Order of events...

Looked up IP

Connected to Tailscale, set exit node through Mullvad

Looked up IP again, was different

Started seeding in the background while working on other stuff

At one point I saw Tailscale icon flicker

Later I got an angry email from my ISP with a timestamp that lined up

Been seeding for years, and this was my first leak. Was for a recent popular film (Linux ISO) that I've been seeding for a year. I contacted Tailscale support to express my concern. This is what they said...

Though we have an open feature request for this (link), I don’t believe there are current plans to add a killswitch to the client for Mullvad.

If this is something that is important to you, the quickest solution to this would be to purchase a Mullvad subscription directly from them, since their client has a number of features more geared towards tightening users online privacy – including a killswitch.

So I suggest not using Tailscale with Mullvad for such purposes. I don't think this is a priority for them. For other uses it's been fine.

I imagine this could have been avoided with a restrictive torrent client configuration, as is typically recommended online. I've tried and failed to get that working in the past. I'll try again once I change out my VPN. If you've been putting that off, learn from my mistake and look into it!

OC by @bl4kers@lemmy.ml

top 8 comments

sorted by: hot top controversial new old

[–] CmdrShepard49@sh.itjust.works 22 points 2 days ago (1 children)

You shouldn't even be using Mullvad for torrenting as they had to get rid of their port forwarding feature some time ago. This means youll only be able to connect to individuals who do have port forwarding setup and no one else.

In any case the best solution is to link your torrent client to the VPN interface as it will cease operation if it loses connection and prevent leaks.

[–] witty_username@feddit.nl 3 points 2 days ago (3 children)

What would you recommend in stead of mullvad?

[–] CmdrShepard49@sh.itjust.works 7 points 2 days ago

Ive been using AirVPN since Mullvad dropped port forwarding and it has been decent and reasonably priced. The only issue I've had was with their "Eddie" client for Windows. I fixed this by using (I think, or something similarly named) WireSock with an AirVPN Wireguard config which also gave me the ability to do split tunneling easily but I only used this for a few months before building a new server running Proxmox

I think ProtonVPN also has the feature but costs a bit more. Private Internet Access is another cheap option but their owners are shady (I had them before Mullvad until they got sold to a company with ties to Israeli spyware makers IIRC)

[–] Duckling5746@lemmy.today 4 points 2 days ago

+1 for AirVPN. They take crypto. Works nicely on headless servers with openvpn.

[–] swab148@lemmy.dbzer0.com 4 points 2 days ago

I use Proton, I've also heard AirVPN is good.

[–] GlenRambo@jlai.lu 9 points 2 days ago

I haven't looked into Tailscale. But the post starts with

I use the unstable Mac OS client

Kinda expected for unstable clients right?

[–] dragonfly4933@lemmy.dbzer0.com 13 points 2 days ago

Tailscale is pretty good, and i generally like the company, but there are definitely some gaps. For awhile it even lacked proper ipv6 support with mullvad.

[–] ggtdbz@lemmy.dbzer0.com 2 points 2 days ago

If the Mullvad desktop app could just exclude the Tailscale ports this would be fixed. I like their implementation but I would much rather have the full controls of the Mullvad software itself especially if I’m on a desktop.