OpenVPN client - DNS not resolving correctly

Technical Support for Routers
1

We have 3 domain suffixes that are allowed to hit up internal Corporate DNS servers via Pritunl. One suffix overrides public DNS entries if they are the same. Two domains are .local. I can get most entries for the public override domain (expect for the vpn server itself) but the two .local domains don't resolve. The IPs are pingable. If I were to connect with an OpenVPN or Pritunl client directly, this works correctly.

Router: Slate AX GL-AXT1800
Firmware: 4.6.2
Firmware Type: release2

Slate AX connected to Internet via Ethernet to a switch which connects to ISP router firewall.
Computer connected to Slate AX via Ethernet

DNS: I have tried automatic, so it picks up the Corporate DNS servers and my local network gateway IP and some other IPs (Assuming ISP DNS). I tried to override them and only use the Corporate DNS servers but that that didn't help.

Using DHCP

image
image945×192 22 KB

logread.tar (146.5 KB)

2

Hi,

About these private domain suffixes, .local/.lan/etc.
Please try this:

3

Thanks Bruce. I'm not sure what to pull from that thread to make it work.

I tried FrequentFlyer's idea of adding DNS forwarders in LUCI and that didn't work. This actually replaced my DNS entries in the regular GUI which caused nothing to resolve at all.

I also tried running the command from hansome in SSH and that didn't work.

More info:
discovered no internal resolution works. the entries I thought were working were duplicated in public DNS.

Also, my OpenVPN DNS entries are adding two DNS entries that my Pritunl server isn't supplying and they don't appear to be from ISP or work internet connection. Don't know how they are being added: 209.244.0.3, 64.6.64.6 In addition, the Automatic DNS looks different than the first day I worked on this. It was listing my home router as an DNS server, it no longer does that.

4

Try these commands in the SSH:

# set dnsmasq
uci set dhcp.@dnsmasq[0].local='/lan_chgd/'
uci commit dhcp

# restart dnsmasq
/etc/init.d/dnsmasq restart

# set VPN dnsmasq
sed -i 's/local=\/lan/local=\/lan_chgd/' /etc/dnsmasq.conf.vpn

# restart vpn dnsmasq
. /usr/bin/route_policy
handle_dns
  1. Please confirm your device DNS address is your private DNS server IP.
  2. Please confirm your DNS server can resolute the domain in the VPN server side.