Some individual VPN services distribute closed source applications with vendor lock in.

ForceBindIP - Bind any Windows application to a specific interface.

VPN Lifeguard supports PPTP and IPSec, not OpenVPN.

This is not very secure, it's a game if that time period is sufficient to stop a leak and if killing the applications is fast enough. Checks every, let's say 500 ms, if the VPN IP is still valid, if not, kill a list of applications.

One could play with the linux equivalent of the route command.

This probably does not apply to VMs / computers behind a VPN-Gateway (when using the #Forwarding feature).

Anything else not mentioned above in 'What does it do'.

(VPN-Firewall is incompatible with Whonix-Gateway/Workstation's firewall! Use Whonix documentation and use their built-in features.)

Be compatible with Whonix-Gateway/Workstation.Prevent leaks caused by bugs in the VPN software.Prevent any other kind trickery to circumvent using the VPN.Defend against adversaries, which are in position to run code locally, i.e.

IP and sends it somewhere though the VPN. If a locally installed application uses trickery to obtain the the users real Consult your VPN software's/provider's documentation andĬonfigure /etc/nf to use the DNS server of your VPN server.

You should test if it does what it claims.

Should work in many Linux distribution supporting netfilter-persistent in theory.

Only tested on Debian Stretch and Qubes.

Should work with other VPN and tunnel clients such as PPTP in theory, you should test if it does what it claims anyway. Tight firewall rules, using iptables policy drop.Forbid outgoing traffic after the VPN / tunnel software broke down for some reason.when the VPN connection breaks down, the whole internet connection must be down as long as the VPN connection isn't restored. It's much safer when it fails closed, i.e. That means, if the VPN breaks down, because the connection is interrupted, traffic will be send without the VPN. If you simply add a VPN using common instructions, it generally fails open.

Open vpn tor firewall