Re: Private DNS across a VPN..

"Eric" <none@xxxxxxxxxx> wrote in news:ImwYf.72202$9I5.58146
@tornado.ohiordc.rr.com:


"Scott Moseman" <scmoseman@xxxxxxxxx> wrote in message
news:1144155742.138938.58650@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
The "DNS and Bind" book make cover getting your DNS server setup, but I
doubt it is going to help you too much getting the VPN setup. Do you
already have a VPN setup? If not, that is going to be much more
complex than setting up a simple DNS server.

Thanks,
Scott

Not yet. I was going to mess with OpenVPN. http://openvpn.net/

It runs on multiple platforms and should be do-able. Most of the
"client-side" computers are going to have dynamic IP's, hence wanting to
setup DNS server (on a static IP, of course) rather than deal with any of
the dynamic IP services (i.e., dyndns.org).

Thanks...



It's simple. Just make sure that the subnets that your private DNS servers
sit on are included in the 'push route' or routes configured on your OpenVPN
server. Then make sure that your private DNS servers' IP addresses also get
pushed to the client when the OpenVPN client connects (that is one of the
'push dhcp-option' settings). If the client PC is running Windows then you
need to make sure that the virtual adapter used by the OpenVPN client has the
highest priority (this should normally be the case anyway unless you added
the physical adapter after the OpenVPN client software was installed. (You
can change the priority it under the adapter properties advanced settings).
For a Linux client, I believe the resolver.conf will get replaced by the
OpenVPN settings pushed from the server (should get put back as it was when
the OpenVPN connection closes). Of course your private DNS servers must be
able to deal with public internet name lookups otherwise the remote client
will only be able to resolve private names while the OpenVPN connection is
up.

Klazmon
.

Relevant Pages

  • fc5 + openvpn + not routing across the tunnel..
    ... I have configured openvpn in my lab ... bad source address from client, ... the server is configured as follows ... # This config item must be copied to ...
    (Fedora)
  • Re: [Fedora] Re: VPN
    ... I'll share my working OpenVPN server config with you. ... I have mine set to use PAM authentication (meaning they'd need an account on your F10 server, LDAP or otherwise) and ignores client certificates, which could be bad, but it's just me and it's passworded with the user account access. ... # the firewall for the TUN/TAP interface. ...
    (Fedora)
  • Re: Router pointing to Windows DNS Server: OK?
    ... > I tried your recommendations on my own home network and I think I did ... > resolve Internet queries, without me having to do anything. ... > router, or change each client ... Having "fault tolerance" for AD means to list multiple DNS servers that ONLY ...
    (microsoft.public.windows.server.dns)
  • Re: Assign Domain Security Policy/Manage remote computer
    ... I do indeed have other DNS servers listed on my client - I ... I rebooted, ran ipconfig /registerdns, dc list still failed. ... still have an entry for the client in the forward DNS zone, ...
    (microsoft.public.win2000.security)
  • Re: warum PnP Dienst =?ISO-8859-15?Q?=FCber_Netzwerk=3F?=
    ... > Aber es erfordert a) eine Installation und Konfiguration am Client ... Mit OpenVPN ist der Client im Netz - ... Next by Date: ...
    (microsoft.public.de.german.win2000.networking)
Loading