I'm running the Cisco client on my Fedora Core 2 gateway to connect to a
peer site's Windows servers. However, I want to continue to use the BIND
DNS server on the gateway to connect to the Internet. When the VPN is up,
my DNS packets seem to get intercepted and replies come from the peer's DNS
server instead of the outside authoritative servers that were queried. What
can I do to get the client to leave my DNS alone? Is this a setting in my
peer's VPN server that needs adjusting? What would I need to ask for?

(I don't need the DNS to resolve the peer's servers. I can enter those
items in my own domain as I don't expect them to change frequently. I've
already locked resolv.conf against change with chattr to prevent hijacking
of my resolver when the client starts.)

On Tue, 20 Jul 2004, Kenneth Porter wrote:

> I'm running the Cisco client on my Fedora Core 2 gateway to connect to a
> peer site's Windows servers. However, I want to continue to use the BIND
> DNS server on the gateway to connect to the Internet. When the VPN is up,
> my DNS packets seem to get intercepted and replies come from the peer's DNS
> server instead of the outside authoritative servers that were queried. What
> can I do to get the client to leave my DNS alone? Is this a setting in my
> peer's VPN server that needs adjusting? What would I need to ask for?

it depends how your VPN Server is configured. If it is a PIX and you use
vpngroups to configure access then there is a option split-dns which can
do what you want.

Oli