Highlighted Articles Discussion Group | On This Page Starting TunnelblickEnsyc driver. To launch Tunnelblick, double-click Tunnelblick in the Applications folder. Parrot driver download. Tunnelblick will automatically be launched the next time you log in if you do not quit Tunnelblick before you log out, shut down, or restart your computer. Tunnelblick requires few computer resources when no VPN is connected, so most people leave it running all the time. Quitting TunnelblickTo quit Tunnelblick, click on the Tunnelblick icon in the menu bar at the top of your screen, then click 'Quit Tunnelblick'. You can also type quit Tunnelblick by typing Command-Q when a Tunnelblick window is at the front of the display.
Automatically Starting Tunnelblick Upon LoginTunnelblick is a menu bar item, not an application. If Tunnelblick is running when you log out, shut down, or restart your computer, Tunnelblick will automatically launch the next time you log in. If you do not want Tunnelblick to launch automatically the next time you log in, quit Tunnelblick before you log out, shut down, or restart. Tunnelblick will also be launched automatically if any VPNs are active when you log in. (Don't confuse the automatic launch of Tunnelblick upon login with the 'automatically connect on launch” option, which causes a connection to be established whenever Tunnelblick is launched.) Normal Tunnelblick OperationOnce Tunnelblick has been launched, you control it from the Tunnelblick icon in the menu bar at the top of your screen. The Tunnelblick icon is usually placed near the Spotlight icon. When no VPN connection is active, the icon is dim: When a VPN is connected, the icon is dark: If you click on the icon, you'll see a drop down menu similar to the following: There will be a 'Connect” menu item for each available VPN configuration; configurations in subfolders appear on submenus. Click on a 'Connect' item to establish the corresponding VPN connection. While the connection is being established, a dash will appear in the menu item and the Tunnelblick icon will darken and lighten repeatedly. Depending on your setup, you may be asked for a passphrase and/or username/password. You can save your passphrase, username, or password in Apple's Keychain by checking the appropriate checkbox. The connection will be active until you disconnect it or log out. Putting your computer to sleep will close the connection; when the computer wakes up Tunnelblick will attempt to reestablish the connection. (This behavior may be modified using Tunnelblick's 'Advanced' settings window.) Use 'Disconnect” from the drop-down menu to close the VPN connection. Use 'Quit” to close all open connections and quit the program and prevent Tunnelblick from starting itself at your next login at your computer. Note: Tunnelblick will not automatically disconnect a configuration that is set up to automatically connect 'when the computer starts'. The connection will remain open until your computer shuts down or you specifically disconnect it. The 'VPN Details' WindowWhen the Tunnelblick menu is displayed, if you click on 'VPN Details” a window similar to the following will appear: This window has five panels: Configurations, Appearance, Preferences, Utilities, and Info. Select a panel by clicking on its button in the toolbar at the top of the window. The 'Configurations' panel is shown above. ConfigurationsThe Configurations panel has an entry for each configuration on the left side. Tabs with the log and settings for the configuration selected on the left side are displayed on the right side. You may adjust the relative sizes of the left and right side by dragging the small dot between the two sides. Note: The username and password of a computer administrator are required for most changes to configurations. At the bottom of the list of configurations on the left side of the window there are three small buttons:
'Connect' and 'Disconnect' buttons connect or disconnect the configuration selected on the left side of the window. Another button allows you to copy diagnostic info to the Clipboard so you may paste it into an email or other document to get help troubleshooting a problem, and a help button displays detailed help. The 'Log' tab (shown above) displays the log for the configuration. The 'Settings' tab (shown above) allows you to see and modify several settings for the configuration 'Connect” specifies when the configuration should be connected:
'Set DNS/WINS' specifies how to handle DNS and WINS settings when the VPN is active:
'Monitor network settings' causes network settings to be monitored for changes. It is available only when 'Set nameserver' or 'Set nameserver 3.1' is selected. When a change is detected, the connection will be disconnected and reconnected. Other actions and actions for changes to specific network settings can be specified on the 'While Connected' tab of the 'Advanced' settings window. 'Route all IPv4 traffic through the VPN' causes Tunnelblick to start OpenVPN with the '--redirect-gateway def1' option. 'Disable IPv6 (tun only)' disables IPv6 on all network interfaces while the configuration is connected. 'Check if the apparent public IP address changed after connecting' checks the IP address before and after connecting. This can be used to detect some DNS problems. 'Reset the primary interface after disconnecting' will restore network connectivity after disconnecting from some configurations which are badly written. Additional settings may be examined and modified by clicking the 'Advanced' button. AppearanceThe 'Appearance' panel of the 'VPN Details' window allows you to modify Tunnelblick's appearance: PreferencesThe 'Preferences' panel of the 'VPN Details' window allows you to modify Tunnelblick's behavior, check for updates, and reset disabled warnings: UtilitiesThe 'Utilities' panel of the 'VPN Details' window has buttons to perform several tasks related to Tunnelblick or OpenVPN: InfoThe 'Info' panel of the 'VPN Details' window displays information about the Tunnelblick program and the people who have contributed to it: (Note: the credits scroll to reveal additional contributors; not all contributors are displayed in the above screenshot.) Keyboard ShortcutsYou may use the standard keyboard shortcuts in the 'VPN Details' window:
Using More than One VPN ConfigurationYou can have any number of configurations installed; each of the configurations will be available in the drop down menu and in the 'Details” window. Connecting to More than One VPN SimultaneouslyTunnelblick can maintain multiple simultaneous open connections to different VPNs. However, this is for experts only:
Command-Line InterfaceTunnelblick has support for AppleScript, allowing you to list configurations and connect or disconnect them via AppleScript or the command line. |
Tunnelblick All Traffic Through Vpn Login
Highlighted Articles Discussion Group | On This Page It's complicated!Tunnelblick is an interface for OpenVPN. Most problems people think they have with Tunnelblick are really problems they are having with OpenVPN, so what follows is a mix of information about Tunnelblick and OpenVPN. OpenVPN is such a powerful tool with so many options, and computer configurations are so varied, that it is difficult to have an exhaustive guide to troubleshooting problems. Tunnelblick is designed to deal easily with the most common setups, so if it doesn't apply to your situation, or doesn't help, ask the Tunnelblick Discussion Group or the OpenVPN users mailing list for help. I used a different program and uninstalled it, but with Tunnelblick all I can see are my old configurations!The different program (for example, Urban Shield) uses a customized version of Tunnelblick that makes backups of their configurations and restores them when Tunnelblick starts up, and also hides all other configurations. To solve this problem:
How can you tell if OpenVPN connected to a server?
If OpenVPN is not connected to the serverIf OpenVPN can't connect to the server and Tunnelblick hasn't popped up a window explaining why, there should be one or more error messages in the OpenVPN log to indicate what the problem is. To see the OpenVPN log, click on the Tunnelblick icon, click on 'VPN Details', click on the large 'Configurations' button at the top of the window, click on the name of the configuration you are troubleshooting on the left side of the window, and then click on the 'Log' tab on the right side. The OpenVPN log is the large area of black text on a white background. (It contains messages from Tunnelblick in addition to the messages from OpenVPN.) Look at lines near the end of the log for an error message. OpenVPN Connects, but you can't surf the InternetSee Connects OK, But.. A connection is established, but drops out or is restarted after a few seconds or minutes, or DNS stops working after a few minutesThis can have several causes:
An error messages says to see details in the Console LogSee The Console Log for instructions on viewing the Console Log. An error message says 'write to TUN/TAP : Input/output error (code=5)'OpenVPN may display a series of these messages when using a TAP connection. Although a few such messages are normal, if they continue to be displayed for more than a few seconds and the connection is never established, try to connect with DNS/WINS set to 'Set nameserver (alternate 1)'. An error message says 'You have tried to connect using a configuration file that is the same as the sample configuration file installed by Tunnelblick'This means that you have tried to connect to a VPN without setting up a configuration file. Consult your network administrator or your VPN service provider to obtain configuration and other files or the information you need to modify the sample file. For more information, see Getting VPN Service. An OpenVPN log entry says 'potential route subnet conflict'This means that the remote network you are creating a VPN to has IP addresses that are also in your local LAN. One way to fix this is to include a 'redirect gateway local' option in the OpenVPN configuration file and un-check Tunnelblick's 'Route all IPv4 traffic through the VPN'. (All traffic will still be routed through the VPN because of the 'redirect gateway' option.) Another way to fix this is to change the addresses of your local LAN. You do this by changing your router's configuration. For some routers you specify the first three numbers of the LAN (e.g. 192.168.77); in other routers you specify the address of the router itself (e.g. 192.168.77.1). After changing the LAN address, you should restart all computers (and other network devices including network printers), so they start using addresses in the new address range. Example: This means that both the remote network and your local network are using the 192.168.1. An OpenVPN log entry says 'Cannot allocate TUN/TAP dev dynamically'This problem indicates a problem with the Tun and/or Tap system extensions.
An error message says 'Tunnelblick was not able to load a device driver (kext) that is needed to connect..'An OpenVPN log entry says 'Tunnelblick: openvpnstart status #247: Error: Unable to load tun and tap kexts. Status = 71'An OpenVPN log entry says 'Tunnelblick: openvpnstart status #247: Error: Unable to load net.tunnelblick.tun and/or net.tunnelblick.tap kexts in 5 tries. Status = 71'Please see Errors Loading System Extensions. An OpenVPN log entry says 'Note: unable to redirect default gateway -- Cannot read current default gateway from system'There is a problem (in macOS and/or OpenVPN) which causes OpenVPN to be unable to read the default gateway when you try to connect OpenVPN through an existing PPP connection; here is a workaround:
An OpenVPN log entry says 'Cannot load certificate file XXX.crt: error: 02001002:system library:fopen:No such file or directory: error: 20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines'Your certificate file (XXX.crt) was not found. Usually the file should be in the same folder as the OpenVPN configuration file, not in a subfolder. For example, if the configuration file has a line such as An OpenVPN log entry says 'TLS Error: Auth Username/Password was not provided by peer'Your client configuration file should include an 'auth-user-pass' option. An OpenVPN log entry says 'script failed: could not execute external program'An up or down script contains an error. Common causes:
Cannot Empty the TrashIf you dragged an old copy of Tunnelblick to the Trash and now cannot empty the Trash and because Finder complains that something is 'in use' (probably something named Sparkle.framework), try the following: Launch Terminal (in /Applications/Utilities). Copy/paste the following into Terminal: You will be asked for your password. Type it in (it will not show up as you type it) then press the 'enter/return' key on the keyboard. Quit Terminal, then try to empty the Trash. I am repeatedly asked for my password or token value (Tunnelblick 3.6.9beta02 or higher)For some OpenVPN setups that use 'small block' ciphers and username/password authentication or two-factor authentication (2FA), this can be very annoying because the user will be asked to authenticate each time 64 MB has been transferred through the VPN. There are several ways to avoid the problem:
More information is available at OpenVPN and SWEET32. |
Tunnelblick All Traffic Through Vpn Service
Feb 12, 2016 If this is not checked, all IPv4 traffic may still be sent through the VPN because the OpenVPN configuration file may contain the option, or the option may be 'pushed' from the VPN server. Tunnelblick doesn't provide a way to override a pushed '-redirect-gateway' because that option is often used for security purposes and should not be overridden. I want to make sure that when the traffic is going through the VPN and not though the normal internet connection. The gateway ip for my network is 192.168.0.1 and the gateway for openVPN is 10.8.0.1. I have done trace route and it shows that the websites that don't work access 192.168.0.1 and not 10.8.0.1. Tunnelblick Route All Traffic Through Vpn the top 3 services of its kind currently on the market, and HideMyAss, a VPN that might be decent for light applications, but is certainly not secure enough for more sensitive data.