Hacker News new | ask | show | jobs
by mmsc 610 days ago
It would be intercepted at the ISP level and the false results would still be received. There are lots of DNS intercepting tools ISPs buy these days.

DNS isn't authenticated.
1 comments
WmWsjA6B29B4nfk 610 days ago
I understood they have been simply accessing their ISPs DNS through the tunnel.
link
mmsc 610 days ago
No:

>Okay, at that point I was clueless. I tried changing the DNS settings of OpenVPN (i.e. dhcp-option DNS 1.1.1.1) but it didn't work. After a couple of iterations with ChatGPT, it finally led me to the correct path.

link
WmWsjA6B29B4nfk 610 days ago
This line was no-op until the author started using the `up` script as they describe later.

> The OpenVPN server can push DHCP options such as DNS and WINS server addresses to clients (some caveats to be aware of). Windows clients can accept pushed DHCP options natively, while non-Windows clients can accept them by using a client-side up script which parses the foreign_option_n environmental variable list.

It's still not clear to me what the experience would have been if the author had only 1.1.1.1 set at the system level, not touching any OpenVPN options.

link