Direct LAN to WAN with DNS but bypass VPN

[raybies]

Hi.

User: n00b
Setup: LAN + VPN + Unbound DNS w/ blocklists, all clients routed through this fine.

Issue: I need to route specific clients directly to WAN. I have done this w/ a FW Rule, however DNS fails, so the client can only access cached DNS records, but nothing new.

There are no port 53 blocks.
The WAN interface is a VDSL modem with DHCP + DNS configured.

Any insights would be appreciated.

Thanks.

[Sheldon]

1) Did you take a look into the log of Unbound DNS? You could increase the log level, or activate the logging of the requested to domains. That could be helpful to see, if and how the client's DNS requests are processed.

2) Is it necessary for the specific clients to use Unbound DNS? Otherwise they could just use a different DNS server.