VPN Killing DNS.
-
Hey guys,
I am hoping someone can help. While this is related to an issue that comes from my OpenVPN client, it is with respects to DNS.
I use OpenVPN to connect to an external VPN service (PureVPN) so that I can route specific clients over the VPN for security and port forwarding reasons (My ISP uses CGNAT)
The issue is when I connect the VPN, sometimes immediately or up to 24 hours later, the DNS dies as my clients can no longer resolve DNS. I have done much messing around to fix the issue to no avail.
However, I believe it could be due to the VPN inserting routes onto the route table that is killing my DNS. I say this as I was playing with the OpenVPN client config and I stopped the OpenVPN from adding routes to the client table. I checked "Don't Pull Routes", as per the below. screenshot
(Ignore the fact the screenshot shows it as unchecked)This worked as everything was working for a week+. so I am fairly confident this is the issue. However, for port forwarding over the VPN (which I need for Plex), this is can not be a long-term solution as using "Dont Pull Routes" kills port forwarding.
It is worth noting that my "Pull DNS" is disabled on my OpenVPN client config.
DNS Query Forwarding Mode is also enabled under Services>DNS Resolution so that my clients are using 1.1.1.1 (Cloudflare)
My question is, how do I stop my VPN instance from killing my DNS ?
-
@panzerscope What are your DNS settings? If I want to make sure that some hosts only use DNS via the VPN, I only give them a public DNS server and not pfSense, so their DNS will go out to the VPN as everything else.
Now on pfSense I only use my WAN connection for DNS. This works well for me. -
@panzerscope said in VPN Killing DNS.:
My question is, how do I stop my VPN instance from killing my DNS ?
Not Pu**VPN but the other one : read this. A story about how VPN totally destroys DNS ...
-
@Gertjan said in VPN Killing DNS.:
@panzerscope said in VPN Killing DNS.:
My question is, how do I stop my VPN instance from killing my DNS ?
Not Pu**VPN but the other one : read this. A story about how VPN totally destroys DNS ...
That was a really good read, thanks for pointing that out. I am now testing a new config as mentioned in that thread as per the below screenshot.
Fingers crossed that will work. DNS has been ok now for 24 hours. Will report back if it passes a week.
Thanks all.
