On Wed, Aug 12, 2015 at 11:36 AM, Magic Wu <moonkinstar at gmail.com> wrote: > I do not think this is a firewall issue. > For example: > Server A: installed ocserv, dnsmasq(listen in 127.0.0.1 and public IP) > Server B: installed dnsmasq(listen in public IP) > Location C: > Now, Server A can dig @127.0.0.1 google, it works and the same to public IP. > Server B can dig with the public IP of Server A. > Location C can dig with the public IP of Server A too. > Server A`s ocserv can use dnsamsq with Server B, but can not use > self`s dnsamsq..both 127.0.0.1 and public IP Most likely you need to instruct dnsmasq to listen to the tun devices ocserv creates. These are named vpns* by default. regards, Nikos
