Feature #8644
closedIPsec mobile clients DNS enhancement
100%
Description
linked to #8292
changing DNS from attr plugin to rightdns as of strongswan wiki:
DNS servers
DNS servers and other attributes can be assigned by plugins (e.g. the attr plugin) or since 5.0.1 directly in ipsec.conf by use of the rightdns option. In swanctl.conf each pool in the pools section may define a list of attributes to assign to clients.
Now each client can have an individual assigned DNS.
Updated by Christian R. about 6 years ago
Updated by Jim Pingle about 6 years ago
- Category set to IPsec
- Target version set to 2.4.4
PR looks OK, but needs testing.
Updated by Azamat Khakimyanov about 6 years ago
- Status changed from Feedback to Resolved
I check this Bug on old 2.4.4.a.20180801.0114: DNS from /VPN/IPsec/Mobile Clients menu was set up into '/var/etc/ipsec/strongswan.conf' as 'plugin attr'.
But on latest 2.4.4.a.20180828.1606 DNS from /VPN/IPsec/Mobile Clients menu now is set up as 'rightdns' option into '/var/etc/ipsec/ipsec.conf'.
With two DNSs (one in /VPN/IPsec/Mobile Clients and one in /VPN/IPsec/Pre-Shared Keys) I see that my PC sends DNS requests
- at first to DNS which was set up into /VPN/IPsec/Pre-Shared Keys
- then if there is no answer, to DNS which was set up into /VPN/IPsec/Mobile Clients