Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Virtual Private Networking » How do I prevent DNS leak through VPN?
Uniqs:
761
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
VPN Tunnel »
« VPN - no ping  

archer2

@ptm.ro

How do I prevent DNS leak through VPN?

I'm using EAP-TTLS encryption VPN. The software is called SecureW2. I've found a guide on how to fix the DNS leak for OpenDNS, but how do I do it for SecureW2? Also, is leaking DNS a big security threat? (I'm assuming yes)

Here's the link for the OpenDNS guide that I've found.
»xerobank.com/support/articles/ho···s-leaks/

stefaanE
Premium
join:2002-07-10
Luxembourg
·Redwood Virtual

Re: How do I prevent DNS leak through VPN?

DNS information is meant to be public, so leaking it cannot be a big security threat.

If you're talking about leaking internal DNS information, it hardly constitutes a threat, especially if you're using the customary private address ranges (10.x.x.x and friends). These ranges aren't routed on the Internet, and hence cannot be used as attack vectors.

The real security risk would be to use public addresses for internal systems, and not providing proper protection to these systems (especially if they are Windows based). In this case, leaking DNS information through a VPN is the least of your worries.

Take care,

Stefaan
--
"Technically, Windows is an 'operating system,' which means that it supplies your computer with the basic commands that it needs to suddenly, with no warning whatsoever, stop operating." -Dave Barry
rjs1003

join:2002-12-04
united kingd

Re: How do I prevent DNS leak through VPN?

DNS leaks...
I assume you're talking about where the dns requests go out to the local ISP even though other traffic gets sent via the tunnel (happens with typical MS-PPTP setups for example).
If you're using a VPN to prevent people seeing what you're browsing (eg if you're in a country where you don't want the government to see what you're accessing or you're using the VPN to access sites which the government blocks) then this kind of DNS leak allows a good idea of where you're browsing to... and also allows for a censor to change the address that is returned, leading your PC to who-knows-what-site.
Otherwise, leaking of local addresses is as stefaanE said, much less of an issue. Not information I like to get outside my firewall but not a disaster by itself (though of potential use to hackers trying to exploit any weaknesses your firewall does have)

Bob
Forums » Up and Running » Virtual Private NetworkingVPN Tunnel »
« VPN - no ping  


Friday, 04-Dec 03:25:11 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [162] Comcast Releasing Promised Usage Meter
· [140] Avast Antivirus Has Gone Mad
· [104] Graduate Student Unveils Sprint's GPS Sharing With Feds
· [100] Comcast Makes NBC Universal Acquisition Official
· [85] Google Invades ISP, OpenDNS Turf With Google Public DNS
· [81] Latest Consumer Reports Survey Not Kind To AT&T
· [70] Baltimore To Ban Lazy Cable Installs
· [65] Sprint Defuses GPS Privacy Media Bomb
· [64] Broadband Killed The Game Console
· [59] FCC Ponders Moving From PSTN To IP Voice
Most people now reading
· False positive in Avast! or is it real? [Security]
· Windows 7 boot manager editing questions [Microsoft Help]
· Heating - my dad gave me this advice... [Home Repair & Improvement]
· [Business] how to bridge a smc 8014 business class modem [Comcast HSI]
· [WotLK] Whats the level 80 pve spec for mages? [World of Warcraft]
· Do I have a problem due to AVAST? [Security]
· Using AirMax to provide triple play services? [Wireless Service Providers]
· Warrior tank seem underpowered these days [World of Warcraft]
· [Newsgroups] Newzleech down? [Filesharing Software]
· Linux is terrorist - according to MS... [All Things Unix]