Accessing local resources behind expressvpn tunnel from openvpn server

[eibgrad]

one of the "issues" they were seeing is this.. See pictures of the DNS leak test. It shows the IP address of the server I was connected to..but on the results, it would show completely different IP addresses...and nordvpn support said it's leaks.

At some point it was working properly but then it just stopped and I started getting those results.
I tried Disabled, Relaxed, Strict and Exclusive.. all rendered the same results and was driving them crazy and they could not find a solution so that's why I cancelled it.
These are the results I had sent them when I was on their vpn.

You need to do some reading on that link I provided earlier. It will make clear how I feel about online DNS leak testing tools.

Tutorial - How to monitor DNS traffic in real-time

The following script allows for real-time monitoring of DNS on the router for the purposes of knowing what DNS servers are in use, and which network interfaces are being used. https://pastebin.com/AGNF8cC8 Overview One of the most difficult aspects of the router for users is managing DNS. DNS...

www.snbforums.com

 

[Tech Junky]

What I look for on the leak test is nothing coming back remotely close to where I'm located and not my ISP.

DNS Leak Tests

DNS Leak Test is a free tool for the internet allowing end users to test their DNS activity to see if their VPN or Proxy service is leaking DNS requests, effectively unmasking end user's privacy and security.

dnsleak.com

The reason I'm not concerned is because it's picking up the VPN IP and there may be other systems connecting through the same VPN endpoint that aren't quite as secure in their configuration. Also, I run everything through pihole for DNS anyway to block all of the tracking / telemetry / ads.

DNS Leak Test

The DNS Leak Test is a tool used to determine which DNS servers your browser is using to resolve domain names. This test attempts to resolve 50 randomly generated domain names, of which 25 are IPv4-only and 25 are IPv6-only.

browserleaks.com

I've noticed lately my geo location bouncing around a lot more with Nord from the region I connect to to the west coast / east / international and it can change with a page refresh on google.

DNS leak test and protection

Check if your VPN is working with NordVPN’s DNS leak test. Find and fix DNS leaks that could expose your data and compromise your privacy.

nordvpn.com

https://torguard.net/vpn-dns-leak-test.php -- this is the only one that spits back just the Nord server. It seems more like an error with how the other pages are coded and one mentioned using nslookup on the IP which really isn't going to do much since nslookup is supposed to basically trigger a name to IP translation but, you already have the IP so what's the point?

 

[macster2075]

I wonder why they were concerned then (nordvpn support). At some point when I did some of the dnsleak tests, it was coming back with only one IP and it matched the server I was using except the last digit of the IP was off by one... so instead of ending in .121 it was .122.

But this is before I was told about it not using DnsMasq. I wish it was a lot simpler for simpletons like myself. Maybe in future builds?

 

[macster2075]

Also, on my last results.. I would connect to New York server..but on the dnsleak results..the was only one IP, but the IP address that showed is from Kansas... is that normal?
Or should it match the IP address of the server I am connected to?

 

[Tech Junky]

It should really only be the one IP matching x.x.x.Y like the last one I posted. The sites running the test aren't 100% reliable which is why you have to read between the lines a bit. What I would do if you're in NY connect to another city like LA and run the test. If nothing comes back in NY then you're golden and don't worry about the residual results. They're meaningless. Use something other than Nord's DNS as well as it sometimes gets confused and doesn't work.