Using DNS Resolver with VPN. DNS leak tests show my VPN as my DNS service. Does this mean my VPN or the root servers is resolving my queries?

Title pretty much sums it up. I am using unbound via the dns resolver option in pfsense to resolve my DNS queries. I also am using my VPN as the outgoing interface. To my understanding unbound is supposed to go directly to the DNS root servers to find the IP addresses for domains. However, DNS leak tests show ExpressVPN’s IP as the server resolving my queries. I am assuming this is correct because the request to the root servers is coming from expressvpn; however, is it possible that expressvpn is resolving these requests themself? I ask because dnsleaktest.com shows expressvpns IP address, but shows the country where my requests are being resolved as the Netherlands when I am using the Atlanta VPN server. (The IP address shown is the Atlanta server’s IP though.)

Also, assuming that my VPN provider isn’t resolving my requests, would routing my requests through them provide me with any additional privacy? As in are dns queries going to be stripped of my IP address like other traffic being routed through a VPN server?

I may be rambling a bit. I’m not exactly an expert when it comes to pfSense and networking in general. I’m just trying to feel my way through it. Lol

Thanks!

If you pass a leak test, it just means that the DNS queries are going out via the VPN.

I would seriously love a Good tutorial that explains how to set this up with a VPN. I think I did it right but it took me several months to get there and I don’t even know for sure. It’s A shame that the learning curve is so steep when it comes to some of the stuff for people who are starting with a lot of technical ability but not a lot of networking capability quite yet

I struggled with the same issue for hours… working vpn connection (i had no worries with the Tutorial), but express vpn dns leak test failed but other tests succeeded.

The solution for me was to set up the dns resolver properly. I set the network interface to LAN and Localhost as well as i set the outbound interface to the vpn’s. This did it for me and finally i successfully passed the express vpn dns leak test.

Hope that helps, if not, drop me a message

That’s what I suspected. Thanks

I pass the test while explicitly disabling the query-setting.

I agree with you! Networking really confuses me at times. Quite frankly I’m not even that interested in it. I just wanted the privacy that can be accomplished by using it. How do you have your VPN & DNS settings configured?

i have cloudflare set up as my dns resolver, and to be honest it’s possible i did it wrong.

i just messed with settings until any dns leak test i ran came back with cloudflare only whether on vpn or not. it took me a few minutes each night of tweaking it for around a month before i got that working through reading forums, etc.

end of the day, i have my outgoing interface in dns resolver set as local host only, then set cloudflare as the dns under general.

1.1.1.1 for one gateway and 1.1.0.1 for another.

there was probably more to it than that, and it’s probably wrong somehow, but i don’t know what i don’t know.

Haha you sound like me. Appreciate you filling me in