(Quote)

Ability to disable Mail, FTP and DNS services.

While searching, I found out 2 ways to get around this. One, there is update-resolv-conf script for openvpn. It basically gets the pushed dns servers and adds them to resolv.conf. Have to launch openv

If you're using systemd-resolved, you're probably going to have to reference your VPN's DNS server in a .network file under /etc/systemd/network/. You could also override your global DNS settings in /

If I remember how openvpn works, that's going to cause your Linux box to use those two Google public DNS servers instead of routing your DNS queries through the VPN. That kinda makes sense why those h

Here is the thing, the domains I am talking about are blocked in my country so it could be on the DNS level, I am not sure. I wouldn't say all the domains are sketchy, at one point even youtube was bl

* DNS Hosting

* Reverse DNS

Do you push dns servers in the openvpn server config?

Also - from your ovpn, I can't tell if are resolving through your local connection or proxying DNS query's through your VPN. If you are using Windows, quick way to check resolution is to use nslookup

clientdev tunproto udpsndbuf 0rcvbuf 0remote x.x.x.x xxxxxresolv-retry infinitenobindpersist-keypersist-tunremote-cert-tls serverauth SHA512cipher AES-256-CBCcomp-lzosetenv opt block-outside-dnskey-di

are you routing DNS queries through the VPN? If so - which DNS server are you using? If you don't mind having DNS leakage when you test, try disabling redirect-gateway feature and see if you still hav

Hey,

(Quote)

i mean like disable dns/mail and some other features too.

(Quote)

I probably should have clarified my comment about fastflux DNS. Many malware that create zombies in a botnet use a technique to protect the C&C by setting up lots of different C&C serv

Wanted to chime in and say running a DNS like quad 9s plus something like PFBlockerNG with updated IP and URL lists might have prevented this.

Yes, DNS would be one way to communicate but the way of communication wasn't my focus. Another area I would look at if you are interested is to use SCTP and not TCP or UDP at all.

I worked on botnet dns sinkholes and if the sym keys are being communicated back, that presumes that they could be using fastflux DNS as part of the communications. I've been out of that game for a fe