Re: OpenVPN + Tor

Jason Long via Openvpn-users <[email protected]>
Newsgroups gmane.network.openvpn.user
Message-ID <[email protected]>
>On Saturday, November 4, 2023 at 05:31:40 PM GMT+3:30, tincantech <[email protected]> wrote:

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA256

>Hi,

>Your DNS server is non-local and you are most likely
>redirecting your gateway to the VPN.

>So, DNS packets for your DNS server are set into the
>tunnel and are finally dropped by the server gateway.

>Openvpn has option : '--redirect-gateway  bypass-dns'

>You could try that by using:

>   redirect-gateway def1 bypass-dns

>in your client configuration file.

>You will probably also need to ignore the server pushed
>redirect-gateway by using:

>    pull-filter ignore 'redirect-gateway*'

>Try experimenting with that and test if your DNS is then
>reachable, while the VPN is up.

>HTH
>-- 

>-----BEGIN PGP SIGNATURE-----
>Version: ProtonMail

>wsBzBAEBCAAnBYJlRk6TCZBPl5z2a5C4nRYhBAm8PURno41yecVVVU+XnPZr
>kLidAADYHAgArJRKp+KNfCoDAca9BVi6PxgwEW9Yqgj5sXtUORpzI0G0ypom
>lFgObi/As/sOOt2Zb16DOPj+rA7I4SAfSN/KtLUaZu/RoFNMXELOjsUxRY5t
>gMp7BfFIeOyaNvFNWTgjEJ7O0xPdBFmdJb3eP6EBwjzJSCd3EEF9I5K8oE1i
>Qd0VzifSeIO7XArfHesEqDMW1XvIOaPaHPle54zqwqp5h2zqiwnq2VgzMl8Y
>QjnxtmDcg8G2nFDhnZcPQjFs7Lcv15FsMQ96AABE6MH2nA3eUQWipcaNZw4b
>OYXrB4+AEKP4u0WQg6/3GgkpjDQaZVd51BXVqa1kyAMSXprpFvkq3Q==
>=phoQ

>-----END PGP SIGNATURE-----


Hello,
Thank you so much for your reply.
Some lines of my server.conf file are:

push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 172.20.1.2"
push "dhcp-option DNS 172.20.1.7"
topology subnet


Should I add the following line in my client configuration file:

redirect-gateway def1 bypass-dns

And add the following line to my server configuration file:

pull-filter ignore 'redirect-gateway*'


Right?


_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.