Trying to use pi-hole when connected via OpenVPN to home

SeanKane · Aug 28, 2020, 2:39 AM

Hi Everyone,

I know this used to work, but it stopped, and I'm not sure why.

I'm using pfSense 2.4.5p1 and connecting via Tunnelblick 3.8.3 (build 5520) via OpenVPN. pfSense is instructing to use my pi-hole for DNS, but I see this message in the Tunnelblick logs, and instead, it uses the DNS server on my pfSense instead...

15:44:02 *Tunnelblick: NOTE: The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.

Have any of you seen this, and do you have any suggestions to change the config so I can use my pi-hole for DNS when connecting back to my home?

Thank you,
Sean

Gertjan · Aug 28, 2020, 5:16 AM

Hi,

So Tunnelblik doesn't trust your DNS ? That's their problem, not yours.
You manage your own DNS, so you know it's ok.

When you change tu VPN client for the default OpenVPN client that comes with pfSense, you'll be fine also (no more messages).

SeanKane · Aug 28, 2020, 1:34 PM

Well, the same result happens with the Open VPN Connect clients. Any other ideas?

Gertjan · Aug 28, 2020, 2:01 PM

The OpenVPN client actually says (== logs) to you :

The DNS servers do not include any free public DNS servers known to Tunnelblick. This may cause DNS queries to fail or be intercepted or falsified even if they are directed through the VPN. Specify only known public DNS servers or DNS servers located on the VPN network to avoid such problems.

?

SeanKane · Aug 29, 2020, 12:28 AM

@Gertjan - I get that. I have seen that. My concern is this used to work, but suddenly it stopped, and I started seeing this message in the logs. Maybe this question should be posed in an OpenVPN forum?