Re: Tunnelblick & Hands Off - incompatible

[Felias]

I never found the reason why my Tunnelblick crashes in the same state, now i have a solution. Thanks SO much!

+1 for a fix

On Thursday, August 30, 2012 3:39:58 AM UTC+2, Radium wrote:

I just discovered that if you install Hands Off (Version 2.0.3 - App/Network monitor) it breaks Tunnelblick (Tunnelblick 3.3beta20 (build 3105) Unsigned (Deployed)  -  OpenVPN 2.3-alpha1).

Tunnelblick opens, authenticates, connects, disconnects and crashes.  The only way to resolve the issue is to completely uninstall Hands Off.

Hands Off - http://www.metakine.com/products/handsoff/

Not sure if this is something that should be added to the todo list for one of the Tunnelblick betas

Keep up the good work, Tunnelblick is great! 

[Radium]

Until the Tunnelblick guru's crush this minor bug with Hands Off, I've tested another App/Network monitor with Tunnelblick 3.3beta20 that works flawlessly.  The program is called Little Snitch 3 (http://www.obdev.at/products/littlesnitch/index.html) and I'm currently using it myself.  

[jkbull...gmail.com]

Could someone try this (i.e., Tunnelblick/Hands Off/Mountain Lion) after un-checking "Flush DNS cache after connecting or disconnecting" checkbox?

(From the configuration's "Settings" tab, click the "Advanced" button to get to this checkbox.)

On Tuesday, September 11, 2012 9:22:30 AM UTC-4, Hakanido wrote:

This really helps a lot. I was wondering why it was crashing that way. It used to work fine on Lion with HandsOff. This a bit of a problem for me since I find HandsOff really better than LittleSnitch. Did anyone notified Metakine ? I'll do it anyway.

[Hakanido]

It works ! At least it no longer disconnects immediately after connecting, and does not hang either.

I'll do some extra testing and will post later today my results.

[Hakanido]

Additional info. Connection works fine and stays on. But DNS resolving is not working. My DNS/WINS method is "Set name server (3.1)"

Anything I should try, like changing the Set DNS/WINS option ?

[Jonathan K. Bullard]

Yes, you should try the different options -- especially "Set nameserver". You might want to look at Mountain Lion Issues, too.

--
You received this message because you are subscribed to the Google Groups "tunnelblick-discuss" group.

To view this discussion on the web visit https://groups.google.com/d/msg/tunnelblick-discuss/-/N11hHDmqPZsJ.

To post to this group, send email to tunnelbli...@googlegroups.com.
To unsubscribe from this group, send email to tunnelblick-dis...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/tunnelblick-discuss?hl=en.

[jkbull...gmail.com]

For now, if you are using Hands Off, you can solve the problem by specifying (for each configuration) that Tunnelblick should not flush the DNS cache by un-checking the "Flush DNS cache after connecting or disconnecting" checkbox?

(From the configuration's "Settings" tab, click the "Advanced" button to get to this checkbox.)

I expect the next Tunnelblick beta to include a check for HandsOff, and if it is active, Tunnelblick will skip flushing the DNS cache automatically (after warning the user, if they have the checkbox checked).

Background

Hands Off uses mDNSResponder, which is also used by Tunnelblick to flush the DNS cache. Apparently this is what causes the problem. Per Hands Off tech support:

Hands Off! needs needs mDNSResponder in order to function. As far as I can see your script kills
mDNSResponder so it's normal for Hands Off! to act strangely: crash, hang and even kernel
panics.
If you absolutely need to run "/usr/bin/killall -HUP mDNSResponder" I suggest you either
disable Hands Off! or even uninstall it using the provided uninstaller.

(the script that is referred to is Tunnelblick's "Set nameserver" script.) Tunnelblick is using mDNSResponder to flush the DNS cache, per Apple's recommendation (https://support.apple.com/kb/HT5343).