Re: [Openvpn-users] split Horizon DNS

[Eric S. J. <es...@ha...>]

Jan Just Keijser wrote:
> hi Eric,
>>   
> I'd say this is largely off-topic for the openvpn forum, as this is 
> about split-horizon DNS on Windows....
> typing in
>   split horizon dns windows
> in google gave me this:
>   http://homepages.tesco.net/J.deBoynePollard/FGA/dns-split-horizon.html

the split horizon solutions you point me to are great except I can't modify any 
servers.  Thee condition is caused by open VPN  end is localized to that one 
machine.  I believe it's also the responsibility of the client to resolve the 
problem because I can't go around customizing name servers at a dozen or more 
locations to handle my remote DNS namespace.  That would be so wrong on so many 
levels.

If I didn't it clearly before, I'll say it now.  I'm not the only one.  I've had 
this problem at every single client site where I have used open VPN in the past 
eight years.  The vast majority of time it didn't show up because end-users were 
just people working from their home network and therefore the office DNS could 
provide all of their Internet DNS related needs.  I'm finding more and more 
technically astute people having local networks at home with miniature DNS 
setups.  I find out about it when they call me saying "when open VPN is running, 
why can't I access any of my machines at home?"

now, if you want to say that it's officially not part of open VPN and people 
with this problem got to suck it up and start typing IP addresses, do so.  I'll 
find another way to cope.  It would be helpful to know how you change resolver 
data and if there's any way I could intercept that action without recompiling my 
own version of open VPN.

--- eric