CNAME entries not working across OpenVPN tunnel

Scripts to manage certificates or generate config files

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Locked
duck__boy
OpenVpn Newbie
Posts: 2
Joined: Sun Oct 13, 2013 4:18 pm

CNAME entries not working across OpenVPN tunnel

Post by duck__boy » Sun Oct 13, 2013 4:23 pm

Hey all,

I'm new to the world of OpenVPN, so apologies if this is an silly question!

I've managed to get OpenVPN set up and working (running as a service on Windows 7), but it appears that something wierd is happening with CNAME entries.

From home, I can connect to work servers, but when I try to connect to any of our intranet sites, I just get the Apache welcome screen. This is what is making me think that DNS is working fine accross the tunnel, but that CNAME entries are not.

I'm really not sure what to do to try and fix this problem, or how to go about debugging further, so any tips would be useful.

Thanks,

duck__boy
OpenVpn Newbie
Posts: 2
Joined: Sun Oct 13, 2013 4:18 pm

Re: CNAME entries not working across OpenVPN tunnel

Post by duck__boy » Sun Oct 13, 2013 5:06 pm

Here is my config.

Code: Select all

dev tun
persist-tun
persist-key
cipher AES-128-CBC
tls-client
client
resolv-retry infinite
remote 1.2.3.4 1194 tcp
tls-remote UserOpenVPN-pf1
pkcs12 pf1-TCP-1194-david.gard.p12
tls-auth pf1-TCP-1194-david.gard-tls.key 1
comp-lzo
My goal is to be able to connect to the servers and services from my place of work whilst in a remote location (usually from home).

Currently I can connect to any of the servers, but I cannot connect to any intranet sites hosted by our webserver. Pings to the webserver, and to any intrnat alias/CNAME resolve correctly, but when I enter the address in to a browser I am show the Apache welcom page, suggesting that the request is not being passed to the webserver correctly.
Not sure how you expect us to help?
Nor am I at this point! I have no experience with OpenVPN, so I don't know where to start. Tips as to what to check would be very helpful, as would some questions that could help me get the relevant information to you (because I have no idea what is relevant).

Thanks.

Locked