From 10bced3d226402ded5331582bb194f14b4335795 Mon Sep 17 00:00:00 2001 From: DL6ER Date: Sun, 13 May 2018 14:25:21 +0200 Subject: [PATCH] Destroyed OpenVPN server: Only route DNS via VPN (markdown) --- OpenVPN-server:-Only-route-DNS-via-VPN.md | 65 ----------------------- 1 file changed, 65 deletions(-) delete mode 100644 OpenVPN-server:-Only-route-DNS-via-VPN.md diff --git a/OpenVPN-server:-Only-route-DNS-via-VPN.md b/OpenVPN-server:-Only-route-DNS-via-VPN.md deleted file mode 100644 index 8208d73..0000000 --- a/OpenVPN-server:-Only-route-DNS-via-VPN.md +++ /dev/null @@ -1,65 +0,0 @@ -### Optional: Only route DNS via VPN - -With this setup, you will force connected clients to use **only the DNS provided by the VPN connection, i.e. the Pi-hole.** Do this only if you **don't** want to tunnel all traffic from the client through the VPN, but only its DNS queries. - -Edit your `/etc/openvpn/server.conf` and remove (comment out) the following line: - -``` -# push "redirect-gateway def1 bypass-dhcp" -``` - -### Using a client config file - -This works pretty much out of the box with common `client.ovpn` files, like this provided one: [client.ovpn](http://www.dl6er.de/pi-hole/openVPN/client.ovpn) - -Remember to replace the locations of your keys and the address/host name of your server. - -### Using the Network Manager - -When using the Network Manager, you will have to do some additional setting on the client side of things: - -![](http://www.dl6er.de/pi-hole/openVPN/local.png) - -#### Alternative 1: Disable Network Manager's internal DNS server - -Edit `/etc/NetworkManager/NetworkManager.conf`: -``` -# dns=dnsmasq -``` -and restart the Network Manager: -``` -sudo restart network-manager -``` - -When connecting your DNS server will now be properly picked up and used by your client. - -#### Alternative 2: Set DNS server address of your Pi-hole manually on the main interface - -You can also set the address of the DNS server manually (use the device which actually connects to the internet, e.g. `eth0`): - -![](http://www.dl6er.de/pi-hole/openVPN/manualDNS.png) - -After doing either alternative, you should see: -``` -pi.hole has address W.X.Y.Z (outside address of your VPN server) -pi.hole has IPv6 address A:B:C:D:E:F (outside address of your VPN server) -``` - -The web interface of your Pi-hole will be visible at `http://pi.hole/admin/` (even with the recommended firewall configuration mentioned on another subpage) - -![](http://www.dl6er.de/pi-hole/openVPN/VPNdashboard.png) - ---- -## Troubleshooting - -If your new DNS server configuration has not been activated (try restarting the interface / system) you will see -``` -host pi.hole -Host pi.hole not found: 3(NXDOMAIN) -``` - -If you are not connected to your VPN network you will see -``` -host pi.hole -;; connection timed out; no servers could be reached -```