RE: VPN Clients and DNS

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 20 Sep 2004 19:28:50 -0500

Hi William,

The way is supposed to work is the VPN server assigns the VPN clients a
DNS server address, and that DNS server is on your internal network. In
that case, the DNS server is able to resolve both internal and external
names.

HTH<
Tom

-----Original Message-----
From: William Holmes [mailto:wtholmes@xxxxxxxxxxxxxx] 
Sent: Monday, September 20, 2004 3:13 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] VPN Clients and DNS

http://www.ISAserver.org

Hello,

I have a problem with DNS and VPN connections.  When a computer
connected to
an ISP makes a VPN connection in which it is specified to use the
default
gateway on the VPN server DNS queries fail.  This is happening because
the
ISP is blocking DNS requests from hosts outside its network.

The question is how can one have the DNS configuration change during the
period of time while the VPN is up. I obviously have DNS servers on my
protected net that I want a VPN client to use. 

I know this can be scripted but the question is why is that necessary. I
would think the default behavior would be to use the DNS server on the
remote
network. Is there something that I have misconfigured?

Thanks

Bill

William Holmes (MCP)
Department of Computer Science
310 Upson Hall
Cornell University
Ithaca, NY 14853
wtholmes@xxxxxxxxxxxxxx
607 255-1757 (o) 607 227-6049 (c)
 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx




Other related posts: