Hello,
I've configured an openvpn server on a VPS running on Ubuntu 13.10. My client is a notebook running on windows 7. Everything works great (Connection is OK and all my traffic goes through the VPN tunnel as I wanted) except for the DNS which don't seem to get pushed to my client (The dns from my ISP is used instead :x ).
Server config :
port 1194
proto udp
dev tun
ca xxx.crt
cert xxx.crt
dh xxx.pem
server xx.xx.xx.xx 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 6
Client config:
client
dev tun
proto udp
remote xx.xx.xx.xx 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca "C:\\Program Files\\OpenVPN\\config\\xxx.crt"
cert "C:\\Program Files\\OpenVPN\\config\\xxx.crt"
key "C:\\Program Files\\OpenVPN\\config\\xxx.key"
ns-cert-type server
comp-lzo
verb 3
register-dns
Server IpTables (ACCEPT policy) :
# OpenVPN
iptables -A INPUT -i eth0 -m state --state NEW -p udp --dport 1194 -j ACCEPT
# Allow TUN interface connections to OpenVPN server
iptables -A INPUT -i tun+ -j ACCEPT
# Allow TUN interface connections to be forwarded through other interfaces
iptables -A FORWARD -i tun+ -j ACCEPT
iptables -A FORWARD -i tun+ -o eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -i eth0 -o tun+ -m state --state RELATED,ESTABLISHED -j ACCEPT
# NAT the VPN client traffic to the internet
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
Packet forwarding:
net.ipv4.ip_forward = 1
Client Log:
Fri May 23 10:51:24 2014 OpenVPN 2.3.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on May 2 2014
Fri May 23 10:51:24 2014 library versions: OpenSSL 1.0.1g 7 Apr 2014, LZO 2.05
Enter Management Password:
Fri May 23 10:51:24 2014 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25340
Fri May 23 10:51:24 2014 Need hold release from management interface, waiting...
Fri May 23 10:51:24 2014 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25340
Fri May 23 10:51:25 2014 MANAGEMENT: CMD 'state on'
Fri May 23 10:51:25 2014 MANAGEMENT: CMD 'log all on'
Fri May 23 10:51:25 2014 MANAGEMENT: CMD 'hold off'
Fri May 23 10:51:25 2014 MANAGEMENT: CMD 'hold release'
Fri May 23 10:51:25 2014 Socket Buffers: R=[8192->8192] S=[8192->8192]
Fri May 23 10:51:25 2014 MANAGEMENT: >STATE:1400827885,RESOLVE,,,
Fri May 23 10:51:25 2014 UDPv4 link local: [undef]
Fri May 23 10:51:25 2014 UDPv4 link remote: [AF_INET]xx.xx.xx.xx:1194
Fri May 23 10:51:25 2014 MANAGEMENT: >STATE:1400827885,WAIT,,,
Fri May 23 10:51:25 2014 MANAGEMENT: >STATE:1400827885,AUTH,,,
Fri May 23 10:51:25 2014 TLS: Initial packet from [AF_INET]xx.xx.xx.xx:1194, sid=3ef9ac02 a62265dd
Fri May 23 10:51:27 2014 VERIFY OK: depth=1, C=XX, ST=NC, L=xxxx, O=xxx, OU=xxx, CN=xxx, name=xxx, emailAddress=mail@host.domain
Fri May 23 10:51:27 2014 VERIFY OK: nsCertType=SERVER
Fri May 23 10:51:27 2014 VERIFY OK: depth=0, C=XX, ST=NC, L=xxxx, O=xxx, OU=xxx, CN=xxx, name=xxx, emailAddress=mail@host.domain
Fri May 23 10:51:29 2014 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 23 10:51:29 2014 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 23 10:51:29 2014 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri May 23 10:51:29 2014 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri May 23 10:51:29 2014 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Fri May 23 10:51:29 2014 [myvpn] Peer Connection Initiated with [AF_INET]xx.xx.xx.xx:1194
Fri May 23 10:51:30 2014 MANAGEMENT: >STATE:1400827890,GET_CONFIG,,,
Fri May 23 10:51:31 2014 SENT CONTROL [myvpn]: 'PUSH_REQUEST' (status=1)
Fri May 23 10:51:32 2014 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route 10.8.0.1,topology net30,ping 10,ping-restart 120,ifconfig 10.8.0.6 10.8.0.5'
Fri May 23 10:51:32 2014 OPTIONS IMPORT: timers and/or timeouts modified
Fri May 23 10:51:32 2014 OPTIONS IMPORT: --ifconfig/up options modified
Fri May 23 10:51:32 2014 OPTIONS IMPORT: route options modified
Fri May 23 10:51:32 2014 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Fri May 23 10:51:32 2014 MANAGEMENT: >STATE:1400827892,ASSIGN_IP,,10.8.0.6,
Fri May 23 10:51:32 2014 open_tun, tt->ipv6=0
Fri May 23 10:51:32 2014 TAP-WIN32 device [Local Area Connection 2] opened: \\.\Global\{5DF9B5EF-B351-4DAA-9015-435E7C465C48}.tap
Fri May 23 10:51:32 2014 TAP-Windows Driver Version 9.9
Fri May 23 10:51:32 2014 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.6/255.255.255.252 on interface {5DF9B5EF-B351-4DAA-9015-435E7C465C48} [DHCP-serv: 10.8.0.5, lease-time: 31536000]
Fri May 23 10:51:32 2014 Successful ARP Flush on interface [23] {5DF9B5EF-B351-4DAA-9015-435E7C465C48}
Fri May 23 10:51:37 2014 TEST ROUTES: 2/2 succeeded len=1 ret=1 a=0 u/d=up
Fri May 23 10:51:37 2014 C:\Windows\system32\route.exe ADD xx.xx.xx.xx MASK 255.255.255.255 192.168.1.1
Fri May 23 10:51:37 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Fri May 23 10:51:37 2014 Route addition via IPAPI succeeded [adaptive]
Fri May 23 10:51:37 2014 C:\Windows\system32\route.exe ADD 192.168.1.1 MASK 255.255.255.255 192.168.1.1 IF 12
Fri May 23 10:51:37 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=25 and dwForwardType=4
Fri May 23 10:51:37 2014 Route addition via IPAPI succeeded [adaptive]
Fri May 23 10:51:37 2014 C:\Windows\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri May 23 10:51:37 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 23 10:51:37 2014 Route addition via IPAPI succeeded [adaptive]
Fri May 23 10:51:37 2014 C:\Windows\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.5
Fri May 23 10:51:37 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 23 10:51:37 2014 Route addition via IPAPI succeeded [adaptive]
Fri May 23 10:51:37 2014 MANAGEMENT: >STATE:1400827897,ADD_ROUTES,,,
Fri May 23 10:51:37 2014 C:\Windows\system32\route.exe ADD 10.8.0.1 MASK 255.255.255.255 10.8.0.5
Fri May 23 10:51:37 2014 ROUTE: CreateIpForwardEntry succeeded with dwForwardMetric1=30 and dwForwardType=4
Fri May 23 10:51:37 2014 Route addition via IPAPI succeeded [adaptive]
Fri May 23 10:51:37 2014 Initialization Sequence Completed
Fri May 23 10:51:37 2014 MANAGEMENT: >STATE:1400827897,CONNECTED,SUCCESS,10.8.0.6,xx.xx.xx.xx
Fri May 23 10:51:37 2014 Start net commands...
Fri May 23 10:51:37 2014 C:\Windows\system32\net.exe stop dnscache
Fri May 23 10:51:40 2014 C:\Windows\system32\net.exe start dnscache
Fri May 23 10:51:43 2014 C:\Windows\system32\ipconfig.exe /flushdns
Fri May 23 10:51:43 2014 C:\Windows\system32\ipconfig.exe /registerdns
Fri May 23 10:51:49 2014 End net commands...
I'd really appreciate some help on how to get my server to push the DNS settings to my client.
Thanks in advance.
