Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a DNS server that lacks forwarders. Its only aim is to resolve machines on my internal domain. As such, dig/ping returns nothing. This is the behavior I want.

When I start up OpenVPN on the server (successfully via IP, rather than \domain) and run the same dig/ping queries, my BIND9 server is automagically returning records/responses. What is OpenVPN tinkering with and how can I stop it?

My OpenVPN configuration follows:

dev tun
proto udp
remote [removed the IP address] 1194
resolv-retry infinite
ca [removed the certification file]
remote-cert-tls server
auth-user-pass password.txt # I realize this is bad practice.
verb 1
reneg-sec 0
share|improve this question
Without forwarders and without root hints? – grawity Aug 10 '13 at 21:19
...annnnd, I'm an idiot. I would have noticed this immediately but I had also been tinkering with iptables, so it seemed as though the external resolution only occurred when OpenVPN was up. Thanks for jostling my brain. – AGormlessFool Aug 10 '13 at 23:02

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.