VPN Passthrough (LAN to WAN) - DNS not working

I have a new, fairly vanilla install of LEDE/OpenWRT on a TP-Link WR902AC.

I'm connecting to a work VPN (OpenVPN) with a client on my LAN. The VPN connection works fine and I can access resources by IP, but name resolution doesn't work at all. Note that with the stock firmware everything worked fine, so I can rule out an OpenVPN configuration issue.

I've tried setting option localservice 0 as per https://forum.openwrt.org/viewtopic.php?pid=290484#p290484, but it didn't make any difference.

Then I started going down the following rabbit hole:

I've tried installing opkg install kmod-nf-nathelper-extra as per https://wiki.openwrt.org/doc/howto/vpn.nat.pptp, but it tells me:

Collected errors:
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-nf-nathelper-extra:
 * 	kernel (= 4.9.82-1-06fb3cb2af8460985ccf8ee4f44c1fe8) * 	kernel (= 4.9.82-1-06fb3cb2af8460985ccf8ee4f44c1fe8) *
 * opkg_install_cmd: Cannot install package kmod-nf-nathelper-extra.

My kernel appears to be at the correct version:

root@OpenWrt:~# uname -r
4.9.82

I've tried opkg install kmod-nf-nathelper-extra --force-depends, and that appears to install a couple of packages, but still gives me the error:

root@OpenWrt:~# opkg install kmod-nf-nathelper-extra --force-depends
Installing kmod-nf-nathelper-extra (4.9.82-1) to root...
Downloading http://downloads.lede-project.org/snapshots/targets/ar71xx/generic/packages/kmod-nf-nathelper-extra_4.9.82-1_mips_24kc.ipk
Installing kmod-lib-textsearch (4.9.82-1) to root...
Downloading http://downloads.lede-project.org/snapshots/targets/ar71xx/generic/packages/kmod-lib-textsearch_4.9.82-1_mips_24kc.ipk
Configuring kmod-lib-textsearch.
Configuring kmod-nf-nathelper-extra.
Collected errors:
 * satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-nf-nathelper-extra:
 * 	kernel (= 4.9.82-1-06fb3cb2af8460985ccf8ee4f44c1fe8) * 	kernel (= 4.9.82-1-06fb3cb2af8460985ccf8ee4f44c1fe8) *

I tried rebooting the router after that, since it didn't actually say "Cannot install", but VPN name resolution still isn't working. I'm not even sure that package is what I need to resolve my issue, but it's all trial-and-error at this point.

I tried iptables -A PREROUTING -t raw -p tcp --dport 1723 -j CT --helper pptp from http://forum.openwrt.org/viewtopic.php?pid=364831#p364831 (sorry I can't link that - new users only get 2 links per post), but i get

iptables v1.6.1: can't initialize iptables table `raw': Table does not exist (do you need to insmod?)
Perhaps iptables or your kernel needs to be upgraded.

Which lead to:

root@OpenWrt:~# opkg install kmod-ipt-raw
Unknown package 'kmod-ipt-raw'.
Collected errors:
 * opkg_install_cmd: Cannot install package kmod-ipt-raw.

I am truly at a loss and don't know what to do. Any help would be greatly appreciated.

  • Do not install kernel version dependent packages across different kernel versions... it's a sure fire way for unexpected behavior, if not bricking a device (depending on the package).

At this point, you need to reinstall OpenWrt since the kernel has been modified from the version you currently have installed (same version number, different revision). Create a backup of your current configuration either via LuCi or sysupgrade and restore the configuration once the newest version of OpenWrt is installed.

  • In the mean time, please follow the relevant Troubleshooting steps for your next post.

Thanks for your response and the link to the troubleshooting page. I will heed your advice.