OpenVPN Security Advisory: Dec 14, 2018
Action needed: Important update for OpenVPN Access Server

How does iOS interpret pushed DNS servers and search domains?


On a split-tunnel, where redirect-gateway is not pushed by the server, and at least one pushed DNS server is present:

For example, the following directive on the server will tell the client to route all DNS requests to

push "dhcp-option DNS"

while these directives on the server will only route foo.tld and bar.tld DNS requests to

push "dhcp-option DNS"
push "dhcp-option DOMAIN foo.tld"
push "dhcp-option DOMAIN bar.tld"

Note that with redirect-gateway, the above discussion is moot, since all DNS requests are always routed through the VPN regardless of the presence or absence of added search domains.

Have you downloaded your FREE connections yet?

Request more information to get started.

Request More Information