My company has a VPN that I need to connect to. In OSX, I do this by using openvpn
with the following configuration:
client
dev tun
proto udp
remote <GATEWAY_ADDRESS> <PORT>
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ca /Users/Tommy/.openvpn/dev/ca-dev.crt
cert /Users/Tommy/.openvpn/dev/tommy.brunn-20131122-dev.crt
key /Users/Tommy/.openvpn/dev/tommy.brunn-20131122-dev.key
ns-cert-type server
tls-auth /Users/Tommy/.openvpn/dev/ta-dev.key 1
cipher BF-CBC
comp-lzo
verb 3
auth-nocache
;daemon
;writepid openvpn.pid
In Ubuntu, I've installed network-manager-openvpn
and added a new VPN connection (trying to import the config file caused a crash) with the same configuration options set: Screenshots of my settings
Once I connect to the VPN, I can't resolve any domains whatsoever.
If I edit /etc/NetworkManager/NetworkManager.conf
, comment out the line dns=dnsmasq
and restart network-manager
, I can resolve internal domains from my company, but other domains like google.com won't resolve at all. I've made sure to set my "Method" to "Automatic (VPN) addresses only" in the IPv4 and IPv6 tabs of the network manager for my VPN connection, but it doesn't seem to make any difference.
I've also tried re-enabling dnsmasq
and modifying /etc/resolvconf/resolv.conf.d/base
to contain nameserver 127.0.1.1
, then running sudo resolveconf -u
, but then no domains will resolve again.
What I would like is to be able to connect to my VPN so that domains pushed by my company's DNS server are resolved that way, and all other domains are resolved normally.
EDIT: Turns out dnsmasq wasn't actually installed, which I thought it would be by default. Nevertheless, if I install it, re-enable it in /etc/NetworkManager/NetworkManager.conf
, add the local nameserver address in /etc/resolvconf/resolv.conf.d/base
, restart all the services and connect to the VPN, I can resolve domains from the company DNS, but I can't resolve any other domains. So basically the same situation as when I disabled dnsmasq entirely.
EDIT: Contents of /etc/dnsmasq.conf
: http://paste.ubuntu.com/7297231/
/etc/dnsmasq.conf