[SOLVED] OpenVPN and NordVPN, can't connect to internet

quinquice · 2019-12-11 20:19:32

When I connect to NordVPN through their own app (nordvpn-bin), I always get a message like this:

Connecting to United States #XXXX (usXXXX.nordvpn.com)
You are connected to United States #XXXX (usXXXX.nordvpn.com)!

where XXXX is some server number. But after I do this, I cannot connect to the internet at all. Commands like:

ping 8.8.8.8
ping google.com

report no packages recieved. I have also tried to connect to NordVPN manually through OpenVPN,
with the same results.

When I disconnect from the VPN, my internet works as normal.

Anyone know what might be going on here?

Last edited by quinquice (2020-01-01 05:14:30)

quinquice · 2019-12-11 20:33:32

Solved with https://bbs.archlinux.org/viewtopic.php?id=234263

(added "nameserver 8.8.8.8" to my resolv.conf)

Linux-Is-Best · 2019-12-12 15:49:01

If you're going to be using NordVPN regularly, you may as well use their DNS.

NordVPN DNS server addresses are: 103.86.96.100 and 103.86.99.100

source: NordVPN https://support.nordvpn.com/Other/10474 … resses.htm

SurlyCycler · 2019-12-13 13:07:49

Im not sure if this applies to you but if you have had a crash in arch, your nordvpn kill switch may have activated.
you can check this by going to /etc/resolv.conf and posting what you see there.
it will either say networkmanager or nordvpn in the # at the top.
Let us know.

I agree with Linux is best
https://support.nordvpn.com/Connectivit … -Linux.htm

Last edited by SurlyCycler (2019-12-18 00:36:14)

SurlyCycler · 2019-12-24 18:10:25

resolve your issue yet?

2ManyDogs · 2019-12-24 20:03:56

The OP says he solved it in post #2, and has not been back to the forum since then. I am going to close this topic now.

quinquice, if you come back and would like this topic reopened, please use the Report button.

2ManyDogs · 2019-12-29 18:42:53

Reopened by OP request.

quinquice · 2019-12-30 02:30:01

Before connecting to VPN

$ cat /etc/resolv.conf
nameserver 103.86.96.100
nameserver 103.86.99.100

After "connecting" to VPN

$ cat /etc/resolv.conf
# Generated by resolvconf
nameserver 103.86.96.100
nameserver 103.86.99.100

I still cannot connect to the internet after connecting to the VPN. Also, adding "nameserver 8.8.8.8"
no longer works for me. Any additional help is greatly appreciated

mxfm · 2019-12-30 05:46:29

quinquice wrote:

Before connecting to VPN
$ cat /etc/resolv.conf
nameserver 103.86.96.100
nameserver 103.86.99.100
After "connecting" to VPN
$ cat /etc/resolv.conf
# Generated by resolvconf
nameserver 103.86.96.100
nameserver 103.86.99.100
I still cannot connect to the internet after connecting to the VPN. Also, adding "nameserver 8.8.8.8"
no longer works for me. Any additional help is greatly appreciated

When in vpn mode, please post output of 'ip route' and 'traceroute -I 8.8.8.8', 'traceroute -I google.com'. The latter command may require sudo.

Last edited by mxfm (2019-12-30 05:46:50)

quinquice · 2019-12-30 21:45:32

$ ip route
default via 192.168.1.1 dev wlp4s0 proto dhcp src 192.168.1.138 metric 303
10.5.0.0/16 dev nordvpn-us3859 proto kernel scope link src 10.5.0.2
192.168.1.0/24 dev wlp4s0 proto dhcp scope link src 192.168.1.138 metric 303

$ traceroute -I 8.8.8.8
traceroute to 8.8.8.8 (8.8.8.8), 30 hops max, 60 byte packets
 1  * * *
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

$ traceroute -I google.com
google.com: Temporary failure in name resolution
Cannot handle "host" cmdline arg `google.com' on position 1 (argc 2)

mxfm · 2019-12-31 06:34:54

quinquice wrote:

$ ip route
default via 192.168.1.1 dev wlp4s0 proto dhcp src 192.168.1.138 metric 303
10.5.0.0/16 dev nordvpn-us3859 proto kernel scope link src 10.5.0.2
192.168.1.0/24 dev wlp4s0 proto dhcp scope link src 192.168.1.138 metric 303

Strange, there is no path through vpn. Are you sure you got correct config settings?

SurlyCycler · 2019-12-31 15:41:17

Hey Quinquince

i have a few thoughts here.
First question are you on a laptop or desktop?
i see you have the nameservers listed and that is ok. Mine shows differently listing my router...

Please show what is in /etc/resolv.conf
Im more interested in the title following the #. this line # Generated by.....
This can be an indicator of who is currently controlling your resolve.conf file.

sudo nano /etc/resolv.conf

Please also post your nordvpn settings (not in root)

$ nordvpn settings
$ nordvpn status

------------------------------------------------------------
just so you are aware i am a nordvpn user too and there are a few quirky things that are happening with nord since i installed it in a few updates ago.

Last edited by SurlyCycler (2019-12-31 16:51:35)

quinquice · 2019-12-31 21:39:15

quinquice wrote:

Before connecting to VPN
$ cat /etc/resolv.conf
nameserver 103.86.96.100
nameserver 103.86.99.100
After "connecting" to VPN
$ cat /etc/resolv.conf
# Generated by resolvconf
nameserver 103.86.96.100
nameserver 103.86.99.100
I still cannot connect to the internet after connecting to the VPN. Also, adding "nameserver 8.8.8.8"
no longer works for me. Any additional help is greatly appreciated

I am on a laptop (Lenovo X1 Carbon)

And I posted the contents of resolv.conf above. It seems that when I connect
to nordvpn, it adds the line

# Generated by resolvconf

to the top of the file for some reason. Note that I have manually stopped
dhcpcd from overwriting resolv.conf by following
https://wiki.archlinux.org/index.php/Dh … esolv.conf

Also, here are my nordvpn settings

$ nordvpn settings
Technology: NordLynx
Kill Switch: disabled
CyberSec: disabled
Notify: enabled
Auto-connect: disabled
DNS: disabled

Finally, the command

$ nordvpn status

reports 'Disconnected' when disconnected and 'Connected' when connected, despite
having no internet access.

SurlyCycler · 2019-12-31 22:32:36

did you use the wireguard install?

https://wiki.archlinux.org/index.php/WireGuard

Install wireguard-tools.
Install the appropriate kernel module:
wireguard-arch for the default linux kernel.
wireguard-lts for the LTS linux-lts kernel.
wireguard-dkms for the DKMS variant for other kernels. < this is only used if you have an other kernal installed other than linux or linux-lts

If you havent added the above you will need to remove nordvpn-bin. Once the kernal modules have been added and reinstall nord

Oddly i think a lot of the solutions are old or incorrect.
seems i had the same problem but this fixed it for me.

Im using a laptop as well .
Initially, I used dhcpcd to get a /etc/resolv.conf.head to add the dns nameserver insert the correctly. I did notice when i was out to coffee shops to test this it did not connect at all. So,

It seems counter to what is written else where. I think that NetworkManager does its job correctly by over writing the /etc/resolv.conf file.
for me chattr +i didnt work and network manager to overwrite regardless.
I believe that you want it to work in order to connect to your router and other routers.
Nordvpn should be able to establish a tunnel regardless on its own regardless.

I also read that nordvpn has its own dns config written into the program. you will see it in the next part
---------------------------------------------------------------------------------------------------------------------------------------

resolvectl status

I get the following result
....(use the down arrow to the all the results)

Link 7 (nordvpn-uk1525)
        Current Scopes: DNS
DefaultRoute setting: yes
         LLMNR setting: yes
MulticastDNS setting: no
DNSOverTLS setting: no
      DNSSEC setting: allow-downgrade
 DNSSEC supported: yes
 Current DNS Server: 103.86.96.96
            DNS Servers: 103.86.99.99
                                   103.86.96.96
          DNS Domain: ~.

Please note that 103.86.96.96 is what the program uses as nameservers
----------------------------------------------------------------------------------------------
***This part might not be needed but i am adding it regardless.

I added the other nordvpn dns nameservers here

sudo nano /etc/systemd/resolved.conf   ....un hash the DNS line and read the top area for exact instructions.

[Resolve]
DNS=103.86.96.100, 103.86.99.100
#FallbackDNS=1.1.1.1 9.9.9.10 8.8.8.8 2606:4700:4700::1111 2620:fe::10 2001:4860:486>
#Domains=
#LLMNR=yes
#MulticastDNS=yes
#DNSSEC=allow-downgrade
#DNSOverTLS=no
#Cache=yes
#DNSStubListener=yes

with this config i get good results from dnsleaktest, I can connect to netflix and shows protected on the nordvpn.com site.

In addition i added the nordvpn DNS to the/etc/systemd/resolved.conf, it shows up in "resolvectl status" as follows

Global
           LLMNR setting: yes
  MulticastDNS setting: yes
  DNSOverTLS setting: no
      DNSSEC setting: allow-downgrade
 DNSSEC supported: no
 Current DNS Server: 103.86.99.100
            DNS Servers: 103.86.99.100
Fallback DNS Servers: 1.1.1.1
                       9.9.9.10
                       8.8.8.8

and my /etc/resolv.conf indicates

# Generated by NetworkManager
nameserver 192.168.1.1

My rational is that i want my laptop to connect anywhere, but i do want the tunnel to the nordserver.

Maybe my configuration is incorrect and anyone reading feel free to state why. But for now nordvpn on mylaptop is working.

Last edited by SurlyCycler (2020-01-01 15:43:55)

quinquice · 2020-01-01 05:14:10

Simply installing WireGuard worked for me (I feel like an idiot...). Thanks so much!

SurlyCycler · 2020-01-01 14:48:25

your welcome

Glad something there helped.

zakb · 2021-03-29 18:14:48

Had the same issue with headless Ubuntu Server on RaspberyPi, and thanks to the great support from NordVPN got it resolved. Here are their instructions:

Please change your DNS servers to NordVPN DNS servers manually by following these steps:

Open the Terminal and type in:

sudo su

You will be asked for your login password, please type it in and press enter.

Then copy and paste these commands, pressing enter after each one:

chattr -i /etc/resolv.conf
rm -r /etc/resolv.conf
echo -e "nameserver 103.86.96.100""\n""nameserver 103.86.99.100" >> /etc/resolv.conf
chattr +i /etc/resolv.conf
reboot now

That is it. Your computer will reboot and everything should work correctly. If you will ever need to change your DNS addresses, please open the terminal and type in the following:

sudo su

You will be asked for your login password, please type it in and press enter.

chattr -i /etc/resolv.conf
nano /etc/resolv.conf

Change DNS addresses, save and close the file.

chattr +i /etc/resolv.conf

Arch Linux

#1 2019-12-11 20:19:32

[SOLVED] OpenVPN and NordVPN, can't connect to internet

#2 2019-12-11 20:33:32

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#3 2019-12-12 15:49:01

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#4 2019-12-13 13:07:49

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#5 2019-12-24 18:10:25

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#6 2019-12-24 20:03:56

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#7 2019-12-29 18:42:53

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#8 2019-12-30 02:30:01

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#9 2019-12-30 05:46:29

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#10 2019-12-30 21:45:32

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#11 2019-12-31 06:34:54

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#12 2019-12-31 15:41:17

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#13 2019-12-31 21:39:15

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#14 2019-12-31 22:32:36

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#15 2020-01-01 05:14:10

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#16 2020-01-01 14:48:25

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

#17 2021-03-29 18:14:48

Re: [SOLVED] OpenVPN and NordVPN, can't connect to internet

Board footer