blonde DD-WRT User
Joined: 06 Sep 2019 Posts: 93
|
Posted: Fri Feb 07, 2020 3:15 Post subject: How to monitor OpenVPN+DNS encryption that exit the router? |
|
Hiya all DDWRT Guru's:
There is extensive software to monitor the network and be sure it's encrypted in the Virtual-Network-Adaptor created by OpenVPN-Client in the Windows/Linux. But how can I monitor the Data exits the DDWRT router to be sure the data to be sure it's properly encrypted and routed by the proper channel that it's supposed to route?
When the OpenVPN+DNS encryption is done on the DDWRT router, how we can monitor the exiting data from DDWRT that should be encrypted, both by OpenVPN and DNScrypt-v2?
When I monitor the Virtual-Network-Adaptor in windows or counter-part in the any secure/private Linux distributions, I can monitor the data exits the Virtual-Network-Adaptor to the actual Ethernet or Wireless adapter card by many network monitoring tools to be sure the data stream and DNS stream are properly encrypted.
What about when we do encrypt the data by OpenVPN+DNScrypt on the router? how the exit data stream from the router can be monitored to be sure it's encrypted in the data+DNS streams? As when OpenVPN+DNScrypt are running on the router, the data+DNS streams from my laptop to the router is not encrypted, and only the data+DNS stream that exits the router will get encrypted? How to monitor this to be sure bothe data+DNS stream gets proper encryption?
Whatever proper advice and suggestion appreciated?
Tnx and best of luck _________________ ---//signature
I'm a brave journalist, I support human rights <3 |
|
Alozaros DD-WRT Guru
Joined: 16 Nov 2015 Posts: 6440 Location: UK, London, just across the river..
|
Posted: Fri Feb 07, 2020 8:52 Post subject: |
|
do keep in mind monitoring those will put your WAN in promiscuous mode and ISP will see you r capping packets and than you might get into a trouble...
as i said you'd need a professional advise, there are monitoring technics that require knowledge and understanding...that you don't have...
also bear in mind windows os and linux leave fingerprints...too...and monitoring is a double edged dagger... _________________ Atheros
TP-Link WR740Nv1 ---DD-WRT 55630 WAP
TP-Link WR1043NDv2 -DD-WRT 55723 Gateway/DoT,Forced DNS,Ad-Block,Firewall,x4VLAN,VPN
TP-Link WR1043NDv2 -Gargoyle OS 1.15.x AP,DNS,QoS,Quotas
Qualcomm-Atheros
Netgear XR500 --DD-WRT 55779 Gateway/DoH,Forced DNS,AP Isolation,4VLAN,Ad-Block,Firewall,Vanilla
Netgear R7800 --DD-WRT 55819 Gateway/DoT,AD-Block,Forced DNS,AP&Net Isolation,x3VLAN,Firewall,Vanilla
Netgear R9000 --DD-WRT 55779 Gateway/DoT,AD-Block,AP Isolation,Firewall,Forced DNS,x2VLAN,Vanilla
Broadcom
Netgear R7000 --DD-WRT 55460 Gateway/SmartDNS/DoH,AD-Block,Firewall,Forced DNS,x3VLAN,VPN
NOT USING 5Ghz ANYWHERE
------------------------------------------------------
Stubby DNS over TLS I DNSCrypt v2 by mac913 |
|