I’m completely new in linux, I know the basics commands only (but I’m searching about this for 5 days ) .
Im using Fedora now, and tried to set a openvpn with a config file from my vpn provider (surfshark).
I just want to:
1- disable IPv6 (surfshark does not support it)
2- change DNS (prevent dns leaking)
3- set up to vpn autostart with system (this is OK)
Now I re-installed the system and I’m doing step by step, so lets get into them:
I just created a vpn config with my credentials there and worked with this command(sudo openvpn miami_udp(my file))
My vpn provider does not support IPv6, so now I have to disable and change DNS (I want to use 1.1.1.1 just this) But when I disable IPv6:
[user@pc etc]$ sudo sysctl -p
net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
The connection stops working.
Anyone have a clue what it could be?
I just can guess that you disabled IPV6 for all adapters.
So revert your commands writing a = 0 instead of =1 and then try to find out with the Network Manager Applet the values for the VPN adapter and just disable there ipv6.
Hello,
I ran the command in the VPN connection now, but as soon as I rant it vpn disconnected and pings starts using ipv6 protocol look:
[user@pc openvpn]$ nmcli connection show
NAME UUID TYPE DEVICE
HOME-WIFI 72d6f40a-a021-4a5c-8abf-c828c522ebc1 wifi wlo1
tun0 f5cf660d-2520-4d15-8d6c-002def5dfe53 tun tun0
virbr0 7b15a0e9-98c4-4911-851d-ea0d11defdfb bridge virbr0
J Vicente 2g c98d47bd-2a46-4956-bbf5-530ab17a7687 wifi --
tun0 66cb7eb8-70ec-4a85-8d8c-f9b57f0191d6 tun --
tun0 c867b8a8-e13f-4e35-9107-4a55152433a5 tun --
Wired connection 1 4440265d-07ea-32be-aa98-5c4651d542d9 ethernet --
[user@pc openvpn]$ nmcli connection modify f5cf660d-2520-4d15-8d6c-002def5dfe53 ipv6.method disabled
[user@pc openvpn]$ nmcli connection down f5cf660d-2520-4d15-8d6c-002def5dfe53
Connection 'tun0' successfully deactivated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/6)
[user@pc openvpn]$ nmcli connection up f5cf660d-2520-4d15-8d6c-002def5dfe53
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/7)
[user@pc openvpn]$ ping www.google.com
PING www.google.com(2800:3f0:4004:804::2004 (2800:3f0:4004:804::2004)) 56 data bytes
64 bytes from 2800:3f0:4004:804::2004 (2800:3f0:4004:804::2004): icmp_seq=1 ttl=116 time=50.1 ms
64 bytes from 2800:3f0:4004:804::2004 (2800:3f0:4004:804::2004): icmp_seq=2 ttl=116 time=51.3 ms
64 bytes from 2800:3f0:4004:804::2004 (2800:3f0:4004:804::2004): icmp_seq=3 ttl=116 time=50.2 ms
64 bytes from 2800:3f0:4004:804::2004 (2800:3f0:4004:804::2004): icmp_seq=4 ttl=116 time=51.2 ms
64 bytes from 2800:3f0:4004:804::2004 (2800:3f0:4004:804::2004): icmp_seq=5 ttl=116 time=50.6 ms
^C
--- www.google.com ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4006ms
any clue? correct if I am wrong; I have to disable ipv6 in tun0 UUID correct?
**Important: when I enable vpn again it works, but when I go to ipleak.net It keep seeing my ipv6 **
I ran a test, I disabled my ipv6 in other conection and it worked as intended.
So I did it again in HOME-WIFI but when I disable ipv6 (ipv6.method disabled) and restart the connection it stop working look:
configuration of HOME-WIFI:
I copied just the ipv4 and 6 part to resume:
~]$ ping www.google.com
ping: www.google.com: Temporary failure in name resolution
~]$ ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=119 time=52.4 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=119 time=50.8 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=119 time=50.3 ms
^C
Here is the config:
I didn’t understood this so, if you see anything wrong, let me know.
@localhost ~]$ resolvectl --no-pager status
Global
Protocols: LLMNR=resolve -mDNS -DNSOverTLS DNSSEC=no/unsupported
resolv.conf mode: stub
Link 2 (enp1s0)
Current Scopes: none
Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Link 3 (wlo1)
Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6
Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: fe80::96ea:eaff:fe96:acf7%32767
DNS Servers: 192.168.15.1 fe80::96ea:eaff:fe96:acf7%21989
DNS Domain: br ~.
Link 4 (virbr0)
Current Scopes: none
Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Link 5 (virbr0-nic)
Current Scopes: none
Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Just to recapitulate and explain better what is happening:
When I disable ipv6 the Dns does not works (Just in HOME-WIFI)
and know I’m getting low internet upload speeds (just in HOME WIFI too)
yesterday I ran a test, reinstalled fedora from scratch, the internet upload speed stayed stable until I updated the system.
After Install (internet working full speed) when I go to gnome store and updated the software (upload speed dropped drastically) I’m thinking that one update of fedora didnt liked something in my HOME WIFI connection:
speedtest result:
~]$ speedtest
Speedtest by Ookla
Server: Vivo (id = XXXXX)
ISP: Vivo
Latency: 2.10 ms (0.71 ms jitter)
Download: 288.04 Mbps (data used: 470.5 MB)
**Upload: 1.57 Mbps (data used: 4.8 MB)**
Normally it would be 250/200, I’m getting around 250/2
sorry for this much of information but, I’m testing everything to find the point. I’ll keep adding any new info.
This kind of reply is typically related to firewall-specific problems.
Are you filtering DNS traffic on the router?
Is your VPN active when the issue happens?