Home / user-96804

hbp's questions

Martin Hope
hbp
Asked: 2011-10-05 19:18:31 +0800 CST
  • 35

I have defined an unbound DNS server on my VPS and it appears to work. I need to use the DNS server instead of public DNS servers because some ISPs have blocked public DNS IPs. My openvpn.conf file is:

    dev tun
    proto tcp

    # Notice: here I set the listening port to be 80 to avoid possible port blockage
    port 80

    ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
    cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
    key /etc/openvpn/easy-rsa/2.0/keys/server.key
    dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem

    user nobody
    group nogroup
    server 10.8.0.0 255.255.255.0

    persist-key
    persist-tun

    #status openvpn-status.log
    #verb 3
    client-to-client

    push "redirect-gateway def1"

    #pushing public DNS IPs

    push "dhcp-option DNS 208.67.222.222"
    push "dhcp-option DNS 208.67.222.220"

    comp-lzo

As it is suggested here, I tried to use my server's IPs (say 11.22.33.44). So instead of 

    push "dhcp-option DNS 208.67.222.222"
    push "dhcp-option DNS 208.67.222.220"

I just put 

push "dhcp-option DNS 11.22.33.44"

In openvpn.conf above. However, after restarting openvpn, I see that my client can still connect to the OpenVPN server but no pages can be rendered anymore.

What can be wrong here? How can I solve this problem?

openvpn dns-server
Martin Hope
hbp
Asked: 2011-10-04 16:34:29 +0800 CST
  • 1

I need to set up a DNS server to be used with OpenVPN. I can not use conventional public DNS IPs (Like Google public DNS ones) because all of them are blocked in the ISPs where the OpenVPN clients are going to be used, hence need to define my own.

I appreciate your help.

P.S. I know how to define an authoritative DNS server using nsd3, but nsd3 is authoritative-only and I guess here what I need is a recursive DNS server. I chosen nsd3 after having enormous complexity issues with BIND9, so I hope you can suggest some solution that does not need BIND9.

P.S.2 I just found a nice comparison of DNS servers here on wiki. So I basically know what DNS servers CAN do the job. What I need is HOW to do so.

dns-server