18.04.2012 21:28, Mitsuo Yazawa wrote: > When I resolv DNS 8.8.8.8 it works perfectly (it goes to Eth0 Interface) > But if I do resolv 10.1.1.11(DNS server, in the right-subnet of the > IPSec tunnel). It tries to DNS from Eth0, and not tap0. Em, what about your routing table? Show an answer from "ip route" or "netstat -rn" commands.