From: Simon Rozman <simon@rozman.si>
To: Duncan X Simpson <virtualdxs@gmail.com>,
"wireguard@lists.zx2c4.com" <wireguard@lists.zx2c4.com>
Subject: Re: Search Domain/DNS Suffix
Date: Mon, 6 Apr 2020 06:12:54 +0000 [thread overview]
Message-ID: <474EFC8E-BD8D-40B2-A0A9-3A9346A2A8AB@rozman.si> (raw)
In-Reply-To: <CAB8Qo2SaN0rkBHKqb-PSH0Sh5WbC5jbkMA8mpdq+-L6art2s+w@mail.gmail.com>
[-- Attachment #1: Type: text/plain, Size: 2171 bytes --]
Hi,
I have a similar requirement - to set connection specific DNS suffix. I solved it by extending the wireguard-windows: https://git.zx2c4.com/wireguard-windows/commit/?h=sr/mydist&id=3672fbc0bcb1821c98566fac32ba0638d4d4c611
However, I do not plan to ask zx2c4 to merge it upstream, as he has better idea to provide PostUpExec feature which would allow universal mean for any extra system configuration required. Stay tuned.
Meanwhile, just a suggestion (haven't tested it thou)... Add a task to Task Scheduler to fire every couple of minutes doing:
reg.exe add HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces\<GUID of your WG adapter*> /v Domain /t REG_SZ /d contoso.local
This should setup the connection specific DNS suffix soon after the tunnel is established and keep it set. But its nuts and doesn't scale. The PostUpExec will be the right approach.
Regards, Simon
* On Windows 10 the WG adapter GUID is pseudo-random based on your WG config. As long as your config is static, it won't change. Once WG connected, look it up in HKLM\SYSTEM\CurrentControlSet\services\Tcpip\Parameters\Interfaces.
-----Original Message-----
From: WireGuard <wireguard-bounces@lists.zx2c4.com> on behalf of Duncan X Simpson <virtualdxs@gmail.com>
Date: Sunday, 5 April 2020 at 23:51
To: "wireguard@lists.zx2c4.com" <wireguard@lists.zx2c4.com>
Subject: Search Domain/DNS Suffix
Hello all,
I'm trying to deploy a wireguard VPN for a small company and it's
working great, with one issue: On Windows/Mac I can't find a way to
set search domains on the connection. Windows, I can probably just set
a system-wide search domain via the registry (I plan to test that
tonight), but on Mac I can't figure out anything. Even the normal
command line method, networksetup -setsearchdomains [interface],
doesn't take effect - I can retrieve whatever I set with networksetup
-getsearchdomains [interface], but it's not used by the system.
Does anybody know a solution or workaround?
Duncan X Simpson, K7DXS
Removal of this tagline is a violation of Federal Law.
[-- Attachment #2: smime.p7s --]
[-- Type: application/pkcs7-signature, Size: 2965 bytes --]
next prev parent reply other threads:[~2020-04-06 6:13 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-03-25 23:04 Duncan X Simpson
2020-04-06 6:12 ` Simon Rozman [this message]
2020-04-21 9:09 Ricardo Fraile
2020-05-11 6:25 ` Jason A. Donenfeld
2020-05-11 8:56 ` Ricardo Fraile
2020-05-11 9:55 ` Shawn Hoffman
2020-05-11 21:23 ` Jason A. Donenfeld
2020-06-16 19:46 ` Anatoli
2020-06-16 20:11 ` Jason A. Donenfeld
2020-05-11 21:16 ` Phillip McMahon
2020-05-11 21:23 ` Jason A. Donenfeld
2020-05-11 21:30 ` Phillip McMahon
2020-05-11 21:32 ` Jason A. Donenfeld
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=474EFC8E-BD8D-40B2-A0A9-3A9346A2A8AB@rozman.si \
--to=simon@rozman.si \
--cc=virtualdxs@gmail.com \
--cc=wireguard@lists.zx2c4.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).