dslreports logo
 
    All Forums Hot Topics Gallery
spc
Search similar:


uniqs
818
HD5830Gamer
join:2012-08-14

HD5830Gamer

Member

L2TP problem

Hey guys, I was looking into Wireshark with L2TP connected and my real IP is hidden, however i see some things in blue with some of my real traffic leaking! such as certain parts of a site. This NEVER happens with PPTP.
HELLFIRE
MVM
join:2009-11-25

HELLFIRE

MVM

Screenshot of this?

Secondly, where was the capture taken from in relation to where the PPTP encryption was taking place?

Thirdly, and I'm sure I mentioned this from one of your earlier VPN posts HD5830Gamer, it all depends
WHAT is being tunnelled / encrypted by the VPN. If some program decides to go off on its own hook
and NOT go through the tunnel...

Regards
HD5830Gamer
join:2012-08-14

HD5830Gamer

Member

This »gyazo.com/70b3c035b981b5 ··· 55799973

»gyazo.com/1cca456e25aa79 ··· 55799982

Look at the Google. Happens on ALL sites. Some leakage.

And i really want to stick to L2TP because OpenVPN sucks. Too buggy and has It's own AI decides when it wants to connect.
HELLFIRE
MVM
join:2009-11-25

HELLFIRE to HD5830Gamer

MVM

to HD5830Gamer
What about a screenshot of the traffic that is encrypted? The first screenshot shows a standard DNS response from
the 8.x.x.x range back to your RFC-1918 IP address of 192.168.1.73. I'm not sure what I'm supposed to make of
the 2nd screenshot.

Also you didn't answer my other question -- where was the capture taken from in relation to where the L2TP encryption was taking place? i.e. are you both doing the L2TP VPN on the same PC as where you are doing the wireshark capture?

Regards
HD5830Gamer
join:2012-08-14

HD5830Gamer

Member

This never happens with PPTP.

I was using DNSCrypt. I went into the DNS settings and put OpenDNS in there »gyazo.com/e2154b73374793 ··· 55915220

And i don't see the leaking traffic. Maybe it was a DNS leak?
HELLFIRE
MVM
join:2009-11-25

HELLFIRE to HD5830Gamer

MVM

to HD5830Gamer
Possible HD5830Gamer, but as you really didn't answer any of my questions, it's a guess at this point.

Keep in mind, "it all depends WHAT is being tunnelled / encrypted by the VPN;" that is to say L2TP can
encrypt your DNS requests just as well as PPTP, but if some program decides it doesn't want to be
encrypted, it's not L2TP's fault.

Regards
HD5830Gamer
join:2012-08-14

HD5830Gamer

Member

It never happens with PPTP. It was a DNS leak. I took out the DNS servers and tested and i saw the unencrypted traffic. Put them back in and they were encrypted once again.

Also I had my times with OpenVPN and I'll never use it again.