OpenVPN / openvpn

OpenVPN is an open source VPN daemon
http://openvpn.net
Other
10.28k stars 2.92k forks source link

No dynamic DNS updates for reverse zone #426

Open Zwen23 opened 9 months ago

Zwen23 commented 9 months ago

Hi, when using the data channel offload driver on a windows client it will not send dynamic dns updates for the reverse zone (PTR records). It sends update for the forward zone though. Using the exact same config and settings but using wintun (disable-dco) or tap driver (dev tap) reverse DNS updates are sent reliable. Is there something in the dco driver thats blocking or suppressing these reverse dynamic updates?

P.S.: tried setting both checkboxes in the ipv4 DNS-Settings (register dns..., use dns suffix...) with no lock. also pushing these settings: push "dhcp-option DOMAIN xxx.xxx.xx", push "register-dns"

Any idea ?

lstipakov commented 9 months ago

Please attach openvpn logs with verb 4 with and without dco driver. Note that --disable-dco makes OpenVPN use tap-windows6 driver and not wintun.

cron2 commented 9 months ago

Just to be sure: this is "windows automatic DNS", so DNS zones hosted at the ADCs?

I can only guess that this is something about interface flags / interface type, and Windows not recognizing "something" if the interface is DCO, while it works fine on TAP or Wintun...

Zwen23 commented 9 months ago

Yes , right! Windows automatic dns updates for windows clients that are part of an active directory domain. DNS servers are windows Domain Controllers. I was using config "windows-driver wintun" to test wintun not "disable-dco" sorry for confusion. I saw in windows networtk adapter info that system was definitely using wintun in this test. I will supply debug log ASAP.