DNS not working when I setup NORDVPN openvpn client -doesnt resolve -any ideas?

[lvsund]

Hi,

I really like opnsense and plan to move over from pf sense if I can get everything working. Under pfsense I have standard firewall of not letting anything and having pfsense configured to Nordvpn. Since I have everything working through that, i am trying to setup opnsense  on different machine (behind pfsense firewall initially) .the opnsense install went perfectly as did adding the zerotier plugin.

In order to replace pfsense with opnsense I have to get the nordvpn openvpn client working. I went through all the instructions and I appear to have the nordvpn interface working in terms of traffic as seen on the traffic graph, and opnsense says the status is up and I have ip address for it etc.

What does not work is the DNS resolution. Following NORVPN instructions- I have undound DNS -general - set to enable outbound, network interfaces all, register DHCP leases, Enable forarding mode , and outgoing network interfaces =NORDVPN -everything else blank or unchecked. when i bring up web browser to do search it cant resolve.

Because the traffic graph shows the NORDVPN interface as active along with WAN and LAN, I am assuming this is opnsense DNS related not NORDVPN related. Has anyone else experienced this when trying to set up NORDVPN? I used instructions for 19.1 opnsense nordvpn - version of opnsense used is 20.1.3

Thanks

[Trelleboy]

I have exactly the same issue with the NordVpn guide. The trafic is comming and you can ping......but webside does not work.

I think NordVpn dont care - they say I will get an answer

Did you figure this out? I even tried with a downgrade 19.1 but same as 20.1.

Spend many hours with  No sense but maybe to the open sense....

[alexandre.dulche]

Hello,

I made the switch to OPNsense a few weeks ago and setup NordVPN as well.

Regarding DNS, i'm using OpenDNS servers instead of my ISP's.
When it comes to Unbound, I left "all" as the outgoing interface.
So basically I guess DNS traffic doesn't go through the tunnel, but everything else (based on firewall rules) does.

If I remember correctly NordVPN offers DNS service as well, but maybe not inside the tunnel.
Also maybe a firewall rule such as "This firewall -> UDP/53 -> GW NordVPN" could work (outside unbound configuration). Just a guess.

[Trelleboy]

its working fine now....one last thing I need to get running is the KillSwitch

but it disconnects when I do these two rules

1. Go to the tab of Firewall > Rules, Floating tab
2. Please set up a rule with these configurations:

Action: Pass
Disabled: unchecked
Quick: checked
Interface: WAN
Direction: out
Address Family: IPv4
Protocol: UDP
Source: any
Destination: any
Destination port range: 1194-1194

Then below that rule:

Action: Reject
Disabled: unchecked
Quick: checked
Interface: WAN
Direction: out
Address Family: IPv4
Protocol: any
Source: any
Destination: any
Destination port range: any

[Salty0]

Did you get it solved??

EDIT:

I've looked around I would suggest asking on their subreddit Helped me to configure my router with nord when I thought that its the fault of the application, there are some pretty helpful people out there