VPN Tunnel with the DNS blues.

This forum is for general conversation and user-user networking.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
Prosmart
OpenVpn Newbie
Posts: 3
Joined: Fri Apr 12, 2019 4:30 am

VPN Tunnel with the DNS blues.

Post by Prosmart » Fri Apr 12, 2019 4:56 am

Greetings

We have two offices - lets call them "Head" and "Branch" for the sake of discussion each of which runs their own LAN: Head = 192.168.0.0 and Branch = 192.168.1.0.

We have successfully get a VPN tunnel established with an ASUS DSL-AC68U on the Branch end and a TP-Link TL-WDR4300 v1 on the Head end.

Routes are working correctly from Branch (192.168.1.0) to Head (192.168.0.0) so Branch machines can successfully ping Head machines using their IP addresses. Traffic from Branch to Head is is routed via the VPN with all other traffic going out normally.

Now here is the catch, We need to set up some machine in "Head" that will be accessible by name rather than by IP address. There will be quite a few of them (Virtual Machines) that will vary from day to day.

We added these:

address=/idrac/192.168.0.120
address=/nigel/192.168.0.10

to dnsmasq at Head and from the Head office we can now ping these names (which are not defined anywhere else, but we don't seem to be able to tell "Branch" to use a specific DNS server as well as it's "normal" DNS servers. i.e. if a machine in Branch tries to ping "server-1", we want the Branch to look first in the VPN DNS (which is the Head" router 192.168.0.1) and then fall back to its normal DNS.

We have tried adding this to the VPN Additional Config:

push "route 192.168.0.0 255.255.255.0"
push "dhcp-options DNS 192.168.0.1"

and although the route works, the DNS seems to be unaffected.

Does anyone have any suggestions where we should start?

TIA

Nigel.

Prosmart
OpenVpn Newbie
Posts: 3
Joined: Fri Apr 12, 2019 4:30 am

Re: VPN Tunnel with the DNS blues.

Post by Prosmart » Thu Apr 18, 2019 3:38 am

Anyone care to explain why this has been classified as "Off Topic" and cast adrift in the Sargasso Sea of unanswered questions?

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: VPN Tunnel with the DNS blues.

Post by TinCanTech » Thu Apr 18, 2019 1:40 pm

All Openvpn can do with DNS is push DNS server IP or Domain.

DNS problems have nothing to do with Openvpn.

And, as you pointed out:
Prosmart wrote:
Fri Apr 12, 2019 4:56 am
We have successfully get a VPN tunnel established
Your VPN works ..

Edit: Openvpn can also manipulate the Windows Firewall to ensure there are no DNS leaks once a suitable VPN is established.

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: VPN Tunnel with the DNS blues.

Post by TinCanTech » Fri Apr 26, 2019 11:26 pm

FYI: "off topic, related" is not the Sargasso Sea of which you speak ..

This is that Sea:
viewforum.php?f=6

And this is the speech.

Prosmart
OpenVpn Newbie
Posts: 3
Joined: Fri Apr 12, 2019 4:30 am

Re: VPN Tunnel with the DNS blues.

Post by Prosmart » Sat Apr 27, 2019 4:08 am

"DNS problems have nothing to do with Openvpn."

never said they did - I was asking for advice and/or help in a subject area that I am not that familiar with. It relates to OpenVPN because we are using OpenVPN - go figure.
TinCanTech wrote:
Fri Apr 26, 2019 11:26 pm
FYI: "off topic, related" is not the Sargasso Sea of which you speak ..
This is that Sea:
viewforum.php?f=6
And this is the speech.
and not to start a flame war but it only took nine days to think of a witty comeback? - your talents are wasted on here!

TinCanTech
OpenVPN Protagonist
Posts: 11137
Joined: Fri Jun 03, 2016 1:17 pm

Re: VPN Tunnel with the DNS blues.

Post by TinCanTech » Sat Apr 27, 2019 12:35 pm

Prosmart wrote:
Sat Apr 27, 2019 4:08 am
I was asking for advice and/or help in a subject area that I am not that familiar with. It relates to OpenVPN because we are using OpenVPN - go figure
what ever your issue is it has nothing to do with openvpn.
Prosmart wrote:
Sat Apr 27, 2019 4:08 am
but it only took nine days to think of a witty comeback
I am in no hurry to please you nor anybody else.

Post Reply