Pushing DNS servers to clients

---

This page describes how to use pushed DNS servers in the client.

Contents:

1. Using pushed DNS servers with a Linux client
   
2. Using pushed DNS servers with a Windows client
   
3. Additional notes
   

---

Using pushed DNS servers with a Linux client

Linux must use an external script to update the DNS servers in /etc/resolve.conf

Most Distro OpenVPN packages include /etc/openvpn/update-resolv-conf script.
Source: ​https://github.com/alfredopalhares/openvpn-update-resolv-conf

Call the script by adding this to your client config file:

script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf

---

Using pushed DNS servers with a Windows client

• OpenVPN 2.4

Windows uses the OpenVPN built-in DHCP server to update the TAP adapter's DNS servers and no additional steps are required. This does require that the client is run using the ​OpenVPN-GUI and that the OpenVPN InteractiveService for Windows is started.

To prevent DNS leaks at the client use --block-outside-dns.

• OpenVPN 2.3

Windows uses the OpenVPN built-in DHCP server to update the TAP adapter's DNS servers and no additional steps are required. This does require that the client is run as an administrator user.

This version does not support --block-outside-dns

---

Additional notes

TODO:

• systemd-resolvd

---

Pushing DNS servers to clients -- return to top

---