<br><div>yeah, didn't think it was possible, would be nice though.</div><div><br></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Tue, Nov 13, 2012 at 2:47 PM, Brian MacLeod <span dir="ltr"><<a href="mailto:nym.bnm@gmail.com" target="_blank">nym.bnm@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA256<br>
<div class="im"><br>
On 11/13/12 1:47 PM, Robert L. Harris wrote:<br>
><br>
> Here are my current configs with the suggestions above. One thing<br>
> i would like to figure out is how to have my clients hit my<br>
> resolvers for my home domain but not for everything since my work<br>
> network has it's own for internal machines.<br>
<br>
<br>
</div>Hmm. I don't believe you can do this without a LOT of hacking.<br>
Basically, re-populate a hosts file upon successful connection.<br>
<br>
Pushing altered DHCP options for name service will either not work<br>
(since OpenVPN uses a Microsoft-ism here), or will work to overwrite<br>
the clients' current name resolution scheme. There is not, to my<br>
recollection, a way to convince the resolver to treat names<br>
differently otherwise.<br>
<br>
The only other way this works is if you can tell the clients' upstream<br>
DNS provider to point to addresses that make sense for your VPN<br>
connection. If you could do that, you also wouldn't need to ask the<br>
question :-) You'd have all the pieces to do this in a much cleaner<br>
way in the first place.<br>
<br>
bnm<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)<br>
Comment: Using GnuPG with Mozilla - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
iQE4BAEBCAAiBQJQor/3Gxhoa3A6Ly9rZXlzZXJ2ZXIudWJ1bnR1LmNvbQAKCRD5<br>
XCJY/q4Y6KfTB/kB1nw27PY+x4GowHgGV4+x3qCAXpOGm8g4zBtU5hvGVH0tU5xP<br>
aDC1nNlNslGhRKh8DG70AgmnVeLR0o/3t1DNg0p1L3FPTbFKlyQXDHxiwT42yThl<br>
mSvu6lB7P500hpT1Qrs9R2qvK8Ef8+HEzRUkkkKLfBpjAdJ3NWiIXwBQNPllI3rg<br>
be3w2j0sTCRR1iV7/AHVaXWlXerpzOHIA60r7EObS/2HlRoTkiz6Kwvi/UUZRcaR<br>
opKuMN82ibSrQ3bl43DrzF1LFH4HddTbuHau0YM8rcqn2ujpnItsUwGWbm5YygKb<br>
GWr2Jw+NSHpxqGQryqVvDijR0KqhnOi4EOdo<br>
=uufy<br>
-----END PGP SIGNATURE-----<br>
<div class="HOEnZb"><div class="h5">_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br>:wq!<br>---------------------------------------------------------------------------<br>Robert L. Harris<br><br>DISCLAIMER:<br> These are MY OPINIONS With Dreams To Be A King,<br>
ALONE. I speak for First One Should Be A Man<br> no-one else. - Manowar<br>
</div>