Ubuntu 20.04 Network Manager Wireguard DNS Leak

steelmann

6/25/23, 11:16 AM

I added my Peer-Config from Wireguard to Network Manager manually:

[Interface]
Address = 10.13.13.5
PrivateKey = key
ListenPort = 51820
DNS = 10.13.13.1, lan

[Peer]
PublicKey = key
Endpoint = domainname:51820
AllowedIPs = 0.0.0.0/0

I get a successfull connection from wireguard. But I found out, that the DNS from Wireguard is not used. I get a DNS-Leak.

When I check the status from wg0. I get:

Link 14 (wg0)
      Current Scopes: DNS       
DefaultRoute setting: yes       
       LLMNR setting: yes       
MulticastDNS setting: no        
  DNSOverTLS setting: no        
      DNSSEC setting: no        
    DNSSEC supported: no        
  Current DNS Server: 10.13.13.1
         DNS Servers: 10.13.13.1
          DNS Domain: lan

Wlan has:

Link 2 (wlp59s0)
      Current Scopes: DNS        
DefaultRoute setting: yes        
       LLMNR setting: yes        
MulticastDNS setting: no         
  DNSOverTLS setting: no         
      DNSSEC setting: no         
    DNSSEC supported: no         
  Current DNS Server: 172.20.10.1
         DNS Servers: 172.20.10.1
          DNS Domain: ~.

And when I check my DNS requests via dnsleaktest.com I see that my Ubuntu uses the DNS from WLan and not from the wireguard. I read about to change the DNS Domain from Wireguard to "~."

When I make the change then I get a result that my ubuntu uses both DNS requests from Wlan and Wireguard. But I could not find any solutions to use only the DNS over Wireguard.

I read from a post from 2019 that this was a bug in Network Manager from Ubuntu. We are now in 2022 and is this bug still there?

One more info: When I use the same config over my Phone I have no DNS-Leaks.

0 + 0

network-manager

vpn

dns

wireguard

David

6/25/23, 5:22 PM

I see a Winegaurd question here with nothing to do with Ubuntu. Maybe ask them?

steelmann

6/26/23, 11:50 AM

I found that this Issue is discussed directly in the gitlab from NetworkManager. The Issue is not yet done. The Issue comes from NetworkManager and not from Wireguard Source: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/921

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Ubuntu 20.04 Network Manager Wireguard DNS Leak

TH: Ubuntu 20.04 Network Manager Wireguard DNS รั่ว

RO: Ubuntu 20.04 Network Manager Wireguard DNS Leak

RU: Утечка DNS в диспетчере сети Ubuntu 20.04 Wireguard

VI: Rò rỉ DNS của trình quản lý mạng Ubuntu 20.04

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.