Ask Your Question
2

How to prevent WebRTC in Fedora

asked 2019-03-31 04:32:00 -0600

powergame gravatar image

updated 2019-03-31 04:47:54 -0600

I am using a Cisco AnyConnect VPN service on Fedora 29 + Gnome Desktop and recently I realized I have WebRTC leaks on my system. On ipleak.net I can see both my VPN address which is IPv4 and my real IP address which is an IPv6 address. I did the following to solve the problem but none of them worked. Still I have the vulnerability:
1- Disabled the IPv6 from NetworkManager and restarted NetworkManager:
image description 2- Disabled IPv6. Added the following to /etc/sysctl.d/00-network.conf and run sudo sysctl -p:

net.ipv6.conf.all.disable_ipv6 = 1
net.ipv6.conf.default.disable_ipv6 = 1
net.ipv6.conf.lo.disable_ipv6 = 1
net.ipv6.conf.tun0.disable_ipv6 = 1

3- Disabled WebRTC in Firefox. Set the following configuration to false:

media.peerconnection.enabled

None of the above worked. And I am still having leaks. Is there an effective way I can hide my real IP address (and thus location as revealed by ipleak.net) when behind a VPN service?

One more thing I realized when using ProtonVPN cli tool was problem with managing IPv6 on my system. This is the output from the tool:

Connecting...
[!] Error connecting to VPN.
[!] Reason: Authentication failed. Please check your ProtonVPN OpenVPN credentials.
[!] There are issues in managing IPv6 in the system. Please test the system for the root cause.
Not being able to manage IPv6 by protonvpn-cli may leak the system's IPv6 address.
edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
1

answered 2019-03-31 06:58:27 -0600

ozeszty gravatar image

Boot with ipv6.disable=1 kernel parameter. It's the only way, so far, I've been able to actually disable IPv6 in Fedora.

Here's how to temporarily and persistently add kernel parameters: https://docs.fedoraproject.org/en-US/fedora/f29/system-administrators-guide/kernel-module-driver-configuration/Working_with_the_GRUB_2_Boot_Loader/index.html#sec-Making_Temporary_Changes_to_a_GRUB_2_Menu

edit flag offensive delete link more

Comments

Is there a down-side to disabling ipv6?

powergame gravatar imagepowergame ( 2019-04-01 03:45:31 -0600 )edit

Question Tools

1 follower

Stats

Asked: 2019-03-31 04:32:00 -0600

Seen: 82 times

Last updated: Mar 31 '19