ryrona2

Possible relevant forum thread, Spotify may be sending multicast packets as well: https://discuss.grapheneos.org/d/10337-spotify-communicating-with-other-devices-on-local-network/6 Quote from John-longson: > Long story short, I made an anonymous Spotify account (that has never seen...

I have been digging a little bit into this issue. The source code suggests routing tables are modified using netlink to enable and disable the kill switch. It does not...

@maade93791 Yes. I have gone down that path already, and then to netd, and there I saw that netd sets up the kill switch using netlink to manipulate the routing...

@alfred6427 @thestinger There is something in the routing rules about tagged packets, so if either of you know where the eBPF code is, I would appreciate if you could give...

> > This cannot possibly be an issue with the Mullvad VPN app, since I have revoked its network permissions so it cannot be the one sending the DNS queries,...

> Try using the official WireGuard app instead. Unfortunately this didn't tell me anything, because the official Wireguard app detects when Network permission is removed from it, and immediately disables...

@Tryptamine9 Sure, the Mullvad VPN app could probably act better here. But isn't the whole idea with a kill switch that apps shouldn't be able to make connections outside the...

> GrapheneOS uses the standard implementation of this with no changes to it. None of the features or bugs with VPN support have to do with GrapheneOS at the moment....

@thestinger Yeah, I will investigate more before escalating to AOSP or app developer. The short investigation I did a few days ago showed that the VPN app detected the Network...

> It's entirely supported to send DNS queries to the regular network DNS while using a VPN with the kill switch enabled. I just want to say this is totally...