Development discussion of WireGuard
 help / color / mirror / Atom feed
* MacOS: DNS setting has no effect if the tunnel is not the default gw
@ 2020-10-31 14:38 Alexander A. Klimov
  2020-12-01 19:39 ` Chris Johnson
  0 siblings, 1 reply; 3+ messages in thread
From: Alexander A. Klimov @ 2020-10-31 14:38 UTC (permalink / raw)
  To: wireguard

Hello there!

I have two almost identical tunnels. The only difference:

-AllowedIPs=0.0.0.0/0, ::/0
+AllowedIPs=192.168.234.153/32, 64:ff9b::192.168.234.153/128, 
192.168.234.186/32, 64:ff9b::192.168.234.186/128

The first one's setting DNS=192.168.234.153 has an effect, the second 
one's not.

Has anyone seen this problem, too?
Does anyone even know how to workaround it?

Best,
AK

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: MacOS: DNS setting has no effect if the tunnel is not the default gw
  2020-10-31 14:38 MacOS: DNS setting has no effect if the tunnel is not the default gw Alexander A. Klimov
@ 2020-12-01 19:39 ` Chris Johnson
  2020-12-02 14:17   ` David Crawshaw
  0 siblings, 1 reply; 3+ messages in thread
From: Chris Johnson @ 2020-12-01 19:39 UTC (permalink / raw)
  To: wireguard; +Cc: Alexander A. Klimov

I am now running into this problem. I'm still running Mojave (10.14.6), 
if that makes any difference.

If AllowedIPs is everything, then /etc/resolv.conf is modified with the 
remote DNS server.
If AllowedIPs is a remote private network(s), then /etc/resolv.conf 
remains untouched, and DNS is local ISP.

Did you ever find a solution or workaround? I do not want all of my 
traffic to go through this tunnel, but I *do* want DNS to resolve for 
those private subnet hosts.

Cheers,

Chris

On 2020/10/31 07:38, Alexander A. Klimov wrote:
> Hello there!
> 
> I have two almost identical tunnels. The only difference:
> 
> -AllowedIPs=0.0.0.0/0, ::/0
> +AllowedIPs=192.168.234.153/32, 64:ff9b::192.168.234.153/128, 
> 192.168.234.186/32, 64:ff9b::192.168.234.186/128
> 
> The first one's setting DNS=192.168.234.153 has an effect, the second 
> one's not.
> 
> Has anyone seen this problem, too?
> Does anyone even know how to workaround it?
> 
> Best,
> AK

^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: MacOS: DNS setting has no effect if the tunnel is not the default gw
  2020-12-01 19:39 ` Chris Johnson
@ 2020-12-02 14:17   ` David Crawshaw
  0 siblings, 0 replies; 3+ messages in thread
From: David Crawshaw @ 2020-12-02 14:17 UTC (permalink / raw)
  To: Chris Johnson; +Cc: wireguard, Alexander A. Klimov

On Wed, Dec 2, 2020 at 8:48 AM Chris Johnson <johnsonc@astro.ucla.edu> wrote:
>
> I am now running into this problem. I'm still running Mojave (10.14.6),
> if that makes any difference.
>
> If AllowedIPs is everything, then /etc/resolv.conf is modified with the
> remote DNS server.
> If AllowedIPs is a remote private network(s), then /etc/resolv.conf
> remains untouched, and DNS is local ISP.
>
> Did you ever find a solution or workaround? I do not want all of my
> traffic to go through this tunnel, but I *do* want DNS to resolve for
> those private subnet hosts.

I believe this behavior has changed in macOS 11 (Big Sur), and
resolv.conf is updated even if you don't set a default route through
the tunnel. I could not find any Apple API that can change this on
earlier versions of macOS.


> Cheers,
>
> Chris
>
> On 2020/10/31 07:38, Alexander A. Klimov wrote:
> > Hello there!
> >
> > I have two almost identical tunnels. The only difference:
> >
> > -AllowedIPs=0.0.0.0/0, ::/0
> > +AllowedIPs=192.168.234.153/32, 64:ff9b::192.168.234.153/128,
> > 192.168.234.186/32, 64:ff9b::192.168.234.186/128
> >
> > The first one's setting DNS=192.168.234.153 has an effect, the second
> > one's not.
> >
> > Has anyone seen this problem, too?
> > Does anyone even know how to workaround it?
> >
> > Best,
> > AK

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2020-12-02 18:16 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-10-31 14:38 MacOS: DNS setting has no effect if the tunnel is not the default gw Alexander A. Klimov
2020-12-01 19:39 ` Chris Johnson
2020-12-02 14:17   ` David Crawshaw

Development discussion of WireGuard

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://inbox.vuxu.org/wireguard/0 wireguard/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 wireguard wireguard/ http://inbox.vuxu.org/wireguard \
		wireguard@lists.zx2c4.com
	public-inbox-index wireguard

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://inbox.vuxu.org/vuxu.archive.wireguard


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git