VPN DNS issues

[jasmus]

Hi all.

I just want to let everyone know of some issues I had with the VPN and how I fixed them. I guess I'm also after confirmation that what I've done won't affect anything else.

Everything was working fine, except the DNS while I was at work and running the VPN (on an intel mac using tunnelblick). I could get my HDA and associated websites no worries, but no others. Any other site resulted in a DNS error, not resolving etc.

After watching /var/log/messages while trying to resolve an outside IP I noticed a lot of "denied" errors scrolling up. It was a simple permissions problem. After a bit of digging I found this site - http://www.hansenonline.net/Networking/bind.html that explained how to add allowed IP ranges to named.conf. here's what I had to add to /etc/named.conf to get it to work for me:

acl trusted {
192.168.10.0/24;
10.8.0.0/24;
localhost;
};

Then under the options section I added:

allow-query{ trusted; };
allow-transfer { trusted; };

After saving the files, I restarted named (service named restart) and bam, DNS is working.

Hopefully this helps someone, as I scratched my head over this for a while.

[jasmus]

I've also just discovered I have to go back in and make these changes again if I install an application (amahi overwrites the named.conf to add another entry for the new app).

[cpg]

nice work jasmus! please file a bug in http://bugs.amahi.org and we will take care of this for amahi 5.1!

it's great that you took action to investigate it!

also, we can prepare a test version of hdactl for you to try soon, so that we can start testing the fix.

[cpg]

with the condition that you file a bug for this ( ) ... here is a potential fix:

- 64 bits: http://alpha.amahi.org/tmp/hdactl-3.0-5.x86_64.rpm
- 32 bits: http://alpha.amahi.org/tmp/hdactl-3.0-5.i386.rpm

(you do rpm -Uvh and the url of the rpm you need above)

please do file a bug...

also, i did not enable transfers, as i do not believe that is needed.

anyone trying this rpm please do report here!

[jasmus]

Thanks for the quick response!

I've installed the rpm and I'll let you know how it goes (I'm on my weekend, so I won't know until Sunday).

I did head over to the bug tracker, but I will admit I can't quite figure out how to file a bug...

[cpg]

great, under project "platform" then "new issue" ...