On 8/16/2018 8:53 AM, Piotr Martyniuk wrote:
On 2018-08-16, john doe <johndoe65...@mail.com> wrote:
On the vpn client are you getting the proper DNS in '/etc/resolv.conf'
when connected to your vpn server?
It changes (adds nameserver 192.168.2.1 on top), but this does not
seems to be valid as the IP's I got are from the network 10.8.0.xx and
the one I got is the local IP of one of my machines at home.
What should be there instead? Can this update-resolv-conf script be
used to use different valid entry unstead?
To be sure that we are on the same page:
This configuration assumes that the clients will get "all configuration"
from the server.
On the server in my config file I have:
$ grep -i 'dns\|redirect' *.conf
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.220.220"
If you have the 'resolvconf' package that should be all you need to do.
The script 'update-resolv-conf' should only be used if the 'resolvconf'
pkg is not installed.
At the top of 'update-resolv-conf' I have:
"#!/bin/bash
#
# Parses DHCP options from openvpn to update resolv.conf
# To use set as 'up' and 'down' script in your openvpn *.conf:
# up /etc/openvpn/update-resolv-conf
# down /etc/openvpn/update-resolv-conf
Add those two lines in your server's config file.
#
# Used snippets of resolvconf script by Thomas Hood and Chris Hanson.
# Licensed under the GNU GPL. See /usr/share/common-licenses/GPL.
#
# Example envs set from openvpn:
#
# foreign_option_1='dhcp-option DNS 193.43.27.132'
# foreign_option_2='dhcp-option DNS 193.43.27.133'
# foreign_option_3='dhcp-option DOMAIN be.bnc.ch'
#
[ -x /sbin/resolvconf ] || exit 0"
If "/sbin/resolvconf" is executable, there is no need to use
'update-resolv-conf'.
--
John Doe
