DNS resolution for OpenVPN cleints

[chudak]

Hello all

Trying to clarify some settings related to my DNS server and OpenVPN clients

I see in information my DNS as:

DNS server(s)
127.0.0.1
8.8.4.4
156.154.71.1
129.250.35.251

My OpenVPN client log shows:

2017-06-18 09:41:24 OPTIONS:
0 [route] [192.168.90.1] [255.255.255.0]
1 [redirect-gateway] [def1]
2 [route-gateway] [192.168.2.1]
3 [topology] [subnet]
4 [ping] [10]
5 [ping-restart] [60]
6 [ifconfig] [192.168.2.3] [255.255.255.0]

I'd like OpenVPN clients be able to resolve hosts by name, but not sure how to make it happen

Thx in advance!

[GentleJoe]

In the OpenVPN setting enable 'DNS Server enable'.

Verify DNS1 is your own local server.

[chudak]

i tried that so far with no luck :(

my Subnet 192.168.90.0

i enabled in VPN-OpenVPN-Servers - "DNS Server enable" "Provide a DNS server list to clients" and added "DNS Server 1" 192.168.90.1

looks ok?

[GentleJoe]

I have this enabled too: Redirect Gateway - Force all client generated traffic through the tunnel.
See if that changes it for you.

Plus this setting, Force DNS cache update.

[chudak]

i had "Redirect Gateway Force all client generated traffic through the tunnel." enabled
and enabled "Force DNS cache update" and no love still

[GentleJoe]

Are you accessing the hostname with the FQDN like printer.mydomain.com ?

[chudak]

@Gentle:

Are you accessing the hostname with the FQDN like printer.mydomain.com ?

i do now!!!!

seems working, thx a million !

[GentleJoe]

Great ! :)

[chudak]

@GentleJoe

Had to dig out this old post, but it's exactly the same issue, so hope can be resolved ...

I made a copy of my existing OpenVPN server and added a second one.
All same settings. But no matter what I do I can't get host names DNS resolutions on the second server !

Wonder WTH and how to troubleshoot it ?

[chudak]

Either I missing something or it's a bug in VPN sever setup

What else has to be set in order to pass host names to a VPN client?

Looking for experts...

[dotdash]

It's always worked for me with just the domain and the DNS servers specified. (No force cache update checked). What does ipconfig /all show on the TAP adapter client side?

[chudak]

@dotdash

I’m on iPhone OpenVPN client
Shows my tun ip

[dotdash]

@chudak said in DNS resolution for OpenVPN cleints:

I’m on iPhone OpenVPN client

Sorry, I've got nothing for that. I've only had to deal with the name resolution on Windows and Android devices.
Edit- the OpenVPN connect client (at least on Android) shows the domain and dns pulled in the connect log.

[chudak]

I think it would not matter what client.

In my case this is how I test. Connect to cellular network on iPhone, connect to VPN and ping host by name. And my 1st server works as expected, but the new server does not !!!

[dotdash]

@chudak said in DNS resolution for OpenVPN cleints:

my 1st server works as expected, but the new server does not !!!

This would seem to indicate a problem with the new server on the DNS server. If you're testing from the phone, maybe get an app that does nslookup or dig.

[chudak]

Well after lots of testing and trying here is why.

I had DNS Resolver options checked for:

'Enable Forwarding Mode'
'Use SSL/TLS for outgoing DNS Queries to Forwarding Servers'

Un-checking them and checking back fixed the problem!

I suspect that reboot will help as well, but I not very often reboot my router.

Hope maybe beneficial to somebody else.