Frequently asked questions

These are the most common issues that users have when using Mullvad.

I can't connect using my iOS or Android phone to some or all servers.

Try enabling Force AES-CBC ciphersuites on your device.

Android (OpenVPN Connect)

1. Open OpenVPN Connect.
2. Click on Settings.
3. Select Preferences.
4. Enable Force AES-CBC ciphersuites.
5. Reconnect.

iOS (OpenVPN ConnSome solutions to some common issues.ect)

1. Open iPhone settings app.
2. Scroll down to the settings for the application OpenVPN.
3. Enable the setting Force AES-CBC ciphersuite.
4. Reconnect.

I use Windows and can't connect to any server.

Does your logfile contain the following?

Wed Aug 29 22:01:11 2018 NETSH: C:\WINDOWS\system32\netsh.exe interface
ipv6 set address interface=11 [REDACTED] store=active
Wed Aug 29 22:01:11 2018 ERROR: netsh command failed: returned error code 1

If so, follow these steps:

1. Make sure that you have Internet Protocol version 6 enabled on your TAP adapter.
2. Open regedit and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters\DisabledComponent
3. If it is set to 0xFF, then change it to 0x00.
4. Close regedit.
5. Install the Re-enable IPv6 on nontunnel interfaces and on IPv6 tunnel interfaces fix from Microsoft.

Pinging and using HTTP websites work, but HTTPS websites do not.

If you're using Tunnelblick on macOS

1. While you are connected to Mullvad, open a terminal and issue ping -i 0.1 -D -g 1300 -G 1500 8.8.8.8.
2. Once you see Message too long, look at the value on the line above and that will be your MTU.
3. Take your MTU size from step 2 and subtract 40 from it. Save this number for step 6.
4. Extract mullvadconfig.zip to a temporary directory.
5. Change directory to the newly extracted one.
6. Edit OSX/Mullvad.tblk/mullvad_osx.conf and add "mssfix X" where X is the number from step 3. Save the edited file.
7. Import the config file to Tunnelblick.

If you're using OpenVPN on Linux

1. While connected to Mullvad, open a terminal and issue ping -M do -s 1300 -c 1 8.8.8.8.
2. Increase the size (1300) each time as long as you are receiving replies.
3. Once you see Message too long,look at the size on the previous working reply and that will be your MTU.
4. Take your MTU size from step 3 and subtract 40 from it. Use this number in the next step.
5. Edit /etc/openvpn/mullvad_linux.conf and add "mssfix X" where X is the value from the previous step. Save the edited file and restart the OpenVPN service.

If you're using OpenVPN on Windows

Edit C:\program files\openvpn\config\mullvad_windows.conf.ovpn (or C:\program files (x86)\openvpn\config\mullvad_windows.conf.ovpn) by adding "mssfix 1332" to it, then save and retry.

If this does not work, lower the mssfix number to 1300 and then retry.

I can't connect using Kali.

It shows "mkdir: cannot create directory '/etc/resolvconf/run': File exists in the error logs."

1. Edit /etc/openvpn/update-resolve-conf
2. Add mkdir /run/resolvconf/ directly after the header on the first line that starts without a hash (#) sign.

OpenVPN exits with a fatal error after I've disabled IPv6

I have disabled IPv6, either systemwide or on the Tun/TAP interface, and OpenVPN exits out with a fatal error.

Edit the OpenVPN configuration and make the following changes:

1. Replace proto udp with proto udp4.
2. Replace proto tcp with proto tcp4.
3. Add pull-filter ignore "route-ipv6".
4. Add pull-filter ignore "ifconfig-ipv6".

Be sure to check that there are no IPv6 leaks if you have IPv6 enabled on other interfaces on your system.