I’ve set up a phone with Rethink DNS as a permanent VPN, so nothing can come through, I tried putting KDE Connect in the Bypass Universal list, but it still fails to discover devices on the network and in turn it can’t be discovered by others itself.
I tried without VPN active and it all works, of course. Is it possible for the 2 to coexist? If so, what settings should I change?
if you use Android’s built-in setting to set up DNS instead of using an app that uses the VPN slot, you might have more success.
also, you might want toggling “block connections without VPN” off in system settings, I had to disable it when using KDE Connect with Mullvad.
Right, the Mullvad app now has a warning that Android’s “block connections without VPN” disables both split tunneling and local network discovery. So it must be off when using KDE connect.
Yes, I believe the issue comes from that(edit: tried disabling it and it was indeed that), ideally one would keep that setting on, I guess there’s no internal Android setting to exclude on an app by app basis unfortunately
I’d like to use Rethink DNS (forcefully set to DNS+Firewall) because it keeps a record on-device of the connections that apps tried to establish. So as I understand it’s not possible to have both then?
Ich think you need to turn the blocker off. It seems to block anything not going through the VPN, even if the VPN allows to configure exceptions.
I also have Rethink as a permenant VPN. I set KDE Connect to ‘excluded’ and it works for me.
Do you also have “Block connections without VPN” on like this?
No I don’t, that does seem to conflict with exclude
Turning on “Block connections without VPN options” will not make KDE connect work. Your solution is, either to keep this setting turned off, or use Rethink using another device. By using another device, I mean, set up Rethink either on your router, or maybe an old Android with Rethink installed and using using it as a hotspot with “Allow clients to use VPN” option (which is available on LineageOS, but not on GrapheneOS). Or you can also set up something like piHole.
Turning on “Block connections without VPN options” will not make KDE connect work
I did do that in conjunction with bypass set for KDE connect only and it works. I find the other options you suggested really cool though! Might give them a shot.
Also didn’t know about the share VPN thing, I’ve wanted that for so long! Weird Graphene doesn’t have it as well
