How to fix DNS leak with redsocks? (shows both socks5 DNS and my DNS)

Could you please help me? I have OpenWrt 21.02.2 on my Keenetic Extra II router. I have installed redsocks. Config:

base {
        log_debug = off;
        log_info = off;
        log = "syslog:local7";
        daemon = on;
        redirector = iptables;
}
redsocks {
        local_ip = 0.0.0.0; local_port = 12345;
        ip = SOCKS5_IP; port = SOCKS5_PORT; type = socks5;
}
redudp {
        local_ip = 0.0.0.0; local_port = 10053;
        ip = SOCKS5_IP; port = SOCKS5_PORT;
        dest_ip = 8.8.8.8; dest_port = 53;
        udp_timeout = 30;
        udp_timeout_stream = 180;
}
dnstc {
        local_ip = 127.0.0.1;
        local_port = 5300;
}

iptables:

        iptables -t nat -N REDSOCKS
        iptables -t nat -A REDSOCKS -d 0.0.0.0/8 -j RETURN
        iptables -t nat -A REDSOCKS -d 10.0.0.0/8 -j RETURN
        iptables -t nat -A REDSOCKS -d 127.0.0.0/8 -j RETURN
        iptables -t nat -A REDSOCKS -d 169.254.0.0/16 -j RETURN
        iptables -t nat -A REDSOCKS -d 172.16.0.0/12 -j RETURN
        iptables -t nat -A REDSOCKS -d 192.168.0.0/16 -j RETURN
        iptables -t nat -A REDSOCKS -d 224.0.0.0/4 -j RETURN
        iptables -t nat -A REDSOCKS -d 240.0.0.0/4 -j RETURN

        iptables -t nat -A REDSOCKS -p tcp --dport 80 -j REDIRECT --to-ports 12345
        iptables -t nat -A REDSOCKS -p tcp --dport 8080 -j REDIRECT --to-ports 12345
        iptables -t nat -A REDSOCKS -p tcp --dport 443 -j REDIRECT --to-ports 12345
	    iptables -t nat -A OUTPUT -p udp --dport 53 -j REDIRECT --to-port 5300

        iptables -t nat -A OUTPUT -p tcp -j REDSOCKS

        iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDSOCKS
        iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDSOCKS
        iptables -t nat -A PREROUTING -p tcp --dport 8080 -j REDSOCKS

It works. As a result it uses DNS from my WAN on the router (cloudflare 1.1.1.1). SOCKS5 is from South Korea. The problem is I got not only South Korea DNS from cloudflare but also my original country DNS from cloudflare. How do I fix that? I am windows user so it's hard for me.

  • Use the Local/Regional IP, not 1.1.1.1.
  • Run DNS thru a VPN, DoH, etc.