OpenVPN server: Advertise DNS & block LAN access?

[Zonkd]

Can these 2 OpenVPN server settings be used together?

1. Client will use VPN to access: Internet only
2. Advertise DNS to clients: Yes

I want remote clients to resolve DNS via router for stubby DNS-over-TLS and Diversion dnsmasq filtering but block all other LAN access. Has anyone done this?

 

[RMerlin]

Push it manually in the config options:

push "dhcp-option DNS 10.8.0.1"
push "dhcp-option myrouterdomain.lan"

 

[Zonkd]

Push it manually in the config options:

push "dhcp-option DNS 10.8.0.1"
push "dhcp-option myrouterdomain.lan"

Thank you

 

[ColinTaylor]

Push it manually in the config options:

push "dhcp-option DNS 10.8.0.1"
push "dhcp-option myrouterdomain.lan"

I believe there is a typo in the second line. It should be:

push "dhcp-option DNS 10.8.0.1"
push "dhcp-option DOMAIN myrouterdomain.lan"

 

[RMerlin]

I believe there is a typo in the second line. It should be:

push "dhcp-option DNS 10.8.0.1"
push "dhcp-option DOMAIN myrouterdomain.lan"

Correct.