Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS resolution for OpenVPN cleints

    Scheduled Pinned Locked Moved General pfSense Questions
    16 Posts 3 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • chudakC
      chudak
      last edited by

      i had "Redirect Gateway Force all client generated traffic through the tunnel." enabled
      and enabled "Force DNS cache update" and no love still

      1 Reply Last reply Reply Quote 0
      • GentleJoeG
        GentleJoe
        last edited by

        Are you accessing the hostname with the FQDN like printer.mydomain.com ?

        1 Reply Last reply Reply Quote 0
        • chudakC
          chudak
          last edited by

          @Gentle:

          Are you accessing the hostname with the FQDN like printer.mydomain.com ?

          i do now!!!!

          seems working, thx a million !

          1 Reply Last reply Reply Quote 0
          • GentleJoeG
            GentleJoe
            last edited by

            Great ! :)

            chudakC 1 Reply Last reply Reply Quote 0
            • chudakC
              chudak @GentleJoe
              last edited by

              @GentleJoe

              Had to dig out this old post, but it's exactly the same issue, so hope can be resolved ...

              I made a copy of my existing OpenVPN server and added a second one.
              All same settings. But no matter what I do I can't get host names DNS resolutions on the second server !

              Wonder WTH and how to troubleshoot it ?

              chudakC 1 Reply Last reply Reply Quote 0
              • chudakC
                chudak @chudak
                last edited by

                Either I missing something or it's a bug in VPN sever setup

                What else has to be set in order to pass host names to a VPN client?

                0b6f990f-e64f-47ec-9c9e-a7f666e72666-image.png

                Looking for experts...

                1 Reply Last reply Reply Quote 0
                • dotdashD
                  dotdash
                  last edited by

                  It's always worked for me with just the domain and the DNS servers specified. (No force cache update checked). What does ipconfig /all show on the TAP adapter client side?

                  chudakC 1 Reply Last reply Reply Quote 0
                  • chudakC
                    chudak @dotdash
                    last edited by

                    @dotdash

                    I’m on iPhone OpenVPN client
                    Shows my tun ip

                    dotdashD 1 Reply Last reply Reply Quote 0
                    • dotdashD
                      dotdash @chudak
                      last edited by dotdash

                      @chudak said in DNS resolution for OpenVPN cleints:

                      I’m on iPhone OpenVPN client

                      Sorry, I've got nothing for that. I've only had to deal with the name resolution on Windows and Android devices.
                      Edit- the OpenVPN connect client (at least on Android) shows the domain and dns pulled in the connect log.

                      1 Reply Last reply Reply Quote 0
                      • chudakC
                        chudak
                        last edited by

                        I think it would not matter what client.

                        In my case this is how I test. Connect to cellular network on iPhone, connect to VPN and ping host by name. And my 1st server works as expected, but the new server does not !!!

                        dotdashD 1 Reply Last reply Reply Quote 0
                        • dotdashD
                          dotdash @chudak
                          last edited by

                          @chudak said in DNS resolution for OpenVPN cleints:

                          my 1st server works as expected, but the new server does not !!!

                          This would seem to indicate a problem with the new server on the DNS server. If you're testing from the phone, maybe get an app that does nslookup or dig.

                          1 Reply Last reply Reply Quote 0
                          • chudakC
                            chudak
                            last edited by

                            Well after lots of testing and trying here is why.

                            I had DNS Resolver options checked for:

                            'Enable Forwarding Mode'
                            'Use SSL/TLS for outgoing DNS Queries to Forwarding Servers'

                            Un-checking them and checking back fixed the problem!

                            I suspect that reboot will help as well, but I not very often reboot my router.

                            Hope maybe beneficial to somebody else.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.