Avast WEBforum

Consumer Products => Avast SecureLine VPN => Avast SecureLine VPN for Windows => Topic started by: REDACTED on January 25, 2016, 02:55:22 PM

Title: DNS leak
Post by: REDACTED on January 25, 2016, 02:55:22 PM
Hello,

I´m running Avast SecureLine on 4 devices, notebook and desktop PC with Windows 10 Pro and 2 iPhones. When I run DNS leak test, iOS devices pass it without issue but when I run the same test repeatably on both PCs, I´m leaking DNS (not in all tests but when I ran tests repeatably, in some).

I have tried steps mentioned here:

https://www.avast.com/en-us/faq.php?article=AVKB233#artTitle
https://www.avast.com/en-us/faq.php?article=AVKB248

So it shouldn´t be WebRTS issue and neither the second DNS related issue.

I can live with DNS leaks on my desktop at home but on my notebook which I use on different networks it´s a different story and if I won´t find a solution this VPN service loses it´s purpose (I do not care if I´m anonymous on internet itself, but I want to be anonymous on net between my computer and Avast VPN server).

PCs do not pass DNS leak test on neither newest Firefox (WebRTC tuned off through addon), Microsoft Explorer and Microsoft Edge.

Thanks for any further advices.



My original post about this issue in Czech language can be found here: https://forum.avast.com/index.php?topic=181430.0
Title: Re: DNS leak
Post by: REDACTED on January 26, 2016, 09:07:39 AM
Okay...  :P

It seems flushing DNS after each connection to VPN helps (ipconfig /flushdns) but didn´t have time for extensive testing yet. Will do so in next few days.
Title: Re: DNS leak
Post by: schmidthouse on January 27, 2016, 01:17:13 AM
Okay...  :P

It seems flushing DNS after each connection to VPN helps (ipconfig /flushdns) but didn´t have time for extensive testing yet. Will do so in next few days.

Let us know what you find. :)
Title: Re: DNS leak
Post by: REDACTED on January 27, 2016, 12:08:49 PM
It doesn´t work.

It looked like it did for a while... I was testing DNS leaks whole day and at late afternoon I got my first leak meaning it´s still not secure. I have checked Avast Secure line TAP adapter settings, there is even the static IP address for DNS server, so it should be ok but simply it´s not working (at least not reliably)...

Since yesterday I have tried 3 other VPN services. Currently I´m running NordVPN on trial and so far so good... Will let you know if this one works...

By the by... I have read on different forums (reddit maybe) that this - https://www.avast.com/en-us/faq.php?article=AVKB233#artTitle - is misleading, because it doesn´t work anymore under Win 10. Not sure, just mentioning what I read elsewhere.
Title: Re: DNS leak
Post by: schmidthouse on January 27, 2016, 06:43:09 PM
It doesn´t work.

It looked like it did for a while... I was testing DNS leaks whole day and at late afternoon I got my first leak meaning it´s still not secure. I have checked Avast Secure line TAP adapter settings, there is even the static IP address for DNS server, so it should be ok but simply it´s not working (at least not reliably)...

Since yesterday I have tried 3 other VPN services. Currently I´m running NordVPN on trial and so far so good... Will let you know if this one works...

By the by... I have read on different forums (reddit maybe) that this - https://www.avast.com/en-us/faq.php?article=AVKB233#artTitle - is misleading, because it doesn´t work anymore under Win 10. Not sure, just mentioning what I read elsewhere.

This DNS leaking has been posted about for some time now and seems is still a 'major concern'.
Hopefully Avast team will resolve this issue. DNS leaking should be, for obvious reasons, a priority!
Title: Re: DNS leak
Post by: REDACTED on January 28, 2016, 08:47:56 AM
I can confirm that NordVPN is working as intended.

Avast Premier is interfering with it though:

1) On notebook I have to turn Avast off before I connect to VPN, then I can turn Avast shields back on (probably some Firewall settings, who knows).

2) If Avast is on, in DNS leak tests I can see Avast DNS server in every test. If Avast is off, I can only see the VPN provider DNS as it ?should be?. I tried setting only firewall off but the Avast server, to my surprise, is still there - so to what part of Avast, if not to firewall shield, is this related (EDIT: It´s related to safe DNS component of Avast Premier)...

Interesting tinkering. 8)

EDIT:

I have downgraded from Avast Premier to Avast Free Antivirus and all issues are gone (there is no firewall and no safe DNS option in free antivirus, yay). Looking back I had 80% tools from Avast Premier permanently turned off anyway, the only reason I liked that version were automated updates of outdated software - I can live without that. ;)
Title: Re: DNS leak
Post by: schmidthouse on January 29, 2016, 12:17:11 AM
Just a thought. When installing Avast Premier did you use the Custom Install option in the installer?
When using Custom Install you can choose to NOT INSTALL the Firewall and all the tools/ added components in the 'Tools' column. Not then needing to disable anything.
Title: Re: DNS leak
Post by: REDACTED on January 29, 2016, 08:02:26 AM
That´s a good thought.

I have actually done a custom install of free antivirus and I have installed only 3 main shields + software updater + home network security.

I´m not sure what else I would install from Premier though. Well software updater from Premier would update automatically that´s true. And there is Antispam. Question is if those two added modules are worth the price of Avast Premier in a long term (I have active license for the product for at least a year yet).
Title: Re: DNS leak
Post by: setchemist on March 06, 2016, 02:52:47 PM
Okay...  :P

It seems flushing DNS after each connection to VPN helps (ipconfig /flushdns) but didn´t have time for extensive testing yet. Will do so in next few days.

I noticed a similar problem: DNS leak occurs when connected to SecureLine VPN.
I checked with https://dnsleaktest.com and it showed my original provider IP.
Recommendations on the same site worked well:
1) "ipconfig /flushdns" after the VPN connect,
2) "netsh interface IPv4 set dnsserver <connection name> static 0.0.0.0 both"
3) "netsh interface IPv4 set dnsserver <connection name> dhcp" after the VPN disconnect to enable web-surfing

However, I'm still disappointed by the fact that SecureLine allows DNS leaking.
I'm with Win7 and cannot find any settings like described in " https://www.avast.com/en-us/faq.php?article=AVKB233#artTitle" for Win8/10
Title: Re: DNS leak
Post by: REDACTED on March 08, 2016, 12:20:12 AM
I even got the "Secure DNS" option checked in Avast Internet Security... and I still got DNS leaks with SecureLine... Does this count for a refund?
Title: Re: DNS leak
Post by: Davidek on March 08, 2016, 08:59:10 AM
Hi All,

We have  release coming in the next couple weeks which will address this issue

Davidek
Title: Re: DNS leak
Post by: setchemist on April 01, 2016, 07:25:16 PM
Dear Davidek,

How is your release going?
SecureLine still has DNS leak.

Best wishes!
Title: Re: DNS leak
Post by: Davidek on April 04, 2016, 02:55:02 PM
Hi setchemist,

The release looks good and should be out soon.  I will post back in the coming days with specific info on that. Thanks,

Davidek
Title: Re: DNS leak
Post by: setchemist on April 17, 2016, 10:38:56 PM
I have updated Avast today,
but SecureLine still has the same DNS leak,
as before.
Is this problem going to be solved?

DNS flushing is really annoying,
and connection is lost in every 15-20 minutes,
so I have to repeat the procedure time to time.
It's definetely not the way the true VPN should work.
Title: Re: DNS leak
Post by: schmidthouse on April 18, 2016, 05:36:05 PM
This DNS issue should be a 'major priority' however it has been over a month since Davidek post on March 08.
Considering how long users have expressed their concerns, IMO this is simply not acceptable!
Title: Re: DNS leak
Post by: DavidR on April 18, 2016, 05:50:50 PM
This DNS issue should be a 'major priority' however it has been over a month since Davidek post on March 08.
Considering how long users have expressed their concerns, IMO this is simply not acceptable!

He made another post, Reply #12 on the 4th April, whilst this is still 2 weeks ago.
Title: Re: DNS leak
Post by: schmidthouse on April 18, 2016, 06:01:10 PM
This DNS issue should be a 'major priority' however it has been over a month since Davidek post on March 08.
Considering how long users have expressed their concerns, IMO this is simply not acceptable!

He made another post, Reply #12 on the 4th April, whilst this is still 2 weeks ago.

That's correct David with a post then stating "the coming days"
My point was simply that this issue has been a concern of users for "months"
Title: Re: DNS leak
Post by: DavidR on April 18, 2016, 06:28:31 PM
I will try to give this a nudge, considering that we have recently had a program update, which clearly hasn't resolved the issue.
Title: Re: DNS leak
Post by: Davidek on April 18, 2016, 08:27:48 PM
Hi All,

Many apologies for not updating this thread sooner.  The fix for DNS leaks was released just a couple days after my last post on April 4th.  Again, sincere apologies for the lack of communication.

It was definitely a priority to fix for us.  However, it was pretty complicated to get it working properly, especially on Win7.  I understand the frustration this caused but the good news is that it is fixed now.

If anyone feels that it's still an issue on their PC please let us know.

Best regards,

Davidek
Title: Re: DNS leak
Post by: setchemist on April 19, 2016, 11:25:21 PM
Yes, it is still an issue!

dnsleaktest.com
still gave me my original IP and name of my provider
after "standard test",

and sites banned in Russia (like lurkmore.to) are still unavailable
(earlier on there was redirect to Roskomnadzor site), now it's just ERR_CONNECTION_TIMED_OUT
Title: Re: DNS leak
Post by: Davidek on April 20, 2016, 02:27:44 PM
Hi setchemist,

The leak fix is for Win7 SP1 with hotfix KB2964643 installed, for Win8, Win8.1 and Win10.

You can check if you have the hotfix by going to the control panel and checking in the Windows Update section, then Check Update History on the left.  You can sort the list by name, it will make it much easier to find the Hofix section.

If you don't have the hotfix, you can find it here:  https://support.microsoft.com/en-us/kb/2964643

Please post back if this helps or if the issue still persists.

We'll also add this to our FAQ section asap so others can find it with greater ease.

Best regards,

Davidek
Title: Re: DNS leak
Post by: setchemist on April 21, 2016, 09:35:00 AM
Thank you, Davidek!

Finally, everything's fine,
no leak, no more annoying DNS flushing.