This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS Request Routing Over IPsec

I hope this is the right spot for this.  I did a ton of searching but came up empty.  Closest I found was this but there was never a solution.

I'm trying to get DNS queries to our work LAN to route through the VPN tunnel.  So if I ping say server.work.lan it should resolve to that IP address through the IPsec tunnel.  However this isn't working.  I can access all machine on the work LAN through the tunnel via IP but DNS requests aren't working.  I have the routing defined to look at our 3 DNS servers at work.

I think I know where the problem lies but am unable to fix it.  If I try to ping one of the work DNS servers by IP from the Astaro box itself I get a:


From 71.x.x.201: icmp_seq=1 Destination Host Unreachable

where the 71.x.x.201 is the IP address of my WAN interface. It seems that Astaro isn't using the IPsec tunnel for requests that originate from itself.

Is there a way to fix this so that the Request Routing works as desired? I'm running the latest version, 9.003-16. Thanks so much!

This thread was automatically locked due to age.

Parents

0 BAlfson over 12 years ago

So if I ping say server.work.lan it should resolve to that IP address through the IPsec tunnel.

Please show why you think that should be.

Can you ping from a PC inside your home LAN? Do you have the right settings on the 'ICMP' tab to allow that?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 12 years ago

So if I ping say server.work.lan it should resolve to that IP address through the IPsec tunnel.

Please show why you think that should be.

Can you ping from a PC inside your home LAN? Do you have the right settings on the 'ICMP' tab to allow that?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data