TomatoUSB

Greetings, I have a VPN between two offices. Things work great if I use IP addresses between the offices. I'm very pleased and thankful that this works wonderfully.

I'm wondering about the DNS settings. I have "Use received DNS and user-entered DNS" enabled. I have entered my remote office's DNS into the Basic network settings. In the overview, it lists my automatically assigned and manually assigned DNS's - just like I would expect.

When I do a dig from my workstation or a nslookup from the tomato router on a name inside the DNS on the remote office's DNS, it doesn't resolve correctly. If i do a specific dig @remoteofficedns server, it resolves correctly, so I know i can talk to the remote office dns server just fine.

Hopefully someone can illuminate my issue.

thanks,
Andy

Hi

In the OpenVPN configuration client, in the Advanced settings, make sure "accept dns configuration" is set relaxed or strict.

If you login on the router, do a cat /etc/resolv.dnsmasq and make sure the dns entries for the server over VPN is in the list.

Having said that, I've noticed an issue with the dnsmasq server found in tomatousb, it doesn't work as accepted when it comes to resolving names.
On the server, doing nslookup name server_name_on_vpn_side doesn't resolve as soon as dnsmasq is running even though that command should be bypassing it.

I haven't looked much into it, and it was certainly working with the original tomato.

Thanks for the troubleshooting advice - I will look at this and post back.

jyavenard,
I have the dns on the other side of the vpn in my /etc/resolv.dnsmasq file, but it doesn't resolve to the names in that server :(

even if i manually tell nslookup to use the server on the other side of the vpn, it's a no go. "nslookup hostname domainserveripaddress"

andy

I am having the same problem too. Any solution?
I am using:
Tomato Firmware v1.28.9054 MIPSR2-beta K26 USB vpn3.6

Is there other mod works?

do into the advanced dns

uncheck the prevent DNS-rebind box

in the custom config of each router you need to add

router1

interface=br0,tun11
no-dhcp-interface=tun11
server=/lan2/192.168.2.1

router2

interface=br0,tun11
no-dhcp-interface=tun11
server=/lan1/192.168.1.1