Comments (12)
I don't think resolvconf
is made for systemd. You've probably got the wrong one, this is the one I was referring to.
from openfortivpn.
I don't know much about Artix Linux. I guess it is not based on systemd. More importantly, I have no clue how it manages name resolution. My guess is that something like NetworkManager overwrites attempts by openfortivpn or pppd to modify those settings. Please monitor changes of /etc/.resolv.conf
. Do they coincide with openfortivpn initialisation, and later with your DNS problems?
You can force the DNS server when running **dig**
, thus bypassing any DNS server set in /etc/resolv.conf
. Just for testing (that's not a workaround) try the following, where 192.168.10.2
is the IP address of your DNS server:
dig +short @192.168.10.2 <internal>.com
from openfortivpn.
However, the above does not explain why it worked with 1.17.1, but not with 1.21. Perhaps that's more related to the version of pppd than the version of openfortivpn. Said otherwise, if you let pppd handle DNS settings, perhaps pppd < 2.5.0 used to handle that as expected (by us), whereas pppd ≥ 2.5.0 has issues.
from openfortivpn.
I kept checking /etc/resolv.conf
as you suggested and nothing has changed at all time.
I ran watch cat /etc/resolv.conf
and then the usual openfortivpn command, although it logs:
DEBUG: Attempting to modify /etc/resolv.conf directly.
DEBUG: Adding "nameserver 192.168.10.2", to /etc/resolv.conf.
DEBUG: Adding "nameserver 192.168.10.2", to /etc/resolv.conf.
Nothing is really added
from openfortivpn.
Dig forcing the DNS server worked, but so does everything at the begging, I will let the VPN run for a while and when I can no longer access the DNS by normal means I will try the dig command again to check.
from openfortivpn.
@DimitriPapadopoulos apparently it was the gateway, I changed gateways and it worked:
> cat /etc/resolv.conf
nameserver 192.168.10.2
nameserver 192.168.10.2
I think there may be a configuration that does not apply the changes in resolv.conf; If I had the gateway configurations I would provide to enlighten you guys in a possible problem, but as of now I don't have it. I will try to get it, but I think this issue can be closed for now.
Thank you very much for the help.
Best Regards,
Daniel Boll. 🎴
from openfortivpn.
There are 3 possibilities:
- openfortivpn modifies
/etc/resolv.conf
- openfortivpn call
resolvconf
to handle DNS settings pppd
takes over
Option --pppd-use-peerdns
triggers case 3, but then that would be a pppd
issue, it would not be an openfortivpn
issue, would it?
Case 1 works for legacy Linux distributions, and may work for more recent Linux distributions, although modifying /etc/resolv.conf
really should be avoided.
Case 2 is supposed to be the best option, but then it depends on resolvconf
being available and doing the right thing.
from openfortivpn.
This tells me you're in case 1:
DEBUG: Attempting to modify /etc/resolv.conf directly.
DEBUG: Adding "nameserver 192.168.10.2", to /etc/resolv.conf.
DEBUG: Adding "nameserver 192.168.10.2", to /etc/resolv.conf.
Is resolvconf
installed?
from openfortivpn.
This tells me you're in case 1:
DEBUG: Attempting to modify /etc/resolv.conf directly. DEBUG: Adding "nameserver 192.168.10.2", to /etc/resolv.conf. DEBUG: Adding "nameserver 192.168.10.2", to /etc/resolv.conf.
Is
resolvconf
installed?
No, I was searching how to modify resolv.conf
and stumbled upon resolvconf
, didn't installed it before trying to modify the gateway, which in turn worked.
from openfortivpn.
Because mainly resolvconf
is made for systemd, I am not sure if I can use it
from openfortivpn.
Oh, I see, I will test with this one. I am running only: sudo openfortivpn -c config.vpn -v
from openfortivpn.
Everything seems good, test very thoroughly today. I will be closing the issue, openresolv really solved the matter. Thank you very much.
from openfortivpn.
Related Issues (20)
- RFE: is it possible to start making github releases?🤔 HOT 2
- Openfortivpn stuck at setting new route in ubuntu HOT 6
- Regression in 1.21.0 over 1.20.5 on MacOS (arm64 arch)
- problem upgrading from 1.20.5 to 1.21.0 on Debian Sid HOT 12
- v1.21.0 Segmentation fault HOT 4
- connect: Operation timed out - MAC issue HOT 6
- Cannot connect on SSH on MAC HOT 1
- No cookie given HOT 2
- Incorrect tunnel peer IP HOT 8
- macOS 14.2 and 1.21 blocks HOT 2
- DNS from VPN not being added properly to resolv.conf on Ubuntu 22.04 HOT 9
- Detecting VPN Disconnections sooner for retry HOT 5
- URI missing as configuration parameter HOT 2
- Using openvpn breaks openfortivpn HOT 3
- Invalid session ID error when trying to connect from a different network HOT 8
- Use private key file from Windows?
- macOS 14.2.1 and 1.21.0 blocks HOT 5
- modify firewall HOT 3
- connecting with @ in username and context in host HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from openfortivpn.