Back to Guides

Troubleshooting

Mullvad Client shows "Unable to Fetch address" in the IPv4 field.

  1. Often this is because of a DNS issue, Please click on Settings and then enable Stop DNS Leaks and then reconnect.
  2. On Windows make sure that your Antivirus or firewall program running on the same machine is not hijacking your DNS requests,
    to test this you can temporarily disable our DNS block on other interfaces than the TAP adapter. this is done by:
    1. Click on Settings
    2. Click on Advanced
    3. Change  windows_block_outside_dns = True to  windows_block_outside_dns = False
    4. Click on OK
    5. Reconnect
      If it then works, then it is possible that you have something (Antivirus / Firewall / Malware / etc) that is redirecting your DNS requests to your other network interfaces, then revert the change and disable your antivirus / Firewall and see if it then works.
  3. Try changing to TCP mode, to do this:
    1. Click on Settings
    2. Click on Advanced
    3. Change  protocol = any to  protocol = tcp
    4. Click on OK
    5. Reconnect

 

Windows TAP Driver did not install correctly or no TAP drivers found.

  1. Download the Standalone TAP driver available here
  2. Boot into Windows Safe mode and then disable any antivirus / firewall software and install the TAP driver you downloaded from step 1.
  3. Reboot and verify that if it works or not.
  4. If it still does not work, then please click on "Start" -> "All programs" -> "TAP-Windows" -> Utilites -> Add a new TAP-Windows virtual ethernet adapter. and after that reboot and then restart the client.

 

I Can't connect using my iOS device or my Android phone to some or all servers .

Try enabling "Force AES-CBC ciphersuites" on your device, here is how you do that

Android (OpenVPN Connect)

  1. Open OpenVPN Connect
  2. Click on Settings
  3. Select Preferences
  4. Check (Enable) "Force AES-CBC ciphersuites"
  5. Reconnect

iOS (OpenVPN Connect)

  1. Open iPhone settings app
  2. Scroll down to the settings for the application OpenVPN
  3. Enable the settings “Force AES-CBC ciphersuite”
  4. Reconnect

 

I can't access my local shares or printers when using the mullvad client.

To protect against a potential de-anonymizing issue the Mullvad client blocks incoming UDP, which will effect printers and fileshares locally. To disable this feature do the following:

  1. Click on Settings
  2. Click on Advanced
  3. Change block_incoming_udp = True to block_incoming_udp = False
  4. Click on OK
  5. Reconnect

 

Mullvad client in a guest VM frequently drops the connection.

If it is happening frequently on regular intervalls then In many cases this can be fixed by setting the Guest VM to use static (fixed) IP address.

 

I use Windows and I get a lot of connection drops after starting to download or stream content.

This is an issue with the Windows TAP drivers, and it is seen more often when using torrents, what you can do is install the older TAP driver version 9.9.2_3 and see if that resolves the issue for you, remember to reconnect after installing it.

 

Pinging and using HTTP websites work, but HTTPS websites do not.

OSX:

  1. Open a terminal and issue "ping -i 0.1 -D -g 1300 -G 1500 8.8.8.8" when you are connected to Mullvad
  2. Once you see "Message too long" then look at the value on the line above and that will be your MTU
  3. Take your MTU size from step #2 and subtract 40 from it, this will be your mssfix size.

Mullvad Client:

  • Please edit /Applications/Mullvad.app/Contents/Resources/client.conf.mac add "mssfix X" where x is the number from step 3. save it.

TunnelBlick:

  1. Extract mullvadconfig.zip to a temporary directory
  2. Change directory to the newly extracted one
  3. Edit OSX/Mullvad.tblk/mullvad_osx.conf and add "mssfix X" where x is the number from step 3. save it
  4. Import the config file to tunneblick.

 

Linux:

  1. Open a terminal and issue "ping -M do -s 1500 -c 1 8.8.8.8" when you are connected to Mullvad
  2. Once you see "Message too long" then look at the value on the line above and that will be your MTU
  3. Take your MTU size from step #2 and subtract 40 from it, that will be your mssfix size.

Mullvad Client:

  • Edit /usr/lib/python2.7/dist-packages/mullvad/client.conf.linux and add "mssfix X" where X is the value from step 3, save it and reconnect.

OpenVPN as a service:

  • Edit /etc/openvpn/mullvad_linux.conf and add "mssfix X" where X is the value from step 3, save it and restart it.

 

Windows:

Mullvad Client:

  • Edit C:\program files\mullvad\client.config.windows (or C:\program files (x86)\mullvad\client.config.windows) and add "mssfix 1332" to it, save and retry. If it does not work Lower it to 1300 and then retry.

OpenVPN Client:

  • Edit C:\program files\openvpn\config\mullvad_windows.conf.ovpn (or C:\program files (x86)\openvpn\config\mullvad_windows.conf.ovpn and add "mssfix 1332" to it, save and retry. If it does not work Lower it to 1300 and then retry.

 


iOS Devices get stuck at connecting after unlocking them.

One possible fix is to enable Seamless tunnel and also to have Reconnect on wakeup enabled.


I can't connect with the Mullvad client, it shows: UnrecoverableError('Certificate signing failed') in the error logs.
 

  1. Log into your account on https://mullvad.net
  2. Click on Download Client
  3. Scroll down to "iOS, Android and other platorms
  4. Click on Instructions and configuration files
  5. Click on other platforms
  6. Select a country and click on Get config
  7. Save the file and then extract it in a terminal
  8. in a terminal copy the files ca.crt, crl.pem mullvad.crt, mullvad.key to the mullvad SSL directory
    • Windows:  C:\Users\USERNAME\AppData\Local\mullvad\mullvad\ssl
    • Linux: ~/.config/mullvad/ssl/
    • OSX: ~/Library/Application Support/mullvad/ssl/
  9. in a terminal Rename mullvad.crt and mullvad.key to youraccountnumber.crt and youraccountnumber.key
  10. Restart the mullvad client.

 

I can't connect using Kali it shows: mkdir: cannot create directory '/etc/resolvconf/run': File exists in the error logs.

  1. Edit /etc/openvpn/update-resolve-conf
  2. Add mkdir /run/resolvconf/  add it directly after the header on the first non line that starts without a hash (#) sign.