OpenVPN tunnel client to use remote private DNS server to resolve hostname

[dynaguy]

I upgrade to RT-AC68U with Merlin 374.42.2.

OpenVPN client works. But I can't access remote site by using hostname. I set "Accept DNS Configration" to "Relaxed" and it doesn't work.

I was using a RT-N16 with TomatoUSB. On that firmware this works fine with some manual setting. So how to set this up on Merlin?

Thanks a lot.

 

[pitboss]

Are you using the DNS pushed by the server?
relaxed should have allow you to use your router/ISP DNS.
Change it to strict to use only DNS from the vpn server.
Can you ping to external sites by ip address?

 

[Skirk]

I had problems resolving domain names after rejecting the VPN server push (so I could use the selective routing scripts as described in another thread). The way around this for me was to add DNS servers to the custom config in the OpenVPN client settings:

eg
dhcp-option DNS 8.8.8.8
dhcp-option DNS 8.8.4.4

or any public DNS of your choosing.

Hope this helps

 

[dynaguy]

Yes, DNS got pushed to client.

If I set to "Strict" instead of "Relaxed", it works. But this will send all DNS request to the remote DNS server. I need send DNS requests ONLY for somehost. myoffice.local to the VPN tunnel. All other requests should using ISP's DNS (or 8.8.8.8)

BTW, here is the link when I setup this feature in TomatoUSB:
http://www.linksysinfo.org/index.php?threads/openvpn-client-cant-resolve-dns.37076/

 

[dynaguy]

I did some research and I think Merlin need a custom setting section under LAN-->DHCP-->DNS. It appears to me that Merlin use dnsmasq and in my case I need to put some custom settings, e.g "server=/mycompany.lan/192.168.123.29" into the /etc/dnsmasq.conf
This will ensure that a DNS request for a host in "mycompany.lan" send to DNS server at 192.168.123.29.

My other option is use Tomato by Shibby but I'm not sure it's table or not.

 

[RMerlin]

I did some research and I think Merlin need a custom setting section under LAN-->DHCP-->DNS. It appears to me that Merlin use dnsmasq and in my case I need to put some custom settings, e.g "server=/mycompany.lan/192.168.123.29" into the /etc/dnsmasq.conf
This will ensure that a DNS request for a host in "mycompany.lan" send to DNS server at 192.168.123.29.

My other option is use Tomato by Shibby but I'm not sure it's table or not.

See the WIki for information on how to customize config files:

https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files

This actually far more flexible than just a "custom option" field since it can be done on a wide range of config files, and it also allows you to actually modify the content, not just append to it.