distilled
Senior Member
The documentation for configuring Mullvad in Merlin is quite clear, and works well, but it requires IPv6 to be configured as Native, and it doesn't seem like DoT DNS configuration settings will work. When IPv6 is disabled, the VPN tunnel does not connect, regardless of any DoT settings, IPv6 or otherwise. I have tinkered with this for several days to no profit, and could not find what I am looking for by searching around.
The documentation requires a particular set of DNS servers be configured in LAN / DHCP, however this is obviously for the client's resolution needs, and can be circumvented by manually configuring these on clients and disabling IPv6 on the clients. Without this manual configuration, the entire LAN must use Mullvad's IPv4 DNS servers and your ISP's IPv6 DNS, and doing this causes a failed DNS leak test.
The documentation as posted by Mullvad:
https://mullvad.net/en/help/asus-merlin-and-mullvad-vpn/
Does anyone have DoT + Mullvad configured in such a way as to pass leak tests? Some configuration of DNS Filter or selective routing, perhaps?
Thanks for any thoughts, hope everyone is having a productive new year so far.
The documentation requires a particular set of DNS servers be configured in LAN / DHCP, however this is obviously for the client's resolution needs, and can be circumvented by manually configuring these on clients and disabling IPv6 on the clients. Without this manual configuration, the entire LAN must use Mullvad's IPv4 DNS servers and your ISP's IPv6 DNS, and doing this causes a failed DNS leak test.
The documentation as posted by Mullvad:
https://mullvad.net/en/help/asus-merlin-and-mullvad-vpn/
Does anyone have DoT + Mullvad configured in such a way as to pass leak tests? Some configuration of DNS Filter or selective routing, perhaps?
Thanks for any thoughts, hope everyone is having a productive new year so far.