touch-packages team mailing list archive

[Mathieu Trudel-Lapierre <mathieu.tl@xxxxxxxxx>]

Please provide an example of packets that are not being sent through the
VPN; as well as what was used to generate them (browser, ping?) and
attach the output of the 'ip -6 route' and 'ip route' commands.

IPv6 packets will not be caught by an IPv4-only VPN, this is on purpose
-- everything is based off the routing table, which is what decides
where packets will be sent.

** Changed in: network-manager (Ubuntu)
       Status: New => Invalid

** Changed in: network-manager-openvpn (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1386380

Title:
  network-manager-openvpn leaks w/ IPv6

Status in “network-manager” package in Ubuntu:
  Invalid
Status in “network-manager-openvpn” package in Ubuntu:
  Incomplete

Bug description:
  By "leaking" I mean that there are packages leaving/entering the
  machine without passing through the VPN.

  To verify:
  1. Connect to a Wifi network that assigns IPv6 addresses.
  2. Open http://whatsmyipv6.org/ note down the address.
  3. Connect to a VPN.
  4. Open http://whatsmyipv6.org/ and compare with the result from step 2.

  Temporary fix (at least in my case):
  sudo sysctl -w net.ipv6.conf.all.disable_ipv6=1

  I consider this a security bug since it endangers users relying on a
  working/leak-free VPN.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1386380/+subscriptions