[Solved] dnsleak results show no leak, but IP address lookup shows internal/lan IP

[rsaanon]

Good Evening folks.

Running latest pfSense 2.4.4. Have successfully configured VPN client on the pfSense that connects to my VPN provider; however, I have the following issue:

• When I check for dnsleak at dnsleak.com, the test passes with no leaks
• However, when I go to https://myip.is, the results actually show the internal/private host IP as well as the IP address allocated by the VPN provider.
  
  I would have like to have pasted the screen shot of the above two tests, but I'm not sure how to include the screenshots on this forum.

So, the question is how is https://myip.is site able to detect the internal IP address of the host when it should only be seeing the VPN provided external IP?

[netblues]

I only see my external ip.. (tried various ways , browsers, connections etc)
dns leak says I'm using opendns, which is true and intended (but a leak)
Now if it is an internal private host ip, certainly is no issue.
I suspect your browser
see this
https://www.whatismybrowser.com/detect/what-is-my-local-ip-address
However myip.is doesn't find my internal.
but www.whatismyip.com does...

[Rico]

@rsaanon said in dnsleak results show no leak, but IP address lookup shows internal/lan IP:

but I'm not sure how to include the screenshots on this forum

-Rico

[rsaanon]

Thanks @Rico I have now attached the screenshot.

[johnpoz]

Are you running proxy on pfsense? Looks like its handing over that info via X-Forwarded-For most likely.. Clearly it mentions proxy..

[Pippin]

Possibly webrtc, search for how to disable it in your browser.

[rsaanon]

@pippin Thanks for your reply.
I want the changes network-wide instead of just the client; therefore, would not like to change browser settings per machine. How can ensure complete anonymity so the external sites do not detect the internal address?

[rsaanon]

@johnpoz Yes, running Squid in Transparent mode. Looked for the x-forward-for in the proxy settings, but didn't find it. Where might that settings be? Thanks.

[johnpoz]

Its like nobody can even be bothered to look at the interface... Its right there dude!

Snake = Bitten!!

[rsaanon]

Nevermind. Got it! Thanks everyone for chiming in. Special thanks to @johnpoz for pointing in the right direction.

[rsaanon]

@johnpoz Rightfully said! Guilty as charged :) Thanks for your help. Now only if I can figure out how to mark this thread as "Solved" ;-)

[johnpoz]

Click edit on your first post and put [Solved} in the front of your subject...

[Gertjan]

To close resolve) this one :
@rsaanon said in [Solved] dnsleak results show no leak, but IP address lookup shows internal/lan IP:

I would have like to have pasted the screen shot of the above two tests, but I'm not sure how to include the screenshots on this forum.

Copy the image fist (hit the print screen touch on windows keyboard to have the entire screen or use the build in capture tool) and then Paste it here while your typing your post (windows PC : Ctrl-V) .