MacOS not resolving IPv6 with default tunnelblick config

[Marian Ďurkovič]

Hello,

default tunnelblick configuration includes active option "Disable IPv6 unless the server is accessed via IPv6".

However, this option prevents MacOS to resolve any domain names to IPv6 addresses - even if the VPN tunnel properly supports both IPv4 and IPv6.

As a result, all webpages are accesses only via IPv4 - and IPv6-only webpages like speedtest6.tele2.net are completely inaccessible in Safari, Firefox, curl etc. Chrome works, since it bypasses internal MacOS resolver.

When this config option is unchecked, everything works as expected. In order not to leak IPv6 packets, push "redirect-gateway ipv6 def1" must be configured on VPN server.

Is it possible to avoid this unwanted side-effect, or this config option is not usable for IPv6-enabled VPNs?

Thanks & kind regads,

MD

[Tunnelblick developer]

As far as I know, the unwanted side effect can't be avoided.