Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > VPN: Site to Site and Remote Access
Reload this Page DNS not working in PPTP VPN
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Page 1 of 2 1 2
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 06-17-2009, 06:12 PM
Junior Member
  
Join Date: Jun 2009
Posts: 16
Default DNS not working in PPTP VPN
I am running v7.403 and can't get DNS to work on a PPTP VPN. While I have the VPN connection active, I can ping the internal DNS server by its address of 192.168.0.3 but not by name. I am using the default network address of 10.242.1.x for the VPN pool.

This DNS server is configured in Remote Access - Advanced - DNS, and
ipconfig /all on the vpn client shows 192.168.0.3 = DNS1.

Is there something else I need to set up?
Reply With Quote
  #2 (permalink)  
Old 06-17-2009, 07:17 PM
BAlfson's Avatar
Moderator
  
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,393
Default
Is your client an Apple computer? There is a documented issue with Apple's use of names ending in ".local" and DNS.
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #3 (permalink)  
Old 06-17-2009, 08:12 PM
Junior Member
  
Join Date: Jun 2009
Posts: 16
Default
The vpn client is Windows xp sp3. I have tried the FQDN and just the host name of the DNS server and neither one resolved. The DNS server works with Win2k, XP and Linux clients.
Reply With Quote
  #4 (permalink)  
Old 06-17-2009, 08:27 PM
BAlfson's Avatar
Moderator
  
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,393
Default
Are there any relevant packets block in the packet filter live log?
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #5 (permalink)  
Old 06-17-2009, 08:37 PM
Junior Member
  
Join Date: Jun 2009
Posts: 16
Default
Quote:
Originally Posted by BAlfson View Post
Are there any relevant packets block in the packet filter live log?
No, only port 137 UDP stuff. In the meantime, I have connected Wireshark on the DNS server side of ASG and I can see the pings come through when I use the DNS server IP address, showing the assigned VPN pool address as the source.

Pinging it by name reveals that the DNS request is not being forwarded/relayed to the DNS server by ASG.
Reply With Quote
  #6 (permalink)  
Old 06-17-2009, 10:28 PM
BAlfson's Avatar
Moderator
  
Join Date: Mar 2007
Location: Oklahoma City
Posts: 5,393
Default
Strange. Is there anything in the Intrusion Protection log?
__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!
Reply With Quote
  #7 (permalink)  
Old 06-17-2009, 10:39 PM
Junior Member
  
Join Date: Jun 2009
Posts: 16
Default
Quote:
Originally Posted by BAlfson View Post
Strange. Is there anything in the Intrusion Protection log?
No, nothing.
Reply With Quote
  #8 (permalink)  
Old 06-17-2009, 11:00 PM
Moderator
  
Join Date: Jul 2001
Location: southern California
Posts: 5,153
Default
What happens with NSLOOKUP when you tell it to use your dns server?

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.3x, Dell PE1550 Dual PIII 1GHz, 1GB RAM, 2 NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #9 (permalink)  
Old 06-18-2009, 02:52 PM
Junior Member
  
Join Date: Jun 2009
Posts: 16
Default
Quote:
Originally Posted by BarryG View Post
What happens with NSLOOKUP when you tell it to use your dns server?

Barry
Assuming you mean trying with the pptp client,

"Can't find server name for address 192.168.0.3: Timed out"
Reply With Quote
  #10 (permalink)  
Old 06-18-2009, 04:28 PM
Junior Member
  
Join Date: Jun 2009
Posts: 16
Default
FWIW, I changed over to L2TP over IPsec and am seeing the same issue: I can ping the DNS server by IP address, but ASG does not forward DNS requests to the DNS server.
Reply With Quote
Reply
Page 1 of 2 1 2

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 07:37 PM.

 
Contact Us - Astaro User Bulletin Board - Archive - Top

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.