celzero / rethink-app

DNS over HTTPS / DNS over Tor / DNSCrypt client, WireGuard proxifier, firewall, and connection tracker for Android.

Home Page:https://rethinkfirewall.com/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

WireGuard: DNS leak with advanced configuration

OrkoGrayskull opened this issue · comments

A WireGuard tunnel offers two options:

  • Simple
  • Advanced

If you use the "simple" configuration, each app is routed through the tunnel and the DNS server of the VPN provider is used.

If you use the advanced configuration, you can select individual apps to be tunnelled through the VPN tunnel. In this case, however, the DNS server stored in RethinkDNS is used instead of the VPN provider's DNS server. Is this a bug or is it intentional? Is it also possible to use the DNS server of the VPN provider in the advanced configuration?

I use RethinkDNS version v0.5.5n.

Is this a bug or is it intentional?

Intentional. The small text label in WireGuard's Advanced configuration UI should go: DNS is forwarded to <some user-preferred DNS upstream>....

Is it also possible to use the DNS server of the VPN provider in the advanced configuration

Not currently, no.

(closing this as dup of #1510, feel free to reopen)