and 89.187.162.215.

If you want to know which ISPs contact me.

Using a VPN with OpenVPN software the DNS proxy can be blocked using the block-outside-dns directive in the OpenVPN configuration file (.ovpn).

Sadly, of the 3 VPN providers I tested (NordVPN, ExpressVPN and Private Internet Access), none were aware of either the Transparent DNS Proxy practice or the block-outside-dns command.

The remaining goal is how to block the proxy when not connected to a VPN. I've written to my ISP but I suspect I'll have to work around them as I doubt they'll stop the practice. If I specify a DNS server at my end that is the DNS server I want used. To have an ISP interfere with that traffic (and do so in a rather unscrupulous manner), I find to be quite offensive.