OpenVPN Problem

[Silver Bullet]

I have configured OpenVPN on Untangle to export DNS but my queries are not going to the specified DNS Server. I suspect that the default route will need to go through the tunnel for this to occur.

Has anyone else successfully accomplished this?

[Silver Bullet]

Is this what needs to be implemented on the Server to accomplish what I asked above? If so, can this feature be added as an optional config when setting up the user's OpenVPN account?

# If enabled, this directive will configure
# all clients to redirect their default
# network gateway through the VPN, causing
# all IP traffic such as web browsing and
# and DNS lookups to go through the VPN
# (The OpenVPN server machine may need to NAT
# the TUN/TAP interface to the internet in
# order for this to work properly).
# CAVEAT: May break client's network config if
# client's local DHCP server packets get routed
# through the tunnel. Solution: make sure
# client's local DHCP server is reachable via
# a more specific route than the default route
# of 0.0.0.0/0.0.0.0.
;push "redirect-gateway"

[scottb]

I'm testing OpenVPN today and running into the same thing. I had to force a connection via the HOSTS file to get Outlook to see my mail server.

Edit: Other than that, it works great! My off-site email users will be thrilled to get the full client.

[scottb]

Fixed. I did not have "export DNS" checked in Address Pools.

But now Outlook is hosed. Grrr.

[Silver Bullet]

That's strange. I have that selected as well but I cannot get DNS queries to go through the tunnel. Route print shows the same Default Route as when I am not connected with the VPN.

Did you remove your HOST entries and flush DNS before testing?

Can you post a Route print before and after your VPN?

[scottb]

Well, I now hosed my Outlook connection so I'm not sure what is going on. I can ping but that is about it. I'm going to try to go back to no DNS and see if I can get Outlook working again because that was my entire purpose. We can get to our network drives via the Portal.

Yeah, I flushed DNS and messed around. I'm not sure what is going on.

[Silver Bullet]

This is what I have done so far.

Installed OpenVPN 2.1_rc4 from openvpn.
Removed the setting to "Export DNS" and saved.
Added the setting to "Export DNS" and saved.

Per nslookup, I am using the DNS server that is behind Untangle. I can now ping using the FQDN of the host. I have always been able to ping by IP. Manually set the WINS server in the VPNs connection properties and can now ping NetBios names.

For some reason, if I remove the WINS server setting and use the "Append these DNS Suffixes (in order)" instead, it doesn't allow me to just use the Host's name. I still have to use the FQDN.

So I guess setting the WINS server automatically will need to be looked at.

[scottb]

I finally gave up on trying to push DNS queries through the VPN. Outlook was acting way to flaky with it. Going back to IP with a HOSTS file entry seems to have improved things (knock on wood, knock on wood).

I was getting some strange DNS resolves so who knows exactly where that traffic was going.