Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-04 Thread David Sommerseth
On 03/07/2020 09:46, Marc SCHAEFER wrote: > On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote: >> DNSSec would put an end to this sort of snooping .. lol > > As Gert said, no, it won't. > > What you may want is DNS over HTTPS or over TLS. However, in that case, it's > the DNS provider

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-03 Thread tincanteksup
Thanks .. this appears clarify my mis-understanding. On 03/07/2020 08:46, Marc SCHAEFER wrote: On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote: DNSSec would put an end to this sort of snooping .. lol As Gert said, no, it won't. What you may want is DNS over HTTPS or over TLS. Ho

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-03 Thread tincanteksup
Thanks .. it would seem that I have been mis-informed about this for quite some time .. Today I learnt something ! On 03/07/2020 07:13, Gert Doering wrote: Hi, On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote: DNSSec would put an end to this sort of snooping .. lol Actually, it

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-03 Thread Marc SCHAEFER
On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote: > DNSSec would put an end to this sort of snooping .. lol As Gert said, no, it won't. What you may want is DNS over HTTPS or over TLS. However, in that case, it's the DNS provider that can snoop on you, but no longer your ISP. If your

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-02 Thread Gert Doering
Hi, On Fri, Jul 03, 2020 at 01:20:09AM +0100, tincanteksup wrote: > DNSSec would put an end to this sort of snooping .. lol Actually, it won't. DNSSec guarantees authencity, but does not encrypt. gert -- "If was one thing all people took for granted, was conviction that if you feed honest f

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-02 Thread tincanteksup
On 03/07/2020 00:12, Marco De Vitis wrote: Il 02/07/20 19:54, Selva Nair ha scritto:  1. The DNS of my LAN (i.e. my home router's IP) has been set as     default gateway for the OpenVPN interface. But I'll need to     remember changing it if I connect from elsewhere. That looks like a strang

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-02 Thread Marco De Vitis
Il 02/07/20 19:54, Selva Nair ha scritto: 1. The DNS of my LAN (i.e. my home router's IP) has been set as default gateway for the OpenVPN interface. But I'll need to remember changing it if I connect from elsewhere. That looks like a strange setting but probably doesn't hurt. I'm not

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-02 Thread Selva Nair
Hi On Thu, Jul 2, 2020 at 1:08 PM Marco De Vitis wrote: > Il 01/07/20 21:18, Selva Nair ha scritto: > > fwiw, try removing the pushed block-outside-dns by adding this to the > client config: > > pull-filter ignore block-outside-dns > > > Hi, > I tried this and indeed it fixes the issue, Windows

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-02 Thread Marco De Vitis
Il 01/07/20 21:18, Selva Nair ha scritto: fwiw, try removing the pushed block-outside-dns by adding this to the client config: pull-filter ignore block-outside-dns Hi, I tried this and indeed it fixes the issue, Windows detects internet connectivity. But it introduces a different issue rela

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Marco De Vitis
Il 01/07/20 18:36, Selva Nair ha scritto: This is surprising as the routing table shows you are not using redirect-gateway and, except for some server side internal networks and one or two external addresses, all targets are routed in clear via the LAN gateway. Indeed, this is how my company VPN

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Selva Nair
On Wed, Jul 1, 2020 at 3:18 PM Selva Nair wrote: > > Hi, > > On Wed, Jul 1, 2020 at 3:09 PM Marco De Vitis wrote: .. > > But why should this make NLA fail? DNS resolution using the VPN DNS > > server appears to work fine for every address, including the one which > > Microsoft uses for the conn

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Selva Nair
Hi, On Wed, Jul 1, 2020 at 3:09 PM Marco De Vitis wrote: > > Il 01/07/20 20:21, tincanteksup ha scritto: > > The post you made on the forum suggests that you have set a default > > gateway on the TAP adapter .. > > Do not do that. > Well yes, it's an attempt I made because I saw everyone in that

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Marco De Vitis
Il 01/07/20 20:21, tincanteksup ha scritto: The post you made on the forum suggests that you have set a default gateway on the TAP adapter .. Do not do that. Well yes, it's an attempt I made because I saw everyone in that thread telling that this fixed the issue. But it didn't for me (and I did

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Marco De Vitis
Il 01/07/20 18:43, tincanteksup ha scritto: This is the reason as explained by Micro https://forums.openvpn.net/viewtopic.php?f=1&t=27321 Thanks, I already found many descriptions of the reason for this issue, it really looks the same issue I'm experiencing, but the strange thing is that m

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread tincanteksup
Hi, On 01/07/2020 19:03, Marco De Vitis wrote: Il 01/07/20 18:43, tincanteksup ha scritto: This is the reason as explained by Micro https://forums.openvpn.net/viewtopic.php?f=1&t=27321 Thanks, I already found many descriptions of the reason for this issue, it really looks the same issue I

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Marco De Vitis
Il 01/07/20 18:43, Jan Just Keijser ha scritto: what happens if you add to your config   route 0.0.0.0 0.0.0.0 vpn_gateway Thanks, I just tried it, I saw the route added in "route print", but the result was the same. I would say that NLA usually breaks 2-3 minutes after connecting to the

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Selva Nair
Hi On Wed, Jul 1, 2020 at 12:45 PM Jan Just Keijser wrote: > > Hi, > > On 01/07/20 14:51, Marco De Vitis wrote: > > Hi, > I use OpenVPN client 2.4.9 on Windows 10 (v2004), and I have issues with the > Network Location Awareness (NLA) Windows service. > > The issue is essentially described here,

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Jan Just Keijser
Hi, On 01/07/20 14:51, Marco De Vitis wrote: Hi, I use OpenVPN client 2.4.9 on Windows 10 (v2004), and I have issues with the Network Location Awareness (NLA) Windows service. The issue is essentially described here, even though it dates back to Windows 7: https://docs.microsoft.com/it-it/a

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread tincanteksup
This is the reason as explained by Micro https://forums.openvpn.net/viewtopic.php?f=1&t=27321 On 01/07/2020 17:36, Selva Nair wrote: Hi On Wed, Jul 1, 2020 at 11:21 AM Marco De Vitis wrote: Hi, I use OpenVPN client 2.4.9 on Windows 10 (v2004), and I have issues with the Network Locat

Re: [Openvpn-users] OpenVPN issues with Windows NLA

2020-07-01 Thread Selva Nair
Hi On Wed, Jul 1, 2020 at 11:21 AM Marco De Vitis wrote: > > Hi, > I use OpenVPN client 2.4.9 on Windows 10 (v2004), and I have issues with the > Network Location Awareness (NLA) Windows service. > > The issue is essentially described here, even though it dates back to Windows > 7: > https://d