Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to set up a DNS server to be used with OpenVPN. I can not use conventional public DNS IPs (Like Google public DNS ones) because all of them are blocked in the ISPs where the OpenVPN clients are going to be used, hence need to define my own.

I appreciate your help.

P.S. I know how to define an authoritative DNS server using nsd3, but nsd3 is authoritative-only and I guess here what I need is a recursive DNS server. I chosen nsd3 after having enormous complexity issues with BIND9, so I hope you can suggest some solution that does not need BIND9.

P.S.2 I just found a nice comparison of DNS servers here on wiki. So I basically know what DNS servers CAN do the job. What I need is HOW to do so.

share|improve this question

DNSMasq can do this:

For RHEL based distros, you can do something like this:

yum install -y dnsmasq
chkconfig dnsmasq on
service dnsmasq start

Then you should be able to point your clients at the IP of the server you just installed it on, and have DNS work nicely. Make sure the server has valid nameservers in /etc/resolv.conf though.

share|improve this answer
Does DNSMasq have a .deb package too? How can I make valid nameservers? Thanks – hbp Oct 4 '11 at 1:04
It probably does, try searching for it with aptitude (or apt-cache). You need to include nameserver lines in your /etc/resolv.conf. This is typically done automatically (if you can access the internet from the machine you are going to run this on, your DNS servers are already set correctly) – devicenull Oct 4 '11 at 1:08
Yup: apt-cache search dnsmasq dnsmasq-base - A small caching DNS proxy and DHCP/TFTP server dnsmasq - A small caching DNS proxy and DHCP/TFTP server openresolv - management framework for resolv.conf – jdw Oct 4 '11 at 11:36

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.