Re: [Openvpn-users] DNS Round-robin-records vs. "Preserving recently used remote address"

2024-04-03 Thread Gert Doering
Hi, On Wed, Apr 03, 2024 at 11:31:03AM +0200, Ralf Hildebrandt via Openvpn-users wrote: > 2024-02-21 11:37:04 TCP/UDP: Preserving recently used remote address: > [AF_INET]193.175.73.xxx:1194 The code is a bit complex to read and I'm not sure I do understand it (and maybe we broke it at some poi

Re: [Openvpn-users] DNS Round-robin-records vs. "Preserving recently used remote address"

2024-04-03 Thread Jochen Bern
On 03.04.24 11:31, Ralf Hildebrandt via Openvpn-users wrote: We're using DNS Round-robin-records with a TTL of 300s for our openvpn endpoint servers. Yet, clients seem to reconnect to the same IP, although the DNS entry has expired; the log usually shows something like: 2024-02-21 11:37:04 TCP/

Re: [Openvpn-users] DNS Round-robin-records vs. "Preserving recently used remote address"

2024-04-03 Thread Marek Zarychta via Openvpn-users
W dniu 3.04.2024 o 11:31, Ralf Hildebrandt via Openvpn-users pisze: Hi! We're using DNS Round-robin-records with a TTL of 300s for our openvpn endpoint servers. Yet, clients seem to reconnect to the same IP, although the DNS entry has expired; the log usually shows something like: 2024-02-21 1

Re: [Openvpn-users] DNS leak under Debian Testing

2017-02-10 Thread Matthias Müller
Hi David and all, On 10/02/17 13:53, David Sommerseth wrote: > On Debian, the down-root plugin should already be installed. Try > looking into /usr/lib{,64}/openvpn/plugin/ ... or query the openvpn deb > package which files it have installed. (I'm a YUM/DNF/RPM type of guy, > don't know too muc

Re: [Openvpn-users] DNS leak under Debian Testing

2017-02-10 Thread David Sommerseth
On 09/02/17 13:01, Matthias Müller wrote: > Hi David, > > On 08/02/17 13:52, David Sommerseth wrote: >> You need to check what the resolvconf script on your computer does, and >> if there is a way to configure it to behave differently. >> >> Otherwise, you can try to uninstall that script. Then t

Re: [Openvpn-users] DNS leak under Debian Testing

2017-02-09 Thread debbie10t
On 09/02/17 12:01, Matthias Müller wrote: > However, I don't know how to compile the down-root plugin -- I cloned the > repo and the README says I should simply invoke "make". But there is no > "Makefile" in the src/plugins/down-root directory, only "Makefile.am". > "automake" or "autoreconf" do

Re: [Openvpn-users] DNS leak under Debian Testing

2017-02-09 Thread Matthias Müller
Hi David, On 08/02/17 13:52, David Sommerseth wrote: > You need to check what the resolvconf script on your computer does, and > if there is a way to configure it to behave differently. > > Otherwise, you can try to uninstall that script. Then the > update-resolv-conf script (if it is based on t

Re: [Openvpn-users] DNS leak under Debian Testing

2017-02-08 Thread David Sommerseth
On 08/02/17 13:39, Matthias Müller wrote: > Hi all, > > I've noticed that OpenVPN connections under Debian Testing have started to > leak DNS requests when they didn't in the past. I have an ovpn file to > connect to AirVPN which contains the lines: > > script-security 2 > up /etc/openvpn/update-

Re: [Openvpn-users] DNS

2016-10-24 Thread Gert Doering
Hi, On Mon, Oct 24, 2016 at 08:47:10AM +0300, Eero Volotinen wrote: > Is there nice way to exclude "push DNS" and default routes in openvpn > client? > > I managed to bypass routes, but push dns is still problem in client. Trying > to use > cli client from commandline. Use 2.4_alpha2 and "--pull

Re: [Openvpn-users] DNS over VPN except vpnserver domain

2015-08-31 Thread Jonathan K. Bullard
On Mon, Aug 31, 2015 at 9:10 AM, Martin Lund wrote: > Hello All, > > I was thinking on how to solve this problem because starts to get > annoying. I have my linux machine connecting through openvpn with a script. > > After connecting my script replaces the dns servers in /etc/resolv.conf > with O

Re: [Openvpn-users] DNS over VPN except vpnserver domain

2015-08-31 Thread Mathias Jeschke
Hi Martin, I've been using a local dnsmasq instance on my VPN client which has some advantages: (1) you can configure specific forwarders for particular domains (e.g. for local domains that are reachable only via a tunnel or resolving the VPN endpoint name always via your ISP's server) (

Re: [Openvpn-users] DNS over VPN except vpnserver domain

2015-08-31 Thread Marc Haber
On Mon, Aug 31, 2015 at 03:10:59PM +0200, Martin Lund wrote: > I know that there are multiple entries possible in /etc/resolv.conf so > for example I could put: > > nameserver > nameserver > > in there expecting that the secondary DNS will only be used if the > name resolution fails on the firs

Re: [Openvpn-users] dns routing problem

2015-07-14 Thread Gert Doering
Hi, On Fri, Jul 10, 2015 at 11:36:22AM +, Bonno Bloksma wrote: > Trying to understand why my Linux machine with the openvpn client is sending > packets with one of it's local addresses via the tunnel to the other side. > Fri Jul 10 12:11:51 2015 us=741813 m.duthler-lan/82.217.xxx.yyy: MUL

Re: [Openvpn-users] DNS from network behind VPN

2015-01-26 Thread Frank, Petric (Petric)
Hello, As far as i can see (i may be wrong) this setting defines how the DNS servers are contacted. For example on whether to use DNSSEC or not. But it does not define - based on the domain or subnet part (for reverse lookup) - which DNS server is to be queried. Kind regards Petric > -Or

Re: [Openvpn-users] DNS from network behind VPN

2015-01-25 Thread Илья Шипицин
have a look at NRPT (which is "name resolution policy table") https://technet.microsoft.com/ru-ru/library/ee649207%28v=ws.10%29.aspx however, openvpn doesn't yet support that 2015-01-20 15:56 GMT+05:00 Frank, Petric (Petric) : > Hello, > > this is not exactly a OpenVPN problem. > > I connect via

Re: [Openvpn-users] DNS from network behind VPN

2015-01-22 Thread Pavel Bychikhin
e first NS record from the list. So I was wrong. `Connection-specific DNS Suffix' does, in fact, nothing. I do apologize. But, if we have several adapters their order gets us opportunity to have everything working as we need. Best regards, Pavel Original Message ---- *Subject

Re: [Openvpn-users] DNS from network behind VPN

2015-01-21 Thread Jan Just Keijser
Hi Pavel, *, On 20/01/15 13:54, Pavel Bychikhin wrote: I send my clients a `domain-search' option via DHCP. First domain from that list is used by Windows as a `Connection-specific DNS Suffix'. This does the trick. Windows uses this connection to query for names within domain of a `Connection-

Re: [Openvpn-users] DNS from network behind VPN

2015-01-20 Thread Pavel Bychikhin
I send my clients a `domain-search' option via DHCP. First domain from that list is used by Windows as a `Connection-specific DNS Suffix'. This does the trick. Windows uses this connection to query for names within domain of a `Connection-specific DNS Suffix' even if a PC is in Active Directory

Re: [Openvpn-users] DNS from network behind VPN

2015-01-20 Thread Joe Patterson
I'm pretty sure it's not possible to do that from a windows perspective, however the workaround that I've used (that has some advantages of its own) is to run the bind dns server locally on my windows client machine, configured as a resolver for localhost only, and configured with forward zones for