So, just to clarify: it's NOT an issue in Endian, but rather on your outgoing firewall?
I have this issue but on roadwarriors connecting to Endian from outside the office. The information is pushed, but no name resolving. -- Rafael Fonseca www.nunca.com.br On 9/01/2009, at 11:16 AM, wharfratjoe wrote: > > Incoming or outgoing? --> This is an issue with connecting to endian > openvpn > from behind a Untangle firewall (have not figured it out yet since i > locked > down the box pretty tight and dont have time to mess with it right > now). > > Openvpn connections endian to endian boxes resolves the "internal" > hostnames > with no problem with one exception: I have found that you need to > append the > internal domain name to the hostname (this has been this way for > awhile and > never posted about it until now) to resolve correctly. > > Here is a sample config that I started using for about a year or so > and > works fine: > > http://www.nabble.com/open-vpn-client-settings....-to13594062.html#a13596758 > > Hope this helps. > > -joe > > > Rafael Fonseca wrote: >> >> Incoming or outgoing? >> -- >> Rafael Fonseca >> www.nunca.com.br >> >> On 9/01/2009, at 10:05 AM, wharfratjoe wrote: >> >>> >>> Due to lack of sleep it was a firewall issue blicking udp port 53. >>> Pushing >>> Vpn settings work fine in 2.2 RC3, as seen below >>> >>> Here is another example that is working that is running 2.2 RC3. >>> >>> Ethernet adapter {29815F69-DD48-4711-9FBD-0B4FBB37DE43}: >>> >>> Connection-specific DNS Suffix . : domain.local >>> Description . . . . . . . . . . . : TAP-Win32 Adapter V8 >>> Physical Address. . . . . . . . . : 00-FF-29-81-5F-69 >>> DHCP Enabled. . . . . . . . . . . : Yes >>> Autoconfiguration Enabled . . . . : Yes >>> IP Address. . . . . . . . . . . . : 192.168.76.230 >>> Subnet Mask . . . . . . . . . . . : 255.255.255.0 >>> Default Gateway . . . . . . . . . : >>> DHCP Server . . . . . . . . . . . : 192.168.76.0 >>> DNS Servers . . . . . . . . . . . : 192.168.76.3 >>> 192.168.76.2 >>> Lease Obtained. . . . . . . . . . : Thursday, January 08, 2009 >>> 11:31:31 >>> AM >>> Lease Expires . . . . . . . . . . : Friday, January 08, 2010 >>> 11:31:31 AM >>> >>> (I will post my .ovpn client config later today). >>> >>> >>> >>> wharfratjoe wrote: >>>> >>>> I am being pushed the settings but it is not resolving internal >>>> names when >>>> pinging, etc. >>>> >>>> Connection-specific DNS Suffix . : domainname.int >>>> Description . . . . . . . . . . . : TAP-Win32 Adapter V8 - >>>> Packet >>>> Schedu >>>> ler Miniport >>>> Physical Address. . . . . . . . . : 00-FF-E9-98-09-B8 >>>> Dhcp Enabled. . . . . . . . . . . : Yes >>>> Autoconfiguration Enabled . . . . : Yes >>>> IP Address. . . . . . . . . . . . : 172.16.0.230 >>>> Subnet Mask . . . . . . . . . . . : 255.255.255.0 >>>> Default Gateway . . . . . . . . . : >>>> DHCP Server . . . . . . . . . . . : 172.16.0.0 >>>> DNS Servers . . . . . . . . . . . : 172.16.0.3 >>>> 172.16.0.2 >>>> Lease Obtained. . . . . . . . . . : Wednesday, January 07, >>>> 2009 >>>> 9:19:49 >>>> PM >>>> Lease Expires . . . . . . . . . . : Thursday, January 07, >>>> 2010 >>>> 9:19:49 P >>>> M >>>> >>>> I will search bugtraq and if it is not already listed I will open a >>>> ticket >>>> on this. >>>> >>>> >>>> >>>> Rafael Fonseca wrote: >>>>> >>>>> I have noticed that the upgrade to 2.2 did NOT bring me the push >>>>> DNS I >>>>> was waiting for. For some reason, the clients can't connect to the >>>>> servers inside my green network without putting something inside >>>>> the >>>>> hosts file. >>>>> >>>>> Do you guys experience the same thing? >>>>> >>>>> I have put the DNS server as follows on the VPN > Advanced > >>>>> Global >>>>> push options (as the help instructs), but no go. >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> I have also tried putting just the IP address, without /24. >>>>> >>>>> On a side note, what do you guys use in the client .ovpn files? I >>>>> have >>>>> been collecting settings through the years and I don't know if I'm >>>>> using the optimal settings for Endian. >>>>> >>>>> Regards, >>>>> -- >>>>> Rafael Fonseca >>>>> www.nunca.com.br >>>>> >>>>> >>>>> ------------------------------------------------------------------------------ >>>>> Check out the new SourceForge.net Marketplace. >>>>> It is the best place to buy or sell services for >>>>> just about anything Open Source. >>>>> http://p.sf.net/sfu/Xq1LFB >>>>> _______________________________________________ >>>>> Efw-user mailing list >>>>> Efw-user@lists.sourceforge.net >>>>> https://lists.sourceforge.net/lists/listinfo/efw-user >>>>> >>>>> >>>> >>>> >>> >>> -- >>> View this message in context: >>> http://www.nabble.com/DNS-address-format-for-OpenVPN-server--tp21340568p21360926.html >>> Sent from the efw-user mailing list archive at Nabble.com. >>> >>> >>> ------------------------------------------------------------------------------ >>> Check out the new SourceForge.net Marketplace. >>> It is the best place to buy or sell services for >>> just about anything Open Source. >>> http://p.sf.net/sfu/Xq1LFB >>> _______________________________________________ >>> Efw-user mailing list >>> Efw-user@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/efw-user >> >> >> ------------------------------------------------------------------------------ >> Check out the new SourceForge.net Marketplace. >> It is the best place to buy or sell services for >> just about anything Open Source. >> http://p.sf.net/sfu/Xq1LFB >> _______________________________________________ >> Efw-user mailing list >> Efw-user@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/efw-user >> >> > > -- > View this message in context: > http://www.nabble.com/DNS-address-format-for-OpenVPN-server--tp21340568p21362130.html > Sent from the efw-user mailing list archive at Nabble.com. > > > ------------------------------------------------------------------------------ > Check out the new SourceForge.net Marketplace. > It is the best place to buy or sell services for > just about anything Open Source. > http://p.sf.net/sfu/Xq1LFB > _______________________________________________ > Efw-user mailing list > Efw-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/efw-user ------------------------------------------------------------------------------ Check out the new SourceForge.net Marketplace. It is the best place to buy or sell services for just about anything Open Source. http://p.sf.net/sfu/Xq1LFB _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user
