chatch
Hi,
i have a problem with OpenVPN and DNS(bind9). Both of them are on the same machine(Raspberry).
From the RPI i can ping and dig with the hostname and ip
From a connected client (Mac) i can only dig with the hostname ping responds with Unknown Host
e.g. ping router.home.lan
Here are my configs.
OpenVPN Forum
LAN
10.1.1.0/24
Openvpn.conf
dev tun
server 10.8.0.0 255.255.255.0
push "redirect-gateway"
push "dhcp-option DOMAIN home.lan"
push "dhcp-option DNS 10.8.0.1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
etc/resolv.conf
domain home.lan
serach home.lan
nameserver 127.0.0.1
nameserver 62.2.24.162
nameserver 62.2.17.61
nameserver 62.2.24.158
nameserver 62.2.17.60
BIND
Named.conf.local
zone "home.lan" IN {
type master;
file "/etc/bind/db.home.lan";
};
zone "1.1.10.in-addr.arpa" {
type master;
file "/etc/bind/db.rev.1.1.10.in-addr.arpa";
};
DB.reverse
@ IN SOA raspberry.home.lan. hostmaster.home.lan. (
2008080902 ; serial
8H ; refresh
4H ; retry
4W ; expire
1D ; minimum
)
IN NS raspberry.home.lan.
; our hosts, in numeric order
1 IN PTR router.home.lan.
5 IN PTR raspberry.home.lan.
db.home.lan
home.lan. IN SOA raspberry.home.lan. hostmaster.home.lan. (
2008080902 ; serial
8H ; refresh
4H ; retry
4W ; expire
1D ; minimum
)
home.lan. IN NS raspberry.home.lan.
home.lan. IN MX 10 raspberry.home.lan.
localhost IN A 127.0.0.1
raspberry IN A 10.1.1.5
router IN A 10.1.1.1
IPTABLES
*nat
:PREROUTING ACCEPT [5178:446393]
:INPUT ACCEPT [3316:323900]
:OUTPUT ACCEPT [6667:513380]
:POSTROUTING ACCEPT [5015:387534]
-A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
-A POSTROUTING -s 10.0.0.0/8 ! -d 10.0.0.0/8 -o eth0 -j MASQUERADE
COMMIT
*filter
:INPUT ACCEPT [209298:28207780]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [332897:397646213]
-A INPUT -i tun+ -j ACCEPT
-A FORWARD -i tun+ -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
COMMIT
Can anyone help me?
Chris
