Sorry, you have been blocked
This website is using a security service to protect itself from online attacks. The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.
What can I do to resolve this?
You can email the site owner to let them know you were blocked. Please include what you were doing when this page came up and the Cloudflare Ray ID found at the bottom of this page.
Cloudflare Ray ID: 7f0b36e18ad12fae • Your IP: Click to reveal 178.132.111.46 • Performance & security by Cloudflare
OpenVPN Support Forum
[SOLVED] DNS resolution fails with "block-ouside-dns" on Windows client
[SOLVED] DNS resolution fails with "block-ouside-dns" on Windows client
Post by sebelk » Sun Mar 29, 2020 9:16 pm
My problem is that Linux clients work but Windows 10 Pro ones don’t.
My server configuration is:
For client that I’m testing I have /etc/openvpn/ccd/oneclient with this content:
The problem is dns resolution does not work, however I can ping beyond of tunnel, If I comment block-outside-tunnel, however, everything works fine.
I’ve read a lot of posts about such as viewtopic.php?t=25827 , I’ve tried even disabling smart multi-homed name resolution and windows firewall, didn’t work either. by the way in Windows using OpenVPN GUI 11.14.0.0
Any idea? Is a openvpn misconfiguration?
Thanks in advance!
Re: DNS resolution fails with "block-ouside-dns" on Windows client
Post by Pippin » Sun Mar 29, 2020 9:25 pm
Re: DNS resolution fails with "block-ouside-dns" on Windows client
Post by TinCanTech » Sun Mar 29, 2020 9:26 pm
Re: DNS resolution fails with "block-ouside-dns" on Windows client
Post by Pippin » Sun Mar 29, 2020 9:27 pm
I will move myself to Doh!
Edit:
No wait, it’s possible those Linux clients do not set DNS.
OpenVPN — Blocking DNS failed, unable to connect to VPN
I am having an issue with one of our remote users who can no longer access our LAN.
I have a couple of others who also access the servers from overseas with no issue.
This has only occurred in the last few weeks and nothing has been knowingly changed at either end.
On Friday an attempt was made to create a new connection for the user and doing a clean install of the client using the ‘Client Export’ created installer.
The log appears to show everything starting ok until the Blocking DNS service tried to start.
Quote
Fri Nov 03 15:07:08 2017 OpenVPN 2.4.1 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Mar 22 2017
Fri Nov 03 15:07:08 2017 Windows version 6.1 (Windows 7) 64bit
Fri Nov 03 15:07:08 2017 library versions: OpenSSL 1.0.2k 26 Jan 2017, LZO 2.09
Enter Management Password:
Fri Nov 03 15:07:08 2017 TCP/UDP: Preserving recently used remote address: [AF_INET]xx.x.xx.xxx:1194
Fri Nov 03 15:07:08 2017 Attempting to establish TCP connection with [AF_INET]xx.x.xx.xxx:1194 [nonblock]
Fri Nov 03 15:07:09 2017 TCP connection established with [AF_INET]xx.x.xx.xxx:1194
Fri Nov 03 15:07:09 2017 TCP_CLIENT link local (bound): [AF_INET][undef]:0
Fri Nov 03 15:07:09 2017 TCP_CLIENT link remote: [AF_INET]xx.x.xx.xxx:1194
Fri Nov 03 15:07:11 2017 [server] Peer Connection Initiated with [AF_INET]xx.x.xx.xxx:1194
Fri Nov 03 15:07:12 2017 open_tun
Fri Nov 03 15:07:12 2017 TAP-WIN32 device [Local Area Connection 9] opened: \.\Global<0971897D-033D-4511-868E-2D97DD43E0BF>.tap
Fri Nov 03 15:07:12 2017 Set TAP-Windows TUN subnet mode network/local/netmask = 192.168.171.0/192.168.171.8/255.255.255.0 [SUCCEEDED]
Fri Nov 03 15:07:12 2017 Notified TAP-Windows driver to set a DHCP IP/netmask of 192.168.171.8/255.255.255.0 on interface <0971897D-033D-4511-868E-2D97DD43E0BF>[DHCP-serv: 192.168.171.254, lease-time: 31536000]
Fri Nov 03 15:07:12 2017 Successful ARP Flush on interface [26] <0971897D-033D-4511-868E-2D97DD43E0BF>
Fri Nov 03 15:07:12 2017 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Fri Nov 03 15:07:12 2017 Block_DNS: adding block dns filters using service failed: There are no more endpoints available from the endpoint mapper. [status=0x6d9 if_index=26]
Fri Nov 03 15:07:12 2017 Blocking DNS failed!
Fri Nov 03 15:07:12 2017 Exiting due to fatal error
Any advice on the cause and how to rectify this would be greatly appreciated.
Как исправить DNS leak на OpenVPN?
Настроил OpenVPN на AWS инстансе скриптом https://github.com/Nyr/openvpn-install
Вылезла проблема — DNS Leak.
Сначала обрадовался, т.к. при первой проверке утечка исчезла, но заметил, если перезагружаешь страницу нескольок раз, то утечка все равно вылазит.
Как исправить? Убунта 16.04
- Вопрос задан более трёх лет назад
- 15199 просмотров
- Вконтакте
- Вконтакте
Options error: Unrecognized option or missing parameter(s) in [CMD-LINE]:1: block-outside-dns (2.3.10)
Добавление в конфиг тоже дает ошибку.
- Вконтакте
- Вконтакте
Нужно передать DNS со стороны сервера на клиента , и на клиенте как уже сказали выше рубануть исходящий и входящий трафик на 53 порту везде кроме tun интерфейса.
Разумеется в этом случае адрес VPN сервера должен быть указал в цифровом виде. Не доменный.
iptables на клиенте будет выглядить как-то так:
кусочек конфига openvpn сервера:
Разумеется DNS должен быть проксирован или проброшен снаружи через туннель
Если всё ещё актуально, постучитесь в скайп — поясню/помогу.
- Вконтакте
В зависимости от типа DNS трафика.
Например так:
Но правильнее ставить задачу целиком. 🙂
Либо в уже готовый клиентский config добавить
block-outside-dns
Либо в серверный config
push «block-outside-dns»