Everything seems normal with the network, but when accessing certain platforms, a “region restriction” prompt keeps appearing. After using privacy tools to hide the real IP, it turns out that the local ISP’s DNS address is still visible.
If a DNS leak test shows abnormalities, it means your real network requests may have already been “exposed”, which directly affects your privacy protection effectiveness.
Today we’ll explain how to solve DNS leak detection issues step by step, help you identify the causes, and show how to use DNS Leak Test to fix DNS leaks properly.

DNS (Domain Name System) is like the “internet phonebook”, responsible for converting domain names into IP addresses.
When a DNS leak occurs, even if you are using a proxy, your DNS requests may bypass the encrypted tunnel and be sent directly to the local ISP’s DNS servers.
Therefore, performing a DNS leak test is very important. A commonly used tool is the ToDetect DNS Leak Detection tool.
The mainstream method is to use online tools such as DNS Leak Test or ToDetect. The steps are simple:
1. Open the DNS Leak Test website or the ToDetect DNS test page
2. Connect your VPN or proxy tool
3. Run a Standard Test or Extended Test
4. Check the returned DNS server list
If your local ISP (e.g., telecom or other providers) appears in the results, then a DNS leak issue is likely present.
Many users find “unexpected results” during DNS Leak Tests. The main reasons include:
1. Proxy does not take over DNS requests. Some proxies only encrypt traffic but do not enforce their own DNS.
2. System DNS priority issues. Windows or macOS may still prioritize local DNS.
3. Browser DNS cache or DoH conflicts. Enabling “Secure DNS (DoH)” may bypass the VPN.
4. Incomplete network protocol handling. Some proxy modes (e.g., HTTP-only proxies) cannot handle DNS requests.
| Platform | DNS configuration steps | Scope | Admin required | Notes |
|---|---|---|---|---|
| Windows 10/11 | Settings → Network & Internet → Advanced network settings → More network adapter options → Right-click adapter → Properties → IPv4 | System-wide | Yes | Run ipconfig /flushdns after changes |
| macOS | System Settings → Network → Select adapter → Advanced → DNS | System-wide | Yes | Lower priority than VPN settings; use together if needed |
| Android 12+ | Settings → Network & Internet → Private DNS → Off (or manual setup) | System / partial apps | No | Some apps ignore system DNS and require separate handling |
| iOS | Settings → Wi-Fi → Tap connected network → Configure DNS → Manual | Current Wi-Fi only | No | Must reconfigure when switching networks |
| Linux (NetworkManager) | nmcli connection modify <connection name> ipv4.dns "1.1.1.1 1.0.0.1" | System-wide | Yes | Restart NetworkManager or reconnect to apply |
| Router | Access via browser 192.168.1.1 (or 192.168.0.1) → Network settings → WAN/DNS settings | All devices | Yes | Most complete method but requires admin credentials |
• Identify leak source: disconnect all proxies and run dnsleaktest.com Standard/Extended test to record ISP DNS results.
• Enable proxy protection: turn on DNS leak protection, IPv6 leak protection, and Kill Switch. Temporarily disable Split Tunneling if enabled.
• Switch to encrypted DNS manually: set system DNS to stable public DNS such as Cloudflare (1.1.1.1 / 1.0.0.1) or Google (8.8.8.8 / 8.8.4.4).
• Clear DNS cache: run ipconfig /flushdns on Windows.
• Disable IPv6: turning off IPv6 forces traffic through IPv4 VPN tunnels.
• Disable browser DNS override: turn off “Secure DNS” or DoH in browser settings.
• Disable WebRTC leaks: use extensions or browser settings to prevent IP leaks.
• Check system environment: run antivirus scan, inspect router settings and browser extensions.
After fixing, rerun a DNS Leak Test and confirm:
• All DNS servers belong to your VPN provider
• No local ISP DNS appears
• IP matches the proxy node
Using ToDetect for cross-checking multiple nodes is also recommended for higher accuracy.
Because DNS cache may still contain remote records. Run ipconfig /flushdns and restart the network adapter.
Because “Secure DNS (DoH)” is enabled and bypasses the proxy. Disable it in browser settings.
Because IPv6 or WebRTC leaks expose traffic outside the tunnel. Disabling both resolves the issue.
Some tools use extended detection modes that may be intercepted by routers/firewalls. Resetting router settings may help.
DNS leaks may seem minor, but they directly affect your online privacy. When DNS Leak Test anomalies occur, use tools like DNS Leak Test or ToDetect to diagnose and fix the issue step by step.
With correct configuration, most DNS leak problems can be fully resolved, making your proxy truly anonymous and secure.