On Jun 26, 2013, at 6:27 AM, [email protected] wrote:

> Hello all and happy humpday!
> 
> I'm using openvpn on a debian testing box and all of openvpn stuff is working 
> as expected!!!:)
> 
> I'm scratching my head though on how to make my vpn clients  use my own dns 
> server.
> 
> Before posting here I tryed using this 
> post"http://www.mail-archive.com/[email protected]/msg15095.html";
>   
> and I also red the man page of /etc/shorewall/rules /etc/shorewall/masq but 
> to no avail!
> 
> My local subnet is on 199.148.1.0/24 masquerade on eth1 for internet access, 
> the dns-entry 
> of the clients pointing to my shorewall interface eth0 at 199.148.1.1. the 
> openvpn's subnet is 
> 194.137.1.0/24 with a dns of 194.137.1.3.
> So what I would like to do is "translating" all dns request from openvpn 
> "194.137.1.3" to my 
> local network's dns " 199.148.1.1". That way all trafic will go through the 
> vpn and no external 
> dns are neded!
> 
> I put down anyway what  i so far come up with
> vpn= openvpn
> vijl= local network
> running shorewall 4.5.17.1
> 
> /etc/shorewall/rules
> 
>        DNAT      vijl   vpn:199.148.1.1 tcp,udp     53      -       
> 194.137.1.3
> 
> /etc/shorewall/masq
> 
> eth0:194.137.1.3,199.148.1.0/24
> 
> Could any one shed light on how to do this!?

There aren't enough details here to allow us to help you. What IP address(es) 
does your DNS server listen on? Does it run on the Firewall or on a host in 
199.148.1.0/24? And are you pushing a route to 199.148.1.0/24 to the remote VPN 
gateway?

-Tom

Tom Eastep        \ Nothing is foolproof to a
Shoreline,         \ sufficiently talented fool
Washington, USA     \ 
http://shorewall.net \________________________________________________


------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to