Hi there,
I have been searching for months for a solution to my problem and I haven't found anything that works with my config. I have an OpenVPN server running on a RPi and it works great. I can get internet access and access my local LAN just fine. What doesn't work is only on Windows 10 clients I get offline messages for certain things like the Windows Store and Outlook. The windows store says "You need to be online for that" and Outlook says "We are unable to connect right now." It works just fine as soon as I disconnect the VPN it works fine. Running 2.4.7 on Windows and the latest on my Pi.
Here are my configs:
Server:
dev tun
proto udp
port 1194
ca blahblah.ca
cert blablah.crt
key blablah.key
dh none
topology subnet
server 10.8.0.0 255.255.255.0
# Set your primary domain name server address for clients
#push "dhcp-option DNS 208.67.222.222"
#push "dhcp-option DNS 208.67.220.220"
push "dhcp-option DNS 192.168.0.2"
# Prevent DNS leaks on Windows
push "block-outside-dns"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
keepalive 1800 3600
remote-cert-tls client
tls-version-min 1.2
tls-crypt blahblah.key
cipher AES-256-CBC
auth SHA256
user nobody
group nogroup
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
syslog
verb 3
#DuplicateCNs allow access control on a less-granular, per user basis.
#Remove # if you will manage access by user instead of device.
#duplicate-cn
Client:
client
dev tun
proto udp
remote *serverIP* 1194
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name blahblah
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
I have tried various push DNS settings and none of them seem to alleviate the problem. I also set the interface metric on the OpenVPN adapter to 1 for IPv4 and 2 for IPv6 and that did not help either. I use OpenDNS on my router as my DNS provider.
I'd appreciate any help!
