8
6
Fork
You've already forked windows
1

Local DNS traffic is filtered after version 4.3 (wireguard split tunnel) #272

Closed
opened 2025年07月08日 09:48:42 +02:00 by user234987 · 3 comments

Hello,

after version 4.3 (4.3.99 included) local DNS names do not resolve anymore.

LAN Details:

  • Subnet: 172.27.72.0/24
  • Gateway & DNS: 172.27.72.254
  • Search domain: localdomain.tld

It appears that DNS Searches are somewhat filtered, but local traffic is not.

Without VPN or with version 4.3 connected:

[c:\~]$ nslookup pi3.localdomain.tld 172.27.72.254
Server: firewall.localdomain.tld
Address: 172.27.72.254
Name: pi3.localdomain.tld
Address: 172.27.72.17

With VPN 4.4 connected:

[c:\~]$ nslookup pi3.localdomain.tld 172.27.72.254
*** Request to UnKnown timed-out
DNS request timed out.
 timeout was 2 seconds.
Server: UnKnown
Address: 172.27.72.254
DNS request timed out.
 timeout was 2 seconds.
DNS request timed out.
 timeout was 2 seconds.
DNS request timed out.
 timeout was 2 seconds.
DNS request timed out.
 timeout was 2 seconds.

Block traffic outside VPN is NOT selected.

Weirdly enough local resources are still reachable if going by their IP addresses manually:

[c:\~]$ ssh 172.27.72.17
Connecting to 172.27.72.17:22...
Connection established.
To escape to local shell, press 'Ctrl+Alt+]'.
[17:01:36] Version exchange initiated...
[17:01:36] 	server: SSH-2.0-OpenSSH_7.9p1 Raspbian-10
[17:01:36] 	client: SSH-2.0-nsssh2_5.0.0030 NetSarang Computer, Inc.
[17:01:36] 	SSH2 is selected.
[17:01:36] Algorithm negotiation initiated... (mode 0)
[etc]

Let's Connect for windows, Windows 11 24H2.

We're using wireguard UDP with split tunnel enabled. No overlap in routes.

Please let me know how I can help debugging this.

Best Regards

Hello, after version 4.3 (4.3.99 included) local DNS names do not resolve anymore. LAN Details: * Subnet: `172.27.72.0/24` * Gateway & DNS: `172.27.72.254` * Search domain: `localdomain.tld` It appears that DNS Searches are somewhat filtered, but local traffic is not. Without VPN or with version 4.3 connected: ``` [c:\~]$ nslookup pi3.localdomain.tld 172.27.72.254 Server: firewall.localdomain.tld Address: 172.27.72.254 Name: pi3.localdomain.tld Address: 172.27.72.17 ``` With VPN 4.4 connected: ``` [c:\~]$ nslookup pi3.localdomain.tld 172.27.72.254 *** Request to UnKnown timed-out DNS request timed out. timeout was 2 seconds. Server: UnKnown Address: 172.27.72.254 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. ``` Block traffic outside VPN is **NOT selected**. Weirdly enough local resources are still reachable if going by their IP addresses manually: ``` [c:\~]$ ssh 172.27.72.17 Connecting to 172.27.72.17:22... Connection established. To escape to local shell, press 'Ctrl+Alt+]'. [17:01:36] Version exchange initiated... [17:01:36] server: SSH-2.0-OpenSSH_7.9p1 Raspbian-10 [17:01:36] client: SSH-2.0-nsssh2_5.0.0030 NetSarang Computer, Inc. [17:01:36] SSH2 is selected. [17:01:36] Algorithm negotiation initiated... (mode 0) [etc] ``` Let's Connect for windows, Windows 11 24H2. We're using wireguard UDP with split tunnel enabled. No overlap in routes. Please let me know how I can help debugging this. Best Regards
rozmansi added this to the 4.5 milestone 2025年07月08日 16:55:17 +02:00
Collaborator
Copy link

Thank you for reporting this.
Will look into it as soon as holiday season will allow me to.

Thank you for reporting this. Will look into it as soon as holiday season will allow me to.
Collaborator
Copy link

I have released the 4.4.99.1 now.

I was able to reproduce your issue and I believe this should be fixed now. Please test it and feel free to reopen this issue should it not.

I apologize for the delay.

I have released the [4.4.99.1](https://codeberg.org/eduVPN/windows/releases/tag/4.4.99.1) now. I was able to reproduce your issue and I believe this should be fixed now. Please test it and feel free to reopen this issue should it not. I apologize for the delay.

I've tested it and I can confirm that the issue is indeed fixxed: local DNS is now working correctly.

Thank you!!!

I've tested it and I can confirm that the issue is indeed fixxed: local DNS is now working correctly. Thank you!!!
Sign in to join this conversation.
No Branch/Tag specified
master
study/no-token-import
ver/3.x
govVPN
ver/3.3.0.x
ver/2.x
ver/1.x
4.6
4.5.99.8
4.5.99.7
4.5.99.6
4.5.99.5
4.5.99.4
4.5.99.3
4.5.99.2
4.5.99.1
4.5.99.0
4.5
4.4.99.4
4.4.99.3
4.4.99.2
4.4.99.1
4.4.99.0
4.4
4.3.99.1
4.3.99.0
4.3.2
4.3.1
4.3
4.2.8
4.2.7
4.2.6
4.2.5
4.2.4
4.2.3
4.2.2
4.2.1
4.2
4.1.7
4.1.6
4.1.5
4.1.4
4.1.3
4.1.2
4.1.1
4.1
4.0
3.255.23
3.255.22
3.255.21
3.255.20
3.255.19
3.7
3.6.2
3.6.1
3.255.18
3.255.17
3.255.16
3.255.15
3.6
3.255.14
3.5
3.255.13
3.4.3
3.255.12
3.255.11
3.255.10
3.255.9
3.255.8
3.255.7
3.255.6
3.255.5
3.255.4
3.255.3
3.255.2
3.4.2
3.4.1
3.255.1
3.255
3.4
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.0.1
3.3.3
3.3.2
3.3.1
3.3
3.2.2
3.2.1
3.2
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0
2.255.6
2.255.5
2.255.4
2.255.3
2.255.2
2.255.1
2.1.4
2.255.0
2.1.3
2.1.2
2.1.1
2.1
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0
1.255.11
1.255.10
1.255.9
1.0.39
1.255.8
1.255.7
1.255.6
1.255.5
1.0.38
1.255.4
1.0.37
1.255.3
1.255.2
1.255.1
1.255.0
1.0.36
1.0.34
1.0.35
1.0.33
1.0.32
1.0.31
1.0.30
1.0.29
1.0.28
1.0.27
1.0.26
1.0.25
1.0.24
1.0.23
1.0.22
1.0.21
1.0.20
1.0.19
1.0.18
1.0.17
1.0.16
audit/2017-12
1.0.15
1.0.14
1.0.13
1.0.12
1.0.11
1.0-alpha8
1.0-alpha6
1.0-alpha5
1.0-alpha4a
1.0-alpha3
1.0-alpha2a
1.0-alpha1
1.0-alpha
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/windows#272
Reference in a new issue
eduVPN/windows
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?