Author Topic: Avast SecureDNS is leaking.  (Read 925 times)

0 Members and 1 Guest are viewing this topic.

Offline ddabrahim

  • Jr. Member
  • **
  • Posts: 59
Avast SecureDNS is leaking.
« on: May 08, 2022, 10:55:23 PM »
Hi.

I'm using Avast Premium Security and I do believe Avast Secure DNS is leaking.
I do check my DNS regularly at https://safer.com to make sure it is safe.
Normally it is fine it is shown either Avast or my ISP DNS server.

However for the past week, every day safer.com report that my connection is going through a different DNS server.

So far this is the ones that regularly come up:

M247 Ltd in Ireland
UK2.NET in USA
Leaseweb in USA

All 3 is a cloud service provider so I can imagine Avast using them but it is also possible Avast SecureDNS is leaking. Figured I report it if that was the case.

Sometimes it is go back to normal and show me Avast or my ISP but most of the time one of the above comes up.
I have checked and my DNS settings are normal.
Have also tried this link and SecureDNS seems to be working, it is report that I am protected:
http://securedns.ff.avast.com

All web browsers are affected
Safari 15.4
Chrome 101.0.4951.54
Firefox 99.0.1

macOS 12.3.1
Avast Premium Security 15.2 (9b04f639280d)

Other devices running Avast Premium Security and Windows, Android, iOS and connected to the same hub are not affected, so this is local to my Mac.

Thank you.

Offline ondrej.kolacek

  • Avast team
  • Sr. Member
  • *
  • Posts: 349
Re: Avast SecureDNS is leaking.
« Reply #1 on: May 09, 2022, 03:04:30 PM »
Hello,
if you are talking about Real Site shield in Avast Premium Security, Avast does not change the destination DNS server in any way; it just double checks that the content the original DNS server returns is not maliciously altered.
Kind regards,
Ondrej Kolacek

Offline ddabrahim

  • Jr. Member
  • **
  • Posts: 59
Re: Avast SecureDNS is leaking.
« Reply #2 on: May 09, 2022, 11:14:47 PM »
Hi.

Thank you for the reply. Not sure what feature I am talking about to be honest.
It is weird that you say Avast does not change the DNS server in any way because usually safer.com report that I am using a DNS server by Avast.
Can't remember the exact IP right now, I believe it is beginning with a 5. that's all I can remember. Currently safer.com report that I am using a DNS server by M247 Ltd which is unusual. Normally it is report that I am using a DNS server by either Avast or my ISP.

In case it is uncertain what am I talking about and Avast is not supposed to change the DNS, I'll report back with the exact IP when safer.com report that I am using a DNS by Avast.

Thank you.

Offline ddabrahim

  • Jr. Member
  • **
  • Posts: 59
Re: Avast SecureDNS is leaking.
« Reply #3 on: May 10, 2022, 11:11:38 PM »
So, as I have promised I am back with the information regarding the Avast DNS servers.

Currently safer.com report that I am using a DNS server by Avast Software s.r.o in Miami, Florida, USA
DNS IP: 77.234.42.21

Screenshot:



If I am not supposed to be using an Avast DNS server then I have no idea what is happening. Sorry.
This is what safer.com report usually but for the past couple weeks I begin to see the above mentioned unknown DNS servers by M247 Ltd, UK2.NET and Leaseweb.

I would appreciate any advice.

Thank you.
« Last Edit: May 10, 2022, 11:19:36 PM by ddabrahim »

Offline krahulik

  • Avast team
  • Sr. Member
  • *
  • Posts: 285
Re: Avast SecureDNS is leaking.
« Reply #4 on: May 16, 2022, 09:34:58 AM »
Hi,
do you use Avast SecureLine VPN service? When you are connected to the VPN, the system uses the DNS configured during a VPN session establishment and the DNS requests are routed through the VPN tunnel.

Best Regards,
Martin

Offline ddabrahim

  • Jr. Member
  • **
  • Posts: 59
Re: Avast SecureDNS is leaking.
« Reply #5 on: May 18, 2022, 07:55:19 AM »
Hi.

No I don't use SecureLine VPN but Avast Premium has setup a VPN and network configuration on my system:





It tells me to use Avast to change configuration but I can't find such configuration in the Mac version of Avast.

Thank you.