My company has a VPN that I need to connect to. In OSX, I do this by using
openvpn with the following configuration:
client dev tun proto udp remote <GATEWAY_ADDRESS> <PORT> resolv-retry infinite nobind user nobody group nobody persist-key persist-tun ca /Users/Tommy/.openvpn/dev/ca-dev.crt cert /Users/Tommy/.openvpn/dev/tommy.brunn-20131122-dev.crt key /Users/Tommy/.openvpn/dev/tommy.brunn-20131122-dev.key ns-cert-type server tls-auth /Users/Tommy/.openvpn/dev/ta-dev.key 1 cipher BF-CBC comp-lzo verb 3 auth-nocache ;daemon ;writepid openvpn.pid
In Ubuntu, I've installed
network-manager-openvpn and added a new VPN connection (trying to import the config file caused a crash) with the same configuration options set: Screenshots of my settings
Once I connect to the VPN, I can't resolve any domains whatsoever.
If I edit
/etc/NetworkManager/NetworkManager.conf, comment out the line
dns=dnsmasq and restart
network-manager, I can resolve internal domains from my company, but other domains like google.com won't resolve at all. I've made sure to set my "Method" to "Automatic (VPN) addresses only" in the IPv4 and IPv6 tabs of the network manager for my VPN connection, but it doesn't seem to make any difference.
I've also tried re-enabling
dnsmasq and modifying
nameserver 127.0.1.1, then running
sudo resolveconf -u, but then no domains will resolve again.
What I would like is to be able to connect to my VPN so that domains pushed by my company's DNS server are resolved that way, and all other domains are resolved normally.
EDIT: Turns out dnsmasq wasn't actually installed, which I thought it would be by default. Nevertheless, if I install it, re-enable it in
/etc/NetworkManager/NetworkManager.conf, add the local nameserver address in
/etc/resolvconf/resolv.conf.d/base, restart all the services and connect to the VPN, I can resolve domains from the company DNS, but I can't resolve any other domains. So basically the same situation as when I disabled dnsmasq entirely.
EDIT: Contents of