Hi all, 

I am using ProtonVPN on my laptop and now that I have my Unraid server set up, I wanted to use it on there aswell. 

I've set up the configuration file on proton, downloaded it and improted it via the VPN manager in Unraid. 

Unfortunatly I'm having 2 issues;

1. When this does work (rarely), I go to check my DNS isn't leaking via https://dnsleaktest.com/ and everytime I have leaks (IP address is correct though)

2. When I then include ProtonVPN's DNS server address in the Peer DNS server, my firefox docker won't load any webpages and just times out. 

Active & Autostart are on.

Ping replies. 

On Firefox I have Enable DNS over HTTPS using: off

I have installed a 10gb nic on eth0 and although its working I did get the following lines in the log; 

 

Feb 24 19:36:58 Tower kernel: docker0: port 11(veth4579e7c) entered blocking state
Feb 24 19:36:58 Tower kernel: docker0: port 11(veth4579e7c) entered forwarding state
Feb 24 19:37:00 Tower kernel: docker0: port 11(veth4579e7c) entered disabled state
Feb 24 19:37:00 Tower kernel: veth66be0bb: renamed from eth0
Feb 24 19:37:00 Tower kernel: docker0: port 11(veth4579e7c) entered disabled state
Feb 24 19:37:00 Tower kernel: veth4579e7c (unregistering): left allmulticast mode
Feb 24 19:37:00 Tower kernel: veth4579e7c (unregistering): left promiscuous mode
Feb 24 19:37:00 Tower kernel: docker0: port 11(veth4579e7c) entered disabled state
Feb 24 19:37:59 Tower kernel: docker0: port 11(veth4c358d3) entered blocking state
Feb 24 19:37:59 Tower kernel: docker0: port 11(veth4c358d3) entered disabled state

 

Do the above errors look like the issue I need to be solving?

 

For context my ProtonVPN settings are as follows; 

 

Wireguard

Platform: GNU/Linux

Netshield: Block malware, ads and trackers

Moderate NAT: Off

NAT-PMP (Port Forwarding): On

VPN Accelerator: On

Secure Core Config

 

Thanks in advance for any help! 

 

Edited February 24, 20251 yr by MagicTurtle00

Sorry to bump my own post but I think I've sorted it....

Firstly, the errors in the log above were caused by a Mosquitto docker. Stopping that has stopped the constant errors. Not sure yet what the actual fix for this will be. 

Secondly, I've added --dns=10.2.0.1 to the extra parameters on the firefox docker and it seems to have worked! Checking dnsleak shows the VPN servers.

Should this have been a necessary step or should the VPN manager have taken care of this?

Adding 10.2.0.1 into the VPN managers Peer DNS server didn't work. 

Thanks, adding the DNS to extra parameters for each docker worked. Seems like a red flag.

Unfortunately, when using the VPN Manager for VPN tunneled access for docker, even when adding a Peer DNS server, it'll still DNS leak to whatever your router uses. Tried with both Mullvad and ProtonVPN configurations. Each of the conf contained DNS address of the VPN. Weird that VPN Manager is not passing that through the tunnel?

You can check a docker instance terminal using VPN Manager by using this dnsleaktest script: https://github.com/macvk/dnsleaktest

Can also use Mullvad's API json to find the IP of a docker: curl https://am.i.mullvad.net/json

Edited January 25Jan 25 by evergreen.dazed