DNS Resolver outgoing interface list with site-to-site VPN
-
I have a site-to-site OpenVPN configured, with "Pull DNS", so hosts on my LAN can issue DNS queries for remote VPN hosts and they are resolved correctly. I.e. my DNS resolver knows to forward queries for remote VPN hosts to the remote VPN DNS server. This is working normally.
To troubleshoot a different problem I wanted to restrict my DNS resolver's "Outgoing Interfaces" list to just the WAN interface. When I did this I found that resolution of VPN-remote hosts stopped working. This makes sense, since I'd restricted outgoing queries to the WAN interface alone.
So then I went back to my resolver's "Outgoing Interfaces" list and looked for the VPN interface so I could enable that one too, and find that there's no entry in the list for that interface.
Should there be such an entry?
Is there a way to accomplish my goal of restricting outgoing DNS to only the WAN and OpenVPN interfaces?
-
@jhg OpenVPN has options for DNS have you looked at hard setting them?
