News for hackers. Stuff that matters.
Re:DNS traffic can leak outside the VPN tunnel on Android by 2OEH8eoCRo0 on Friday May 03, 2024 @11:10AM (#40248578)
I was an extremely happy user until they removed port-forwarding. That forced me to switch unfortunately :(
Re:DNS traffic can leak outside the VPN tunnel on Android by Gormo on Friday May 03, 2024 @11:40AM (#40248936)
How were you using port forwarding with an external VPN?
Re:DNS traffic can leak outside the VPN tunnel on Android by fullspectrumdev on Friday May 03, 2024 @11:47AM (#40249014)
A lot of VPN’s allow you to forward a port from local to “listening” on one of their servers, to make it easier to use P2P filesharing and such.

Mullvad and a few others have had to disable this feature because it turns out it’s super useful for hosting malware C&C servers, phishing pages, etc

Re:DNS traffic can leak outside the VPN tunnel on Android by Gormo on Friday May 03, 2024 @04:25PM (#40251985)
I sort of understand their reasoning, then, because acting as a reverse proxy for externally-initiated inbound connections is not typically within the scope of VPN services per se, and especially outside the scope of Mullvad's particular mission of offering VPN services for the purposes of protecting privacy and suppressing censorship.

There are other solutions for your use case, with or without a third-party VPN, that wouldn't require port forwarding. There are also other VPN services that do offer this functionality.

Re:DNS traffic can leak outside the VPN tunnel on Android by epcoa on Friday May 03, 2024 @01:58PM (#40250422)
It’s typically for BitTorrent.
Re:DNS traffic can leak outside the VPN tunnel on Android by nicce on Friday May 03, 2024 @11:35AM (#40248877)
What was the reasoning for removal?
Re:DNS traffic can leak outside the VPN tunnel on Android by ziddoap on Friday May 03, 2024 @11:46AM (#40249001)
Unsurprisingly, they wrote a blog post about it.

>"Unfortunately port forwarding also allows avenues for abuse, which in some cases can result in a far worse experience for the majority of our users. Regrettably individuals have frequently used this feature to host undesirable content and malicious services from ports that are forwarded from our VPN servers. This has led to law enforcement contacting us, our IPs getting blacklisted, and hosting providers cancelling us."

>"The result is that it affects the majority of our users negatively, because they cannot use our service without having services being blocked."

https://mullvad.net/en/blog/removing-the-support-for-forward...