我有一个OpenVPN服务器在AWS Debian实例上build立和运行。 它的工作原理应该如此，但是我想把DNS查询从与OpenVPN同一服务器上的BIND 9推送到Linux客户端。 当我连接到服务器时，似乎所有人都看起来不错。 我在client.opvn文件中有相应的行，例如：
script-security 2 up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf
当我检查客户端机器上的resolve.conf时，DNS服务器地址是我认为应该是的。 例如OpenVPN服务器10.8.93.1上的tun0的IP地址。
使用此地址时，DNS查找将在服务器上运行。 但在客户机上，它不会。
我的named.conf.options文件如下所示：
acl goodclients { 172.31.18.0/24; 10.8.93.0/24; 127.0.0.1; localhost; localnets; }; options { directory "/var/cache/bind"; recursion yes; allow-query { goodclients; }; forwarders { 91.239.100.100; 89.233.43.71; }; forward only; dnssec-validation auto; auth-nxdomain no; # conform to RFC1035 listen-on-v6 { any; }; };
我的OpenVPN server.conf如下：
port 1194 proto udp dev tun comp-lzo keepalive 10 120 persist-key persist-tun user nobody group nogroup chroot /etc/openvpn/easy-rsa/keys/crl.jail crl-verify crl.pem ca /etc/openvpn/easy-rsa/keys/ca.crt dh /etc/openvpn/easy-rsa/keys/dh1024.pem tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0 key /etc/openvpn/easy-rsa/keys/server.key cert /etc/openvpn/easy-rsa/keys/server.crt ifconfig-pool-persist /var/lib/openvpn/server.ipp client-config-dir /etc/openvpn/server.ccd status /var/log/openvpn/server.log verb 4 # virtual subnet unique for openvpn to draw client addresses from # the server will be configured with xxx1 # important: must not be used on your network server 10.8.93.0 255.255.255.0 # configure clients to route all their traffic through the vpn push "redirect-gateway def1 bypass-dhcp" push "dhcp-option DNS 10.8.93.1" #push "redirect-gateway def1" #logs log-append openvpn.log verb 5
所以在服务器上，我可以发出这个命令成功：
dig @10.8.93.1 google.com ; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> @10.8.93.1 google.com ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35943 ;; flags: qr rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;google.com. IN A ;; ANSWER SECTION: google.com. 251 IN A 173.194.112.201 google.com. 251 IN A 173.194.112.206 google.com. 251 IN A 173.194.112.192 google.com. 251 IN A 173.194.112.193 google.com. 251 IN A 173.194.112.194 google.com. 251 IN A 173.194.112.195 google.com. 251 IN A 173.194.112.196 google.com. 251 IN A 173.194.112.197 google.com. 251 IN A 173.194.112.198 google.com. 251 IN A 173.194.112.199 google.com. 251 IN A 173.194.112.200 ;; Query time: 130 msec ;; SERVER: 10.8.93.1#53(10.8.93.1) ;; WHEN: Fri Nov 7 00:50:59 2014 ;; MSG SIZE rcvd: 204
但是在客户机上连接到VPN服务器时不起作用。
谁能告诉我在这里磕磕绊绊，我错过了什么？