Routing connections through VPN based on hostname (not IP range)
Posted
by
Michal M
on Super User
See other posts from Super User
or by Michal M
Published on 2011-01-25T14:06:48Z
Indexed on
2012/04/16
11:33 UTC
Read the original article
Hit count: 163
This bugs me immensly.
I need to connect to client's network through VPN. But I definitely do not want to send all the traffic through client's network so this option is out of question. What I need basically is for the OS to know that all client's network subdomains (*.example.com) need to go through the VPN connection.
I tried a couple of options:
- Changing order of services and setting the VPN on top, but this works the same as "Send all traffic over VPN connection".
- Using "VPN on Demand" option from network advanced options, but this feature is quite rubbish to be honest. Seems to work only in Safari (?!) and it doesn't route the connection, but it basically triggers the OS to connect to the selected VPN.
The reason I need it to work based on hostnames rather than IP range is simple - my client has a lot of servers inside his network and it's impossible for me to remember all IPs. They are all within a range, but this doesn't help me remembering.
Another option would be to put the VPN connection on the bottom of network services and untick "Send all traffic..." and then put all known hostnames in hosts file, but considering there could be hundreds of servers (therefore hostnames and ips too) it ridiculous job. And if new server appears on the network I'd need to edit the hosts file again. Sisyphean labours.
However this works on Windows very simply. If a hostname is not available through default network interface, then it seems to try VPN connection and this works brilliantly.
So, how can I achieve that on Mac, then?
I know client's internal DNS addresses if that is of any help (like directing a certain domains through a different DNS)?
PS. Using latest version 10.6.6.
PS2. I am using VPN to access intranet, version control servers (svn://), samba shares and for SSH access to servers.
© Super User or respective owner