[gil_happy]

Hello,

I am having difficulty trying to figure out how to configure OpenVPN server on my DDWRT (r45632) to push the DNS server to the clients which connect to the server.

To explain, if you look at the attached diagram, I am connecting via TUN from a Windows 10 PC with OpenVPN GUI (2.5.0.21). When my laptop connects to the VPN sever, its public IP is the same as the VPN server (which is correct), but when I run dnsleaktest.com, my PC is using my local ISP provider DNS instead of the DNS from the ISP at the server location.

Does anyone know how to configure so that when the OpenVPN clients connect to the server, they use the DNS from the server location?

Thanks in advance!

[egc]

Please adhere to the forum guidelines and scale your pictures back to no more than 768 pixels width:
https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087

To answer your question, why not read the manual?
link in my signature at the bottom.
See page 19 and 23

[gil_happy]

My apologies.... I just resized the jpeg.

In terms of guide(s), I assume you mean "DDWRT OpenVPN Server Setup Public v1.98.pdf"?

If so, I'll take another look at pages 19 and 23, but that is where I got stuck when trying to configure as there were a few gotchas. Stay tuned.

[gil_happy]

Update:

In the Primary Home(router2) which has the OpenVPN server config, in the Services then the VPN tab, in the 'Additional Config' section I added:

push "dhcp-option DNS 192.168.1.2" [from the pic, this is the IP of my VPN router]
push "dhcp-option DOMAIN home5" [under the Services, Sevices of the VPN router, Used Domain=LAN&WAN, LAN Domain=home5, then save and reboot router]

At this point, when I use my Windows 10 PC and open the OpenVPN client to connect to the OpenVPN server and run https://dnsleaktest.com/, the DNS is pushed to the client and it does work (thanks for this)!

The only thing that I might add is that when I run this DNS leak test when connected to the VPN server, 3 of the 6 returned DNS servers are from the remote end or OpenVPN server location (which is good), but 3 out of the 6 are the local DNS servers. From a service point of view everything is working, but the 3 out 6 local DNS servers 'could' cause a problem down the road.

[Alozaros]

some where in that guide its explained very well how to ignore and how to push you DNS

start with that rule to ignore the DNS pushed by the VPN provider

pull-filter ignore "dhcp-option DNS"

just re-read the guide that egc suggested..

[gil_happy]

Thanks so much! When I add the [push "block-outside-dns"], all DNS entries are sent from the primary location.


Consider this thread closed.