Hi,

On Mon, Jan 11, 2021 at 12:07:28PM +0100, Ralf Hildebrandt wrote:
> From the man page:
> 
> --remote-random-hostname
> 
> Prepend a random string (6 bytes, 12 hex characters) to hostname to
> prevent DNS caching. For example, "foo.bar.gov" would be modified to
> "<random-chars>.foo.bar.gov".
> 
> How is that supposed to work? If my vpn server is called
> "foo.bar.gov", how can the client expect to resolve
> "<random-chars>.foo.bar.gov" at all?

You need a wildcard record

*.foo.bar.gov IN A 1.2.3.4

I'm not totally sure I've ever understood that feature.  I did *repair* 
it once, and made sure the documentation and code match, but I forgot the
reasoning why this is a good idea.

It was something about DNS caching, I think...

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             g...@greenie.muc.de

Attachment: signature.asc
Description: PGP signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to