Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #198072

Re: OpenVPN dhcp

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Fri, 2018-07-27 at 14:52 -0400, Roberto C. Sánchez wrote:
> The short answer is, "as long as you use NetworkManager, no."
> 
> I no longer have the link, but some time ago I found a page that
> explains it very clearly.
> 
> Search terms: "openvpn networkmanager dns leak"
> 
> Effectively, NetworkManager lacks a concept of "replace the active
> DNS settings when this connection becomes active."  Instead, what it
> does is add the DNS servers to those already listed.  There is
> supposed to be a way to specify the IPv4 DNS servers (you can do this
> in the NM gui), then you set the IPv4 DNS priority to -1 (meaning
> clear everything else out and use these instead) by editing the text
> configuration file.
> 
> The problems with that, though, are the result of the -1 priority
> appears to prevent any other connection from having IPv4 DNS servers
> in resolv.conf.  That may or may not be a problem for you.  That
> approach also prevents you from taking advantage of DHCP push of DNS
> servers from the VPN server.
> 
> I have seen some bugs requesting that they fix it, and even a commit
> that might be what you are asking for.  However, I don't know when it
> might make its way into a Debian stable release (or even unstable).
> 

Roberto, thanks for the insight and recommendation, based on your
search suggestion I found the solution here:

https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1211110/comments
/92

-Jim P.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

OpenVPN dhcp Jim Popovitch <jim@k4vqc.com> - 2018-07-27 20:40 +0200
  Re: OpenVPN dhcp Roberto C. Sánchez <roberto@debian.org> - 2018-07-27 21:00 +0200
    Re: OpenVPN dhcp Jim Popovitch <jim@k4vqc.com> - 2018-07-28 18:50 +0200
      Re: OpenVPN dhcp Erwan David <erwan@rail.eu.org> - 2018-07-28 19:40 +0200
        Re: OpenVPN dhcp Jim Popovitch <jim@k4vqc.com> - 2018-07-28 20:10 +0200
          Re: OpenVPN dhcp Roberto C. Sánchez <roberto@debian.org> - 2018-07-28 22:00 +0200

csiph-web