|
|
The values are only available to the script specified by the --up option,
not your shell sessions. You could have a post-connect script rewrite
your resolv.conf file using the foreign_option_{n} values.
On Wed, 7 Feb 2007, Kwame Bahena wrote:
> Hi
>
> Here is my problem. Because we have some servers running in the internal
> network that are not open to the public (and we plan to keep them like
> this) we have an internal dns server, so when I'm connected to my local
> network I can do either in my browser or in my console a
> http://qa or do a ssh -C -l root qa, and because I have that name in my
> internal dns server my computer will know where to go, this when I'm
> connected in my local network.
>
> Now, I need to push those dns servers to my openvpn clients, for that
> purpose I added to my /etc/openvpn/road-clients.conf file a section that
> looks like this:
>
> push "dhcp-option DNS the.ip.from.my.dns.server1"
> push "dhcp-option DNS the.ip.from.my.dns.server2"
>
> Now, by reading the openvpn manual I know that this won't change
> my /etc/resolv.conf file, but this dns servers will be pushed to my
> enviromental variables in my linux openvpn clietns, this is what the
> manual says about that:
>
> foreign_option_{n}
> An option pushed via --push to a client which does not natively
> support it, such as --dhcp-option on a non-Windows system, will
> be recorded to this environmental variable sequence prior to
> --up script execution.
>
> So, what I should be able to do is to see those foreign_option_ when I
> type 'env' or 'printenv'.
>
> Well, it is not showing that in my openvpn client, what I did (and it's
> not pretty) I added to my rc.local something like this:
>
> cp /etc/resolv.conf /etc/resolv.conf.novpn
> cat /root/resolv.conf > /etc/resolv.conf
> cat /etc/resolv.conf.novpn >> /etc/resolv.conf
>
> I know that there has to be a better way of doing this.
>
> Any comments?
>
> Best regards
> --
> Kwame Bahena <kwame.bahena@xxxxxxxxxxx>
>
>
> -------------------------------------------------------------------------
> Get stuff done quickly with pre-integrated technology to make your job easier.
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> https://lists.sourceforge.net/lists/listinfo/openvpn-users
>
______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users
|