VPN DNS issues
Posted: Wed Dec 30, 2009 6:26 pm
Hi all.
I just want to let everyone know of some issues I had with the VPN and how I fixed them. I guess I'm also after confirmation that what I've done won't affect anything else.
Everything was working fine, except the DNS while I was at work and running the VPN (on an intel mac using tunnelblick). I could get my HDA and associated websites no worries, but no others. Any other site resulted in a DNS error, not resolving etc.
After watching /var/log/messages while trying to resolve an outside IP I noticed a lot of "denied" errors scrolling up. It was a simple permissions problem. After a bit of digging I found this site - http://www.hansenonline.net/Networking/bind.html that explained how to add allowed IP ranges to named.conf. here's what I had to add to /etc/named.conf to get it to work for me:
acl trusted {
192.168.10.0/24;
10.8.0.0/24;
localhost;
};
Then under the options section I added:
allow-query{ trusted; };
allow-transfer { trusted; };
After saving the files, I restarted named (service named restart) and bam, DNS is working.
Hopefully this helps someone, as I scratched my head over this for a while.
I just want to let everyone know of some issues I had with the VPN and how I fixed them. I guess I'm also after confirmation that what I've done won't affect anything else.
Everything was working fine, except the DNS while I was at work and running the VPN (on an intel mac using tunnelblick). I could get my HDA and associated websites no worries, but no others. Any other site resulted in a DNS error, not resolving etc.
After watching /var/log/messages while trying to resolve an outside IP I noticed a lot of "denied" errors scrolling up. It was a simple permissions problem. After a bit of digging I found this site - http://www.hansenonline.net/Networking/bind.html that explained how to add allowed IP ranges to named.conf. here's what I had to add to /etc/named.conf to get it to work for me:
acl trusted {
192.168.10.0/24;
10.8.0.0/24;
localhost;
};
Then under the options section I added:
allow-query{ trusted; };
allow-transfer { trusted; };
After saving the files, I restarted named (service named restart) and bam, DNS is working.
Hopefully this helps someone, as I scratched my head over this for a while.