Arch Linux

Astroarch

Member

From: Germany

Registered: 2014-03-21

Posts: 85

Configure netctl for airvpn

Hello dear guys,
I am facing one of the few problems I have now, since I switched from Windows to Archlinux.
I use a vpn service called AirVPN and, after being established a successfull connection with openvpn client, I need to change my DNS and switch to static IP.
The first passage is doing really well but I dunno how to switch my DNS and static IP (to prevent DNS leak).
Right now I want to use netctl, creating a profile and use it after that the vpn connection is established.
Here is my profile file:

                                                                                                                           
Description='Configuration for AirVPN to avoid DNS leaking'
Interface=wlp2s3
Connection=wireless
ESSID='FRITZ\!Box\ 73'
IP=static
Address='192.168.178.200/24'
Gateway='192.168.178.1'
DNS=('10.4.0.1')
DNS=('10.5.0.1')
# Uncomment this if your ssid is hidden
#Hidden=yes

.
When I try to start it, here my message:

Job for netctl@airvpn.service failed. See 'systemctl status netctl@airvpn.service' and 'journalctl -xn' for details.

Typing the first hint I have:

netctl@airvpn.service - Networking for netctl profile airvpn
   Loaded: loaded (/usr/lib/systemd/system/netctl@.service; static)
   Active: failed (Result: exit-code) since dom 2014-03-23 01:28:22 CET; 48s ago
     Docs: man:netctl.profile(5)
  Process: 1951 ExecStart=/usr/lib/network/network start %I (code=exited, status=1/FAILURE)
 Main PID: 1951 (code=exited, status=1/FAILURE)

and the second:
[

-- Logs begin at mar 2014-03-18 20:26:46 CET, end at dom 2014-03-23 01:03:34 CET. --
mar 23 00:19:21 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: in handle_supported
mar 23 00:19:21 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: in handle_list
mar 23 01:00:19 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: in handle_supported
mar 23 01:00:19 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: in handle_list
mar 23 01:00:35 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: in handle_supported
mar 23 01:00:35 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: in handle_list
mar 23 01:00:40 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: Name owner ':1.35' vanished
mar 23 01:03:32 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: in handle_supported
mar 23 01:03:32 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: in handle_list
mar 23 01:03:34 VAIOarch org.gtk.Private.UDisks2VolumeMonitor[388]: ### debug: Name owner ':1.36' vanished

.

Can someone explain me what shall I do? I do not understand where is the problem.

Gcool

Member

Registered: 2011-08-16

Posts: 1,456

Re: Configure netctl for airvpn

I assume what you're trying to accomplish is to make sure your dns queries are also going through the established vpn tunnel? If so, this is not the way to accomplish that.

Verify your routing (ip route) and perhaps run a capture to make sure dns queries are indeed being sent through your normal interface instead of the tunnel interface. If this is indeed the case, you can consider setting up iptables to prevent this (assuming the traffic is supposedly routed correctly in the first place), by blocking dns traffic being sent out over anything else than the tunnel interface.

Last edited by Gcool (2014-03-23 08:52:43)

---

Burninate!