I'm having some challenges with my OpenVPN server. I have it configured correctly to route all traffic through the VPN with a custom dnsmasq server (running on the same server as the VPN.) I accomplished this by the following configs: [code]push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 10.8.0.1"[/code] When the client connects to the server, their /etc/resolve.conf does change to: [code]nameserver 10.8.0.1[/code] The problem is, I don't want to route all traffic through the VPN, only certain ranges (10.8.0.0 255.255.255.0 and XXX.XXX.0.0 255.255.0.0) I've added the following push rules to my server.conf but it still routes all traffic through the vpn. [code]push "route XX.XXX.0.0 255.255.0.0" push "route 10.8.0.0 255.255.255.0"[/code] if I comment out push "redirect-gateway def1 bypass-dhcp" then the routes works but my local DNS (from dnsmasq) won't resolve. What am I missing?

For anyone else trying to figure this out I found the missing peice. You need to push the domain(s) you want to use the VPN DNS for. [code]push "dhcp-option DOMAIN domain.com"[/code] This would allow any x.domain.com queries to go through the vpn tunnel (if the client supports it)

push dns a specific routes but

kisonay

I'm having some challenges with my OpenVPN server. I have it configured correctly to route all traffic through the VPN with a custom dnsmasq server (running on the same server as the VPN.)

I accomplished this by the following configs:

push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 10.8.0.1"

When the client connects to the server, their /etc/resolve.conf does change to:

nameserver 10.8.0.1

The problem is, I don't want to route all traffic through the VPN, only certain ranges (10.8.0.0 255.255.255.0 and XXX.XXX.0.0 255.255.0.0)

I've added the following push rules to my server.conf but it still routes all traffic through the vpn.

push "route XX.XXX.0.0 255.255.0.0"
push "route 10.8.0.0 255.255.255.0"

if I comment out push "redirect-gateway def1 bypass-dhcp" then the routes works but my local DNS (from dnsmasq) won't resolve.

What am I missing?

kisonay

For anyone else trying to figure this out I found the missing peice. You need to push the domain(s) you want to use the VPN DNS for.

push "dhcp-option DOMAIN domain.com"

This would allow any x.domain.com queries to go through the vpn tunnel (if the client supports it)

300000

i dont know what you want to do with dns but there are some config help you to get what you want

if you want www.bbc.co.uk go over vpn just add this in you server config

push "route www.bbc.co.uk 255.255.255.0 vpn_gateway "

if you want 192.168.20.23 go over vpn just add this in you server config

push "route 192.168.20.0 255.255.255.0 vpn_gateway "

if you want www.bbc.co.uk not go over vpn and go direct local network just add this in you server config

push "route www.bbc.co.uk 255.255.255.0 net_gateway "

if you want 192.168.20.12 not go over vpn go direct local network just add this in you server config

push "route 192.168.20.0255.255.255.0 net_gateway "

you can add as many route as you like