Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS resolution for OpenVPN cleints

    Scheduled Pinned Locked Moved General pfSense Questions
    16 Posts 3 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • chudakC
      chudak
      last edited by

      i tried that so far with no luck :(

      my Subnet 192.168.90.0

      i enabled in VPN-OpenVPN-Servers - "DNS Server enable" "Provide a DNS server list to clients" and added "DNS Server 1" 192.168.90.1

      looks ok?

      1 Reply Last reply Reply Quote 0
      • GentleJoeG
        GentleJoe
        last edited by

        I have this enabled too: Redirect Gateway - Force all client generated traffic through the tunnel.
        See if that changes it for you.

        Plus this setting, Force DNS cache update.

        1 Reply Last reply Reply Quote 0
        • chudakC
          chudak
          last edited by

          i had "Redirect Gateway Force all client generated traffic through the tunnel." enabled
          and enabled "Force DNS cache update" and no love still

          1 Reply Last reply Reply Quote 0
          • GentleJoeG
            GentleJoe
            last edited by

            Are you accessing the hostname with the FQDN like printer.mydomain.com ?

            1 Reply Last reply Reply Quote 0
            • chudakC
              chudak
              last edited by

              @Gentle:

              Are you accessing the hostname with the FQDN like printer.mydomain.com ?

              i do now!!!!

              seems working, thx a million !

              1 Reply Last reply Reply Quote 0
              • GentleJoeG
                GentleJoe
                last edited by

                Great ! :)

                chudakC 1 Reply Last reply Reply Quote 0
                • chudakC
                  chudak @GentleJoe
                  last edited by

                  @GentleJoe

                  Had to dig out this old post, but it's exactly the same issue, so hope can be resolved ...

                  I made a copy of my existing OpenVPN server and added a second one.
                  All same settings. But no matter what I do I can't get host names DNS resolutions on the second server !

                  Wonder WTH and how to troubleshoot it ?

                  chudakC 1 Reply Last reply Reply Quote 0
                  • chudakC
                    chudak @chudak
                    last edited by

                    Either I missing something or it's a bug in VPN sever setup

                    What else has to be set in order to pass host names to a VPN client?

                    0b6f990f-e64f-47ec-9c9e-a7f666e72666-image.png

                    Looking for experts...

                    1 Reply Last reply Reply Quote 0
                    • dotdashD
                      dotdash
                      last edited by

                      It's always worked for me with just the domain and the DNS servers specified. (No force cache update checked). What does ipconfig /all show on the TAP adapter client side?

                      chudakC 1 Reply Last reply Reply Quote 0
                      • chudakC
                        chudak @dotdash
                        last edited by

                        @dotdash

                        I’m on iPhone OpenVPN client
                        Shows my tun ip

                        dotdashD 1 Reply Last reply Reply Quote 0
                        • dotdashD
                          dotdash @chudak
                          last edited by dotdash

                          @chudak said in DNS resolution for OpenVPN cleints:

                          I’m on iPhone OpenVPN client

                          Sorry, I've got nothing for that. I've only had to deal with the name resolution on Windows and Android devices.
                          Edit- the OpenVPN connect client (at least on Android) shows the domain and dns pulled in the connect log.

                          1 Reply Last reply Reply Quote 0
                          • chudakC
                            chudak
                            last edited by

                            I think it would not matter what client.

                            In my case this is how I test. Connect to cellular network on iPhone, connect to VPN and ping host by name. And my 1st server works as expected, but the new server does not !!!

                            dotdashD 1 Reply Last reply Reply Quote 0
                            • dotdashD
                              dotdash @chudak
                              last edited by

                              @chudak said in DNS resolution for OpenVPN cleints:

                              my 1st server works as expected, but the new server does not !!!

                              This would seem to indicate a problem with the new server on the DNS server. If you're testing from the phone, maybe get an app that does nslookup or dig.

                              1 Reply Last reply Reply Quote 0
                              • chudakC
                                chudak
                                last edited by

                                Well after lots of testing and trying here is why.

                                I had DNS Resolver options checked for:

                                'Enable Forwarding Mode'
                                'Use SSL/TLS for outgoing DNS Queries to Forwarding Servers'

                                Un-checking them and checking back fixed the problem!

                                I suspect that reboot will help as well, but I not very often reboot my router.

                                Hope maybe beneficial to somebody else.

                                1 Reply Last reply Reply Quote 0
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.