[MacOS Mojave] OVPN tunnel not working

[3535...@gmail.com]

Hi,

After the upgrade to Mojave OVPN stopped working.

VPN connection is getting established and nothing unusual is popping in the log.

However, after that I cannot reach gateway, VPN endpoint or anything in TUN network or internet.

Feels like routes were not assigned/reset properly.

TunnelBlick version - Tunnelblick 3.7.6a (build 5080)

Thanks,

Ivan.

[Tunnelblick developer]

Thanks for your report, I'm sorry this problem is happening.

Please post the diagnostic info obtained by following the instructions at Read Before You Post.

[easy...@gmail.com]

Hi,

me too ..... have a same problem!

the connection are ok, the tunnel on internet also ok, but only for same ports.

example the vnc port run perfectly.

i utilize other port (5003 & smb & afp & ....) but when i start a service, the traffic on the tunnel go down and the connection with the services go down, but the tunnelblick connection stil on.

tk

[Tunnelblick developer]

@easyrasi - Did the configuration ever work correctly, or is this a new configuration?

[Fabio Trotta]

Hi, 

tanks for your answer, the configuration file are old.

i utilize this about 3/4 years ….

[Tunnelblick developer]

1. What has changed? (Example answers: "It worked on High Sierra but now it doesn't work on Mojave", or "It worked with Tunnelblick 3.7.6a but now it doesn't work on Tunnelblick 3.7.7beta06".)

2. AFP is not supported from APFS volumes on High Sierra and higher, according to this post.)

3. Can you clarify or expand what you mean by

"when i start a service, the traffic on the tunnel go down and the connection with the services go down, but the tunnelblick connection stil on."

On Saturday, September 29, 2018 at 6:04:17 AM UTC-4, Fabio Trotta wrote:

Hi, 

tanks for your answer, the configuration file are old.

i utilize this about 3/4 years ….

[Fabio Trotta]

Hi,

with Hight Sierra, tunnelblick run only with version 3.6.5, but now is not my problem…

today i’m installed Mojave and actual version Tunnelblick 3.7.4b (build 4921)

the configuration file are anytime the same

now:

see the UP picture

- connection are ok, and at the moment i’m open a rdp services 

- No problem

see the DOWN picture

- i’m open now the program FileMaker advanced 17.0

  and i try to connect with a guest server, but the traffic data goes to 0 B/s

tk

--
You received this message because you are subscribed to a topic in the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/tunnelblick-discuss/J9AbfnCnuC0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to tunnelblick-dis...@googlegroups.com.
Visit this group at https://groups.google.com/group/tunnelblick-discuss.
For more options, visit https://groups.google.com/d/optout.

[Tunnelblick developer]

OK, thanks. Is this correct?

• On High Sierra, Tunnelblick 3.6.5 worked for you.
  
  
• On Mojave, Tunnelblick 3.7.6a does not work for you.
  

On Saturday, September 29, 2018 at 6:35:17 AM UTC-4, Fabio Trotta wrote:

Hi,

[Fabio Trotta]

Correct !

Fabio Trotta 

--

[Tunnelblick developer]

OK, thanks.

So we don't know if the problem is

• In Tunnelblick 3.7.6a (but not in Tunnelblick 3.6.5)
  

or

• In Mojave (but not in High Sierra)
  

Can you try Tunnelblick 3.6.5 on Mojave? Or try Tunnelblick 3.7.6a on High Sierra?

(I want to find out if the problem is caused by updating Tunnelblick or caused by updating macOS.)

On Saturday, September 29, 2018 at 7:02:36 AM UTC-4, Fabio Trotta wrote:

Correct !

Fabio Trotta 

[3535...@gmail.com]

Hi,

It was working for me for some time (On one of the pre-releases).

But again stopped working on stable release, and on new Beta.

Update to tunnelblick 3.7.7beta06 (build 5140) - same result.

In my case - connection goes ok, but then traffic is not comming from server (even pings).

субота, 29 вересня 2018 р. 13:02:36 UTC+2 користувач Fabio Trotta написав:

Correct !

Fabio Trotta 

Il giorno 29 set 2018, alle ore 12:45, Tunnelblick developer <jkbu...@gmail.com> ha scritto:

OK, thanks. Is this correct?

• On High Sierra, Tunnelblick 3.6.5 worked for you.
  
  
• On Mojave, Tunnelblick 3.7.6a does not work for you.
  

On Saturday, September 29, 2018 at 6:35:17 AM UTC-4, Fabio Trotta wrote:

Hi,

with Hight Sierra, tunnelblick run only with version 3.6.5, but now is not my problem…

today i’m installed Mojave and actual version Tunnelblick 3.7.4b (build 4921)

the configuration file are anytime the same

now:

see the UP picture

- connection are ok, and at the moment i’m open a rdp services 

- No problem

see the DOWN picture

- i’m open now the program FileMaker advanced 17.0

  and i try to connect with a guest server, but the traffic data goes to 0 B/s

tk

--
You received this message because you are subscribed to a topic in the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/tunnelblick-discuss/J9AbfnCnuC0/unsubscribe.

To unsubscribe from this group and all its topics, send an email to tunnelblick-discuss+unsub...@googlegroups.com.

[Tunnelblick developer]

Again:

Can you try Tunnelblick 3.6.5 on Mojave? Or try Tunnelblick 3.7.6a on High Sierra?

(I want to find out if the problem is caused by updating Tunnelblick or caused by updating macOS.)

On Saturday, September 29, 2018 at 8:28:48 AM UTC-4, Ivan Temchenko wrote:

Hi,

It was working for me for some time (On one of the pre-releases).

But again stopped working on stable release, and on new Beta.

Update to tunnelblick 3.7.7beta06 (build 5140) - same result.

In my case - connection goes ok, but then traffic is not comming from server (even pings).

субота, 29 вересня 2018 р. 13:02:36 UTC+2 користувач Fabio Trotta написав:

Correct !

Fabio Trotta 

[Fabio Trotta]

good morning,

sounds good!

i’m uninstall the latest version, reboot, and install the version 3.5.24 (build 4270.5031) …. on mojave

and now all run correctly.

many tanks

fabio

--
You received this message because you are subscribed to a topic in the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/tunnelblick-discuss/J9AbfnCnuC0/unsubscribe.

To unsubscribe from this group and all its topics, send an email to tunnelblick-dis...@googlegroups.com.

[Tunnelblick developer]

3.5.24 is a very old version of Tunnelblick and is not recommended for use on any version of macOS later than 10.7.4 ("Lion").

3.6.5 would be better. It is no longer available on the Tunnelblick website because its OpenSSL component contains serious security vulnerabilities, but I can provide you with a link to download a copy of it if you email me privately at devel...@tunnelblick.net.

On Sunday, September 30, 2018 at 1:18:54 AM UTC-4, Fabio Trotta wrote:

good morning,

sounds good!

i’m uninstall the latest version, reboot, and install the version 3.5.24 (build 4270.5031) …. on mojave

and now all run correctly.

many tanks

fabio

[Fabio Trotta]

this is a inconvenient…

please send me the link to have a right old version, or via email also.

tanks

[Tunnelblick developer]

I am sorry about the inconvenience, Fabio.

I have emailed you a link privately.

On Monday, October 1, 2018 at 7:54:31 AM UTC-4, Fabio Trotta wrote:

this is a inconvenient…

please send me the link to have a right old version, or via email also.

tanks

[Fabio Trotta]

Good morning,

i have move from the varsion 3.5.24 to 3.6.5

the tunnel are stable also.

tanks

[david.ste...@gmail.com]

Hi, I'd appreciate a 3.6.5 link too (and I note the caveat about OpenSSL version).   I booted my machine off of my old High Sierra timemachine backup and that's failing now too, so it's probably not a Tunnelblick problem, but I should at least try the version that's known to work for others.

kind regards

David

[Tunnelblick developer]

I have emailed a link to you, David.

[david.ste...@gmail.com]

thank you very much :)

[Jony]

hi,

well, I've downgraded tunnelblick without no success. 

Same issue... 

Will dig into my server.

вт, 2 жовт. 2018, 01:38 користувач <david.ste...@gmail.com> пише:

--

[Fabio Trotta]

hi,

i’m not more test make ….

to me now tunnelblick version 3.6.5 (build 4566) and OS 10.14 Mojave… RUN!

fabio

[david.ste...@gmail.com]

For completeness, I should report that my problems were with the server config and I'm now running with the latest Beta on Mojave :)

Thanks again

David

[d.br...@auckland.ac.nz]

I also have an issue with Mojave and Tunnelblick whereby it authorises and connects but the VPN is unreachable -- even pinging the host fails. This is on a brand new Macbook. I've tried 3.7.7 build 5150 and 3.7.8beta01 build 5160. There are no problems with an older Macbook that has been upgraded to Mojave.

David, would you mind sharing what was not right with your server config?

Thanks,

Dave

[garyc...@gmail.com]

Hi,

Can I please have the 3.6.5 link too?

The latest version 3.7.7, doesn't work on Mac 10.14.

Thanks,

Gary

[Tunnelblick developer]

Gary (and any anyone else who wants an old version of Tunnelblick), please request this in a private email to devel...@tunnelblick.net, and include the info from following the instructions at Read Before You Post in your email.

[David Stevenson]

I realise you might not find this helpful Gary, but the latest versions work fine for me. I’m currently on 3.7.8beta01

The problems I initially had turned out to be server-side.

Another datapoint: One colleague ended up with dupe routes somehow - he did a reboot due to not having time to sort it out directly, then all worked ok.

DS

[Gary Chan]

Thanks David, it is working now after I downloaded the latest version (3.7.8beta01).

As well as following the instructions on https://tunnelblick.net/cBeforeYouPost.html

P.S the latest version itself doesn't resolve the issue.

Cheers,

Gary

[Fabio Trotta]

Hi guys,

Uninstall the lastest version with the Tunnelblich uninstaler, and use the old versioni 3.6

Best regards from Switzerland 🇨🇭 

Fabio Trotta 

--

[Tunnelblick developer]

Uninstall the lastest version with the Tunnelblich uninstaler, and use the old versioni 3.6

Do this only as a last resort. Using an old versions of Tunnelblick is not a good idea because the old versions of OpenSSL which they contain have serious security vulnerabilities.

There is no previous version that runs ok on Mojave.

Tunnelblick 3.7.7 and 3.8beta01 work on Mojave for hundreds of thousands of users. A very small number of users are encountering the problem you have, and they report the same problem using Viscosity instead of Tunnelblick (although I urge you to try that yourself). That makes me suspect that the problem is in Mojave itself, or in some other program installed on the Macs having this problem.

There has been one report that this problem is caused by Cisco's AnyConnect. That is, installing AnyConnect does something that causes routing instructions to be ignored. From a private email:

Now I am thinking the problem is caused by Cisco Anyconnect. I connected with Tunnelblick after Cisco Anyconnect which works before. After I upgraded system to Mojave and a new level Anyconnect. Tunnelblick does not work anymore. I searched and saw Anyconnect will prevent modifying routing table.

[kar...@gmail.com]

I also have this problem.  How can I get version 3.6?  I have tested 3.5.25 without success.

[Tunnelblick developer]

Please request this in a private email to devel...@tunnelblick.net, and include the info from following the instructions at Read Before You Post in your email.

[bwt...@gmail.com]

OSX 10.14.1 with TB 3.7.7 connecting to Asus Router using OpenVPN.  No longer working.  Upgraded TB to 3.7.8 beta 02, and VPN now working as it did in the past.

[tant...@gmail.com]

I had a similar issue that since Mojave, the status was connected but no internet connection. 

But in my case it's because of my IP table at the server. Because I tried to install/re-install openvpn server several times, my IP table with chain POSTROUTING at the server contained many records and they were probably conflicting, or some were incorrect. After deleting those records and keeping only the correct one, I got the internet connection. 

I am using TunnelBrick 3.7.8beta02 with Mojave. 

[dominika...@gmail.com]

Having an issue not being able to connect to Tunnelblick with Mac OS Mojave 10.14.6

Please help

On Thursday, 26 July 2018 05:50:30 UTC-4, 3535...@gmail.com wrote:

Hi,

After the upgrade to Mojave OVPN stopped working.

VPN connection is getting established and nothing unusual is popping in the log.

However, after that I cannot reach gateway, VPN endpoint or anything in TUN network or internet.

Feels like routes were not assigned/reset properly.

TunnelBlick version - Tunnelblick 3.7.6a (build 5080)

Thanks,

Ivan.

[Tunnelblick developer]

Please describe what you see and post the diagnostic info obtained by following the instructions at Read Before You Post (https://tunnelblick.net/cBeforeYouPost.html).

[Dominika Linowska]

I have followed all the steps, and cannot connect and get these Error message:

"The username and password were not accepted by the remote VPN server."

--

You received this message because you are subscribed to a topic in the Google Groups "tunnelblick-discuss" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/tunnelblick-discuss/J9AbfnCnuC0/unsubscribe.
To unsubscribe from this group and all its topics, send an email to tunnelblick-dis...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/tunnelblick-discuss/5d7535f3-58ce-4b7e-835c-e28f6f2ce8d1%40googlegroups.com.

--

w: http://linowska.com

e: domi...@linowska.com
t:  647 787 2795

[Tunnelblick developer]

You need to contact your VPN service provider to obtain the correct username and password. That is the organization which gave you your configuration files, username, and password, and to which you are probably paying a fee for VPN service. For more information, please see Getting VPN Service [1].

Tunnelblick is just the free software that many VPN service providers recommend or supply to their customers. We do not provide VPN service, just software.

[1] https://tunnelblick.net/cGettingVPNService.html