MAC OSX DNS for SSL connection

smoke455 · 05-20-2008, 12:49 AM

I'm using tunnelblick to connect to the SSL VPN on the ASG220. The connection works fine, except it doesn't push DNS to the mac like it does Win32 clients. Does anyone know how to get the DNS to push or be accepted by the mac using tunnelblick? Trying to remember the IP address of 29 servers when you're on the road with the mac is no fun...

BrucekConvergent · 05-20-2008, 03:11 PM

I don't deal with Macs often... but if you just need a basic list of hosts, why not just configure the HOSTS file? To be sure, not the greatest solution, but it would work. Maybe some others may have a way to get your DNS working, though.

jjohnston62 · 05-20-2008, 04:44 PM

Isn't there a 'set nameserver' selection under 'Details' in Tunnelblick. I thought that's what that did.... haven't used it extensively. Been using L2TP more often.

smoke455 · 05-20-2008, 07:24 PM

thanks for the suggestions.
I've seen the 'set nameserver' box with "experimental" written behind it. So far it hasn't worked for me.
Currently I do keep a list of servers to connect to, but on occasion I have to look at something in the DHCP range and then its kind of a pain.

troy.murray · 06-11-2008, 03:56 PM

It's too bad Astaro doesn't have a nice client that works on the Mac as well as Windows. The University I work for has a Juniper device and it has a nice Java client that installs and works great.

onebigm16 · 09-09-2008, 06:30 AM

was this issue ever resolved. I am having same problem SSL VPN not pushing DNS to mac client. I am using viscosity which I think is way better then tunnelblick. I can ping google's ip and I can go to google using ip. But I cant use DNS. Anyone know how to do this I tried the set nameserver in tunnelblick. I have run out of ideas.

troy.murray · 10-01-2008, 11:14 AM

onebigm16, I looked into the Viscosity app that you mentioned and I LOVE IT! Thanks so much. I too have found it much better then Tunnelblick. My connection is working just fine, I'm able to use DNS internally without any problems. Here is how I setup my connection:

I downloaded the Astaro configuration files from my User Portal, then I imported the settings into Viscosity.
Edit the connection, go to the Networking tab, enter your internal subnets and use "vpn_gateway" for the gateway variable for each route
On the Advanced tab, add the "--proto tcp-client" command to the list
If your using an internal DNS server, which I am, make sure you have a Packet Filter rule to allow your SSL VPN pool to run a DNS query to it.

HTH, let me know if you still have questions and I'll try to answer it.

smoke455 · 10-07-2008, 12:26 AM

thanks for posting about the Viscosity app - that is just what I was looking for!

troy.murray · 10-07-2008, 02:11 AM

No problem, it's one of those silly little Mac apps that you come across and get really excited about. I know that sounds kind of silly, but I really, really like this program!

Astaro Security Gateway

Network Security

Web Security

Web Application Security

Mail Security

Information