djangofreeman
I've successfully create an openvpn server with pfSense and been able to connect to that server via the openVPN client in iOS by using the client import utility in pfSense.
But, I cannot resolve hostnames even though the VPN connection is active and the tunnel is up to my local network. I've verified by accessing the pfSense WebUI from my iphone while connected to the VPN.
None of the queries from my iPhone are showing up in the pihole log either.
I am not using pihole OR pfSense as my dhcp, only static ips for a specific reason. Is there a way I get get hostnames to resolve from my WAN VPN connection in to my LAN without DHCP?
My network configurations are:
internet <-> 192.168.1.x/24 (pfSense WAN) <-> 192.168.2.x/24 (pfSenseLAN) *pihole is here also*
dev ovpns1
verb 1
dev-type tun
dev-node /dev/tun1
writepid /var/run/openvpn_server1.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto udp4
cipher AES-128-CBC
auth SHA256
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
client-connect /usr/local/sbin/openvpn.attributes.sh
client-disconnect /usr/local/sbin/openvpn.attributes.sh
learn-address "/usr/local/sbin/openvpn.learn-address.sh localdomain"
local (pfSense WAN interface IP here)
tls-server
server 192.168.4.x 255.255.255.0
client-config-dir /var/etc/openvpn-csc/server1
username-as-common-name
plugin /usr/local/lib/openvpn/plugins/openvpn-plugin-auth-script.so /usr/local/sbin/ovpn_auth_verify_async user TG9jYWwgRGF0YWJhc2U= fa
lse server1 1194
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'OpenVPNServer-Cert' 1"
lport 1194
management /var/etc/openvpn/server1.sock unix
push "dhcp-option DNS (pihole IP)"
push "dhcp-option DOMAIN localdomain""
push "redirect-gateway def1"
client-to-client
ca /var/etc/openvpn/server1.ca
cert /var/etc/openvpn/server1.cert
key /var/etc/openvpn/server1.key
dh /etc/dh-parameters.2048
tls-auth /var/etc/openvpn/server1.tls-auth 0
ncp-ciphers AES-128-GCM
persist-remote-ip
float
topology subnet
