DNS over OpenVPN

[masex]

hi all,
I m asking your help about my problem because I cannot find the solution myself.
I have my DNS server on site1 and over OpenVPN I want to use it to site2 on any pcs. DHCP on both site I use MS server.
When I set the site1 dns settings on server or on pcs on site2 I can not access internet or joing the pcs into my domain on site1. I have check traffic with sniffer and I have find out that "srv" DNS records cannot pass through.
I have try everything ,firewall, packet filter, Bypass everything, replace Untangle, set Untanglw DNS to forward the DNS traffic.......
Same configuration I have install at site3 and it works ok.
Can anyone find similar DNS problems with OpenVPN?

[WebFooL]

Read this post http://forums.untangle.com/openvpn/7...site2site.html
And see if that helps you with the Joining of the domain.

Your FW Module is that Default block or pass?

[masex]

nop, the post didnt help at all, I check the port 3 times but the guy there didnt know what he was doing!!! he use network wizard in XP to join pc into the domain, I dont think so.

FW module was on pass mode but I had to remove FW on both sites and try again without any luck.
Something blocks srv records traffic , I cannot find what that is.
is been a week now working on that task but still nothing

[WebFooL]

Do you export The DNS Servers over OpenVPN?

Can site 2 verifiy with NSlookup that they dont have SRV record?

Nslookup
Nslookup is a command-line tool that displays information you can use to diagnose Domain Name System (DNS) infrastructure.
To use Nslookup to verify the SRV records, follow these steps:

1. On your DNS, click Start, and then click Run.
2. In the Open box, type cmd.
3. Type nslookup, and then press ENTER.
4. Type set type=all, and then press ENTER.
5. Type _ldap._tcp.dc._msdcs.Domain_Name, where Domain_Name is the name of your domain, and then press ENTER.

But you should still be able to modify the LMhost file on the host.

http://forums.untangle.com/openvpn/7423-active-directory-login-site2site-2.html#post47564

Your DNS servers what gateway do they have?
Maby they can't get the answer back over the VPN Tunnel.

[masex]

thanks man , finally was the gateway
thanks a lot