Hi, On Mon, May 18, 2015 at 12:39:41PM +0000, Shane Kerr wrote: > I'm happy with your proposal for RIPE 71, of course, since I don't have > horrible VPN software from the 20th century. ;)
Thing is, this wasn't actually the VPN software's doing, but DNS(64) - so
if you try to access an IPv4-host *inside* the VPN, but try to resolve
it using the public recursive DNS that you've been given, your client
will receive an IPv6 address instead...
With "full redirect VPN" this works (redirect DNS inside the VPN) but
with "split tunnel" VPN, you're basically stuck between a rock and a
hard place here - either you use the inside DNS, then your access to
outside IPv4-only places fails (no DNS64), or you use the outside DNS,
then see above...
Gert Doering
-- part time VPN software maintainer
--
have you enabled IPv6 on something today...?
SpaceNet AG Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14 Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444 USt-IdNr.: DE813185279
pgpcOdUjkt48t.pgp
Description: PGP signature
