Proton VPN leaking somewhere

[Rozy63]

Fairly new user here, so bear with me. Using Deluge, and Proton VPN Plus, I successfully can download even though the port shown in Proton's GUI is not showing as open even when I add it to Deluge. Speeds are good and after seeding I wait until upload speed settles at zero, and close Deluge before ever disconnecting the VPN.

I check iknowwhatyoudownload.com before the VPN disconnect and didn't see my downloads, but the next day I checked again with the VPN off, and Deluge off too, and I see a list of the downloads, and my provider's name and ip address (mine). Screenshot available but I don't know how to post it here.

So now I wait for a DMCA notice. I didn't get one right away, but that doesn't mean much.

I am not using the firewall, but network settings have ipv6 set to Automatic. I remember Cyberghost had me disable ipv6, but I think Proton supports ipv6 now.

Port forwarding on my Orbi router doesn't open up the ports either.

No idea what I'm missing here. Hope I didn't miss a post. I did search a lot.

Thanks.

i know what you dl2.png (172.66 KiB) Viewed 272 times

deluge port.png (55.82 KiB) Viewed 272 times

Code: Select all

System:
  Kernel: 6.17.0-14-generic arch: x86_64 bits: 64 compiler: gcc v: 13.3.0 clocksource: tsc
  Desktop: Cinnamon v: 6.4.8 tk: GTK v: 3.24.41 wm: Muffin v: 6.4.1 vt: 7 dm: LightDM v: 1.30.0
    Distro: Linux Mint 22.2 Zara base: Ubuntu 24.04 noble
Machine:
  Type: Desktop Mobo: Gigabyte model: B650 AORUS ELITE AX ICE v: x.x serial: <superuser required>
    uuid: <superuser required> UEFI: American Megatrends LLC. v: F33 date: 03/12/2025
CPU:
  Info: 8-core model: AMD Ryzen 7 9700X bits: 64 type: MT MCP smt: enabled arch: N/A rev: 0 cache:
    L1: 640 KiB L2: 8 MiB L3: 32 MiB
  Speed (MHz): avg: 4594 high: 5566 min/max: 605/5582 boost: enabled cores: 1: 2993 2: 5543
    3: 5548 4: 2993 5: 5555 6: 2777 7: 5546 8: 5544 9: 5556 10: 5549 11: 5566 12: 5548 13: 3256
    14: 2993 15: 5550 16: 2993 bogomips: 121364
  Flags: avx avx2 ht lm nx pae sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3 svm
Graphics:
  Device-1: AMD vendor: ASRock driver: amdgpu v: kernel pcie: speed: 32 GT/s lanes: 16 ports:
    active: HDMI-A-1 empty: DP-1,DP-2,Writeback-1 bus-ID: 03:00.0 chip-ID: 1002:7590 class-ID: 0300
  Device-2: AMD vendor: Gigabyte driver: amdgpu v: kernel pcie: speed: 16 GT/s lanes: 16 ports:
    active: none empty: DP-3, DP-4, DP-5, HDMI-A-2, Writeback-2 bus-ID: 13:00.0 chip-ID: 1002:13c0
    class-ID: 0300 temp: 48.0 C
  Display: x11 server: X.Org v: 21.1.11 with: Xwayland v: 23.2.6 driver: X: loaded: amdgpu
    unloaded: fbdev,modesetting,radeon,vesa dri: radeonsi gpu: amdgpu display-ID: :0 screens: 1
  Screen-1: 0 s-res: 3440x1440 s-dpi: 96 s-size: 910x381mm (35.83x15.00") s-diag: 987mm (38.84")
  Monitor-1: HDMI-A-1 mapped: HDMI-A-0 model: LG (GoldStar) SMARTGAME+ serial: <filter>
    res: 3440x1440 hz: 85 dpi: 110 size: 795x332mm (31.3x13.07") diag: 862mm (33.9") modes:
    max: 3440x1440 min: 640x480
  API: EGL v: 1.5 hw: drv: amd radeonsi platforms: device: 0 drv: radeonsi device: 1
    drv: radeonsi device: 2 drv: swrast gbm: drv: kms_swrast surfaceless: drv: radeonsi x11:
    drv: radeonsi inactive: wayland
  API: OpenGL v: 4.6 compat-v: 4.5 vendor: amd mesa v: 25.2.8-0ubuntu0.24.04.1 glx-v: 1.4
    direct-render: yes renderer: AMD Radeon Graphics (radeonsi gfx1200 LLVM 20.1.2 DRM 3.64
    6.17.0-14-generic) device-ID: 1002:7590
Audio:
  Device-1: AMD driver: snd_hda_intel v: kernel pcie: speed: 32 GT/s lanes: 16 bus-ID: 03:00.1
    chip-ID: 1002:ab40 class-ID: 0403
  Device-2: AMD Rembrandt Radeon High Definition Audio driver: snd_hda_intel v: kernel pcie:
    speed: 16 GT/s lanes: 16 bus-ID: 13:00.1 chip-ID: 1002:1640 class-ID: 0403
  Device-3: AMD Family 17h/19h HD Audio vendor: Gigabyte driver: snd_hda_intel v: kernel pcie:
    speed: 16 GT/s lanes: 16 bus-ID: 13:00.6 chip-ID: 1022:15e3 class-ID: 0403
  API: ALSA v: k6.17.0-14-generic status: kernel-api
  Server-1: PipeWire v: 1.0.5 status: active with: 1: pipewire-pulse status: active
    2: wireplumber status: active 3: pipewire-alsa type: plugin
Network:
  Device-1: Intel Wi-Fi 6E AX210/AX1675 2x2 [Typhoon Peak] driver: iwlwifi v: kernel pcie:
    speed: 5 GT/s lanes: 1 bus-ID: 09:00.0 chip-ID: 8086:2725 class-ID: 0280
  IF: wlp9s0 state: down mac: <filter>
  Device-2: Realtek RTL8125 2.5GbE vendor: Gigabyte driver: r8169 v: kernel pcie: speed: 5 GT/s
    lanes: 1 port: e000 bus-ID: 0a:00.0 chip-ID: 10ec:8125 class-ID: 0200
  IF: enp10s0 state: up speed: 1000 Mbps duplex: full mac: <filter>
Bluetooth:
  Device-1: Intel AX210 Bluetooth driver: btusb v: 0.8 type: USB rev: 2.0 speed: 12 Mb/s lanes: 1
    bus-ID: 1-9:5 chip-ID: 8087:0032 class-ID: e001
  Report: hciconfig ID: hci0 rfk-id: 0 state: up address: <filter> bt-v: 5.3 lmp-v: 12
    sub-v: 363c hci-v: 12 rev: 363c class-ID: 7c0104
Drives:
  Local Storage: total: 12.74 TiB used: 1.62 TiB (12.7%)
  ID-1: /dev/nvme0n1 vendor: Western Digital model: WD BLACK SN850X 2000GB size: 1.82 TiB
    speed: 63.2 Gb/s lanes: 4 tech: SSD serial: <filter> fw-rev: 620361WD temp: 44.9 C
  ID-2: /dev/nvme1n1 vendor: Crucial model: CT2000T705SSD3 size: 1.82 TiB speed: 126 Gb/s
    lanes: 4 tech: SSD serial: <filter> fw-rev: PACR5111 temp: 50.9 C scheme: GPT
  ID-3: /dev/nvme2n1 vendor: Western Digital model: WD BLACK SN850X 2000GB size: 1.82 TiB
    speed: 63.2 Gb/s lanes: 4 tech: SSD serial: <filter> fw-rev: 620361WD temp: 43.9 C
  ID-4: /dev/sda vendor: SanDisk model: Desk SSD size: 7.28 TiB type: USB rev: 3.2 spd: 10 Gb/s
    lanes: 1 tech: SSD serial: <filter> fw-rev: 1010 scheme: GPT
Partition:
  ID-1: / size: 1.79 TiB used: 123.23 GiB (6.7%) fs: ext4 dev: /dev/nvme1n1p2
  ID-2: /boot/efi size: 511 MiB used: 7.1 MiB (1.4%) fs: vfat dev: /dev/nvme1n1p1
Swap:
  ID-1: swap-1 type: file size: 2 GiB used: 0 KiB (0.0%) priority: -2 file: /swapfile
USB:
  Hub-1: 1-0:1 info: hi-speed hub with single TT ports: 12 rev: 2.0 speed: 480 Mb/s lanes: 1
    chip-ID: 1d6b:0002 class-ID: 0900
  Hub-2: 1-3:2 info: Realtek RTS5411 Hub ports: 4 rev: 2.1 speed: 480 Mb/s lanes: 1
    chip-ID: 0bda:5411 class-ID: 0900
  Device-1: 1-3.2:4 info: CX 2.4G Receiver type: keyboard,mouse driver: hid-generic,usbhid
    interfaces: 2 rev: 1.1 speed: 12 Mb/s lanes: 1 power: 100mA chip-ID: 3554:fc03 class-ID: 0301
  Device-2: 1-6:3 info: Integrated Express RGB LED Controller type: HID
    driver: hid-generic,usbhid interfaces: 2 rev: 2.0 speed: 12 Mb/s lanes: 1 power: 100mA
    chip-ID: 048d:5702 class-ID: 0300
  Device-3: 1-9:5 info: Intel AX210 Bluetooth type: bluetooth driver: btusb interfaces: 2
    rev: 2.0 speed: 12 Mb/s lanes: 1 power: 100mA chip-ID: 8087:0032 class-ID: e001
  Hub-3: 2-0:1 info: super-speed hub ports: 5 rev: 3.1 speed: 20 Gb/s lanes: 2 chip-ID: 1d6b:0003
    class-ID: 0900
  Device-1: 2-1:2 info: SanDisk Desk SSD type: mass storage driver: uas interfaces: 1 rev: 3.2
    speed: 10 Gb/s lanes: 1 power: 8mA chip-ID: 0781:55c4 class-ID: 0806 serial: <filter>
  Hub-4: 2-3:3 info: Realtek Hub ports: 4 rev: 3.2 speed: 5 Gb/s lanes: 1 chip-ID: 0bda:0411
    class-ID: 0900
  Hub-5: 3-0:1 info: hi-speed hub with single TT ports: 2 rev: 2.0 speed: 480 Mb/s lanes: 1
    chip-ID: 1d6b:0002 class-ID: 0900
  Hub-6: 4-0:1 info: super-speed hub ports: 2 rev: 3.1 speed: 10 Gb/s lanes: 1 chip-ID: 1d6b:0003
    class-ID: 0900
  Hub-7: 5-0:1 info: hi-speed hub with single TT ports: 2 rev: 2.0 speed: 480 Mb/s lanes: 1
    chip-ID: 1d6b:0002 class-ID: 0900
  Hub-8: 6-0:1 info: super-speed hub ports: 2 rev: 3.1 speed: 10 Gb/s lanes: 1 chip-ID: 1d6b:0003
    class-ID: 0900
  Hub-9: 7-0:1 info: hi-speed hub with single TT ports: 1 rev: 2.0 speed: 480 Mb/s lanes: 1
    chip-ID: 1d6b:0002 class-ID: 0900
  Hub-10: 7-1:2 info: Genesys Logic Hub ports: 4 rev: 2.0 speed: 480 Mb/s lanes: 1 power: 100mA
    chip-ID: 05e3:0608 class-ID: 0900
Sensors:
  System Temperatures: cpu: 57.6 C mobo: 44.0 C
  Fan Speeds (rpm): N/A
  GPU: device: amdgpu temp: 48.0 C device: amdgpu temp: 48.0 C mem: 66.0 C fan: 0 watts: 19.00
Repos:
  Packages: 2857 pm: dpkg pkgs: 2830 pm: flatpak pkgs: 27
  No active apt repos in: /etc/apt/sources.list
  Active apt repos in: /etc/apt/sources.list.d/google-chrome.list
    1: deb [arch=amd64] https: //dl.google.com/linux/chrome/deb/ stable main
  Active apt repos in: /etc/apt/sources.list.d/google-earth-pro.list
    1: deb [arch=amd64] http: //dl.google.com/linux/earth/deb/ stable main
  Active apt repos in: /etc/apt/sources.list.d/official-package-repositories.list
    1: deb http: //packages.linuxmint.com zara main upstream import backport
    2: deb http: //archive.ubuntu.com/ubuntu noble main restricted universe multiverse
    3: deb http: //archive.ubuntu.com/ubuntu noble-updates main restricted universe multiverse
    4: deb http: //archive.ubuntu.com/ubuntu noble-backports main restricted universe multiverse
    5: deb http: //security.ubuntu.com/ubuntu/ noble-security main restricted universe multiverse
  Active apt repos in: /etc/apt/sources.list.d/brave-browser-release.sources
    1: deb [arch=amd64 arm64] https: //brave-browser-apt-release.s3.brave.com stable main
  Active apt repos in: /etc/apt/sources.list.d/protonvpn-stable.sources
    1: deb https: //repo.protonvpn.com/debian stable main
  No active dnf repos in: /etc/dnf/dnf.conf
Info:
  Memory: total: 32 GiB note: est. available: 30.46 GiB used: 5.7 GiB (18.7%)
  Processes: 447 Power: uptime: 1d 3h 13m states: freeze,mem,disk suspend: deep wakeups: 0
    hibernate: platform Init: systemd v: 255 target: graphical (5) default: graphical
  Compilers: gcc: 13.3.0 alt: 12 Client: Unknown python3.12 client inxi: 3.3.34

[ambipro]

This has been posted about previously, if you use the search function for "iknowwhatyoudownload" you will see the threads.

Read them, I explain in detail what is going on with this site and how it operates.

viewtopic.php?p=237115#p237115

Is a good place to start.

[Rozy63]

Ok, thank you. I did read the thread and researched it.

I am not using private trackers, and assumed that if iknowwhatyoudownload could see my downloads my ISP could also.

[shinger]

Hello Rozy63,

There are a few things what you could do. You talked about your Orbi router. It looked like a fairly expensive product. The question is not really the price, but what i wonder is functionality. Does it has a mountain of features that you maybe can tinker with it?

I for example use OpenWRT VM on Proxmox Virtualization platform that does my WiFi, but also handles my internet + routing and a bunch of other things. I have installed on it a plugin called Policy Based Routing (PBR). On OpenWRT (Linux Router OS), i have installed a WireGuard interface from a VPN provider (so all the traffic of all my devices go over it automatically). Using PBR plugin i direct all my torrent traffic over this tunnel. So if the tunnel goes down, torrent traffic also stops. Maybe your router also has functionality like this?

Then comes a second, which sadly is not supported by Proton VPN Plus ( i looked it up) ( https://protonvpn.com/support/socks5). Its SOCKS5. Even though SOCKS5 does not secure your traffic, it is a second layer acting like a kill switch to prevent torrent traffic leaking. I am intending to also configure SOCKS5. So if there is no VPN connection, well SOCKS5 also would not work and thus my torrent traffic automatically stops. Your torrent traffic is already secured through the WireGuard tunnel, which i find kind of odd what ProtonVPn talks about. Although i do understand their point of perspective, not everybody does does understand such technologies. Which means bad implementation.

If by change you would be able to have some solution like mine (OpenWRT is completely free) and a VPN provider that does support SOCKS5, you could use SOCKS5 like a kill switch. I have my torrents on 24/7 and i also looked on the website so far even without SOCKS5 proxy, no torrents visible on my default public ipaddress.

[shinger]

I was btw tinkering with Deluge settings and then i was taking a look at the libtorrent settings. I saw there num_outgoing_ports. I myself was also not aware of this option until i was looking at all the outgoing connections on my Router and seeing 5 more ports than the exact outgoing port that i designated to be used.

This could maybe also be one of the culprits that is leaking your torrent traffic. I have now adjusted also my PBR settings for deluge.