AR750 OpenVPN Client & firmware v3 - how to fail closed?

[WienerJJ]

I am setting up my new AR750 to run my VPN client over open wifi connections such as in hotels. I upgraded to firmware ver. 3 because that included a fix which allows clients to use the VPN’s DNS settings.

Is there a way under firmware v.3 to stop routing traffic if the VPN client disconnects? It looks like there was an option for this under firmware v2 but I don’t see that in v3. I don’t want my traffic going through unencrypted should the vpn client fail for some reason.

Thanks.

[glitch]

Hi.
I would advise to stay clear of V3, for now, if you are worried about leaks.
Read this:

Alternative to the function Force VPN (No Internet if VPN is not connected) on AR750S

I think i have the same problem than saxmo, i can’t find the chekbox for this option. I’ve use physical Switchbutton for Ovpn client on & off. When its on OR off, i have internet, in different IP (VPN turn on and off, but don’t disable internet when OFF) You don’t have sommthing like this https://static.gl-inet.com/docs/en/2.x/app/src/openvpn/18.jpg how can we do ?

[alzhao]

let’s say there is two issues:

If you disable vpn manually, no matter in v2 or v3, data will go through normal vpn.

If vpn connected is enabled but failed, in v3, there will be no data to the Internet.

Just in v3 there is no easy way to change server without disconnecting first. But we are adding this and there will be a beta firmware with this very soon.

[WienerJJ]

Thanks for the reply, aizhao. I am glad to know it is working as I wished in v3. However, as a related question is there a way to prevent leakage when we are accepting a hotel or public wiif’s terms of service? In those cases, the VPN has to first be disconnected so we can visit the terms of service page. Once accepted, our data flows in the clear until we can start the VPN. I’ve posted this question in a new thread to make it more accessible to others:

How to prevent leaks between visiting hotel splash page (terms of service) and starting VPN?

A lot of public wifi, such as in hotels, requires you to open a browser, get re-directed to their terms page, and accept the terms of service before the internet connection works. The problem is that once you have accepted the terms, the traffic on your laptop will now be flowing in the clear until you can activate the VPN client on your Gl.iNet device. I’m looking for a way to prevent this. The only thing I can think of is if there were a web browser client that could be installed on the Gl.…

Thanks.

[alzhao]

I know this is a problem. But current there is no good solution.

Designing a solution but still in early stage.