Kernel 5.15 VPN not working

Starting from kernel 5.15 VPN not work anymore
After login with the UI of AirVPN
Screenshot_20211211_125950

once I press Activate Network Lock i get this message
Screenshot_20211211_125827

until kernel 5.14 there was no problem

Strange, i have no problem’s with Eddie.

I’m using KDE btw.

Maybe look under properties and Activate Network Lock at startup.

I had adjusted some changes in Eddie, but I’m not sure if it helps if you try to copy that and why you have this problems.

I’m also have Kernel 5.15.6

plasma too here, nope what you suggest

here log with k 5.15

I 2021.12.13 18:34:17 - Checking login ...
! 2021.12.13 18:34:18 - Logged in.
! 2021.12.13 18:34:22 - Activation of Network Lock - Linux iptables
. 2021.12.13 18:34:22 - Network lock not enabled on IPv6 layer. IPv6 seems disabled at system level.
F 2021.12.13 18:34:22 - Exception: iptables don't reply, probabily kernel modules issue

here log with k 5.14

. 2021.12.13 19:07:31 - Eddie version: 2.20.0 / linux_x64, System: Linux, Name: Manjaro Linux \r  (\n) (\l), Version: Linux Manjaro 5.14.21-2-MANJARO #1 SMP PREEMPT Sun Nov 21 22:43:47 UTC 2021 x86_64 GNU/Linux, Mono/.Net: 6.12.0 (makepkg/c621c35ffa0 Thu Jun 17 02:48:02 PM -03 2021); Framework: v4.0.30319
. 2021.12.13 19:07:31 - Command line arguments (2): path.resources="/usr/share/eddie-ui" path.exec="/usr/bin/eddie-ui"
. 2021.12.13 19:07:31 - Raise system privileges
. 2021.12.13 19:07:40 - Profile path: /home/xxxxxx/.config/eddie/default.profile
. 2021.12.13 19:07:40 - Reading options from /home/xxxxxx/.config/eddie/default.profile
. 2021.12.13 19:07:40 - Tun Driver - /dev/net/tun
. 2021.12.13 19:07:40 - OpenVPN - Version: 2.5.4 - OpenSSL 1.1.1l  24 Aug 2021, LZO 2.10 (/usr/bin/openvpn)
. 2021.12.13 19:07:40 - SSH - Version: OpenSSH_8.8p1, OpenSSL 1.1.1l  24 Aug 2021 (/usr/bin/ssh)
I 2021.12.13 19:07:40 - SSL - Not available
. 2021.12.13 19:07:40 - curl - Version: 7.80.0 (/usr/bin/curl)
I 2021.12.13 19:07:41 - Ready
. 2021.12.13 19:07:43 - Collect information about AirVPN completed
I 2021.12.13 19:07:45 - Checking login ...
! 2021.12.13 19:07:46 - Logged in.
! 2021.12.13 19:08:49 - Activation of Network Lock - Linux iptables
. 2021.12.13 19:08:49 - Network lock not enabled on IPv6 layer. IPv6 seems disabled at system level.
I 2021.12.13 19:08:51 - Session starting.
I 2021.12.13 19:08:51 - Checking authorization ...
! 2021.12.13 19:08:52 - Connecting to Circinus (Singapore, Singapore)
. 2021.12.13 19:08:52 - OpenVPN > OpenVPN 2.5.4 [git:makepkg/3f7a85b9aebe7be0+] x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Oct  5 2021
. 2021.12.13 19:08:52 - OpenVPN > library versions: OpenSSL 1.1.1l  24 Aug 2021, LZO 2.10
. 2021.12.13 19:08:52 - OpenVPN > Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
. 2021.12.13 19:08:52 - OpenVPN > Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
. 2021.12.13 19:08:52 - OpenVPN > Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
. 2021.12.13 19:08:52 - OpenVPN > Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
. 2021.12.13 19:08:52 - OpenVPN > TCP/UDP: Preserving recently used remote address: [AF_INET]185.200.116.205:443
. 2021.12.13 19:08:52 - OpenVPN > Socket Buffers: R=[212992->212992] S=[212992->212992]
. 2021.12.13 19:08:52 - OpenVPN > UDP link local: (not bound)
. 2021.12.13 19:08:52 - OpenVPN > UDP link remote: [AF_INET]185.200.116.205:443
. 2021.12.13 19:08:52 - OpenVPN > TLS: Initial packet from [AF_INET]185.200.116.205:443, sid=f6c336da cce5cd31
. 2021.12.13 19:08:52 - OpenVPN > VERIFY OK: depth=1, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=airvpn.org CA, emailAddress=info@airvpn.org
. 2021.12.13 19:08:52 - OpenVPN > VERIFY KU OK
. 2021.12.13 19:08:52 - OpenVPN > Validating certificate extended key usage
. 2021.12.13 19:08:52 - OpenVPN > ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
. 2021.12.13 19:08:52 - OpenVPN > VERIFY EKU OK
. 2021.12.13 19:08:52 - OpenVPN > VERIFY OK: depth=0, C=IT, ST=IT, L=Perugia, O=airvpn.org, CN=Circinus, emailAddress=info@airvpn.org
. 2021.12.13 19:08:52 - OpenVPN > Control Channel: TLSv1.3, cipher TLSv1.3 TLS_CHACHA20_POLY1305_SHA256, peer certificate: 4096 bit RSA, signature: RSA-SHA512
. 2021.12.13 19:08:52 - OpenVPN > [Circinus] Peer Connection Initiated with [AF_INET]185.200.116.205:443
. 2021.12.13 19:08:53 - OpenVPN > SENT CONTROL [Circinus]: 'PUSH_REQUEST' (status=1)
. 2021.12.13 19:08:53 - OpenVPN > PUSH: Received control message: 'PUSH_REPLY,comp-lzo no,redirect-gateway ipv6 def1 bypass-dhcp,dhcp-option DNS 10.14.114.1,dhcp-option DNS6 fde6:7a:7d20:a72::1,tun-ipv6,route-gateway 10.14.114.1,topology subnet,ping 10,ping-restart 60,ifconfig-ipv6 fde6:7a:7d20:a72::1062/64 fde6:7a:7d20:a72::1,ifconfig 10.14.114.100 255.255.255.0,peer-id 0,cipher AES-256-GCM'
. 2021.12.13 19:08:53 - OpenVPN > Pushed option removed by filter: 'redirect-gateway ipv6 def1 bypass-dhcp'
. 2021.12.13 19:08:53 - OpenVPN > Pushed option removed by filter: 'dhcp-option DNS6 fde6:7a:7d20:a72::1'
. 2021.12.13 19:08:53 - OpenVPN > Pushed option removed by filter: 'tun-ipv6'
. 2021.12.13 19:08:53 - OpenVPN > Pushed option removed by filter: 'ifconfig-ipv6 fde6:7a:7d20:a72::1062/64 fde6:7a:7d20:a72::1'
. 2021.12.13 19:08:53 - OpenVPN > OPTIONS IMPORT: timers and/or timeouts modified
. 2021.12.13 19:08:53 - OpenVPN > OPTIONS IMPORT: compression parms modified
. 2021.12.13 19:08:53 - OpenVPN > OPTIONS IMPORT: --ifconfig/up options modified
. 2021.12.13 19:08:53 - OpenVPN > OPTIONS IMPORT: route-related options modified
. 2021.12.13 19:08:53 - OpenVPN > OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
. 2021.12.13 19:08:53 - OpenVPN > OPTIONS IMPORT: peer-id set
. 2021.12.13 19:08:53 - OpenVPN > OPTIONS IMPORT: adjusting link_mtu to 1625
. 2021.12.13 19:08:53 - OpenVPN > OPTIONS IMPORT: data channel crypto options modified
. 2021.12.13 19:08:53 - OpenVPN > Data Channel: using negotiated cipher 'AES-256-GCM'
. 2021.12.13 19:08:53 - OpenVPN > Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
. 2021.12.13 19:08:53 - OpenVPN > Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
. 2021.12.13 19:08:53 - OpenVPN > net_route_v4_best_gw query: dst 0.0.0.0
. 2021.12.13 19:08:53 - OpenVPN > net_route_v4_best_gw result: via 192.168.100.1 dev eth0
. 2021.12.13 19:08:53 - OpenVPN > ROUTE_GATEWAY 192.168.100.1/255.255.255.0 IFACE=eth0 HWADDR=8a:4a:88:8e:27:53
. 2021.12.13 19:08:53 - OpenVPN > TUN/TAP device tun0 opened
. 2021.12.13 19:08:53 - OpenVPN > net_iface_mtu_set: mtu 1500 for tun0
. 2021.12.13 19:08:53 - OpenVPN > net_iface_up: set tun0 up
. 2021.12.13 19:08:53 - OpenVPN > net_addr_v4_add: 10.14.114.100/24 dev tun0
. 2021.12.13 19:08:59 - OpenVPN > net_route_v4_add: 185.200.116.205/32 via 192.168.100.1 dev [NULL] table 0 metric -1
. 2021.12.13 19:08:59 - OpenVPN > net_route_v4_add: 0.0.0.0/1 via 10.14.114.1 dev [NULL] table 0 metric -1
. 2021.12.13 19:08:59 - OpenVPN > net_route_v4_add: 128.0.0.0/1 via 10.14.114.1 dev [NULL] table 0 metric -1
. 2021.12.13 19:08:59 - DNS of the system updated to VPN DNS (Rename method: /etc/resolv.conf generated)
. 2021.12.13 19:08:59 - Routes, added a new route, 185.200.116.203 for gateway 10.14.114.1
. 2021.12.13 19:08:59 - Unable to compute route for 2a0a:b640:1:2:438b:4ba6:2c02:c622: IPv6 VPN gateway not available.
. 2021.12.13 19:08:59 - Flushing DNS
. 2021.12.13 19:08:59 - Flush DNS - nscd
I 2021.12.13 19:08:59 - Checking route IPv4
I 2021.12.13 19:09:00 - Checking DNS
! 2021.12.13 19:09:00 - Connected.
. 2021.12.13 19:09:00 - OpenVPN > Initialization Sequence Completed

I’ve tried both install file and portable from AirVPN, I’ve deleted old profile in .config, I’ve enable ipv6 system wide

dunno where I can check and fix…

Just a shot in the dark here. Are you using ufw/GUFW as your firewall? If so, from the Arch wiki:

Start and enable ufw.service to make it available at boot. Note that this will not work if iptables.service is also enabled (and same for its ipv6 counterpart). 

https://wiki.archlinux.org/title/Uncomplicated_Firewall

tnx, checked ufw, the service was not enabled, after enabling the ufw.service VPN works with kernel 5.15

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.