When you're connected to the VPN, replies to incoming UDP packets to the ISP interface may go via VPN interface. Technically you can't call it IP address leak, but it allows malicious persons (such as copyright trolls) to identify your real IP address. This OpenVPN plugin will protect you from said routing issue.
- Download
block-incoming-udp-32.dll
for 32 bit system orblock-incoming-udp-64.dll
for 64 bit system - Add the following line to your OpenVPN configuration file:
plugin block-incoming-udp-32.dll
for 32 bit system or
plugin block-incoming-udp-64.dll
for 64 bit system
This plugin implements Windows Filtering Platform userspace filter to block all IPv4 and IPv6 incoming UDP packets which were received neither from LAN subnets nor from Internet to OpenVPN TAP Adapter interface to prevent IP address leak. It works like a temporary firewall which clears its rules upon termination or crash. This is important as you won't get broken internet connection if OpenVPN client suddenly crashes, unlike with other methods.