I have an install of the BETA 7.901 and configuration from my 7.504 was applied with no issues. The SSL configuration is a follows
Allowed networks were defined as internal and 3 external Internet facing servers. No DNS defined in advanced. My clients would connect and get routes for internal, and the 3 external servers correctly The clients would route for internal and the 3 servers through the VPN and all else would route through the LAN interface. No DNS from VPN assigned so this is correct for this setup. Just assigned DNS from LAN interface. Also in 7.504 no network rules needed as I selected to auto create rules from the VPN setting. All this works with out issue.
Now on the BETAI wanted to try to use the Any network only to turn off split tunnel and allow all client traffic to route through the tunnel. So I removed the internal and the 3 servers assigned in the allow networks window and added the Any network. Same selection for auto create rules. and hit the apply button., Got the message that the config was applied. Then I went to the advanced tab and assigned the astaro internal IP address for the DNS server and added the SSL Pool to the allow networks for the DNS proxy. hit apply and got the message that setting were applied.
Next I connected the client and seen that the old networks were still being pushed to the client and the routes were not changed. I rebooted the astaro box and when it came backup tried to connect the client again and this time got the correct routes pushed. DNS was assigned to the VPN interface. So it looks like the GUI did not save the config like I would have thought.
The next thing I noticed was that when trying to connect to the Internet returned DNS errors. So when I looked at the client the DNS servers assigned by the ISP for the LAN NIC were still assigned and the astaro IP was assigned to the VPN Adaptor. The issue is that now DNS request are going out the Astaro interface like I would expect but since the ISP DNS servers are still assigned the requests are blocked because they are coming from out side the LAN. I would expect that for a NON-Split tunnel setup that the ISP dns servers would be removed and replaced with the DNS servers I asign.
Please advise
