You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Scoped DNS queries not working with Lion?

I am in the group of people dealing with the conversion from the free cisco vpn client to the built in Lion vpn client.

I can get connected to our corporate vpn and ping stuff etc.. but the split dns never takes.

Im currently manually using dig to look up entries from our internal name servers and adding those entries into my hosts file.

I have made sure that the vpn connection is the top of the network priority list.

I have added the vpn dns servers manually and search domains manually

I have altered the entries in scutil directly


Here is a print out of scutil --dns for my new lion machine

I manually added the appropriate scoped entries just to make sure.

The first entry for scoped queries at the bottom is for my internal name server and search domain.

It still doesnt work, even though those entries are in there.

I can use dig with those name servers when im connected to the vpn (its not a connectivity issue)

If I add manual entries to host files, those manual entries for servers resolve properly


Whats going on? What am I missing? Thanks in advance for any help or insight anybody might have on this DNS resolution / resolver issue.


Joshuas-MacBook-Air:~ Josh$ sudo scutil

> list State:/Network/Service/[^/]+/DNS

subKey [0] = State:/Network/Service/11FBC19E-CBAA-4C2F-B2A9-606EF555698E/DNS

subKey [1] = State:/Network/Service/A152F24B-49E6-4CE7-8599-458A23EB3B18/DNS

> show State:/Network/Service/11FBC19E-CBAA-4C2F-B2A9-606EF555698E/DNS

<dictionary> {

DomainName : hsd1.fl.comcast.net.

ServerAddresses : <array> {

0 : 10.0.1.1

}

}

> exit

Joshuas-MacBook-Air:~ Josh$ scutil --dns

DNS configuration



resolver #1

search domain[0] : hsd1.fl.comcast.net

search domain[1] : fl.comcast.net

nameserver[0] : 8.8.8.8

nameserver[1] : 8.8.4.4



resolver #2

domain : local

options : mdns

timeout : 5

order : 300000



resolver #3

domain : 254.169.in-addr.arpa

options : mdns

timeout : 5

order : 300200



resolver #4

domain : 8.e.f.ip6.arpa

options : mdns

timeout : 5

order : 300400



resolver #5

domain : 9.e.f.ip6.arpa

options : mdns

timeout : 5

order : 300600



resolver #6

domain : a.e.f.ip6.arpa

options : mdns

timeout : 5

order : 300800



resolver #7

domain : b.e.f.ip6.arpa

options : mdns

timeout : 5

order : 301000



DNS configuration (for scoped queries)



resolver #1

search domain[0] : active.com

nameserver[0] : xxx.xxx.xxx.xxx

nameserver[1] : xxx.xxx.xxx.xxx

if_index : 8 (utun0)

flags : Scoped



resolver #2

search domain[0] : hsd1.fl.comcast.net

search domain[1] : fl.comcast.net

nameserver[0] : 8.8.8.8

nameserver[1] : 8.8.4.4

if_index : 4 (en0)

flags : Scoped

MacBook Air, Mac OS X (10.7), Scoped DNS Queries not working

Posted on Aug 5, 2011 12:35 AM

Reply
3 replies

Sep 8, 2011 8:57 PM in response to jschlesser

This seems like a widespread issue. Googling for macos dns vpn brings up numerous tales of misery. I have observed the issue on 10.7.1 as well as on 10.6.8


I have been able to resolve it using the following steps:


1. Create (if it does not exist) the directory /etc/resolver using sudo mkdir /etc/resolver


2. In that folder, create a file whose name is the right part of the domains you want to resolve through vpn. For example, in my case, the domains that I wanted to be resolved through vpn were of the type xxx.mycompany.local and yyy.mycompany.local, so I created a file called mycompany.local containing


nameserver 192.168.0.11

domain mycompany.local


With "nameserver" followed by the ip of the DNS server to be accessed for vpn.


That's it. It took effect immediately. Not happy about this solution because it will require fiddling the the employee's computers, but it seems to work, at least on 10.6.8 and 10.7.1

Scoped DNS queries not working with Lion?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.