Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #198073

Re: OpenVPN dhcp

From Erwan David <erwan@rail.eu.org>
Newsgroups linux.debian.user
Subject Re: OpenVPN dhcp
Date 2018-07-28 19:40 +0200
Message-ID <wgBm9-7WW-1@gated-at.bofh.it> (permalink)
References <wgfOF-39b-1@gated-at.bofh.it> <wgg81-3g9-1@gated-at.bofh.it> <wgAzM-7rd-15@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


[Multipart message — attachments visible in raw view] - view raw

Le 07/28/18 à 18:48, Jim Popovitch a écrit :
> On Fri, 2018-07-27 at 14:52 -0400, Roberto C. Sánchez wrote:
>> The short answer is, "as long as you use NetworkManager, no."
>>
>> I no longer have the link, but some time ago I found a page that
>> explains it very clearly.
>>
>> Search terms: "openvpn networkmanager dns leak"
>>
>> Effectively, NetworkManager lacks a concept of "replace the active
>> DNS settings when this connection becomes active."  Instead, what it
>> does is add the DNS servers to those already listed.  There is
>> supposed to be a way to specify the IPv4 DNS servers (you can do this
>> in the NM gui), then you set the IPv4 DNS priority to -1 (meaning
>> clear everything else out and use these instead) by editing the text
>> configuration file.
>>
>> The problems with that, though, are the result of the -1 priority
>> appears to prevent any other connection from having IPv4 DNS servers
>> in resolv.conf.  That may or may not be a problem for you.  That
>> approach also prevents you from taking advantage of DHCP push of DNS
>> servers from the VPN server.
>>
>> I have seen some bugs requesting that they fix it, and even a commit
>> that might be what you are asking for.  However, I don't know when it
>> might make its way into a Debian stable release (or even unstable).
>>
> Roberto, thanks for the insight and recommendation, based on your
> search suggestion I found the solution here:
>
> https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1211110/comments
> /92
>
> -Jim P.
>
>
Does not seem to work for DNS pushed by the VPN server...



Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

OpenVPN dhcp Jim Popovitch <jim@k4vqc.com> - 2018-07-27 20:40 +0200
  Re: OpenVPN dhcp Roberto C. Sánchez <roberto@debian.org> - 2018-07-27 21:00 +0200
    Re: OpenVPN dhcp Jim Popovitch <jim@k4vqc.com> - 2018-07-28 18:50 +0200
      Re: OpenVPN dhcp Erwan David <erwan@rail.eu.org> - 2018-07-28 19:40 +0200
        Re: OpenVPN dhcp Jim Popovitch <jim@k4vqc.com> - 2018-07-28 20:10 +0200
          Re: OpenVPN dhcp Roberto C. Sánchez <roberto@debian.org> - 2018-07-28 22:00 +0200

csiph-web