• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

[SOLVED] Access intranet through VPN

Scheduled Pinned Locked Moved OpenVPN
4 Posts 3 Posters 2.4k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • C
    caffreys
    last edited by Jan 9, 2013, 9:55 PM Jan 9, 2013, 4:08 AM

    We have a two-site AD domain with pfsense appliances in both sites providing the OpenVPN tunnel. Both sites DCs replicate properly and DNS servers show entries for devices in both site A:192.168.15.0/24 and site B:192.168.16.0/24. We are able to access machines and resources transparently with no issues.

    In site A we've set-up a web server to serve up private intranet content. The web server can serve up content to any machine in site A. However attempting to access the server from site B fails. On site B we are running squid and users are greeted with the message

    The requested URL could not be retrieved
    While trying to retrieve the URL: http://prv-web/docs
    The following error was encountered:
       Unable to determine IP address from host name for prv-web
    The dnsserver returned:
       Name Error: The domain name does not exist.

    This is interesting because prv-web (in site A) can indeed be resolved with a NSLOOKUP from site B. In fact prv-web is currently serving up other non-web content happily between sites.

    Upon further investigation from within pfsense the appliance cannot resolve prv-web with a DNS lookup. This makes sense because the only DNS entries are those for the ISP. However prv-web of course is an entry in the domain's DNS. And just to check I can access the intranet server directly using http://192.168.15.14/docs from site B.

    And finally I tried adding the local DNS server to the DNS servers list in pfsense but this didn't work, and I confess i'm now guessing at a possible solution.

    Any ideas?

    Thanks.

    1 Reply Last reply Reply Quote 0
    • S
      Slam
      last edited by Jan 9, 2013, 4:30 AM Jan 9, 2013, 4:26 AM

      You can try "Domain Overrides" under Services/DNS Forwarder and create an entry for your dns server(s)

      http://doc.pfsense.org/index.php/DNS_Forwarder

      1 Reply Last reply Reply Quote 0
      • M
        marvosa
        last edited by Jan 9, 2013, 5:56 AM Jan 9, 2013, 5:50 AM

        Since you are using squid on site B… squid uses the dns server's in /etc/resolv.conf to resolve domain names by default.  You will have to tell squid to use site B's local DNS server with the "dns_nameservers" directive.

        1 Reply Last reply Reply Quote 0
        • C
          caffreys
          last edited by Jan 9, 2013, 9:53 PM

          Thankyou, an entry in site B domain overrides pointing the domain to site B's DNS server did trick.

          1 Reply Last reply Reply Quote 0
          1 out of 4
          • First post
            1/4
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
            This community forum collects and processes your personal information.
            consent.not_received