Comment on It's Time to Bring Back the Steam Machine
Telorand@reddthat.com 5 months agoGood to know. Got any specific sources for the scripting, or should I just search for something like “option 121 mitigation?”
Comment on It's Time to Bring Back the Steam Machine
Telorand@reddthat.com 5 months agoGood to know. Got any specific sources for the scripting, or should I just search for something like “option 121 mitigation?”
Buelldozer@lemmy.today 5 months ago
I don’t know if there’s any pre-built scripting out there (yet) for this but it’s relatively straight forward in Windows to use powershell and either look in the registry for the assigned dhcp options ( HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\Parameters\Options\1) or check the routing table and for illogical routes.
Assuming that you aren’t using split tunneling you could also have powershell check your external IP address for the expected result.
Another possibility is to grab the dhcp test tool from Github and have it run in non-interactive mode and parse it’s output. Something I find VERY interesting is that Andrey Baranov specifically added Option 121 to that tool in March of 2023!
With any of those it’s a matter of what you want to have happen when you detect the problem such as warning the user and disconnecting the vpn or attempting to mitigate the problem by reconfiguring the routing table.
I’ll probably be scripting up a remediation over the next few days, I’ll try and remember to come back and share what I did.
Telorand@reddthat.com 5 months ago
I’d appreciate it! It’s interesting, if nothing else.
I’ll have to read more about Option 121, because multiple sources said that Option 121 is used for “legitimate things,” and yet Android doesn’t implement it. Makes me wonder why Android doesn’t have it, but other implementations do.