Piro_Flipper
Hi guys, I've been stuck for a few days now on this.
Consider the following facts:
- OpenVPN connection successfully established (according to server and client);
- Client DNS server correctly configured;
- Everything on LAN (DNS server included) is accessible by (local) IP address (samba shares, web interfaces can be opened etc.) over VPN;
- Yet somehow every DNS request fails...
I could understand it if I couldn't ping the DNS server, but I can (using IP). It is like every single aspect of the VPN works except for DNS... Server is a RPi by the way. The exact same configuration on my NAS works perfectly.
Where would you look in this situation?
Jlennemann
Please post your client configuration.
Piro_Flipper
Here it is (note that 192.168.8.6 is the RPi's LAN address):
remote xx.xx.xx.xx 1194
dhcp-option DNS 192.168.8.6
cert cert.crt ###
key key.key ###
ca CA.crt
verb 4
redirect-gateway def1
dev tun
proto tcp-client
pull
tls-client
tls-auth ta.key 1
remote-cert-tls server
cipher AES-256-CBC
tls-version-min 1.2 or-highest
fast-io
comp-lzo
reneg-sec 0
auth-user-pass
auth-nocache
Piro_Flipper
As a future reference for those who have the same problem: I was finally able to troubleshoot and fix the issue. As I suspected, the actual OpenVPN configuration was functioning fine. It was in fact only DNS that was not working: I'm using my Pi as both the VPN server and DNS server, but had not configured dnsmasq to listen on the tun0 interface in addition to the standard eth0 interface. Therefore local DNS requests worked fine, but any requests by OpenVPN clients were ignored.
