[GH-ISSUE #927] Incorrect Domain to IP resolving while add split-tunnel site #267

Closed
opened 2026-10-13 20:17:32 +00:00 by bsakaguchi · 3 comments
Owner

Originally created by @annndruha on GitHub (Aug 4, 2024).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/927

When add new site by domain to split-tunnel sites list, assigned ip is wrong.

Upper: Actual chatgpt.com address
Lower: Address from some Russian provider
image
There are same behavior if just ping from different locations. Some countries have different address in DNS records, like Chinese google.com

So if you need to add blocked site (or site with substituted IP), AmneziaVPN will add blocked address to sites-list.

I think it's two ways to fix:

  • Allow user write in input filed only IP-addresses
  • Get site IP through AmneziaDNS, installed on VPN-server.

AmneziaVPN Windows 11 Client:
4.6.0.3 (Jul 8 2024, 3f90ee91)

Originally created by @annndruha on GitHub (Aug 4, 2024). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/927 When add new site by domain to split-tunnel sites list, assigned ip is wrong. Upper: Actual chatgpt.com address Lower: Address from some Russian provider ![image](https://github.com/user-attachments/assets/83573308-10d6-4554-8a30-0a481f5bede8) There are same behavior if just ping from different locations. Some countries have different address in DNS records, like Chinese google.com So if you need to add blocked site (or site with substituted IP), AmneziaVPN will add blocked address to sites-list. I think it's two ways to fix: * Allow user write in input filed only IP-addresses * Get site IP through AmneziaDNS, installed on VPN-server. AmneziaVPN Windows 11 Client: 4.6.0.3 (Jul 8 2024, 3f90ee91)
Author
Owner

@tiaga commented on GitHub (Aug 21, 2024):

Hello,

As you can see the domain name is resolving to different addresses depending on a country (for example China or Russia): https://dnschecker.org/#A/chatgpt.com. So, it's a good question how to do it correctly.

However, you can enable a connection, check the domain name IP addresses and that resource to the list by IP.

<!-- gh-comment-id:2302690965 --> @tiaga commented on GitHub (Aug 21, 2024): Hello, As you can see the domain name is resolving to different addresses depending on a country (for example China or Russia): https://dnschecker.org/#A/chatgpt.com. So, it's a good question how to do it correctly. However, you can enable a connection, check the domain name IP addresses and that resource to the list by IP.
Author
Owner

@Justieku commented on GitHub (Oct 9, 2024):

Hello,

As you can see the domain name is resolving to different addresses depending on a country (for example China or Russia): https://dnschecker.org/#A/chatgpt.com. So, it's a good question how to do it correctly.

However, you can enable a connection, check the domain name IP addresses and that resource to the list by IP.

I cannot add or modify sites in the split tunneling list while the VPN is active. For example, I need the VPN to be on to ping www.youtube.com and get its IP address through the VPN connection. Then I have to turn off the VPN to manually add the IP to the list.

Would it be possible to make this process smoother? For instance, when adding a new site to the tunnel, it could automatically resolve the IP address using the active VPN connection. Or maybe I’m misunderstanding how DNS works. My wireguard vpn is hosted in linux ubuntu server 22.04

<!-- gh-comment-id:2401856990 --> @Justieku commented on GitHub (Oct 9, 2024): > Hello, > > As you can see the domain name is resolving to different addresses depending on a country (for example China or Russia): https://dnschecker.org/#A/chatgpt.com. So, it's a good question how to do it correctly. > > However, you can enable a connection, check the domain name IP addresses and that resource to the list by IP. I cannot add or modify sites in the split tunneling list while the VPN is active. For example, I need the VPN to be on to ping [www.youtube.com](https://chatgpt.com/) and get its IP address through the VPN connection. Then I have to turn off the VPN to manually add the IP to the list. Would it be possible to make this process smoother? For instance, when adding a new site to the tunnel, it could automatically resolve the IP address using the active VPN connection. Or maybe I’m misunderstanding how DNS works. My wireguard vpn is hosted in linux ubuntu server 22.04
Author
Owner

@Nethius commented on GitHub (Feb 21, 2025):

Thank you for your report. Please note that GitHub is not a support channel. For assistance, please contact our support team via chat at https://t.me/amnezia_support_bot or via email at support@amnezia.org.

Our team will review the details and help resolve the issue.

<!-- gh-comment-id:2674736454 --> @Nethius commented on GitHub (Feb 21, 2025): Thank you for your report. Please note that GitHub is not a support channel. For assistance, please contact our support team via chat at https://t.me/amnezia_support_bot or via email at [support@amnezia.org](mailto:support@amnezia.org). Our team will review the details and help resolve the issue.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amnezia-client#267
No description provided.