hiya @J_J
I have few network adapters in my ‘networks connections’ in control panel of windows 10 x64. concerning two, one is the actual ethernet card adapter and one is the actual wifi adapter, one adapter for each SSTP VPN, and last one Openvpn virtual adapter.
Scenario 1: connecting over Ethernet to the internet:
For increased security, shall I put a DNS server on my actual ethernet card to prevent connecting to ISP’s DNS? If yes, then when I’m connecting by SSTP or Openvpn or both at the same time, NSlookup doesn’t bring up the SSTP or Openvpn’s DNS servers, while connecting to SSTP VPN or Openvpn or both should override the DNS that is set on the actual Ethernet card adapter, this is concerning for me. giving an example, If I connect in this condition to SSTP or openvpn or both to a VPN server in country X, my nslookup DNS servers should confirm the DNS servers that are located in the country X, or a corresponding DNS server that serves DNS requests for that country that VPN server is located, I can confirm that whatever DNS is set on the actual ethernet card adapter is only confirming by nslookup. Also, I’m still researching this how to fix it?
My ideal condition is having one VPN on dd-wrt firmware-d router, one VPN on SSTP, and another connection over Openvpn. And I’m looking to get confirmation of last DNS server of Last VPN connection by nslookup, that is in this example and structure, Openvpn’s made connection to country X whenever it happens, DNS server that nslookup is confirming should be the DNS server located in country X(that serves the DNS requests for Openvpn in that country or it can be located outside of that country, if the admin of Openvpn will set this on).
Based on my knowledge, in Openvpn-AS, whenever you run your own Openvpn-AS server, it uses the DNS servers of the server that Openvpn-AS is installed on it. But I wonder in commercial Openvpn VPN services, they sometimes put the DNS outside of the country that Openvpn server is located. that could be good or bad, good in case that server location in the target country is written 14eyes countries, but sometimes even if it’s not, DNS server is located outside of it.
Actually, I’m looking for business class security and privacy for business purpose. But nowadays most worlds intelligence agencies do spy on businesses, so I want to keep myself secure, so even make it N~SA/F~BI proof as the maximum that is possible. Otherwise, I can’t sleep a night
thnx