I strongly suggest that you use something like Network Namespaces through Vopono[0] or Gluetun[1] if you use a commercial VPN for "privacy" or "security" aka torrenting and shitposting. Relying on these clients is always a gamble and if your software (Browser, Torrentclient, etc.) cannot know you public IP only the internal IP of the VPN you are also safe against some exploits and misconfigurations a desktop client won't protect you against.
Wouldn't blocking IPv6 and using a kill-switch prevent leaking?
IlikeKitties · 9m ago
No, not in all cases. Imagine your Browser gets 0-dayed and just send all IPs it sees to an endpoint.
nikanj · 26m ago
I strongly suggest you disable ipv6, as nothing will break by disabling it but many things break with it enabled.
indigo945 · 25m ago
Alternatively, disable ipv4. The same statement holds true.
ta1243 · 2m ago
Lots of things will break if you disable ipv4, including my work provided zscaler windows laptop (and not break in the good way where it fails open when you block traffic to zscaler nodes on your router)
Very little will break if you disable ipv6
ZiiS · 21m ago
Unfortunately this is not true, loads of cool techy stuff (Sentry, GitHub) etc still don't work properly on IPv6, less techy stuff really didn't care at all.
https://blog.thea.codes/nordvpn-wireguard-namespaces/
[1] https://www.makeuseof.com/worst-vpns-you-shouldnt-trust/
[0] https://github.com/jamesmcm/vopono [1] https://github.com/qdm12/gluetun
Very little will break if you disable ipv6