0
0
mirror of https://github.com/OpenVPN/openvpn3.git synced 2024-09-20 12:12:15 +02:00
openvpn3/test/ovpncli
Lev Stipakov 613aa6bf7a
Win: support for local DNS resolvers
Local DNS resolvers, such as Umbrella Roaming Client,
change DNS settings on adapters to 127.0.0.1.

This may not work with openvpn3 because:

 - NRPT rule might be created for "." zone,
which redirects all DNS requests to the server
specified in rule. This takes precendence over adapters'
DNS settings.

 - DNS requests might be blocked on all adapters
except TAP (tap-windows6/wintun/ovpn-dco-win) to prevent
DNS leaks.

To enable compatibility with local DNS resolvers, add
"allowLocalDnsResolvers" core config option, which,
when enabled, makes core to

 - avoid creating NRPT rule for "." zone

 - permit DNS requests to 127.0.0.1 / ::1

Signed-off-by: Lev Stipakov <lev@openvpn.net>
2021-08-10 15:00:58 +03:00
..
.gitignore Minor gitignore mod. 2015-06-11 12:32:42 -06:00
cli.cpp Win: support for local DNS resolvers 2021-08-10 15:00:58 +03:00
CMakeLists.txt ovpn-dco: basic communication with kernel module 2020-08-26 14:59:24 +00:00
go MbedTLS: added MBEDTLS_DISABLE_NAME_CONSTRAINTS preprocessor flag 2019-07-17 10:53:46 -06:00
README.txt mbedTLS: Port from polarssl-1.3 to mbedtls-2.3 (symbol renames) 2017-03-18 12:24:54 -06:00

Build on Mac:

  With MbedTLS:
    GCC_EXTRA="-ferror-limit=4" STRIP=1 MTLS=1 SNAP=1 LZ4=1 build cli

  With MbedTLS and Minicrypto:
    GCC_EXTRA="-ferror-limit=4" STRIP=1 MTLS=1 MINI=1 SNAP=1 LZ4=1 build cli

  With MbedTLS, Minicrypto, and C++11 for optimized move constructors:
    GCC_EXTRA="-ferror-limit=4 -std=c++11" STRIP=1 MTLS=1 MINI=1 SNAP=1 LZ4=1 build cli

  With OpenSSL:
    GCC_EXTRA="-ferror-limit=4" STRIP=1 OSSL=1 OPENSSL_SYS=1 SNAP=1 LZ4=1 build cli

  With MbedTLS/AppleCrypto hybrid:
    GCC_EXTRA="-ferror-limit=4" STRIP=1 HYBRID=1 SNAP=1 LZ4=1 build cli

Build on Linux:

  With MbedTLS:
    STRIP=1 SNAP=1 LZ4=1 MTLS=1 NOSSL=1 build cli

  With OpenSSL:
    STRIP=1 SNAP=1 LZ4=1 build cli