Actually, things weren't as bad as I thought - that "--up" script does
seem to work after all!

My mistake (I did say I was a Mac novice!) was that I *assumed*
"nslookup srv.corporate.domain" would work - well it didn't. What I
didn't check was that "ping srv.corporate.domain" does work :-)

i.e it looks like the Mac's resolver library (which most apps would use)
does point particular DNS queries at the internal-over-openvpn DNS
servers after all. It's just that pure DNS tools like nslookup cannot
make use of it

So it looks like it works to me? Jonathan, you should take another look
at that script and confirm/deny?

PS: Ubuntu's insistence on using dnsmasq and always making the DNS
server 127.0.0.1 totally solves this problem 100% of the time for all
applications - why can't the OSes be as smart :-)

 
On 04/09/14 01:05, Jonathan K. Bullard wrote:
> On Wed, Sep 3, 2014 at 8:37 AM, Gert Doering wrote:
>> On Wed, Sep 03, 2014 at 06:41:17PM +1200, Jason Haar wrote:
>>> Anyway, has anyone out there found out how to do this and is willing to
>>> share? :-)
>> I have no direct answer, but maybe using Tunnelblick instead of "raw
>> openvpn" would just solve this for you?  (It's a very nice MacOS gui
>> that bundles openvpn - just like the windows gui bundle)
> As the current Tunnelblick developer/maintainer, I appreciate Gert's
> kind words, but Tunnelblick does not do split DNS either. I've never
> been able to get it working -- in fact, I am hoping someone will
> respond to Jason's post with information or code so I could add this
> ability to Tunnelblick!


-- 
Cheers

Jason Haar
Corporate Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1



------------------------------------------------------------------------------
Slashdot TV.  
Video for Nerds.  Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to