CAN PING THE IP BUT NOT THE NAME? A VPN TALE

Solveddnsroutingvpn9 replies 路 108 views 路 started

Accepted solution

by UmaJump to the reply

been there man on teh server side, enable fowrarding and NAT or routing back: sysctl net.ipv4.ip_forward=1, and either masquerade VPN traffic or add a return route on teh internal rotuer for teh VPN client subnet 馃檹 without a return path, packets arirve but replies vanish. worked for me anyway 馃し

  1. ugh. weird one. From a customer site, OpenVPN connects and then nothing internal resolves:

    This site can't be reached

    This site can't be reached
    Check if there is a typo in my-shop-site.example.
    If spelling is correct, try running Windows Network Diagnostics.
    DNS_PROBE_FINISHED_NXDOMAIN
    

    If i type teh IP address of teh intranet wiki directly it sometimes works! But names fail every time. Help me before i start memorizing IP addresses.

    Ive also flushed teh DNS cache, rebooted my laptop and tried a different browser, just in case. No change. Im convinecd its smth about how names are looked up over OpenVPN, but i dont know where to look.

    5
  2. Is this a full tunnel or split tunnel setup?

    1 0 helpful
  3. @earlyfiddler thank u this worked!! u guys are the best!!!

    thumbsup

    7 3 helpful
  4. for split tunnel setups, the internal subnets must be in teh pushed routes (AllowedIPs in WireGuard, push "route ..." in OpenVPN). if the RDP server lives in a subnet not in that list, it goes out your normal intrenet connection instead.

    thumbsup

    5 6 helpful
  5. hotel and guest networks sometimes block UDP or specific ports. if teh client claims connected but no handshake data flows, try teh TCP/443 fallback mode if ur VPN offers one.

    4 0 helpful
  6. Accepted solution

    been there man on teh server side, enable fowrarding and NAT or routing back: sysctl net.ipv4.ip_forward=1, and either masquerade VPN traffic or add a return route on teh internal rotuer for teh VPN client subnet 馃檹 without a return path, packets arirve but replies vanish. worked for me anyway 馃し

    1 6 helpful
  7. oh ive been there lol try turning off teh cache first, fixed it for me. dumb question but how do i even check the power plan lmk how it goes

    thumbsup

    5 0 helpful
  8. Instead of a classic VPN for the RDP server, conisder an identity-aware accses proxy. No routing or DNS gymnastics on client devices.

    3 2 helpful
  9. @uma.castillo wowww ok added the internal DNS server and search domain to the OpenVPN config... names resolve and the intranet wiki opens. owe u a beer 馃嵑

    5 0 helpful

Reply to this topic

Sign in or create an account to reply.