DNS Settings

thierrite

Hi tehre,

I use stubby to encrypt my DNS requests, but once I connect to the VPN running a VPS, I see that my DNS are those from the VPS provider.
In OpenVPN settings, I see indeed that the 'clients use the same DNS servers as the Access Server host' is set to YES.

I did switch to 'Do not alter clients' DNS server settings' to YES, but it seems nothing changed after OpenVPN reboot and new connecttion trhough the VPN is established. I still can see my VPS provider DNS, as shown below:

xxx@yyy:~$ systemd-resolve --status
Global
         DNS Servers: 127.0.0.1
          DNSSEC NTA: 10.in-addr.arpa
                      16.172.in-addr.arpa
                      168.192.in-addr.arpa
                      17.172.in-addr.arpa
                      18.172.in-addr.arpa
                      19.172.in-addr.arpa
                      20.172.in-addr.arpa
                      21.172.in-addr.arpa
                      22.172.in-addr.arpa
                      23.172.in-addr.arpa
                      24.172.in-addr.arpa
                      25.172.in-addr.arpa
                      26.172.in-addr.arpa
                      27.172.in-addr.arpa
                      28.172.in-addr.arpa
                      29.172.in-addr.arpa
                      30.172.in-addr.arpa
                      31.172.in-addr.arpa
                      corp
                      d.f.ip6.arpa
                      home
                      internal
                      intranet
                      lan
                      local
                      private
                      test

Link 6 (tun0)
      Current Scopes: DNS
       LLMNR setting: yes
MulticastDNS setting: no
      DNSSEC setting: no
    DNSSEC supported: no
         DNS Servers: 172.xxx.xxx.xxx
                      213.xxx.xxx.xxx
          DNS Domain: ~.
Link 2 (wlp2s0)
      Current Scopes: none
       LLMNR setting: yes
MulticastDNS setting: no
      DNSSEC setting: no
    DNSSEC supported: no

Can someone has an idea with I can use my client DNS (127.0.0.1)?
Thaks in advance for your help.

thierrite

I have been abke to deal with that by myself (not that complicated but tricky when you have no precise idea how things work).

So, first, my DNS setting was right in OpenVPN AS: 'Do not alter clients' DNS server settings' is set to YES
Second, in my OpenVPN client settings, I changed the IPv4 method to be 'Aytomatic (VPN) addresses only' and then put my local DNS IP (127.0.0.1) as my DNS.

and it works:

xxx@yyy:~$ systemd-resolve --status
Global
         DNS Servers: 127.0.0.1
          DNSSEC NTA: 10.in-addr.arpa
                      16.172.in-addr.arpa
                      168.192.in-addr.arpa
                      17.172.in-addr.arpa
                      18.172.in-addr.arpa
                      19.172.in-addr.arpa
                      20.172.in-addr.arpa
                      21.172.in-addr.arpa
                      22.172.in-addr.arpa
                      23.172.in-addr.arpa
                      24.172.in-addr.arpa
                      25.172.in-addr.arpa
                      26.172.in-addr.arpa
                      27.172.in-addr.arpa
                      28.172.in-addr.arpa
                      29.172.in-addr.arpa
                      30.172.in-addr.arpa
                      31.172.in-addr.arpa
                      corp
                      d.f.ip6.arpa
                      home
                      internal
                      intranet
                      lan
                      local
                      private
                      test

Link 11 (tun1)
      Current Scopes: DNS
       LLMNR setting: yes
MulticastDNS setting: no
      DNSSEC setting: no
    DNSSEC supported: no
         DNS Servers: 127.0.0.1
          DNS Domain: ~.

Link 9 (tun0)
      Current Scopes: none
       LLMNR setting: yes
MulticastDNS setting: no
      DNSSEC setting: no
    DNSSEC supported: no

Link 2 (wlp2s0)
      Current Scopes: none
       LLMNR setting: yes
MulticastDNS setting: no
      DNSSEC setting: no
    DNSSEC supported: no

This topic can be considered as SOLVED.

T