I'm facing a weird issue with my M2 UltraSurf setup. Basically, I've got a Mikrotik router acting as a gateway to the internet, and UltraSurf is running on a Windows Server. The goal is to let users behind the Mikrotik connect to the internet through UltraSurf, effectively anonymizing their traffic.
So far, so good, right? Except... a bunch of users are reporting that their traffic is leaking – specifically, their real IP address is showing up.
Here’s what I've got:
* **Mikrotik:** Running RouterOS 6.40.1 (latest stable) * **UltraSurf:** Version 7.5 * **Client OS:** Mixed – Windows 7, Windows 10.
I've been digging through logs, and I'm seeing a lot of UDP traffic going out from the UltraSurf clients to various IP addresses, often on port 53 (DNS). That's what's making me think DNS is somehow involved in the leak.
I’ve tried a few things already:
* Forced all clients to use the Mikrotik as their DNS server (using a policy rule). * Disabled DNS caching on the Mikrotik. * Blocked all outbound DNS traffic from the UltraSurf clients (which, while effective at preventing DNS lookups, also kinda defeats the purpose of an anonymizing proxy!).
Anyone else encountered this? Any ideas on how to properly configure the Mikrotik to prevent DNS leaks with UltraSurf?
