Arch Linux

angeloocana

Member

Registered: 2020-03-26

Posts: 1

Error with VPN, DNSSEC and Remmina

Hi,

I tried really hard to not open a question but I'm struggling with this for days.
I'm an Arch Linux for a few years and this is my first question on the forum.

I was able to connect to my work VPN and remote access my windows desktop there with no problems until I recently reinstalled Arch Linux, I think something changed on the latest versions.

I'm using xfce, networkmanager, openconnect and remmina.

when I'm connected to the VPN I can not access anymore any domain or subdomain of my work. If I disable DNSSEC on dnsmaq I'm able to access the domains.

Output of

drill -DT kinaxis.com

[T] Existence denied: kinaxis.com. DS
;; No ds record for delegation
;; Domain: kinaxis.com.
;; No DNSKEY record found for kinaxis.com.
[U] kinaxis.com.	3600	IN	A	23.185.0.3
;;[S] self sig OK; [B] bogus; [T] trusted

When I try to connect to my machine on remmina without DNSSEC disabled I get the error:

Could not start SSH session. Failed to resolve hostname kan3790.kinaxis.com (Name or service not known)

When I try to connect to my machine on remmina with DNSSEC disabled I get the error:

Could not start SSH session. Timeout connecting to kan3790.kinaxis.com

I know this is not a problem with my machine at work because I can remote access using my android phone and I was able to access using arch linux before reinstalling it recently.

Thank you for your support.

RoundCube

Member

Registered: 2016-05-14

Posts: 42

Re: Error with VPN, DNSSEC and Remmina

I can't say too much about it.

- you connect with the VPN to your work network
- it works, but you cannot resolve your works domain names. Probably they have an internal IPs, which you are supposed to get from THEIR DNS server.
  Maybe your pc simply doesn't use the DNS server from your work network…
- Is dnsmasq running on your own computer? Maybe it interferes here.
- Is all the other stuff working in the VPN, like do websites see your work IP?