Kerio Tech Firewall6 Network Router User Manual


 
Chapter 21 Kerio VPN
308
DNS Settings
DNS must be set properly at both sends of the tunnel so that it is possible to connect
to hosts in the remote network using their DNS names. One method is to add DNS
records of the hosts (to the hosts file) at each endpoint. However, this method is quite
complicated and inflexible.
If the DNS forwarder in WinRoute is used as the DNS server at both ends of the tunnel,
DNS queries (for DNS rules, refer to chapter 5.3) can be forwarded to hostnames in the
corresponding domain of the DNS forwarder at the other end of the tunnel. DNS domain
(or subdomain) must be used at both sides of the tunnel.
Note: To provide correct forwarding of DNS queries sent from the WinRoute host (at
any side of the VPN tunnel), it is necessary that these queries are processed by DNS
forwarder. To secure this, set local IP address as for the DNS server and specify former
DNS servers in the WinRoute’s DNS forwarder.
Detailed guidance for the DNS configuration is provided in chapter 21.5.
Routing settings
On the Advanced tab, you can set which method will be used to add routes provided
by the remote endpoint of the tunnel to the local routing table as well as define custom
routes to remote networks.
The Kerio VPN routing issue is described in detail in chapter 21.4.