[Solved] VPN ipv6 leaks with ivpn - 10III

General
#1

Hi there,

I’am having a hard time configuring vpn while blocking non-vpn connections on my Xperia 10 III.

I configured the vpn follwing the official documentation and the interface shows a connected status but when I check my IP, the v4 is the expected vpn IP but not the ipv6.

  • I read this similar issue which concludes 4.5 should have solved the issue but not in my case it seems.
  • I read several other posts which made me update from 4.5.0.18 to 4.5.0.19 for CLAT support ; it didn’t help.
  • I also read a post about disabling ipv6 with sysctl, it didn’t do the trick neither.

Here is the config :

client
dev tun
proto udp
remote xxx.xxx.xxx.xxx 2049
auth-user-pass
resolv-retry infinite
nobind
persist-tun
persist-key
persist-remote-ip
cipher AES-256-CBC
dhcp-option DNS xxx.xxx.xxx.xxx
tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA
remote-cert-tls server
verify-x509-name fr name-prefix
key-direction 1
comp-lzo no
verb 3
;ca ca.crt

What did I do wrong here ? How can I fix this and get a full vpn coverage ?

Best,
Alex

#2

Please read the CLAT debugging thread from here onwards - CLAT in 4.5.0.19 is not yet addressing the VPN. You can contribute, by sending log files to the PR author, also here for tcpdump. If you have a public VPN provider which supports IPv6 (?), that would be a plus.

1 Like
#3

Thank you @canne for pointing this feed, this answer from @Fubo solved the issue by disallowing ipv6 connection through mobile network : switching from dual to IP.

I would love to contribute to SFOS but I have very little time now. Will try to patch CLAT and submit the logs during the week-end.

2 Likes