On 04/01/2017 06:22 PM, Ed Greshko wrote:
On 04/01/17 21:42, William Oliver wrote:
> I'm using Fedora 25 on an HP laptop with KDE. I commonly use a VPN
> service, but it leaks ipv6 addresses. This seems to be a common
> problem with VPN and ipv6, from what I've read on the internet.
> So, I've turned off ipv6 for my wireless interface, and that seems to
> solve the problem. However, I just can't help but think that this will
> eventually cause a problem somewhere.
> Is there a better solution for ipv6 leakage with a vpn on Fedora 25
> other than just turning it off?
Do you use IPv6 via your ISP or a tunnel under non-VPN situations? How
many network interfaces do you have?
I thought that by a leak it is meant that when you're connected to a VPN
and you'd want all traffic to go via the VPN and your VPN provider
doesn't concurrently support IPv4 and IPv6 (I don't know one that does)
there may be cases when you make a DNS request you get the IPv6 address
of the site and thus your traffic doesn't go via the VPN.
All the suggestions I've seen are to disable IPv6 while using a VPN.
This would be easy if you use a script to start the VPN. Or you could
run a script prior to connecting using NetworkManager. The script would
echo "1" > /proc/sys/net/ipv6/conf/(interface name)/disable_ipv6 for
each interface on the system.
Verizon and Comcast provide IPv6 routing.
You really need to configure your VPN to also tunnel IPv6. Get into the
habit. IPv6 is actually being effectively deployed. The more you
delay, the more issues you will have.