我有一个在Centos 7 AWS ec2实例上运行的OpenVPN 2.4.6 x86_64-redhat-linux-gnu。
我也有2个内部公司DNS名称服务器，可以从中查询内部主机名（工作正常）
每当员工通过OpenVPN连接到我们的子网时，我都希望他们的笔记本电脑使用我们内部的DNS名称服务器进行名称解析，但是无论我尝试了多少配置组合，我都无法让连接客户端使用内部DNS进行命名查找（客户端Ubuntu，正在使用其本地/etc/resolv.conf查找内部主机名，而不是我们自己的DNS）
这是我的openvpn server.conf，
port 1194
proto udp
dev tun
user nobody
group nobody
persist-key
persist-tun
keepalive 10 120
topology subnet
management 127.0.0.1 5555
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
**push "dhcp-option DOMAIN company.ec2us"
push "dhcp-option DNS xxx.xxx.91.251"
push "dhcp-option DNS xxx.xxx.126.93"**
push "route 192.xxxx.xxx.0 255.255.255.0" # ABC1 subnet
push "route 192.xxxxx.0 255.255.255.0" # NYC office LAN
push "route 208.xxxx.0 255.255.255.0" # XYZ internal
crl-verify crl.pem
ca ca.crt
cert server_v8OxxxxxxxFCOK.crt
key server_v8ORxxxxxx7FCOK.key
tls-auth tls-auth.key 0
dh dh.pem
auth SHA256
cipher AES-128-CBC
tls-server
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
status /var/log/openvpn/status.log
verb 3
客户端OVPN文件如下所示，
client
proto udp
remote xxx.xxx.155.45 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
verify-x509-name server_v8ORQmlxxxxFCOK name
auth SHA256
auth-nocache
cipher AES-128-CBC
tls-client
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
dhcp-option DOMAIN company.ec2us
dhcp-option DNS xxx.xxx.91.251
dhcp-option DNS xxx.xxx.126.93
verb 3
<ca>
-----BEGIN CERTIFICATE-----
xxxxxx -----结束证书----- 证书： xxxxxx
我可以看到服务器正在释放DNS选项，
Wed Feb 27 17:06:48 2019 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DOMAIN company.ec2us,dhcp-option DNS xxx.xxx.91.251,dhcp-option DNS xxx.xxx.126.93,route xxx.xxx.40.0 255.255.255.0,route xxx.xxx.30.0 255.255.255.0,route xxx.xxx.251.0 255.255.255.0,route-gateway 10.8.0.1,topology sub
但是一旦连接到客户端，如果我执行nslookup $ name-of-internal -host，它使用我的默认8.8.8.8多数民众赞成在我的/etc/resolv.conf
是否可以强制客户端使用内部DNS主机？