Using OpenVPN and having DNS Leak

Question

I've only ever used Windows and this is my first time with a Raspberry Pi. All I wanted is to be connected to a VPN while acting as a hotspot so that my devices that connect to it will also be connected to the VPN.

Here's what I've done so far:

1. Use this guide: https://howtoraspberrypi.com/create-a-wi-fi-hotspot-in-less-than-10-minutes-with-pi-raspberry/
2. Was able to connect but no internet so i had to

Code: Select all

net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -j MASQUERADE

3. Use this guide for openvpn: https://pimylifeup.com/raspberry-pi-vpn-access-point/
4. Substitute my VPN provider's info, everything connects but there's a DNS leak so I add:

Code: Select all

   script-security 2
   up /etc/openvpn/update-resolv-conf
   down /etc/openvpn/update-resolv-conf

but DNS leak is still there.

Can you guys suggest what should I do?

Answer 1

Your iptables command conflicts with the one from the VPN tutorial, which specifies the interface,

sudo iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE

Also you may need to set a definite IP address for a DNS server, as the tutorial explains, so your internet router doesn’t specify itself as the DNS server (and then forwards your DNS queries through the unencrypted connection).

Answer 2

Try this

sudo nano /etc/dnsmasq.conf

My internet is connected via eth0 then theres a vpn connection turned on

interface eth0
static ip_address=192.168.1.80/24  # Static ip for your rpi
static routers=192.168.1.254       # your Routers ip
static domain_name_servers=1.1.1.1 # Dns Cloudfare Server


interface=wlan0       # Use interface wlan0 
server=1.1.1.1        # Dns Cloudfare Server
dhcp-range=192.168.17.100,192.168.17.120,255.255.255.0,24h # IP range and lease time

sudo reboot
that should fix the dns leak