Frequently asked questions
These are the most common issues that users have when using Mullvad.
I can't seem to connect to some servers, for instance Sweden or USA when using a Mobile device or a router.
Try using a region with fewer server entries, for instance Sweden - Stockholm instead of Sweden or USA - New York instead of USA.
I can't connect using my iOS device or my Android phone to some or all servers .
Try enabling "Force AES-CBC ciphersuites" on your device, here is how you do that
Android (OpenVPN Connect)
- Open OpenVPN Connect
- Click on Settings
- Select Preferences
- Check (Enable) "Force AES-CBC ciphersuites"
iOS (OpenVPN Connect)
- Open iPhone settings app
- Scroll down to the settings for the application OpenVPN
- Enable the settings “Force AES-CBC ciphersuite”
I use Windows and I can't get connected to any server.
My logfiles contains:
Wed Aug 29 22:01:11 2018 NETSH: C:\WINDOWS\system32\netsh.exe interface
ipv6 set address interface=11 [REDACTED] store=active
Wed Aug 29 22:01:11 2018 ERROR: netsh command failed: returned error code 1
1. Make sure that you have "Internet Protocol version 6" enabled on your Tap adapter.
2. Open regedit and go to:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponent check if it is set to "0xFF" if it is, then change it to "0x00" and close regedit.
3. Install the "Re-enable IPv6 on nontunnel interfaces and on IPv6 tunnel interfaces" fix from: https://support.microsoft.com/en-us/help/929852/guidance-for-configuring-ipv6-in-windows-for-advanced-users
I use Windows and I get a lot of connection drops after starting to download or stream content.
This is an issue with the Windows TAP drivers, and it is seen more often when using torrents, what you can do is install the older TAP driver version 9.9.2_3 and see if that resolves the issue for you, remember to reconnect after installing it.
Pinging and using HTTP websites work, but HTTPS websites do not.
If you're using Tunnelblick on macOS
- Open a terminal and issue "ping -i 0.1 -D -g 1300 -G 1500 184.108.40.206" when you are connected to Mullvad.
- Once you see "Message too long", look at the value on the line above and that will be your MTU.
- Take your MTU size from step #2 and subtract 40 from it. Save this number for step 6.
- Extract mullvadconfig.zip to a temporary directory.
- Change directory to the newly extracted one.
- Edit OSX/Mullvad.tblk/mullvad_osx.conf and add "mssfix X" where X is the number from step 3. Save the edited file.
- Import the config file to Tunnelblick.
If you're using OpenVPN on Linux
- Open a terminal and issue "ping -M do -s 1300 -c 1 220.127.116.11" when you are connected to Mullvad
- Increase the size (1300) each time as long as you are receiving replies
- Once you see "Message too long" then look at the size on the previous working reply and that will be your MTU
- Take your MTU size from step #3 and subtract 40 from it. Use this number in the next step.
- Edit /etc/openvpn/mullvad_linux.conf and add "mssfix X" where X is the value from the previous step. Save the edited file and restart the OpenVPN service.
If you're using OpenVPN on Windows
Edit C:\program files\openvpn\config\mullvad_windows.conf.ovpn (or C:\program files (x86)\openvpn\config\mullvad_windows.conf.ovpn and add "mssfix 1332" to it, save and retry.
If it does not work, lower the mssfix number to 1300 and then retry.
iOS Devices get stuck at connecting after unlocking them.
One possible fix is to enable Seamless tunnel and also to have Reconnect on wakeup enabled.
I can't connect using Kali it shows: mkdir: cannot create directory '/etc/resolvconf/run': File exists in the error logs.
- Edit /etc/openvpn/update-resolve-conf
- Add mkdir /run/resolvconf/ add it directly after the header on the first non line that starts without a hash (#) sign.
I have disabled IPv6, either systemwide or on the Tun/TAP interface, and OpenVPN exits out with a fatal error.
Edit the OpenVPN configuration and do the following changes
- Replace proto udp with proto udp4 and proto tcp with proto tcp4
- Add pull-filter ignore "route-ipv6"
- Add pull-filter ignore "ifconfig-ipv6"
Be sure to check that there are no IPv6 leaks if you have IPv6 enabled on other interfaces on that system.