Hi,
I have been working on getting a OpenVPN server working on Ubuntu 12.04, it seems to work Fiiiiine with my Windows machines but there seem to be more than a few teething problems with the Mac users amongst us.
As it stands the VPN connection does connect OK and that I can ping the IP address of the TUN adapter on the Linux box, but I can't resolve DNS. Now I am not a big Mac person, however for all intents and purposes the routing table all looks like its set correctly and the internet connection all works fine however I just cannot hit the servers with their internal addresses. In addition to this it seems that once the VPN connection drops the network connection on the Macbook can't connect until the thunderbolt adapter is dis/re-connected
The server config is as follows:
port 1194
proto udp
dev tun0
ca ca.crt
cert server.crt
key server.key # This file should be kept secret
plugin /usr/lib/openvpn/openvpn-auth-pam.so openvpn
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.10.10.0/24"
push "route 10.10.20.0/24"
push "dhcp-option DNS 10.10.10.10"
push "dhcp-option DNS 10.10.10.20"
duplicate-cn
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
auth-nocache
With the Client config being:
script-security 2
auth-nocache
client
dev tun
proto udp
remote mydomain.tld 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
comp-lzo
verb 3
auth-user-pass
I just can't understand the difference in behaviour. I have tried both Tunnelblick and Viscosity and they both appear to connect the same, yet not push the DNS settings correctly so I am assuming either the latest version of Mac OS requires additional routing rules or there needs to be some configuration changes to allow for the correct settings to be pushed to the client.
Any suggestions regarding this issue would be greatly appreciated!
