Host Name Resolution via Dynamic DNS Clients
-
Just wondering if i am missing something; i currently have my openvpn host name resolution set to to "other" and then i point to vpn.xxx.ca (my domain) via cloudflare (grey cloud).
Since i am already using Dynamic DNS Clients via cloudflare to get my wan ip and to keep in sync, cant openVPN just use the Dynamic DNS Clients via pfsense it self instead of my selecting other? This way i can keep my vpn.xxx.ca proxied (non grey cloud)
-
@iptvcld any advise on this one?
-
@iptvcld
Not clear at all, what exactly you're complaining here.i currently have my openvpn host name resolution set to to "other" and then i point to vpn.xxx.ca (my domain) via cloudflare (grey cloud).
Are you talking about the client export tool?
-
@viragomann Not complaining; just inquiring on a open public support forum..
Under the OpenVPN export tool under Host Name Resolution there are sine options to select. I currently have DDNS set for pfsense via Cloudflare and want to know if under the vpn export tool, i can select that ddns instead of selecting other and then keying in my cname address from CF which exposes my wan IP
-
@iptvcld
Basically yes. If you have set up dynamic DNS clients on pfSense the host names should appear in the Host Name Resolution drop-town. Don't yours? -
@viragomann I can see it but it shows up as @.test.ca and when i select that and select to export my vpn config file i get an error saying
The following input errors were detected:An IP address or hostname must be specified.
Failed to export config files! -
@iptvcld said in Host Name Resolution via Dynamic DNS Clients:
I can see it but it shows up as @.test.ca
With an @ in front?? That indicates a wildcard domain name, so that cannot work of course.
I don't know, how your Cloudflare dynamic DNS client works, but I have set up four distinct FQDNs as hostnames in Services > Dynamic DNS and each of them can be selected in the client export utility and is written in the remote line of the .ovpn file, when I export it.
If you don't have an unique hostname you can only select other in the client export and enter your FQDN to be added to the config.
But you have the option to save the stated settings as default values, so that you haven't to enter the FQDN each time you export client settings. -
@viragomann on CF i have a A record of test.ca (as my domain name) - should i be configuring DDNS in pfsense as something else? I am doing @ then .test.ca and it picks up my wan IP
-
@viragomann Do you have multiple A records in this case?
-
@iptvcld You probably did something wrong with your DDNS Client in pfSense...
-
@iptvcld
Yes, multiple A-records and multiple dynDNS providers.
For each hostname I've set up a client in Services > Dynamic DNS > Dynamic DNS Clients. -
@viragomann I guess my question was how can we setup a ddns without exposing the real wan ISP IP. But i dont think that is possible as the vpn profile file will need a remote url that points to your wan ip