FrEaKmAn
Hi
I'm trying to setup VPN to only have a connection between server and client, so NO internet to be routed through VPN. The problem that I'm facing is that if I enable block-outside-dns on client side, DNS is not resolving. In a way it makes sense, but I do not wish to change anything on the client side, even DNS resolver.
How could I make sure that there is only a connection between server and client and I don't interfere in anyway with client's internet connection?
proto udp
dev tun
user nobody
group nogroup
persist-key
persist-tun
keepalive 10 120
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
#push "dhcp-option DNS 213.133.98.98"
#push "dhcp-option DNS 213.133.99.99"
#push "dhcp-option DNS 213.133.100.100"
#push "redirect-gateway def1 bypass-dhcp"
dh none
ecdh-curve prime256v1
tls-auth tls-auth.key 0
crl-verify crl.pem
ca ca.crt
cert server_4dyz7Jv4GnMgBstm.crt
key server_4dyz7Jv4GnMgBstm.key
auth SHA256
cipher AES-128-GCM
ncp-ciphers AES-128-GCM
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
client-config-dir /etc/openvpn/ccd
status /var/log/openvpn/status.log
verb 3
client
proto udp
explicit-exit-notify
remote ip 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_4dyz7Jv4GnMgBstm name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
# dns settings
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
