DNS leaks with WE VPN

[c3d1c06c-bf26-477e-b0eb-c50ef4477ba6]

Before uBO 1.60 when using a webExtension VPN in Firefox there were DNS leaks by default but could be fixed by disabling cname resolution.
Now there are always DNS leaks no matter the cname setting. What to do?

[stephenhawk8054]

Can you go to advanced settings and change dnsResolveEnabled to false?

[gorhill]

With 1.60.0 there there should be no dns resolution when using a webextension-based VPN. What is that VPN extension you are using?

---

Also, which tool did you use to detect DNS leaks?

[c3d1c06c-bf26-477e-b0eb-c50ef4477ba6]

The extension is not publicly available but for testing VPN from SandVPN or VPN add-on from uVPN.me are sufficient.

Just looking at the DNS client events of windows.

Also mind that unrelated to this issue network.dns.native_https_query = true is causing leaks, too (fixed in FF132).

[gorhill]

As per NoScript's own handling of proxyInfo, proxyInfo.type must also be tested to avoid using dns.resolve().

[gorhill]

Fix is in gorhill/uBlock@4305bfb.

I will publish a 1.60.2 revision as soon as I can. Once you have that revision, you shouldn't need to disable dnsResolveEnabled in advanced settings.

---

If you can confirm all works fine with https://github.com/gorhill/uBlock/releases/tag/1.60.1b2, that would be appreciated.

[c3d1c06c-bf26-477e-b0eb-c50ef4477ba6]

Yes, 1.60.1b2 seems to fix it. Thank you.