Frequently asked questions
These are the most common issues that users have when using Mullvad.
I can't connect using my iOS or Android phone to some or all servers.
Try enabling Force AES-CBC ciphersuites on your device.
Android (OpenVPN Connect)
- Open OpenVPN Connect.
- Click on Settings.
- Select Preferences.
- Enable Force AES-CBC ciphersuites.
iOS (OpenVPN ConnSome solutions to some common issues.ect)
- Open iPhone settings app.
- Scroll down to the settings for the application OpenVPN.
- Enable the setting Force AES-CBC ciphersuite.
I use Windows and can't connect to any server.
Does your logfile contain the following?
Wed Aug 29 22:01:11 2018 NETSH: C:\WINDOWS\system32\netsh.exe interface
ipv6 set address interface=11 [REDACTED] store=active
Wed Aug 29 22:01:11 2018 ERROR: netsh command failed: returned error code 1
If so, follow these steps:
- Make sure that you have Internet Protocol version 6 enabled on your TAP adapter.
- Open regedit and navigate to
- If it is set to 0xFF, then change it to 0x00.
- Close regedit.
- Install the Re-enable IPv6 on nontunnel interfaces and on IPv6 tunnel interfaces fix from Microsoft.
Pinging and using HTTP websites work, but HTTPS websites do not.
If you're using Tunnelblick on macOS
- While you are connected to Mullvad, open a terminal and issue
ping -i 0.1 -D -g 1300 -G 1500 188.8.131.52.
- Once you see Message too long, look at the value on the line above and that will be your MTU.
- Take your MTU size from step 2 and subtract 40 from it. Save this number for step 6.
- Extract mullvadconfig.zip to a temporary directory.
- Change directory to the newly extracted one.
- Edit OSX/Mullvad.tblk/mullvad_osx.conf and add "mssfix X" where X is the number from step 3. Save the edited file.
- Import the config file to Tunnelblick.
If you're using OpenVPN on Linux
- While connected to Mullvad, open a terminal and issue
ping -M do -s 1300 -c 1 184.108.40.206.
- Increase the size (1300) each time as long as you are receiving replies.
- Once you see Message too long,look at the size on the previous working reply and that will be your MTU.
- Take your MTU size from step 3 and subtract 40 from it. Use this number in the next step.
- Edit /etc/openvpn/mullvad_linux.conf and add "mssfix X" where X is the value from the previous step. Save the edited file and restart the OpenVPN service.
If you're using OpenVPN on Windows
Edit C:\program files\openvpn\config\mullvad_windows.conf.ovpn (or C:\program files (x86)\openvpn\config\mullvad_windows.conf.ovpn) by adding "mssfix 1332" to it, then save and retry.
If this does not work, lower the mssfix number to 1300 and then retry.
I can't connect using Kali.
It shows "mkdir: cannot create directory '/etc/resolvconf/run': File exists in the error logs."
- Edit /etc/openvpn/update-resolve-conf
- Add mkdir /run/resolvconf/ directly after the header on the first line that starts without a hash (#) sign.
OpenVPN exits with a fatal error after I've disabled IPv6
I have disabled IPv6, either systemwide or on the Tun/TAP interface, and OpenVPN exits out with a fatal error.
Edit the OpenVPN configuration and make the following changes:
proto udp with
proto tcp with
pull-filter ignore "route-ipv6".
pull-filter ignore "ifconfig-ipv6".
Be sure to check that there are no IPv6 leaks if you have IPv6 enabled on other interfaces on your system.