Hi everyone! Running Ubuntu 20.4 with OpenVPN 2.4.7 I would like to use my own DNS by (correctly) modifying /etc/resolv.conf myself, instead of using the pushed DNS option by the VPN server. Here is what I did, [b]please advise[/b] if I have made a mistake. 1.) [b]Remove[/b] the following from the client config: [code]script-security 2[/code] [color=#FF4000]Reason[/color]: Re-establishing default -> script-security 1, which allows no outside scripts [code]up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf[/code] [color=#FF4000]Reason[/color]: No longer needed, since invoking outside script to update /etc/resolv.conf is undesired 2.) [b]Add[/b] the following to client config: [code]pull-filter ignore "dhcp-option DNS"[/code] [color=#FF4000]Reason[/color]: Completely ignore any DNS options pushed by the server. Everything works both with and without using Step 2 (pull-filter ignore "dhcp-option DNS"). [b]Question[/b]: Am I causing any harm by adding pull-filter ignore "dhcp-option DNS", or would it be better to leave that out?

Expert Opinion Needed - OpenVPN On Linux!

tunnel_lemur

Hi everyone!

Running Ubuntu 20.4 with OpenVPN 2.4.7

I would like to use my own DNS by (correctly) modifying /etc/resolv.conf myself, instead of using the pushed DNS option by the VPN server.

Here is what I did, please advise if I have made a mistake.

1.) Remove the following from the client config:

script-security 2

Reason: Re-establishing default -> script-security 1, which allows no outside scripts

up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

Reason: No longer needed, since invoking outside script to update /etc/resolv.conf is undesired

2.) Add the following to client config:

pull-filter ignore "dhcp-option DNS"

Reason: Completely ignore any DNS options pushed by the server.

Everything works both with and without using Step 2 (pull-filter ignore "dhcp-option DNS").

Question: Am I causing any harm by adding pull-filter ignore "dhcp-option DNS", or would it be better to leave that out?

TinCanTech

Using the pull filter will simply ignore the server pushed "dhcp-option DNS". It has no other effect Perse ..

Your other changes all take higher priority than the pull filter anyway.

tunnel_lemur

Thanks again for replying, you are awesome btw.

Did I miss anything, or is the pull filter + removing those lines the best way to achieve my goal?
I am a total noob and this is the best I could come up with after googling for like 2-3 hours.

TinCanTech

You want to ignore the server pushed DNS and that is what you are doing ...