≡ Menu

How to fix the Windows 10 DNS resolver DNS Leaks

The design of Windows 10 allows the Operating System to send DNS queries to all the available interfaces on the machine. The OS does not take into account the network interface priority nor does it take into account any default route.

This design is somewhat okay until we face a VPN scenario where the DNS request has to go through the VPN tunnel for security reasons and this will allow a hacker to intercept a DNS request and modify the reply to perform a man-in-the-middle attack.

The easy fix it to add a DWORD name of DisableSmartNameResolution with a value of 0 under the following path.

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient

Comments on this entry are closed.

  • Malad

    i found no “DNSClient” key in the registry, so i created it. But https://ipleak.net/ still shows Google Open DNS as my DNS, please any idea? Do i need to restart anything? i tried several browsers.

Next post:

Previous post:

Copyright © Nish Vamadevan 2002-2017. All Rights Reserved. Terms and Policies.