I'd considered that too, and in fact it's about the only thing I've come up with so far.   I was really hoping for a "better" solution. Although I haven't explicitly tested it yet, I fully expect the ipv6 leak will occur on non-windows platforms as well, including mobile where disabling ipv6 isn't really an option.   I'm pretty disappointed they don't offer ipv6 leak protection, or even seem to acknowledge it as a problem. It makes the MX tunnel-all-traffic option not fit-for-purpose in my opinion. ... View more