Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    ip leak, DNS? Using PIA Clueless.

    Scheduled Pinned Locked Moved DHCP and DNS
    18 Posts 5 Posters 2.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      edwardnizz
      last edited by

      I created a rule for some devices to bypass the VPN. Even those cant get on those sites.
      I tried to get help from PIA, they said it was the settings in the router.

      1 Reply Last reply Reply Quote 0
      • M
        mhertzfeld
        last edited by

        So when you say you are using the PIA DNS servers (209.222.18.222 and 209.222.18.218), what did you do to set that up? Did you configure the forwarder in pfsense to use those DNS servers?

        E 1 Reply Last reply Reply Quote 0
        • E
          edwardnizz @mhertzfeld
          last edited by

          @mhertzfeld No. How do i do that?

          E 1 Reply Last reply Reply Quote 0
          • E
            edwardnizz @edwardnizz
            last edited by

            @edwardnizz still haven't resolved my situation. Would appreciate some help.

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              You have not provided enough info to help you to be honest..

              Out of the box pfsense resolves, so you setting your vpn services dns wouldn't do anything. Unless you enabled forwarder mode in the pfsense resolver, or changed over to forwarder. Or set those on your actual client behind pfsense.

              The nonsense guides from those vpn services have all your traffic going through them vs setting up policy routing.. So unless you told pfsense not to pull routes, and setup policy routing correctly.. Its quite possible your still going out the vpn... Which yeah your bank and stuff will prob scream about..

              As to getting help from PIA - yeah good luck with that from the few threads seen around here about their help.. You prob be better off just rando clicking shit :) hehehehehe

              If your doing policy routing for a client and it shows a vpn IP when you google whats my ip vs your actual wan ISP ip then your policy routing is not working!

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              E 1 Reply Last reply Reply Quote 0
              • E
                edwardnizz @johnpoz
                last edited by

                @johnpoz well you didn't provide any insight either. Just alot of technical mumbo jumbo that you know i dont understand.
                I could just try from scratch or pay for support. Im willing to pay if anyone knows a good pay support site familiar with PFsense.

                GrimsonG 1 Reply Last reply Reply Quote 0
                • GrimsonG
                  Grimson Banned @edwardnizz
                  last edited by

                  @edwardnizz said in ip leak, DNS? Using PIA Clueless.:

                  Im willing to pay if anyone knows a good pay support site familiar with PFsense.

                  https://www.netgate.com/support/ you won't get better support than there.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by johnpoz

                    Well if you don't understand a techo term - then LOOK IT UP!!

                    You are paying PIA - have them help you!

                    Just at a loss to how people with no understanding of how this stuff works - are convinced they actually need a vpn to hide that they go the internet from from their own ISP. Then when shit doesn't work they don't get it why...

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    E 1 Reply Last reply Reply Quote 2
                    • E
                      edwardnizz @johnpoz
                      last edited by

                      @johnpoz you dont know me or what kind of time i have available to me.
                      I dont want to argue abd i dont spend hours in front of a computer.
                      If someone wants to get paid though whatever, there more then welcome to set a time where we coud go over this and sort it out.
                      Im just trying to solve my problem and thats all im saying about this today.

                      1 Reply Last reply Reply Quote 0
                      • M
                        mhertzfeld
                        last edited by

                        post some screen shots of the following

                        System\General Setup (specifically the DNS settings)
                        Services\DNS Forwarder
                        Services\DNS Resolver
                        Services\DHCP Server

                        E 1 Reply Last reply Reply Quote 2
                        • E
                          edwardnizz @mhertzfeld
                          last edited by

                          Thanks mhertzfeld! Here's what I got,
                          systemgeneral1.PNG
                          services-DNSresolver-1.PNG services-DNSresolver-2.PNG services-dnsfowarder.PNG
                          services-DCHPServer-1.PNG
                          services-DCHPServer-2.PNG
                          There's also a list of static mappings on the bottom of the DCHP Server page.

                          1 Reply Last reply Reply Quote 0
                          • B
                            bcruze
                            last edited by

                            under dns resolver. disabled dnssec. PIA doesn't support this.

                            then enable forwarding mode right below it. see if that clears anything up

                            E 1 Reply Last reply Reply Quote 1
                            • E
                              edwardnizz @bcruze
                              last edited by

                              @bcruze ok on the android device, using the chrome browser, I did get a NY area IP after the adjustment. I have no clue how that relates to DNS, but hey, its a win. Thanks!
                              However, and this is strange, but my laptop (which bypasses the VPN using a bypass rule) still cant connect to the local utility company. Even when i disable the bypass rule. I still dont connect.
                              I did do a workaround by setting up my ip4 settings in my laptop to use "Google " DNS servers 8888 and 8844. That seems to work.

                              Also all my android devices use the vpn. All my pc's are bypassed with aliases. When i checked the laptop i disabled the bypass rule and checked the other pc's as well. When disabled they did show PIA's server instead of my isp's. And when i enabled the rule it showed my real ip as it should.

                              B 1 Reply Last reply Reply Quote 0
                              • B
                                bcruze @edwardnizz
                                last edited by

                                @edwardnizz
                                http://dnsleak.com/

                                That will tell you if you are using their tunnel and dns

                                1 Reply Last reply Reply Quote 0
                                • M
                                  mhertzfeld
                                  last edited by

                                  Unless you are using the PIA DNS Servers for a reason I would recommend either setting all your DNS settings back to the defaults or follow the guide below to setup DNS over TLS.

                                  https://forum.netgate.com/topic/139771/setup-dns-over-tls-on-pfsense-2-4-4-p2-guide/2

                                  E 1 Reply Last reply Reply Quote 1
                                  • E
                                    edwardnizz @mhertzfeld
                                    last edited by

                                    I was just following there tutorial. I diddnt know if i had to use there DNS.
                                    Furthermore they never updated there tutorial to the new version.

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.