Re: [Openvpn-users] Tunnelblick 3.0rc2 OSX 10.4.6 and DNS

[Dan Alderman <dan@xxxxxxxxxxxxxxxx>]

Hi Angelo,

Thanks for the reply.  I have gone back to rc2 and that has cured the
problem of leaving me with no resolver set on disconnect.

I took your advice and set a custom script so I could output some values
just to make sure things were being set right.  I get these values upon
connecting so the information certainly is making it to my client Mac.

echo "${INTERFACE}" > /tmp/VPN_LOG
echo "${ifconfig_local}" >> /tmp/VPN_LOG
echo "${ifconfig_netmask}" >> /tmp/VPN_LOG
echo "${vDNS[*]}" >> /tmp/VPN_LOG
echo "${domain}" >> /tmp/VPN_LOG

cat /tmp/VPN_LOG
tap0
192.9.200.210
255.255.255.0
192.9.200.5
thefoundry.co.uk

So as you say, it's just getting the scutil call correct.  You are right
in what you say, it really shouldn't be that hard.  This is
unfortunately typical of Apple in my experience.  I had similar pain
with NFS between Panther and Tiger.

Regards,

D.

On Fri, 2006-05-05 at 17:07 +0200, Angelo Laub wrote:
> Hi Dan,
> 
> On May 5, 2006, at 4:08 PM, Dan Alderman wrote:
> > 
> > 
> > Has anyone figured the magic to make this work?  The DNS push is
> > being
> > sent ok, I don't think the script that calls scutil is working quite
> > right.  I have tried to debug it, but when I change it TunnelBlick
> > refuses to open the VPN (are there some suid checks going on in
> > there?).
> 
> 
> If you want to change the up/down scripts you can override the default
> scripts by specifying your own custom scripts in your openvpn config.
> 
> 
> The up/down script that come with Tunnelblick 3.0rc2 should work. At
> least, there working for me. 
> 
> 
> So far, I haven't seen a pair of up/down scripts that really work for
> all possible configurations. Setting a DNS Server shouldn't be that
> difficult, should it?
> 
> 
> If somebody finds an easy solution for setting the DNS Server on OS X,
> please tell me. I will include it in Tunnelblick.
> 
> 
> Cheers,
> Angelo
> 
> 
> 
> > 
> > 
> > I noticed there were some earlier posts on this topic, I was hoping
> > someone may have figured it out.
> > 
> > 
> > Cheers,
> > 
> > 
> > Dan.
> > -- 
> > Dan Alderman, Systems Manager
> > The Foundry, 1 Wardour Street, London. W1D 6PA
> > Tel: +44 (0)20 7434 0449, Fax: +44 (0)20 7434 1550
> > Web: www.thefoundry.co.uk
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > -------------------------------------------------------
> > security?
> > Get stuff done quickly with pre-integrated technology to make your
> > job easier
> > Geronimo
> > _______________________________________________
> > Openvpn-users mailing list
> > Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
> > https://lists.sourceforge.net/lists/listinfo/openvpn-users
> 
> 
-- 
Dan Alderman, Systems Manager
The Foundry, 1 Wardour Street, London. W1D 6PA
Tel: +44 (0)20 7434 0449, Fax: +44 (0)20 7434 1550
Web: www.thefoundry.co.uk



______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users