

It will leak the OpenVPN clients IP, not the router's VPN IP if I'm running OpenVPN on top of the router's VPN. Windscribe browser addon: Webrtc leak always regardless of whether I'm using the router VPN or layering an OpenVPN client on top of it. It would need firewall rule in the client computer to prevent that.

A router firewall rule that prevents DNS leaks from a VPN inside the router will leak the router's DNS IP from a OpenVPN client layered on top of it. I checked with another VPN in another router where I didn't have a rule forcing all DNS traffic to one server and it didn't leak. It was my own iptables rule that caused this. As of the writing of this article, Hotspot Shield’s global server network includes 1,800+ servers spread across more than 80 countries. Hotspot Shield allows customers to concurrently connect up to 5 devices using a single account. Generic OpenVPN client: No Webrtc leaks but it leaks the router VPN's DNS server IP. The provider’s use of shared IP addresses helps preserve your anonymity while file sharing. When I set up a VPN in Shibby, it didn't leak with just one client but when I went to two with a custom script to put each VPN on a different subnet, one VPN would sometimes use the other's DNS and sometimes not be able to connect to a DNS server at all and I fixed that by adding iptables rules that forced each VPN subnet to use a specific DNS server. I had to add firewall rules that force DNS traffic to a specific server to achieve this. VPN in a router running Shibby Tomato firmware: No leaks at all. The browser was Chromium with no Webrtc blocking extension but it does have uBlock Origin and Scriptblock. I just ran a quick test using different setups.

But most of these are reported by users, and perhaps questionable. So do HTTP PROXY navigation in browser that support Web RTC, and notably TOR as PROXY on browsers with Web RTC enabled. These browser add-ons also leak: Hola!VPN Chrome Extension,IBVPN Browser Addon and Windscribe Addons.Īlso these proxies leak: PHP Proxy, SmartHide Proxy, SOCKS PROXY and SumRando Web Proxy. So these VPNs reportedly block the leak: AirVPN, Anonymizer, Avira Phantom VPN, AzireVPN, BeeVPN, Betternet, Blockless, BolehVPN, BTGuard, CactusVPN, CryptoStorm, CyberGhost,, ExpressVPN, FinchVPN, VPN, FlyVPN, Freedome, HideALLIP, HideIPVPN,, , Hide My IP, Hotspot Shield, IBVPN, IntroVPN, IPinator, IPVanish, Ironsocket, Ivacy, IVPN, LiquidVPN, Mullvad, My Private Network, NordVPN, Opera (Browser) VPN, OverPlay,, ProXPN, Proxy.sh, PureVPN, Qnap NAS, RA4W VPN, SaferVPN,, SecurityKISS, Seed4.Me, ShadeYou, Steganos, StrongVPN, SumRando VPN, Surfeasy, Surfeasy Addons, SwitchVPN, Synology NAS, Tails, TigerVPN, TopVPN, Torguard, TorVPN, TunnelBear, TunnelBear Addons, Tunnelr, Unblock VPN, VPN.ac, VPNbook, VPN Gate, VPNJack, VPNSecure, VPN Unlimited, VyprVPN!, WASEL Pro, Windscribe, WorldVPN, and ZoogVPN.Īnd these VPNs reportedly leak WebRTC: ChillGlobal, Glype,, Hola!VPN,, Private Internet Access, ProtonVPN and psiphon3. I wasn't even aware that some VPN clients block the protocol.
