Can I block real IP leak by WebRTC in the browser's setting?

[gaorui84]

When I either have WebRTC disabled on Firefox or non-proxied UDP disabled on a Chromium-based browser, Voidsec returns null in the Web RTC section; however, in case of either WebRTC or non-proxied UDP being disabled, it makes no difference whether I have Broadcast IP for Best WebRTC Performance enabled or disabled that Voidsec will return my real IP as well as "0.0.0.0" in the Web RTC section, while the access to Voidsec is via a proxy server. Had WebRTC not leaked my real IP in this case, it shouldn't have appeared on Voidsec.

[Pathduck]

@gaorui84 This is how it looks for me, so clearly it works fine in Vivaldi:

I guess you'll need to find someone who actually uses a VPN to help you further.

[DoctorG]

@gaorui84 If you do not use a VPN access point, your client IP (your IP at your Internet Service Provider) can be extracted by webservers. Nothing related to WebRTC.

[gaorui84]

Note that the case abovementioned was with a SOCKS or HTTP proxy server in the browser, rather than with a VPN. In fact, when I'm using VPN or a transparent proxy (which redirects all stream through the proxy server) instead, in the WebRTC section shows the VPN's IP rather than my real public (WAN) IP, however my private (LAN) IP is still leaked in the latter case ("partial leak"). I have this tested in Opera on my old Android tablet, w/o having WebRTC or non-proxied UDP disabled. I'd hereby strongly recommend that WebRTC IP Handling Policy selection embedded in Vivaldi as a feature.

[gaorui84]

@DoctorG Besides VPN, encrypted proxy servers also serve to conceal ISP's client IPs, and that's exactly how Tor works.

[DoctorG]

@gaorui84 WebRTC is blocked if you disable in Settinsg → Privacy and restart Vivaldi.
If not, we internal tester would know and would have reported internally.
I do not see such leaking of my LAN IP by WebTRC on my Windows 10 and Linux Debian.

Perhaps on of your installed extensions cause this leak.

[Pathduck]

@DoctorG Doesn't even need a restart: https://ttm.sh/WAb.mp4

You have a VPN as well? I don't use VPNs because I honestly don't care, so hard for me to check.

[gaorui84]

@DoctorG I don't see any way how I can disable WebRTC by one single setting in Vivaldi (it seems so far only Firefox can do it), just uncheck Broadcast IP for Best WebRTC Performance won't work for me, however disabling all non-proxied UDP using a Chrome extension does work.

[DoctorG]

@gaorui84 said in Can I block real IP leak by WebRTC in the browser's setting?:

I don't see any way how I can disable WebRTC by one single setting

Easy, works with 5.7.2921.65 Win 11:
Open Settings → Privacy → untick "Boradcast IP for best WebRTC Performance" and restart.

If you use Vivaldi Sync, may be other devices sync reactivate such setting.

How do you check if Vivaldi leaks your LAN or client IP?

[gaorui84]

@DoctorG v5.7.2921.65 w/ Win10 Pro here, still not works even after restarting the browser.

[DoctorG]

@gaorui84 I guess one of your installed extensions in Vivaldi leak the IP.

Tell which extensions are installed in vivaldi://system → extensions → Button Maximise…

[gaorui84]

@DoctorG Not currently in sync with another device as I use Vivaldi on one PC only, dual systems (Win10 and OpenSUSE) not working at the same time, so it cannot be synced at this moment.

[DoctorG]

@gaorui84 What happens in a fresh test profile where your only Setting is the disabled WebRTC?

[gaorui84]

@DoctorG The leak occurs w/ not only Vivaldi, but other browsers as well. Actually, your IP address would be included in the unsecure UDP streams and could be easily captured w/ Wireshark by the peer when you're in a video chat in browser. This has been confirmed in using Omegle's Video Chat years ago and you can find some Youtube videos revealing this fact.

[gaorui84]

@gaorui84 

[DoctorG]

@gaorui84 Give URLs of explanative videos which show such leak.

[gaorui84]

@gaorui84 What's the max size of the pic that can be uploaded?

[DoctorG]

@gaorui84 Upload to Imgur and post link here.

[DoctorG]

@gaorui84 1MB as i know.

[gaorui84]

@DoctorG Mine was less than 1MB but it was still rejected.