Intel Connectivity Suite: Fix DNS Leaks & Portmaster Issues
Has anyone noticed that the Intel Connectivity Performance Suite (ICPS) or its predecessor, the Intel Killer Performance Suite, is causing DNS leaks? It turns out that this software, which often comes pre-installed on laptops like the ASUS Zenbook, can mess with your network settings and create some unexpected problems. Let's dive into what's happening, why it's happening, and how we can potentially fix it.
What's the Deal with Intel Connectivity Performance Suite?
So, what exactly is this Intel Connectivity Performance Suite? Well, guys, it's essentially a rebranded version of the older Intel Killer Performance Suite. Think of it as a network boosting tool, initially developed by Rivet Networks, designed to optimize your internet connection. Sounds great, right? The problem is that it sometimes does its job a little too well, leading to some unintended consequences. One of the most annoying issues is that it can cause DNS leaks, even when you've configured your system to use specific DNS servers. DNS leaks occur when your DNS requests are sent to DNS servers other than the ones you've specified in your settings. This can happen for various reasons, but in this case, the ICPS seems to be the culprit.
When the ICPS is running, it can override your DNS settings and send your DNS requests to other servers, potentially exposing your browsing activity to unwanted parties. This is a serious privacy concern, as it means your internet service provider (ISP) or other entities could be tracking your online behavior even if you're using a VPN or other privacy-enhancing tools. This happens because the software is deeply integrated into the network stack and can sometimes bypass your configured settings. For example, even if you've set Quad9 as your DNS in Portmaster and Cloudflare on your router, the ICPS might still be sending requests to other DNS servers without your knowledge. The issue becomes even more frustrating when you have "Ignore System/Network Servers" turned on in your firewall or network management tool because you expect your settings to be honored.
The Problem: DNS Leaks
Guys, imagine setting up Portmaster with specific DNS servers like Quad9 and configuring your router to use Cloudflare, thinking you're all secure. But then, surprise! The Intel Connectivity Performance Suite is secretly routing your DNS requests elsewhere. This means your DNS requests might be going to your ISP's servers or other unintended destinations, undermining your privacy efforts. This is especially concerning because there's no immediate feedback that something is amiss. You might be browsing the web, completely unaware that your DNS requests are being leaked. This lack of transparency makes it difficult to diagnose the problem, as you might not realize that the ICPS is the cause until you start digging deeper into your network settings.
The (Temporary) Fix
One way to temporarily resolve this issue is to disable the driver associated with the Intel Connectivity Performance Suite. According to a Lenovo support guide, you can completely uninstall the driver, which should restore your DNS settings to normal. However, there's a catch: Windows Update might automatically reinstall the driver after a couple of days, bringing the problem back. This can be incredibly frustrating, as you have to keep uninstalling the driver every few days to prevent DNS leaks. This cat-and-mouse game can become quite tedious, especially if you rely on stable and secure DNS settings for your daily online activities.
What's the Expected Behavior?
Ideally, Portmaster and similar tools should be able to detect when the Intel Connectivity Performance Suite is causing DNS leaks and warn the user. While it might be challenging for Portmaster to completely block or control the ICPS's network behavior, a simple warning would be a huge step forward. This would at least alert users to the fact that their DNS settings are being overridden, allowing them to take appropriate action. A warning system would empower users to make informed decisions about their network security and privacy. If Portmaster can't directly stop the ICPS, at least knowing about the leak is half the battle.
How to Reproduce the Issue
If you want to see if you're affected by this issue, you can try installing the Intel Connectivity Performance Suite or the Intel Killer Performance Suite on your system. Keep in mind that the latter might have some OEM restrictions, so it might not work on all systems. After installing the software, monitor your DNS traffic using a tool like Wireshark or Portmaster to see if your DNS requests are being routed to unexpected servers. Pay close attention to the DNS servers that are being used and compare them to the ones you've configured in your system settings. If you notice any discrepancies, it's likely that the ICPS is causing DNS leaks.
You can download the relevant software from the Intel website:
Diving Deeper: Debug Information
For those of you who are technically inclined, there's a pastebin link with more detailed debug information. This information can be helpful for developers who want to investigate the issue further and potentially develop a fix. It includes logs, network configurations, and other relevant data that can shed light on how the Intel Connectivity Performance Suite is affecting DNS resolution. This level of detail can be invaluable for understanding the root cause of the problem and developing effective solutions.
Possible Solutions and Workarounds
Okay, so what can we do about this pesky issue? Here are a few potential solutions and workarounds:
- Uninstall the Intel Connectivity Performance Suite: This is the most straightforward solution, but as mentioned earlier, Windows Update might reinstall the driver automatically. To prevent this, you can try using a tool like Display Driver Uninstaller (DDU) to completely remove the software and its associated drivers. This should prevent Windows Update from reinstalling it.
- Disable the Driver: As mentioned before, you can disable the driver through the Device Manager. However, this is also a temporary solution, as Windows Update might re-enable it. To make this solution more permanent, you can try using a Group Policy setting to prevent Windows Update from installing drivers for specific devices.
- Configure DNS Settings Manually: You can try configuring your DNS settings manually through the Network Adapter settings. This might override the settings imposed by the Intel Connectivity Performance Suite. To do this, go to Control Panel > Network and Internet > Network and Sharing Center > Change adapter settings. Then, right-click on your network adapter, select Properties, and find Internet Protocol Version 4 (TCP/IPv4). Select Properties again and choose Use the following DNS server addresses. Enter your preferred DNS servers, such as Quad9 or Cloudflare.
- Use a Firewall: A firewall like Portmaster can help you monitor and control network traffic, including DNS requests. While it might not be able to completely block the Intel Connectivity Performance Suite's DNS leaks, it can at least alert you to the issue. You can also create custom rules to block DNS requests to specific servers, which might help mitigate the problem.
- Contact Intel Support: You can try contacting Intel support to report the issue and ask for a permanent solution. They might be able to provide a patch or a configuration setting that prevents the Intel Connectivity Performance Suite from overriding your DNS settings.
Conclusion
The Intel Connectivity Performance Suite can cause unexpected DNS leaks, compromising your privacy. While there are temporary fixes, a more permanent solution is needed. Hopefully, this information helps you understand the issue and take steps to protect your online privacy. Keep an eye on your DNS settings, and don't be afraid to try different solutions until you find one that works for you. Cheers!