I have a VPN to connect to my school's IT department (I volunteer with them), but I am having a problem.
I have added the VPN to the Network Interface list in System Preferences, and can connect just fine. However, let's say I try to ping the server:
PING server_name (67.63.55.3): 56 data bytes
64 bytes from 67.63.55.3: icmp_seq=0 ttl=241 time=95.298 ms
But this IP is not the server... it is my ISP's DNS hijacking page (as established here).
So then I change the Service Order in System Preferences: I move the VPN above my wifi connection. Now I can ping and connect to the server just fine, through my school's internal DNS server.
But now, I cannot browse the internet. Because I have moved the VPN above my Wifi connection, my Mac tries to route all internet traffic through the VPN. However, the VPN does not have internet throughput: it is only for connecting to internal servers. So I ping google:
PING www.google.com (67.218.93.49): 56 data bytes
Request timeout for icmp_seq 0
Which is, of course, bad. Either I can have internet connectivity, or I can have VPN. But not both at the same time.
So, you might say, "You can just tell the VPN to handle specific IPs!" But that doesn't work, because then when I try to ping the server hostname, who's DNS gets the request? My ISP! (instead of my school). If my ISP would not DNS hijack, maybe this would work.
So my question is: Is there some way I can tell my Mac to forward requests that fail on the VPN (like www.google.com
, etc) on to the next Network Service, being my Wifi?
Pretty much I want to consult my school DNS first and my real DNS second.
Thanks.