ip leak, DNS? Using PIA Clueless.
-
So when you say you are using the PIA DNS servers (209.222.18.222 and 209.222.18.218), what did you do to set that up? Did you configure the forwarder in pfsense to use those DNS servers?
-
@mhertzfeld No. How do i do that?
-
@edwardnizz still haven't resolved my situation. Would appreciate some help.
-
You have not provided enough info to help you to be honest..
Out of the box pfsense resolves, so you setting your vpn services dns wouldn't do anything. Unless you enabled forwarder mode in the pfsense resolver, or changed over to forwarder. Or set those on your actual client behind pfsense.
The nonsense guides from those vpn services have all your traffic going through them vs setting up policy routing.. So unless you told pfsense not to pull routes, and setup policy routing correctly.. Its quite possible your still going out the vpn... Which yeah your bank and stuff will prob scream about..
As to getting help from PIA - yeah good luck with that from the few threads seen around here about their help.. You prob be better off just rando clicking shit :) hehehehehe
If your doing policy routing for a client and it shows a vpn IP when you google whats my ip vs your actual wan ISP ip then your policy routing is not working!
-
@johnpoz well you didn't provide any insight either. Just alot of technical mumbo jumbo that you know i dont understand.
I could just try from scratch or pay for support. Im willing to pay if anyone knows a good pay support site familiar with PFsense. -
@edwardnizz said in ip leak, DNS? Using PIA Clueless.:
Im willing to pay if anyone knows a good pay support site familiar with PFsense.
https://www.netgate.com/support/ you won't get better support than there.
-
Well if you don't understand a techo term - then LOOK IT UP!!
You are paying PIA - have them help you!
Just at a loss to how people with no understanding of how this stuff works - are convinced they actually need a vpn to hide that they go the internet from from their own ISP. Then when shit doesn't work they don't get it why...
-
@johnpoz you dont know me or what kind of time i have available to me.
I dont want to argue abd i dont spend hours in front of a computer.
If someone wants to get paid though whatever, there more then welcome to set a time where we coud go over this and sort it out.
Im just trying to solve my problem and thats all im saying about this today. -
post some screen shots of the following
System\General Setup (specifically the DNS settings)
Services\DNS Forwarder
Services\DNS Resolver
Services\DHCP Server -
Thanks mhertzfeld! Here's what I got,
There's also a list of static mappings on the bottom of the DCHP Server page. -
under dns resolver. disabled dnssec. PIA doesn't support this.
then enable forwarding mode right below it. see if that clears anything up
-
@bcruze ok on the android device, using the chrome browser, I did get a NY area IP after the adjustment. I have no clue how that relates to DNS, but hey, its a win. Thanks!
However, and this is strange, but my laptop (which bypasses the VPN using a bypass rule) still cant connect to the local utility company. Even when i disable the bypass rule. I still dont connect.
I did do a workaround by setting up my ip4 settings in my laptop to use "Google " DNS servers 8888 and 8844. That seems to work.Also all my android devices use the vpn. All my pc's are bypassed with aliases. When i checked the laptop i disabled the bypass rule and checked the other pc's as well. When disabled they did show PIA's server instead of my isp's. And when i enabled the rule it showed my real ip as it should.
-
@edwardnizz
http://dnsleak.com/That will tell you if you are using their tunnel and dns
-
Unless you are using the PIA DNS Servers for a reason I would recommend either setting all your DNS settings back to the defaults or follow the guide below to setup DNS over TLS.
https://forum.netgate.com/topic/139771/setup-dns-over-tls-on-pfsense-2-4-4-p2-guide/2
-
I was just following there tutorial. I diddnt know if i had to use there DNS.
Furthermore they never updated there tutorial to the new version.
