# Setup Leak safe

**URL:** <https://forum.gl-inet.com/t/setup-leak-safe/30848>\
**Category:** VPN, DNS, Leaks\
**Created:** [June 28, 2023, 11:54am UTC](https://forum.gl-inet.com/t/setup-leak-safe/30848 "2023-06-28T11:54:15Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![bring.fringe18](https://forum-assets.gl-inet.com/user_avatar/forum.gl-inet.com/bring.fringe18/32/11777_2.png) [@bring.fringe18](https://forum.gl-inet.com/u/bring.fringe18)\
**Post date:** [June 29, 2023, 11:04am UTC](https://forum.gl-inet.com/t/setup-leak-safe/30848/6 "2023-06-29T11:04:14Z")

</div>

So the device, the notebook/laptop, in this case, is Employer equipment & ‘locked down’? That compounds things. There’s no telling what they’ve got loaded on there that could be for tracking/reporting. I’d only use that computer for work; keeping my personal life wholly separate on a different one.

Make sure location services, Bluetooth is killed/never used. I’d set the clock to UTC of your home timezone & make sure it doesn’t connect to the 'net to get current time updates (eg: `time.windows.com` , `0.openwrt.pool.ntp.org`)

–  
Eg:

Be aware the GL router uses NTP by default; you can turn it off after installing LuCI via System → Advanced Settings. Once installed, log into LuCI & navigate to System → System Properities → Time Synchronization → Enable NTP client. Untick, save & apply.

(The goal here is to ‘quiet’ that bit of default network traffic)

–

Regarding what’s ‘flowing’ from your notebook; there’s two options I can suggest, w/ rising complexity costs:

1. If you GL device has [AdGuard Home](https://docs.gl-inet.com/router/en/4/tutorials/adguardhome/) (eg: [Slate AX](https://www.gl-inet.com/products/gl-axt1800/)) found under GL GUI → Applications → Adguard Home, use it. You’ll see why I suggest it by GL’s description of that feature… but I don’t personally use it so it would be an exercise left to you. It looks like a pretty easy to use application IMO.

2. Subscribe to [DeCloudUs DNS](https://decloudus.com/index.html)’s _Premium +_ service. 12.00USD/year. This is what I use for my devices: mobile, laptops, routers. Like AdGuard Home, you can log what’s happening from those devices directly to them, logging all connections made, then use that info to set _custom_ block lists/profiles on top of their anti-tracking, anti-malware, privacy focused lists offered.

Eg: DeCloudUs offers a ‘deGoogle’ block list. I have that enabled but I also have a Samsung phone. I then logged all the connection made by the default Samsung apps running in the background (even unused!) for a few days. Then I block those connection’s domain names (eg: `bixby.samsung.com`, `aibixby.com`, `sbixby.com`).

Now there’s no more ‘AI assistant’ reporting what I do on my phone, wherever I go!

(This is also how I block TenCent’s TikTok ‘trackers’ on other family member’s phones trying to report back to China… & they never installed TikTok!)

The DeCloudUs method is more complex to initially set up _but_ … & it’s a big but… gives more flexibility to [reclaim your privacy when you’re using the 'net away](https://decloudus.com/how-to.html) from your GL-iNet router/device.

Let me know what you think; I know this can come across as more than slightly paranoid but these days, well, it seems [they really are out to get us all](https://www.reuters.com/technology/investigation-finds-tim-hortons-app-violated-privacy-laws-says-canadian-2022-06-01/).

---

_[View the full topic](https://forum.gl-inet.com/t/setup-leak-safe/30848)._