Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have a DNS server that lacks forwarders. Its only aim is to resolve machines on my internal domain. As such, dig/ping somevaliddomain.com returns nothing. This is the behavior I want.

When I start up OpenVPN on the server (successfully via IP, rather than \domain) and run the same dig/ping queries, my BIND9 server is automagically returning records/responses. What is OpenVPN tinkering with and how can I stop it?

My OpenVPN configuration follows:

client
dev tun
proto udp
remote [removed the IP address] 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca [removed the certification file]
tls-client
remote-cert-tls server
auth-user-pass password.txt # I realize this is bad practice.
comp-lzo
verb 1
reneg-sec 0
share|improve this question
    
Without forwarders and without root hints? –  grawity Aug 10 '13 at 21:19
    
...annnnd, I'm an idiot. I would have noticed this immediately but I had also been tinkering with iptables, so it seemed as though the external resolution only occurred when OpenVPN was up. Thanks for jostling my brain. –  AGormlessFool Aug 10 '13 at 23:02

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.