[SOLVED] Wireguard and dns leaks

[kris_ini]

@trendy

use IP when you connect to VPN (or make a hosts entry),

how can I do it ? or where can i read

[kris_ini]

@trendy

uci set network.wan.peerdns="1"

after this command i see more 2-3 ISP NS's , which did not exist before.
in which file are added this value after comand?

[trendy]

@kris_ini

option endpoint_host 'de2-wireguard.mullvad.net'

Either add this entry in /etc/hosts or use its IP.

@kris_ini

in which file are added this value after comand?

In /tmp/resolve.conf.auto

[kris_ini]

i fecit this command uci set network.wan.peerdns="0"
and added ip to /etc/hosts
vpn work , but with this leak

I have a feeling that it will never end!

i ask a question
eg: I set everything up first and added nothing in Interfaces - WAN in Luci

Should there be a leak?

[trendy]

You forgot to run

uci commit network 
service network restart

@kris_ini

I set everything up first and added nothing in Interfaces - WAN in Luci

Should there be a leak?

Yes, the peer DNS option is enabled by default.

[vgaetera]

Probably there's some misunderstanding.

@https://www.dnsleaktest.com/what-is-the-difference.html

The DNS leak test works by sending your client a series of domain names to resolve within a specific test domain. Each request is sent from your client to your configured DNS server. Even if you have configured a single DNS server, there may be many other servers that the request is passed on to in order to be resolved (normally to load balance the requests). For example if you configure Google DNS then you will often find 6-10 Google DNS servers which are fullfilling the DNS requests.

[kris_ini]

no connection
/hosts

127.0.0.1 localhost
de4-wireguard.mullvad.net

::1     localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters

uci set network.wan.peerdns="0"
uci commit network 
service network restart

[trendy]

In case you didn't understand it, you need to add the IP address of the vpn endpoint before the hostname, not just the hostname.