vpnclient and host lookups - users - Fedora Mailing-Lists

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

1996

1995

1994

1993

1992

1991

1990

1989

1988

1987

1986

1985

1984

1983

1982

1981

1980

vpnclient and host lookups

Re: Synaptics TouchPad in FC2

DSP problem in Fedora

Edward Croft

Tuesday, 27 July 2004 Tue, 27 Jul '04

2:25 p.m.

I did note that a host lookup using host -T does work, however standard DNS lookups, like when using the browser, fail. My guess is that for some reason the Cisco client does not pass UDP packets. I am guessing here. Has anyone found a solution/workaround? Is there a way to default DNS lookups to use TCP packets instead? TIA Ed Croft

Reply

Show replies by date

Kenneth Porter

Thursday, 5 August Thu, 5 Aug

9:55 p.m.

--On Tuesday, July 27, 2004 3:25 PM -0400 Edward Croft <ecroft(a)OPENRATINGS.com> wrote:

I did note that a host lookup using host -T does work, however standard DNS lookups, like when using the browser, fail. My guess is that for some reason the Cisco client does not pass UDP packets. I am guessing here. Has anyone found a solution/workaround? Is there a way to default DNS lookups to use TCP packets instead?

Don't know about that, but I just got the open source vpnc working, which doesn't steal my DNS setup. My LAN can use the connection using a MASQUERADE rule in iptables to the tun1 device, and all my DNS queries continue to go out the Internet connection instead of getting diverted to the VPN peer.

Reply

Scot L. Harris

10 p.m.

On Thu, 2004-08-05 at 22:55, Kenneth Porter wrote:

Don't know about that, but I just got the open source vpnc working, which doesn't steal my DNS setup. My LAN can use the connection using a MASQUERADE rule in iptables to the tun1 device, and all my DNS queries continue to go out the Internet connection instead of getting diverted to the VPN peer.

Which works well until you need to reference your company intranets DNS servers for access to certain systems. I have yet to hear of a VPN solution that lets you query both external and internal DNS servers. I guess it might be theoretically possible if the VPN client looks at the domain on the request, but I have not seen one that does this. -- Scot L. Harris webid(a)cfl.rr.com If you want to get rich from writing, write the sort of thing that's read by persons who move their lips when the're reading to themselves. -- Don Marquis

Reply

Kenneth Porter

Friday, 6 August Fri, 6 Aug

1:14 a.m.

--On Thursday, August 05, 2004 11:00 PM -0400 "Scot L. Harris" <webid(a)cfl.rr.com> wrote:

Which works well until you need to reference your company intranets DNS servers for access to certain systems. I have yet to hear of a VPN solution that lets you query both external and internal DNS servers. I guess it might be theoretically possible if the VPN client looks at the domain on the request, but I have not seen one that does this.

Right, it's a fundamentally hard problem. One approach is to create a stub domain in /etc/named.conf that forwards to the company DNS server for its internal domain. But that won't work if the company uses the same domain and "split horizon" for external and internal use, with the same name used with different addresses. For instance, my peer has an A record for company.com internally pointing to their Windows domain controller but no MX record, so I can't send mail to them if I use the internal server. At least with vpnc you don't get your DNS forcibly hijacked as vpnclient does, so you can at least control which queries go where. But you still have to decide where to make the split.

Reply

7218

days inactive

7228

days old

users@lists.fedoraproject.org

Manage subscription

3 comments

3 participants

tags (0)

participants (3)

Edward Croft
Kenneth Porter
Scot L. Harris