You have been subscribed to a public bug:

Hi,
After connecting the VPN 

# killall -USR1 dnsmasq

# tail syslog.log
...
Jul 13 02:18:56 tp dnsmasq[1476]: time 1499905136
Jul 13 02:18:56 tp dnsmasq[1476]: cache size 0, 0/0 cache insertions re-used 
unexpired cache entries.
Jul 13 02:18:56 tp dnsmasq[1476]: queries forwarded 154, queries answered 
locally 1
Jul 13 02:18:56 tp dnsmasq[1476]: queries for authoritative zones 0
Jul 13 02:18:56 tp dnsmasq[1476]: server 198.18.0.1#53: queries sent 0, retried 
or failed 0
Jul 13 02:18:56 tp dnsmasq[1476]: server 198.18.0.2#53: queries sent 0, retried 
or failed 0
Jul 13 02:18:56 tp dnsmasq[1476]: server 192.168.0.254#53: queries sent 12, 
retried or failed 0   

The first two name server are provided by the vpn connection. 
The last 192.168.0.254 name server is running on my local router and forward 
request to my ISP (this is the default name server when VPN is not activated).

When I query the DNS, queries are sent to each name server which makes a
DNS information leaking to my ISP

I validated that by the mean of tcpdump on eth and tun interfaces and
also by using  that site: https://www.dnsleaktest.com/

I tried to force the VPN  DNS server IPs in the VPN configuration (edit Vpn 
connection -> ipv4 - > Automatic Adresses only ..) but the result is the same. 
 
dnsmasq must not have the local DNS present while VPN connection is established.

** Affects: dnsmasq (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: bot-comment xenial
-- 
Ubuntu 16.04 VPN : DNS information leaking  through dnsmasq
https://bugs.launchpad.net/bugs/1704288
You received this bug notification because you are a member of Ubuntu Touch 
seeded packages, which is subscribed to dnsmasq in Ubuntu.

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to