Re: DNS resolves wrong when vpn connects



A fellow named Gleo posted an MS KB article in another thread that seems to
have resolved this issue for me:

http://support.microsoft.com/default.aspx?scid=kb;en-us;311218

It involves a registry edit for the VPN client (remote user), but it seems
to work, correctly resolving the public DNS name to the internal IP when
VPNed and to the public IP when not VPNed.

I've also found that wherever the VPN client is, if they receive a public
DNS server as their local DNS (i.e. if the local DHCP is passing out a public
DNS server address) rather than the local gateway as the DNS address (ie.,
the DHCP passing out the internal IP address of the local router/WAP/cable
modem/whatever), then when one VPNs in things seem to resolve correctly. So
you can configure your home network to work, but I'm not sure if airports and
Starbucks and other hotspots pass out a public DNS server to their DHCP
clients or not.

"Ace Fekay [MVP]" wrote:

> In news:57158B36-6913-4580-B3AC-0FD730B8DD5E@xxxxxxxxxxxxx,
> hex2bin <hex2bin@xxxxxxxxxxxxxxxxxxxxxxxxx> made this post, which I then
> commented about below:
> > when this issue happens. The client is often using a remote wireless
> > high speed connection like at a hotel. If the hotel is assigning say
> > 192.168.0.x class ip then clients have the problem. If the hotel
> > gives like a 10.16.x.x then no problem. Only when the remote client
> > gets a ip address that is on the same class as our internal network
> > 192.168.1.x 192.168.0.x if the remote client gets a ip address of
> > 192.168.8.x which we dont internally use the 8.x class all works
> > fine. but if they get an ip address that equals the same class as our
> > internal network the problem arises.
> > Thanks much
>
> This is a common issue. You will have to change your company's internal IP
> range to something other than 192.168.0.0/24 or 192.168.1.0/24.
>
> Many routers that users purchase for home use come with either one of them
> configured as default and companies with these ranges come across this
> problem often. If your internal infrastructure is using one of those ranges,
> expect problems.
>
> Sorry to be the bearer of bad news.
>
> --
> Regards,
> Ace
>
> If this post is viewed at a non-Microsoft community website, and you were to
> respond to it through that community's website, I may not see your reply.
> Therefore, please direct all replies ONLY to the Microsoft public newsgroup
> this thread originated in so all can benefit.
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft Windows MVP - Windows Server - Directory Services
> Infinite Diversities in Infinite Combinations.
> =================================
>
>
>
.



Relevant Pages

  • Basci question on iterative vs recursive queries
    ... resolving the name and cannot refer the DNS client to another DNS server". ... The DNS resolver on the DNS client sends a recursive query to its ...
    (microsoft.public.windows.server.dns)
  • Re: DNS server resolved 64.106.154.50 to all domain name
    ... We are trying to resolve from server as well as client from both response is same it is resolving 64.106.154.50. ... If i change DNS server setting to Upstream ISP Dns Server and try to access websites it is resolving properly. ...
    (microsoft.public.windows.server.dns)
  • Re: GPO problems
    ... It was the ISA 2004 firewall client. ... DNS settings and network properties on the server and client computers. ... > Service of SBS is configured to be the DNS server on the problematic ...
    (microsoft.public.windows.server.sbs)
  • Re: Any known issues withsp2 and non-sp xp ics?
    ... Default Gateway: none ... DNS Server: 192.168.0.1 or your ISP's DNS server ... as my isp is configured to use DHCP (Dynamic Host ... After doing the above changes to the client, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Windows 2003 Question - doing some part time work for a friend
    ... Go to the properties of TCP/IP for the network adapter connecting the client ... using your ISP's DNS server as alternate will cause another set of problems. ... Register those sensitive private SRV records on a server under your ...
    (microsoft.public.windows.server.general)