H2O I have OpenVPN client fully functional on a Linux OS running as a guest virtual machine inside Virtualbox. This VM has two network interfaces configured: one that is bridged to the host, and this is the one to which I have OpenVPN binding; and another one that is configured to be part of a secondary internal-only network, in which I have other VMs running as well. There is routing set up on this VM such that it creates Internet Connection Sharing, as it is called by Windows, from the VM's first adapter to its second one, which is then used as the gateway for the other VMs in the internal-only network. When I do not have the OpenVPN running, the bridged adapter in the first VM simply connects to the host's subnet and from there gets its Internet connection, which is then passed on to the VMs in the Internal-only network. It works fine for either Windows or Linux VMs, providing them Internet. However, when I then enable the OpenVPN program, which appears to work just fine, giving the first VM a good connection to a VPN server on the Internet, but the functionality of Internet Connection Sharing ceases to work for all the VMs on the Internal-only network. I can ping all of them still, and ping back from all of them, but they have no Internet. It seems like the problem may be related to a DNS functionality because I get this error from a Windows VM when I try to validate its network connection: "The DNS server isn't responding." I have configured two different DNS servers' IPs, for example, in the Windows adapter; one corresponding to OpenDNS and the other matching a DNS address pushed into the main Linux VM from the OpenVPN connection. Even so, neither seems to help in this case. Any ideas about how to procede would be appreciated.
Traffic Leaving OpenVPN aside for now ... H2O wroteI get this error from a Windows VM when I try to validate its network connection: "The DNS server isn't responding."Can you ping the DNS server from the Windows VM without OpenVPN running ?
H2O Traffic, hello. Yes, I tested pinging to one of the DNS servers pushed down from the VPN server from Windows VM, and, somewhat surprisingly, I could indeed reach it without OpenVPN running on the Linux VM. I was rather expecting that it would have been an unreachable internal server at the VPN provider's LAN, available perhaps only while using the VPN service. That seems not to be the case since I can apparently reach it over the Internet. Your question did get me thinking, however; and I found with a bit of research that there are a number of ways to handle DNS over VPN (e.g., split mode), if I can believe what I read. I do not quite understand all the technicalities of it yet, but I intend to do so. What do you suppose it means that I can ping the DNS server, which is pushed down to the VPN client, even when I am not using the OpenVPN service? Thanks.
H2O Incidentally, this is the guide I used to set up Internet Connection Sharing on the Linux VM: https://help.ubuntu.com/community/Internet/ConnectionSharing Although made for Ubuntu, it was generic enough for Linux that I could use the part described for the command line, labeled "Ubuntu Internet Gateway Method (iptables)"; I have no GUI on this Linux OS. It worked perfectly without any modifications to the commands.
Traffic H2O wroteYour question did get me thinking'bout time .. H2O wroteWhat do you suppose it means that I can ping the DNS server, which is pushed down to the VPN client, even when I am not using the OpenVPN service?it means you can ping the DNS server with or without the VPN. Suggested reading: https://openvpn.net/index.php/open-source/documentation/howto.html
H2O Traffic, hello again. I am quite confident that I have been thinking all along. Setting up OpenVPN on Linux and Internet Connection Sharing is proof enough of this point. Your rude suggestion to the contrary was immature, and such rudeness often indicates a defensive way of pushing away inquiries that may belie your inadequacies of knowledge. Now, judging from the fact that the best you could offer in the way of advice, for lack of a better word, is to point to the manual, I am convinced that it is "you" rather than I who needs to start thinking more. I am confident that my temporary problem will not frustrate me for long, unlike your problem with manners. Take care and good luck with your socializing. 🙂 "A hill of beans is still just beans".
Traffic And I am confident .. I did it first. If you have a question pertaining directly to OpenVPN, I will help .. If you cannot get your VM to play ball then you probably need another Forum. Edit: This Forum is not very well run .. Example: http://forums.openvpn.net/topic19629.html
