OpenVPN DNS Help!

phoney

I have set up a OpenVPN server on my Amazon AWS server and this server can ping google.com, but when I use connect to my VPN I can't ping anything. The DNS doesn't work. It just halts when I do 'ping google.com', but on the VPNServer its fine.

How do I configure the server to just use the clients local DNS and not the OpenVPNs one.

I added the following to my .ovpn file but it doesn't work still:

redirect-gateway def1 bypass-dhcp
dhcp-option DNS 8.8.8.8

Any ideas?

I even tried getting the VPN server to use Googles DNS for the clients, but it still doesnt work:

port 1194
proto udp
dev tun
sndbuf 0
rcvbuf 0
ca ca.crt
cert server.crt
key server.key
dh dh.pem
auth SHA512
tls-auth ta.key 0
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify crl.pem

phoney

If this helps at all:

Wed Sep 26 20:55:22 2018 OpenVPN 2.3.10 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Jun 22 2017
Wed Sep 26 20:55:22 2018 library versions: OpenSSL 1.0.2g  1 Mar 2016, LZO 2.08
Wed Sep 26 20:55:22 2018 Control Channel Authentication: tls-auth using INLINE static key file
Wed Sep 26 20:55:22 2018 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Sep 26 20:55:22 2018 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Sep 26 20:55:22 2018 Socket Buffers: R=[212992->212992] S=[212992->212992]
Wed Sep 26 20:55:22 2018 UDPv4 link local: [undef]
Wed Sep 26 20:55:22 2018 UDPv4 link remote: [AF_INET]18.202.129.195:1194
Wed Sep 26 20:55:22 2018 TLS: Initial packet from [AF_INET]18.202.129.195:1194, sid=6b999ef5 ae0a0145
Wed Sep 26 20:55:22 2018 VERIFY OK: depth=1, CN=ChangeMe
Wed Sep 26 20:55:22 2018 Validating certificate key usage
Wed Sep 26 20:55:22 2018 ++ Certificate has key usage  00a0, expects 00a0
Wed Sep 26 20:55:22 2018 VERIFY KU OK
Wed Sep 26 20:55:22 2018 Validating certificate extended key usage
Wed Sep 26 20:55:22 2018 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Wed Sep 26 20:55:22 2018 VERIFY EKU OK
Wed Sep 26 20:55:22 2018 VERIFY OK: depth=0, CN=server
Wed Sep 26 20:55:22 2018 Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Sep 26 20:55:22 2018 Data Channel Encrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Sep 26 20:55:22 2018 Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
Wed Sep 26 20:55:22 2018 Data Channel Decrypt: Using 512 bit message hash 'SHA512' for HMAC authentication
Wed Sep 26 20:55:22 2018 Control Channel: TLSv1.2, cipher TLSv1/SSLv3 ECDHE-RSA-AES256-GCM-SHA384, 2048 bit RSA
Wed Sep 26 20:55:22 2018 [server] Peer Connection Initiated with [AF_INET]18.202.129.195:1194
Wed Sep 26 20:55:24 2018 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Wed Sep 26 20:55:24 2018 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,route-gateway 10.8.0.1,topology subnet,ping 10,ping-restart 120,ifconfig 10.8.0.2 255.255.255.0,peer-id 0'
Wed Sep 26 20:55:24 2018 OPTIONS IMPORT: timers and/or timeouts modified
Wed Sep 26 20:55:24 2018 OPTIONS IMPORT: --ifconfig/up options modified
Wed Sep 26 20:55:24 2018 OPTIONS IMPORT: route options modified
Wed Sep 26 20:55:24 2018 OPTIONS IMPORT: route-related options modified
Wed Sep 26 20:55:24 2018 OPTIONS IMPORT: peer-id set
Wed Sep 26 20:55:24 2018 OPTIONS IMPORT: adjusting link_mtu to 1605
Wed Sep 26 20:55:24 2018 ROUTE_GATEWAY 10.233.252.185/255.255.255.248 IFACE=wlp3s0 HWADDR=e8:de:27:39:c7:7c
Wed Sep 26 20:55:24 2018 TUN/TAP device tun0 opened
Wed Sep 26 20:55:24 2018 TUN/TAP TX queue length set to 100
Wed Sep 26 20:55:24 2018 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Wed Sep 26 20:55:24 2018 /sbin/ip link set dev tun0 up mtu 1500
Wed Sep 26 20:55:24 2018 /sbin/ip addr add dev tun0 10.8.0.2/24 broadcast 10.8.0.255
Wed Sep 26 20:55:24 2018 /sbin/ip route add 18.202.129.195/32 via 10.233.252.185
Wed Sep 26 20:55:24 2018 /sbin/ip route add 0.0.0.0/1 via 10.8.0.1
Wed Sep 26 20:55:24 2018 /sbin/ip route add 128.0.0.0/1 via 10.8.0.1