RC RANDOM CHAOS

vpn lockdown

2 posts

Keepalive packets bypass Android lockdown
Article

Keepalive packets bypass Android lockdown

Android NAT-T keepalive offload egresses UDP/4500 below the VPN lockdown firewall, leaking the device's real IP outside the tunnel. Mechanism and detection.

 Android leaks keepalive packets past its VPN kill switch
Article

Android leaks keepalive packets past its VPN kill switch

Android VPN lockdown leaks NAT-T keepalive packets on UDP 4500 outside the tunnel. Why the kill switch is partial and how to verify egress off-device.