I currently have 2 tomato-based routers forming a site to site VPN. I have connections working both directions. DNS is only working from client side to server side. I turned on iptables logging and I can see the DNS request, as detailed below, being accepted by IP tables on the server side, but neither a drop nor accept on the client side. Is something configured incorrectly here for DNS to be resolved by the client side server?
Server side fails Client side
| Tomato | =========> | Tomato |
| OpenVPN,DNS | <========= | OpenVPN,DNS |
| 192.168.1.1 | succeeds | 192.168.2.1 |
Server:
daemon
server 192.168.8.0 255.255.255.0
proto udp
port 1194
dev tun
comp-lzo adaptive
keepalive 15 60
verb 3
push "route 192.168.1.0 255.255.255.0"
client-config-dir ccd
client-to-client
route 192.168.2.0 255.255.255.0
push "route 192.168.2.0 255.255.255.0"
ca ca.crt
dh dh.pem
cert server.crt
key server.key
status-version 2
status status
Client:
daemon
client
dev tun
proto udp
remote my.domain.org 1194
resolv-retry 30
nobind
persist-key
persist-tun
comp-lzo adaptive
verb 3
script-security 2
up updown.sh
down updown.sh
ca ca.crt
cert client.crt
key client.key
status-version 2
status status
IPTable log entry:
ACCEPT IN=br0 OUT=tun22 SRC=192.168.1.100 DST=192.168.2.1 LEN=63 TOS=0x00 PREC=0x00 TTL=63 ID=22205 PROTO=UDP SPT=52887 DPT=53 LEN=43
