Hi all, I'm trying to set up a VPN client-side interface only for certain applications, not all traffic on my VPS, which is running FreeBSD v12.0. I believe this is known as a split tunnel. First I added net.fibs=2 to /boot/loader.conf and rebooted. I then start openvpn in client mode with the [b]route-noexe[/b] parameter in the PIA client config file. tun4 is assigned this gateway: 10.43.10.5 by the PIA openvpn server. I run this:[code] $ sudo setfib -1 /sbin/route add default 10.43.10.5[/code] This works: [code]$ setfib -1 traceroute 188.184.9.234 traceroute to 188.184.9.234 (188.184.9.234), 64 hops max, 40 byte packets 1 10.43.10.1 (10.43.10.1) 23.559 ms 23.885 ms 23.618 ms ... [/code] But this does not: [code]$ setfib -1 traceroute www.google.com traceroute: unknown host www.google.com[/code] There's no DNS lookup. Even this won't work: [code]$ setfib -1 dig www.google.com @8.8.8.8 ; DiG 9.12.3 www.google.com @8.8.8.8 ;; global options: +cmd ;; connection timed out; no servers could be reached[/code] Anyone got any ideas about to get DNS working here? Thanks

no DNS with split tunnel (FreeBSD)

cbrace

Hi all,

I'm trying to set up a VPN client-side interface only for certain applications, not all traffic on my VPS, which is running FreeBSD v12.0. I believe this is known as a split tunnel.

First I added net.fibs=2 to /boot/loader.conf and rebooted.

I then start openvpn in client mode with the route-noexe parameter in the PIA client config file. tun4 is assigned this gateway: 10.43.10.5 by the PIA openvpn server.

I run this:

 $ sudo setfib -1 /sbin/route add default 10.43.10.5

This works:

$ setfib -1 traceroute 188.184.9.234
traceroute to 188.184.9.234 (188.184.9.234), 64 hops max, 40 byte packets
 1  10.43.10.1 (10.43.10.1)  23.559 ms  23.885 ms  23.618 ms
...

But this does not:

$ setfib -1 traceroute www.google.com
traceroute: unknown host www.google.com

There's no DNS lookup. Even this won't work:

$ setfib -1 dig www.google.com @8.8.8.8

; <<>> DiG 9.12.3 <<>> www.google.com @8.8.8.8
;; global options: +cmd
;; connection timed out; no servers could be reached

Anyone got any ideas about to get DNS working here?

Thanks

ecrist

This isn't an OpenVPN question, per se, so. you may have more luck in the FreeBSD forums with this specific question.