openvpn-update-resolv-conf
openvpn-update-resolv-conf copied to clipboard
exclusive flag is a very opiniated choice
according to #5, you added the exclusive flag (-x
) by default.
Since this prevent some form of dns leak (in fact, it prevent your ISP to get every dns query), it introduces another form of dns leak: the DNS targeted by your vpn will get all the queries, which is not always needed (imagine the case where the vpn is a corporate one, you do not want your private stuff to be resolved through this corporate network…) I think these lines should be surrounded by comments explaining the result of every flag so that everyone can personalize the line to its needs