I have tried to find a place in the OpenVPN server settings to add the following DNS options I can add on the client config file, but are not accepted by all OpenVPN clients.
register-dns
block-outside-dns
I need the OpenVPN client to get the DNS from the OpenVPN server and use it exclusively while the link is active.
If you really want to “forbid” the clients to use other DNS-Servers, I would recommend “tunnel all”, so that all traffic has to go through the VPN first before it goes out to the web. Then just add your preferred DNS-Server to the VPN-configuration.
It all depends on your clients. Are they “managed” from you or do you want to force them a configuration server-wise?
Thank you, but even if I do this, the DNS from my device is the one being used. The DNS from the OpenVPN server are added as secondary.
Also I have several users connecting to this server, so it would choke the internet traffic from the OpenVPN server.
I do not need specific DNS servers, I need for the device connecting to the OpenVPN server to only use the DNS servers pushed by the OpenVPN server, not the default device DNS client configuration.
If the clients you are referring to are mobile phones then this might just be the fact that both android and ios and the app developers for those systems often ignore dns requests from the user and use the ones they prefer or want you to use to use.
Hmm… I don’t know how to configure that, DNS-servers are handled through DHCP if they’re not set manually, so unfortunately I don’t have a clue how to handle this… would need to do some research myself.
Okay, there is another problem: If you do not want to tunnel all, you cannot control if the users use your DNS-server or not. If they have admin rights, they would be able of changing it to another one and they would reach that one, too (if there is no firewall rule forbidding this).
What is you main goal? Do you just want a specific DNS for security / privacy or do you want to resolve some adresses that only you server knows or maybe are on the internal network?