Re: Overriding connections (VPN) that abuse DNS (was: Wireless DHCP overwrites DNS settings)

[Derek Atkins <warlord MIT EDU>]

Quoting Dan Williams <dcbw redhat com>:

> > I have a VPN that also gives me incomplete DNS info.  The way I fixed
> > this was by writing a wrapper around /usr/bin/nm-vpnc-service-vpnc-helper
> > that adjusts the vpnc environment before passing it back to NM via
> > dbus.  In my case I needed to adjust the CISCO_DEF_DOMAIN variable.
> > YMMV.
>
> I was working on this today; the interesting thing is that if the VPN
> hands back bogus DNS information, should NM honor the default domain
> that the VPN sends back, if any, and should it honor the DNS searches,
> if any?  I'd guess no to searches, maybe yes to default domain.
>
> The DNS searches and nameservers should probably be "together" in that
> if there are no nameservers specified, NM falls back to the underlying
> device's nameservers and searches.

In my case the problem was with Split DNS.  I needed to convince NM
to configure the Split DNS to send two domains to the VPN DNS Servers
and not just the single domain that the VPN returned.

> Dan

-derek

--
      Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
      Member, MIT Student Information Processing Board  (SIPB)
      URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
      warlord MIT EDU                        PGP key available