DNS leak (inconsistency)

I’m using a RPi with RaspAP as a VPN router.

I set up RaspAP and added my VPN DNS servers to DHCP > Advanced.

It works sometimes, but I’m getting DNS leaks on my iphone and apple tv.

The weird thing is that when I enter the VPN dns server on my phones and apple tv’s settings I don’t get the dns leak.

It leads me to believe that there’s something wrong with the RaspAP settings.

Does anyone have any clue?

Here’s a screen shot of the DNS leak test:

Here’s my RaspAP config:

https://i.imgur.com/9m6IxP0.png

https://i.imgur.com/T23QXYW.png

https://i.imgur.com/wBwqOjr.png

Some browsers and/or devices use DNS over HTTPS, which can result in leaks. Per this FAQ:

Several users have reported that Firefox’s DNS-over-HTTPS (DoH) has created problems with their VPN, in effect creating a DNS leak from the browser that circumvents RaspAP’s DNS settings. Be sure to disable this “feature” when using a VPN service.

Hey thanks for the reply. So you’re saying that maybe the apple tv or the iphone use DoH and so it bypasses the configuration set on the RaspAP?

Apple uses, or at least supports, DoH with several of its OS products (iOS, tvOS and macOS). The doh.dns.apple.com host is used for this. You’ll need to look into your device settings to determine which DNS resolver is being used.

In most cases (that I’m aware of, anyway) DNS leaks are ultimately client related.

Super helpful u/iambillz thank you