desktop-packages team mailing list archive

Thread
Date
[Bug 1440607] Re: network-manager suddenly using VPN nameserver for single domain only, not updating resolv.conf

To: desktop-packages@xxxxxxxxxxxxxxxxxxx
From: Trent Lloyd <lathiat@xxxxxx>
Date: Sun, 05 Apr 2015 22:27:57 -0000
Reply-to: Bug 1440607 <1440607@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
** Description changed:

- When connecting to my work VPN (network-manager-openconnect), typically
- the name-servers for the VPN are used entirely for the whole system and
- all domain names.
+ When connecting to a VPN using network manager (openconnect), DNS
+ resolution stops working for me.
  
- After updating vivid today (first time in about a week), suddenly I find
- that it is only using it for the VPN domain.  This setting is not set on
- the VPN at all,  the domain is coming from the VPN connection but that
- has always happened.  I also find that /etc/resolv.conf is set to the
- network nameservers and not localhost, despite the fact I need the DNS
- to work for all domains and not just the VPN domain.
+ This is a regression since 14.10 (and vivid in the last few weeks) where
+ it worked as before.  Verified working on a fresh install of 14.10,
+ upgraded and then verified broken on 15.04.
  
- This has been working fine in both 14.04 and 14.10 until updating today,
- and makes the VPN totally un-usable since DNS is not working.  There
- does not seem to be any configurable option for this.
+ Under 14.10 (utopic), the VPN name-servers were used for the entire
+ system.
+ 
+ Under 15.04 (vivid), as of this week, it uses the VPN name-servers only
+ for the "VPN domain" (in this case, au.wordomain.com) and attempts to
+ use the LAN name-server for all other names.
+ 
+ This breaks for two reasons
+ 
+  (1) The VPN domain (which is automatically retrieved from the VPN
+ server, and is not manually set, and cannot be overridden) is not the
+ only domain I required overridden to get internal DNS.
+ 
+  (2) The local nameserver access is blocked/firewalled by the
+ openconnect policy, and thus even global resolution stops workling.
  
  
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> VPN connection 'Work VPN' (IP Config Get) reply received.
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> VPN connection 'Work VPN' (IP4 Config Get) reply received.
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> VPN connection 'Work VPN' (IP6 Config Get) reply received.
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> VPN Gateway: 101.10.10.101
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> Tunnel Device: vpn0
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> IPv4 configuration:
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Internal Address: 10.131.11.21
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Internal Prefix: 21
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Internal Point-to-Point Address: 10.131.11.21
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Maximum Segment Size (MSS): 0
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Forbid Default Route: no
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Internal DNS: 10.97.11.12
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Internal DNS: 10.97.12.12
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   DNS Domain: 'au.workdomain.com'
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> IPv6 configuration:
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Internal Address: 2406:cdef:abc:dead:beef::13
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Internal Prefix: 64
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Internal Point-to-Point Address: 2406:cdef:abc:dead:beef::13
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Maximum Segment Size (MSS): 0
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   Forbid Default Route: no
- Apr  6 04:50:36 localhost NetworkManager[836]: <info>   DNS Domain: 'au.workdomain.com'
- Apr  6 04:50:36 localhost openconnect[2710]: Connected vpn0 as 10.131.11.21 + 2406:cdef:abc:dead:beef::13/64, using SSL
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> (vpn0): link connected
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> VPN connection 'Work VPN' (IP Config Get) complete.
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> VPN plugin state changed: started (4)
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> NetworkManager state is now CONNECTED_LOCAL
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> NetworkManager state is now CONNECTED_GLOBAL
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> Policy set 'Work VPN' (vpn0) as default for IPv6 routing and DNS.
- Apr  6 04:50:36 localhost NetworkManager[836]: <info> Writing DNS information to /sbin/resolvconf
- Apr  6 04:50:36 localhost dnsmasq[1485]: setting upstream servers from DBus
- Apr  6 04:50:36 localhost dnsmasq[1485]: using nameserver 220.233.0.4#53
- Apr  6 04:50:36 localhost dnsmasq[1485]: using nameserver 220.233.0.3#53
- Apr  6 04:50:36 localhost dnsmasq[1485]: using nameserver 10.187.64.12#53 for domain au.workdomain.com
- Apr  6 04:50:36 localhost dnsmasq[1485]: using nameserver 10.187.64.12#53 for domain 10.in-addr.arpa
- Apr  6 04:50:36 localhost dnsmasq[1485]: using nameserver 10.101.11.12#53 for domain au.workdomain.com
- Apr  6 04:50:36 localhost dnsmasq[1485]: using nameserver 10.101.11.12#53 for domain 10.in-addr.arpa
+ 
+ NetworkManager[836]: <info> VPN connection 'Work VPN' (IP Config Get) reply received.
+ NetworkManager[836]: <info> VPN connection 'Work VPN' (IP4 Config Get) reply received.
+ NetworkManager[836]: <info> VPN connection 'Work VPN' (IP6 Config Get) reply received.
+ NetworkManager[836]: <info> VPN Gateway: 101.10.10.101
+ NetworkManager[836]: <info> Tunnel Device: vpn0
+ NetworkManager[836]: <info> IPv4 configuration:
+ NetworkManager[836]: <info>   Internal Address: 10.131.11.21
+ NetworkManager[836]: <info>   Internal Prefix: 21
+ NetworkManager[836]: <info>   Internal Point-to-Point Address: 10.131.11.21
+ NetworkManager[836]: <info>   Maximum Segment Size (MSS): 0
+ NetworkManager[836]: <info>   Forbid Default Route: no
+ NetworkManager[836]: <info>   Internal DNS: 10.97.11.12
+ NetworkManager[836]: <info>   Internal DNS: 10.97.12.12
+ NetworkManager[836]: <info>   DNS Domain: 'au.workdomain.com'
+ NetworkManager[836]: <info> IPv6 configuration:
+ NetworkManager[836]: <info>   Internal Address: 2406:cdef:abc:dead:beef::13
+ NetworkManager[836]: <info>   Internal Prefix: 64
+ NetworkManager[836]: <info>   Internal Point-to-Point Address: 2406:cdef:abc:dead:beef::13
+ NetworkManager[836]: <info>   Maximum Segment Size (MSS): 0
+ NetworkManager[836]: <info>   Forbid Default Route: no
+ NetworkManager[836]: <info>   DNS Domain: 'au.workdomain.com'
+ openconnect[2710]: Connected vpn0 as 10.131.11.21 + 2406:cdef:abc:dead:beef::13/64, using SSL
+ NetworkManager[836]: <info> (vpn0): link connected
+ NetworkManager[836]: <info> VPN connection 'Work VPN' (IP Config Get) complete.
+ NetworkManager[836]: <info> VPN plugin state changed: started (4)
+ NetworkManager[836]: <info> NetworkManager state is now CONNECTED_LOCAL
+ NetworkManager[836]: <info> NetworkManager state is now CONNECTED_GLOBAL
+ NetworkManager[836]: <info> Policy set 'Work VPN' (vpn0) as default for IPv6 routing and DNS.
+ NetworkManager[836]: <info> Writing DNS information to /sbin/resolvconf
+ dnsmasq[1485]: setting upstream servers from DBus
+ dnsmasq[1485]: using nameserver 220.233.0.4#53
+ dnsmasq[1485]: using nameserver 220.233.0.3#53
+ dnsmasq[1485]: using nameserver 10.101.11.12#53 for domain au.workdomain.com
+ dnsmasq[1485]: using nameserver 10.101.11.12#53 for domain 10.in-addr.arpa
+ dnsmasq[1485]: using nameserver 10.101.12.12#53 for domain au.workdomain.com
+ dnsmasq[1485]: using nameserver 10.101.12.12#53 for domain 10.in-addr.arpa

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1440607

Title:
  network-manager suddenly using VPN nameserver for single domain only,
  not updating resolv.conf

Status in network-manager package in Ubuntu:
  New

Bug description:
  When connecting to a VPN using network manager (openconnect), DNS
  resolution stops working for me.

  This is a regression since 14.10 (and vivid in the last few weeks)
  where it worked as before.  Verified working on a fresh install of
  14.10, upgraded and then verified broken on 15.04.

  Under 14.10 (utopic), the VPN name-servers were used for the entire
  system.

  Under 15.04 (vivid), as of this week, it uses the VPN name-servers
  only for the "VPN domain" (in this case, au.wordomain.com) and
  attempts to use the LAN name-server for all other names.

  This breaks for two reasons

   (1) The VPN domain (which is automatically retrieved from the VPN
  server, and is not manually set, and cannot be overridden) is not the
  only domain I required overridden to get internal DNS.

   (2) The local nameserver access is blocked/firewalled by the
  openconnect policy, and thus even global resolution stops workling.


  
  NetworkManager[836]: <info> VPN connection 'Work VPN' (IP Config Get) reply received.
  NetworkManager[836]: <info> VPN connection 'Work VPN' (IP4 Config Get) reply received.
  NetworkManager[836]: <info> VPN connection 'Work VPN' (IP6 Config Get) reply received.
  NetworkManager[836]: <info> VPN Gateway: 101.10.10.101
  NetworkManager[836]: <info> Tunnel Device: vpn0
  NetworkManager[836]: <info> IPv4 configuration:
  NetworkManager[836]: <info>   Internal Address: 10.131.11.21
  NetworkManager[836]: <info>   Internal Prefix: 21
  NetworkManager[836]: <info>   Internal Point-to-Point Address: 10.131.11.21
  NetworkManager[836]: <info>   Maximum Segment Size (MSS): 0
  NetworkManager[836]: <info>   Forbid Default Route: no
  NetworkManager[836]: <info>   Internal DNS: 10.97.11.12
  NetworkManager[836]: <info>   Internal DNS: 10.97.12.12
  NetworkManager[836]: <info>   DNS Domain: 'au.workdomain.com'
  NetworkManager[836]: <info> IPv6 configuration:
  NetworkManager[836]: <info>   Internal Address: 2406:cdef:abc:dead:beef::13
  NetworkManager[836]: <info>   Internal Prefix: 64
  NetworkManager[836]: <info>   Internal Point-to-Point Address: 2406:cdef:abc:dead:beef::13
  NetworkManager[836]: <info>   Maximum Segment Size (MSS): 0
  NetworkManager[836]: <info>   Forbid Default Route: no
  NetworkManager[836]: <info>   DNS Domain: 'au.workdomain.com'
  openconnect[2710]: Connected vpn0 as 10.131.11.21 + 2406:cdef:abc:dead:beef::13/64, using SSL
  NetworkManager[836]: <info> (vpn0): link connected
  NetworkManager[836]: <info> VPN connection 'Work VPN' (IP Config Get) complete.
  NetworkManager[836]: <info> VPN plugin state changed: started (4)
  NetworkManager[836]: <info> NetworkManager state is now CONNECTED_LOCAL
  NetworkManager[836]: <info> NetworkManager state is now CONNECTED_GLOBAL
  NetworkManager[836]: <info> Policy set 'Work VPN' (vpn0) as default for IPv6 routing and DNS.
  NetworkManager[836]: <info> Writing DNS information to /sbin/resolvconf
  dnsmasq[1485]: setting upstream servers from DBus
  dnsmasq[1485]: using nameserver 220.233.0.4#53
  dnsmasq[1485]: using nameserver 220.233.0.3#53
  dnsmasq[1485]: using nameserver 10.101.11.12#53 for domain au.workdomain.com
  dnsmasq[1485]: using nameserver 10.101.11.12#53 for domain 10.in-addr.arpa
  dnsmasq[1485]: using nameserver 10.101.12.12#53 for domain au.workdomain.com
  dnsmasq[1485]: using nameserver 10.101.12.12#53 for domain 10.in-addr.arpa

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/1440607/+subscriptions
References

[Bug 1440607] [NEW] network-manager suddenly using VPN nameserver for single domain only, not updating resolv.conf
From: Trent Lloyd, 2015-04-05