VPN troubleshooting

Tips

  • If using qubes-vpn, check the VPN service’s log in the VPN VM by running:

    sudo journalctl -u qubes-vpn-handler

  • Always test your basic VPN connection before adding scripts.

  • Test DNS: Ping a familiar domain name from an appVM. It should print the IP address for the domain.

  • Use iptables -L -v and iptables -L -v -t nat to check firewall rules. The latter shows the critical PR-QBS chain that enables DNS forwarding.

VPN does not reconnect after suspend

This applies when using OpenVPN.

After suspend/resume, OpenVPN may not automatically reconnect. In order to get it to work, you must kill the OpenVPN process and restart it.