Making sure no VPN leaks occur

[garnet2k]

Hi
First of all great app, good work.

I am running it on pixel 5 will wireguard. It runs great.
I need to definitely have no VPN leaks so I was wondering what's the best way to achieve that?
I have set the current upstreams to tun0 and fallback to tun0

Upstream network interface is tun0
Fallback upstream interface is tun0.

Ip6 tether is disabled .

Is this the best way to ensure no VPN leaks will occur?

As a fail-safe I also run a sh script after VPNhotspot is up and running which adds to iptables FORWARD chain, at position 1
Wlan1 to tun0 accept.
Wlan1 to everywhere else, drop.

However every time VPNhotspot is restarted it adds it's own iptables rules on pos 1 in the same chain.

I add this rule myself so it VPNhotspot crashes or is killed by the OS, internet is killed for the wlan1 clients. Is that a good approach?

Thanks.

[Mygod]

Fallback interface you can just put none or a^. The rules will persist even if VPN Hotspot is killed by system: in that case you should notice DNS not working but not leaks. There isn't a 100% catch all net but I think this should be good enough. If you notice any leaks, feel free to make a bug report.