[Whonix-devel] VPN-Firewall - Leak Protection (Fail Safe Mechanism) for (Open)VPN

[<adr...@ri...>]

This is only interesting for VPN users.

VPN's generally fail open. VPN servers and VPN software can occasionally break down without announcement. This means, if the VPN is unreachable, connections breaks down for whatever reasons and so on, in most cases, you can continue to connect to the internet without the VPN. Unless you are only using the VPN to circumvent censorship and not because you believe you're safer because of any (additional) VPN, this is most likely something you want to prevent.

This is not a Whonix specific problem. It is a general problem with VPNs. Most users are simply not aware of it.

There are some blog posts about this topic, but no real Open Source / Free Software project supporting Linux. Therefore the VPN-Firewall project has been created by adrelanos (Whonix maintainer), providing tight firewall rules to prevent connecting to any other servers than the VPN server and to load the firewall before the network, so it's ensured, that all traffic goes through the VPN.

If that's of interest to you, carefully check out the VPN-Firewall project page:  
[https://github.com/adrelanos/VPN-Firewall](https://github.com/adrelanos/VPN-Firewall)

URL: http://sourceforge.net/p/whonix/featureblog/2013/05/vpn-firewall---leak-protection-fail-safe-mechanism-for-openvpn/