[GH-ISSUE #792] No internet connection on Arch Linux #197

Closed
opened 2026-10-13 20:15:06 +00:00 by bsakaguchi · 9 comments
Owner

Originally created by @SputerSnoot on GitHub (Apr 30, 2024).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/792

After connecting to server there is no internet connection, the service throws errors.

Steps to reproduce the behavior:

  1. Install AmneziaVPN_Linux_4.4.0.0.tar.zip
  2. Import connection config
  3. Press "Connect"
  4. Run "journalctl -u AmneziaVPN.service"
  5. See error

Expected behavior: having access to internet

Log of a service:

May 01 00:20:52 boob systemd[1]: Started AmneziaVPN Service.
May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 info Started as system service
May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "Daemon" "Daemon created"
May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "LinuxDaemon" "Daemon created"
May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "WireguardUtilsLinux" "WireguardUtilsLinux created."
May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "DnsUtilsLinux" "DnsUtilsLinux created."
May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "IPUtilsLinux" "IPUtilsLinux created."
May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "DaemonLocalServer" "/var/run/amneziavpn seems to be usable"
May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "DaemonLocalServer" "Server path: /var/run/amneziavpn/daemon.socket"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug LocalServer new connection
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServer" "New connection received"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Connection created"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Read Data"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Command received: status"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "Daemon" "Status request"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Read Data"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Command received: activate"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "Daemon" "Activating interface"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "WireguardUtilsLinux" "Created wireguard interface amn0"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxRouteMonitor" "LinuxRouteMonitor created."
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "( 2 ) $  iptables -C OUTPUT -j amnvpn.anchors 2> /dev/null"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "Tearing down cgroup and routing rules"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "( 255 ) $  ip route flush table amnvpnrt"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "Error: argument \"amnvpnrt\" is wrong: table id value is invalid"
May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "LinuxFirewall::uninstall() complete"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t filter && iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t filter -D OUTPUT ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t filter && ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t filter -D OUTPUT ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I POSTROUTING -j amnvpn.anchors -t nat && iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t nat -D POSTROUTING ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I POSTROUTING -j amnvpn.anchors -t nat && ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t nat -D POSTROUTING ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t mangle && iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t mangle -D OUTPUT ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t mangle && ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t mangle -D OUTPUT ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I PREROUTING -j amnvpn.anchors -t raw && iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t raw -D PREROUTING ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $  if ! ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I PREROUTING -j amnvpn.anchors -t raw && ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t raw -D PREROUTING ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "Should be setting up cgroup in /sys/fs/cgroup/net_cls/amnvpnexclusions/ for traffic splitting"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 1 ) $  if [ ! -d /sys/fs/cgroup/net_cls/amnvpnexclusions/ ] ; then mkdir /sys/fs/cgroup/net_cls/amnvpnexclusions/ ; sleep 0.1 ; echo 0x567 > /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "mkdir: cannot create directory ‘/sys/fs/cgroup/net_cls/amnvpnexclusions/’: No such file or directory\n/bin/bash: line 1: /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid: No such file or directory"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 255 ) $  if ! ip rule list | grep -q 0x3211 ; then ip rule add from all fwmark 0x3211 lookup amnvpnrt pri 100 ; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "Error: argument \"amnvpnrt\" is wrong: invalid table ID"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "000.allowLoopback(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "000.allowLoopback(IPv6): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "100.blockAll(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "100.blockAll(IPv6): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "110.allowNets(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "120.blockNets(IPv4): OFF"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "200.allowVPN(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "250.blockIPv6(IPv6): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "290.allowDHCP(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "290.allowDHCP(IPv6): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "300.allowLAN(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "300.allowLAN(IPv6): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "310.blockDNS(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "320.allowDNS(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 2 ) $  if iptables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv4): ON' ; else echo '400.allowPIA(IPv4): OFF -> ON' ; iptables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "400.allowPIA(IPv4): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables v1.8.10 (legacy): Couldn't load target `amnvpn.400.allowPIA':No such file or directory\n\nTry `iptables -h' or 'iptables --help' for more information."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 2 ) $  if ip6tables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv6): ON' ; else echo '400.allowPIA(IPv6): OFF -> ON' ; ip6tables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "400.allowPIA(IPv6): OFF -> ON"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables v1.8.10 (legacy): Couldn't load target `amnvpn.400.allowPIA':No such file or directory\n\nTry `ip6tables -h' or 'ip6tables --help' for more information."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for server_ipv4_address/32"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Gateway  192.168.1.1  for interface  enp6s0"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "WireguardUtilsLinux" "Configuring peer XnnJWRX/c0QmR/+QQgXWQ3uj+La8HUNhPjEngk93nXo= via server_ipv4_address"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for server_ipv4_address/32"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Gateway  192.168.1.1  for interface  enp6s0"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for /999999"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Invalid destination prefix"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "DnsUtilsLinux" "Adding DNS resolver 1.1.1.1 via amn0"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding route to 0.0.0.0/1"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding route to 128.0.0.0/1"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding route to ::/1"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding route to 8000::/1"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "Daemon" "Connection status: 1"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "DnsUtilsLinux" "Error received from the DBus service"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "DnsUtilsLinux" "Error received from the DBus service"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "DnsUtilsLinux" "Error retrieving the DNS  domains from the DBus service"
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "Daemon" "Checking for handshake..."
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "Daemon" "awaiting XnnJWRX/c0QmR/+QQgXWQ3uj+La8HUNhPjEngk93nXo="
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Flush dns completed
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 critical Critical, trying to add invalid route:  1.1.1.1
May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 critical Critical, trying to add invalid route:  1.0.0.1

Screenshots after connecting to the server
2024-05-01_00:31:57_495x776_scrot
2024-05-01_00:32:26_553x178_scrot
2024-05-01_00:33:39_958x663_scrot

Desktop:

  • OS: Arch Linux x86_64

Server:

  • OS: Debian 12

Additional context:
Connection works on other machines (Windows, Android)

Originally created by @SputerSnoot on GitHub (Apr 30, 2024). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/792 After connecting to server there is no internet connection, the service throws errors. Steps to reproduce the behavior: 1. Install AmneziaVPN_Linux_4.4.0.0.tar.zip 2. Import connection config 3. Press "Connect" 4. Run "journalctl -u AmneziaVPN.service" 5. See error Expected behavior: having access to internet Log of a service: ``` May 01 00:20:52 boob systemd[1]: Started AmneziaVPN Service. May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 info Started as system service May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "Daemon" "Daemon created" May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "LinuxDaemon" "Daemon created" May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "WireguardUtilsLinux" "WireguardUtilsLinux created." May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "DnsUtilsLinux" "DnsUtilsLinux created." May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "IPUtilsLinux" "IPUtilsLinux created." May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "DaemonLocalServer" "/var/run/amneziavpn seems to be usable" May 01 00:20:52 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:20:52 debug Amnezia "DaemonLocalServer" "Server path: /var/run/amneziavpn/daemon.socket" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug LocalServer new connection May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServer" "New connection received" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Connection created" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Read Data" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Command received: status" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "Daemon" "Status request" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Read Data" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "DaemonLocalServerConnection" "Command received: activate" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "Daemon" "Activating interface" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "WireguardUtilsLinux" "Created wireguard interface amn0" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxRouteMonitor" "LinuxRouteMonitor created." May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "( 2 ) $ iptables -C OUTPUT -j amnvpn.anchors 2> /dev/null" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "Tearing down cgroup and routing rules" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "( 255 ) $ ip route flush table amnvpnrt" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "Error: argument \"amnvpnrt\" is wrong: table id value is invalid" May 01 00:21:45 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:45 debug Amnezia "LinuxFirewall" "LinuxFirewall::uninstall() complete" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $ if ! iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t filter && iptables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t filter -D OUTPUT ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $ if ! ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t filter && ip6tables -L OUTPUT -n --line-numbers -t filter 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t filter -D OUTPUT ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $ if ! iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I POSTROUTING -j amnvpn.anchors -t nat && iptables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t nat -D POSTROUTING ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $ if ! ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I POSTROUTING -j amnvpn.anchors -t nat && ip6tables -L POSTROUTING -n --line-numbers -t nat 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t nat -D POSTROUTING ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $ if ! iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I OUTPUT -j amnvpn.anchors -t mangle && iptables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t mangle -D OUTPUT ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $ if ! ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I OUTPUT -j amnvpn.anchors -t mangle && ip6tables -L OUTPUT -n --line-numbers -t mangle 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t mangle -D OUTPUT ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $ if ! iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then iptables -I PREROUTING -j amnvpn.anchors -t raw && iptables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs iptables -t raw -D PREROUTING ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables: Bad rule (does a matching rule exist in that chain?)." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 123 ) $ if ! ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) == 1 && $2 == \"amnvpn.anchors\" { found=1 } END { if(found==1) { exit 0 } else { exit 1 } }' ; then ip6tables -I PREROUTING -j amnvpn.anchors -t raw && ip6tables -L PREROUTING -n --line-numbers -t raw 2> /dev/null | awk 'int($1) > 1 && $2 == \"amnvpn.anchors\" { print $1; exit }' | xargs ip6tables -t raw -D PREROUTING ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables: Bad rule (does a matching rule exist in that chain?)." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "Should be setting up cgroup in /sys/fs/cgroup/net_cls/amnvpnexclusions/ for traffic splitting" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 1 ) $ if [ ! -d /sys/fs/cgroup/net_cls/amnvpnexclusions/ ] ; then mkdir /sys/fs/cgroup/net_cls/amnvpnexclusions/ ; sleep 0.1 ; echo 0x567 > /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "mkdir: cannot create directory ‘/sys/fs/cgroup/net_cls/amnvpnexclusions/’: No such file or directory\n/bin/bash: line 1: /sys/fs/cgroup/net_cls/amnvpnexclusions//net_cls.classid: No such file or directory" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 255 ) $ if ! ip rule list | grep -q 0x3211 ; then ip rule add from all fwmark 0x3211 lookup amnvpnrt pri 100 ; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "Error: argument \"amnvpnrt\" is wrong: invalid table ID" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "000.allowLoopback(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "000.allowLoopback(IPv6): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "100.blockAll(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "100.blockAll(IPv6): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "110.allowNets(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "120.blockNets(IPv4): OFF" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "200.allowVPN(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "250.blockIPv6(IPv6): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "290.allowDHCP(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "290.allowDHCP(IPv6): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "300.allowLAN(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "300.allowLAN(IPv6): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "310.blockDNS(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "320.allowDNS(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 2 ) $ if iptables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv4): ON' ; else echo '400.allowPIA(IPv4): OFF -> ON' ; iptables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "400.allowPIA(IPv4): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "iptables v1.8.10 (legacy): Couldn't load target `amnvpn.400.allowPIA':No such file or directory\n\nTry `iptables -h' or 'iptables --help' for more information." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "( 2 ) $ if ip6tables -C amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter 2> /dev/null ; then echo '400.allowPIA(IPv6): ON' ; else echo '400.allowPIA(IPv6): OFF -> ON' ; ip6tables -A amnvpn.a.400.allowPIA -j amnvpn.400.allowPIA -t filter; fi" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "400.allowPIA(IPv6): OFF -> ON" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxFirewall" "ip6tables v1.8.10 (legacy): Couldn't load target `amnvpn.400.allowPIA':No such file or directory\n\nTry `ip6tables -h' or 'ip6tables --help' for more information." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for server_ipv4_address/32" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Gateway 192.168.1.1 for interface enp6s0" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "WireguardUtilsLinux" "Configuring peer XnnJWRX/c0QmR/+QQgXWQ3uj+La8HUNhPjEngk93nXo= via server_ipv4_address" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for server_ipv4_address/32" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Gateway 192.168.1.1 for interface enp6s0" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding exclusion route for /999999" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Invalid destination prefix" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "DnsUtilsLinux" "Adding DNS resolver 1.1.1.1 via amn0" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding route to 0.0.0.0/1" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding route to 128.0.0.0/1" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding route to ::/1" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "LinuxRouteMonitor" "Adding route to 8000::/1" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "Daemon" "Connection status: 1" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "DnsUtilsLinux" "Error received from the DBus service" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "DnsUtilsLinux" "Error received from the DBus service" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "DnsUtilsLinux" "Error retrieving the DNS domains from the DBus service" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "Daemon" "Checking for handshake..." May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Amnezia "Daemon" "awaiting XnnJWRX/c0QmR/+QQgXWQ3uj+La8HUNhPjEngk93nXo=" May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 debug Flush dns completed May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 critical Critical, trying to add invalid route: 1.1.1.1 May 01 00:21:46 boob AmneziaVPN-service.sh[34784]: 2024-05-01 00:21:46 critical Critical, trying to add invalid route: 1.0.0.1 ``` Screenshots after connecting to the server ![2024-05-01_00:31:57_495x776_scrot](https://github.com/amnezia-vpn/amnezia-client/assets/89316631/0399e8f6-c523-4d19-a228-2688dd0b1bde) ![2024-05-01_00:32:26_553x178_scrot](https://github.com/amnezia-vpn/amnezia-client/assets/89316631/ff15f000-514f-4c26-955b-108385b1f5ae) ![2024-05-01_00:33:39_958x663_scrot](https://github.com/amnezia-vpn/amnezia-client/assets/89316631/9b9987d1-ed87-46d2-b941-91c553f3a4cc) Desktop: - OS: Arch Linux x86_64 Server: - OS: Debian 12 Additional context: Connection works on other machines (Windows, Android)
Author
Owner

@outspace commented on GitHub (May 1, 2024):

Some problem with name resolution (DNS issue). Looks same to #528

<!-- gh-comment-id:2088804830 --> @outspace commented on GitHub (May 1, 2024): Some problem with name resolution (DNS issue). Looks same to #528
Author
Owner

@SputerSnoot commented on GitHub (May 2, 2024):

Issue Resolved!

I managed to solve the problem. As my system uses NetworkManager to automatically manage DNS connections, I had to make some adjustments:

  • Disable automatic DNS configuration: I added the following lines to /etc/NetworkManager/NetworkManager.conf:
[main]
dns=none

This prevents NetworkManager from automatically managing DNS configurations.

  • Then, I manually added Cloudflare's DNS servers to /etc/resolv.conf:
nameserver 1.1.1.1
nameserver 1.0.0.1

After making these changes I can access internet. Later i would try another network manager like systemd-networkd

<!-- gh-comment-id:2090598218 --> @SputerSnoot commented on GitHub (May 2, 2024): Issue Resolved! I managed to solve the problem. As my system uses NetworkManager to automatically manage DNS connections, I had to make some adjustments: - Disable automatic DNS configuration: I added the following lines to /etc/NetworkManager/NetworkManager.conf: ``` [main] dns=none ``` This prevents NetworkManager from automatically managing DNS configurations. - Then, I manually added Cloudflare's DNS servers to /etc/resolv.conf: ``` nameserver 1.1.1.1 nameserver 1.0.0.1 ``` After making these changes I can access internet. Later i would try another network manager like systemd-networkd
Author
Owner

@outspace commented on GitHub (May 3, 2024):

@SputerSnot Thanks for your reporting and collaboration.
This is greatly appreciated!

<!-- gh-comment-id:2092820842 --> @outspace commented on GitHub (May 3, 2024): @SputerSnot Thanks for your reporting and collaboration. This is greatly appreciated!
Author
Owner

@adem4ik commented on GitHub (Nov 13, 2024):

Here is my experience with Manjaro Linux:

  • Version 4.8.2.3 is installed.
  • Right after connecting to VPN I had similar problem with DNS.
  • I've resolved it by disabling "Use AmnesiaDNS" in the app settings.
<!-- gh-comment-id:2473442347 --> @adem4ik commented on GitHub (Nov 13, 2024): Here is my experience with Manjaro Linux: - Version 4.8.2.3 is installed. - Right after connecting to VPN I had similar problem with DNS. - I've resolved it by disabling "Use AmnesiaDNS" in the app settings.
Author
Owner

@invas3 commented on GitHub (Nov 29, 2024):

I had the same problem on Arch Linux with systemd and the proposed solution helped me

BUT! I found a more correct method to solve the problem

  • If you use systemd you have systemd-resolved as a part of the systemd package that installed by default, but disabled

If you use NetworkManager, all you need to do is:

  • start and enable systemd-resolved.service
    sudo systemctl enable systemd-resolved.service && sudo systemctl start systemd-resolved.service

and

  • create symbolic link to /etc/resolv.conf
    sudo ln -sf ../run/systemd/resolve/stub-resolv.conf /etc/resolv.conf

NetworkManager can use systemd-resolved as a DNS resolver and cache. Systemd-resolved will be used automatically if /etc/resolv.conf is a symlink to /run/systemd/resolve/stub-resolv.conf, /run/systemd/resolve/resolv.conf or /usr/lib/systemd/resolv.conf.

You can enable it explicitly by setting main.dns=systemd-resolved with a configuration file in /etc/NetworkManager/conf.d/:

/etc/NetworkManager/conf.d/dns.conf
-------------------------------------------------
[main]
dns=systemd-resolved

@SputerSnot @outspace

<!-- gh-comment-id:2508097498 --> @invas3 commented on GitHub (Nov 29, 2024): **I had the same problem on Arch Linux with systemd and the proposed solution helped me** **BUT! I found a more correct method to solve the problem** - If you use systemd you have [**_systemd-resolved_**](https://wiki.archlinux.org/title/Systemd-resolved) as a part of the [systemd](https://archlinux.org/packages/?name=systemd) package that installed by default, **_but disabled_** If you use [NetworkManager](https://wiki.archlinux.org/title/NetworkManager#DNS_caching_and_conditional_forwarding), all you need to do is: - [start](https://wiki.archlinux.org/title/Start) and [enable](https://wiki.archlinux.org/title/Enable) systemd-resolved.service `sudo systemctl enable systemd-resolved.service && sudo systemctl start systemd-resolved.service` and - create symbolic link to /etc/resolv.conf `sudo ln -sf ../run/systemd/resolve/stub-resolv.conf /etc/resolv.conf` NetworkManager can use [systemd-resolved](https://wiki.archlinux.org/title/Systemd-resolved) as a DNS resolver and cache. Systemd-resolved will be used automatically if /etc/resolv.conf is a [symlink](https://wiki.archlinux.org/title/Systemd-resolved#DNS) to /run/systemd/resolve/stub-resolv.conf, /run/systemd/resolve/resolv.conf or /usr/lib/systemd/resolv.conf. You can enable it explicitly by setting main.dns=systemd-resolved with a configuration file in /etc/NetworkManager/conf.d/: ``` /etc/NetworkManager/conf.d/dns.conf ------------------------------------------------- [main] dns=systemd-resolved ``` @SputerSnot @outspace
Author
Owner

@odduck41 commented on GitHub (Dec 14, 2024):

@invas3, thank you!

<!-- gh-comment-id:2543002763 --> @odduck41 commented on GitHub (Dec 14, 2024): @invas3, thank you!
Author
Owner

@fefumo commented on GitHub (Dec 15, 2024):

@invas3 thank you so much, your solution helped me! Adding nameserver 1.1.1.1 nameserver 1.0.0.1 to /etc/resolv.conf also worked, but it was getting rewritten every time i reboot. as i enabled && started the resolved.service, my config now looks like this:

➜  ~ cat /etc/resolv.conf
# This is /run/systemd/resolve/stub-resolv.conf managed by man:systemd-resolved(8).
# Do not edit.
#
# This file might be symlinked as /etc/resolv.conf. If you're looking at
# /etc/resolv.conf and seeing this text, you have followed the symlink.
#
# This is a dynamic resolv.conf file for connecting local clients to the
# internal DNS stub resolver of systemd-resolved. This file lists all
# configured search domains.
#
# Run "resolvectl status" to see details about the uplink DNS servers
# currently in use.
#
# Third party programs should typically not access this file directly, but only
# through the symlink at /etc/resolv.conf. To manage man:resolv.conf(5) in a
# different way, replace this symlink by a static file or a different symlink.
#
# See man:systemd-resolved.service(8) for details about the supported modes of
# operation for /etc/resolv.conf.

nameserver 127.0.0.53
options edns0 trust-ad
search .

which works perfectly without any manual work from my side.

<!-- gh-comment-id:2543558007 --> @fefumo commented on GitHub (Dec 15, 2024): @invas3 thank you so much, your solution helped me! Adding `nameserver 1.1.1.1 nameserver 1.0.0.1` to /etc/resolv.conf also worked, but it was getting rewritten every time i reboot. as i enabled && started the resolved.service, my config now looks like this: ``` ➜ ~ cat /etc/resolv.conf # This is /run/systemd/resolve/stub-resolv.conf managed by man:systemd-resolved(8). # Do not edit. # # This file might be symlinked as /etc/resolv.conf. If you're looking at # /etc/resolv.conf and seeing this text, you have followed the symlink. # # This is a dynamic resolv.conf file for connecting local clients to the # internal DNS stub resolver of systemd-resolved. This file lists all # configured search domains. # # Run "resolvectl status" to see details about the uplink DNS servers # currently in use. # # Third party programs should typically not access this file directly, but only # through the symlink at /etc/resolv.conf. To manage man:resolv.conf(5) in a # different way, replace this symlink by a static file or a different symlink. # # See man:systemd-resolved.service(8) for details about the supported modes of # operation for /etc/resolv.conf. nameserver 127.0.0.53 options edns0 trust-ad search . ``` which works perfectly without any manual work from my side.
Author
Owner

@Pulladium commented on GitHub (Aug 19, 2025):

I had the same problem on Arch Linux with systemd and the proposed solution helped me

BUT! I found a more correct method to solve the problem

* If you use systemd you have [**_systemd-resolved_**](https://wiki.archlinux.org/title/Systemd-resolved) as a part of the [systemd](https://archlinux.org/packages/?name=systemd) package that installed by default, **_but disabled_**

If you use NetworkManager, all you need to do is:

* [start](https://wiki.archlinux.org/title/Start) and [enable](https://wiki.archlinux.org/title/Enable) systemd-resolved.service
  `sudo systemctl enable systemd-resolved.service && sudo systemctl start systemd-resolved.service`

and

* create symbolic link to /etc/resolv.conf
  `sudo ln -sf ../run/systemd/resolve/stub-resolv.conf /etc/resolv.conf`

NetworkManager can use systemd-resolved as a DNS resolver and cache. Systemd-resolved will be used automatically if /etc/resolv.conf is a symlink to /run/systemd/resolve/stub-resolv.conf, /run/systemd/resolve/resolv.conf or /usr/lib/systemd/resolv.conf.

You can enable it explicitly by setting main.dns=systemd-resolved with a configuration file in /etc/NetworkManager/conf.d/:

/etc/NetworkManager/conf.d/dns.conf
-------------------------------------------------
[main]
dns=systemd-resolved

@SputerSnot @outspace

After all changes still dont have internet conn. but already now errors with name resolution
just loop
[pallad@archlinux ~]$ ping google.com
^C

if i look at logs i see next

allad@archlinux ~]$ sudo journalctl -u AmneziaVPN.service
[sudo] password for pallad: 
Aug 19 17:47:43 archlinux systemd[1]: Started AmneziaVPN Servi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Starte>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: IpcPro>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi>
Aug 19 17:48:01 archlinux AmneziaVPN-service.sh[29395]: LocalS>
lines 1-36

pls give me some hints

<!-- gh-comment-id:3201698122 --> @Pulladium commented on GitHub (Aug 19, 2025): > **I had the same problem on Arch Linux with systemd and the proposed solution helped me** > > **BUT! I found a more correct method to solve the problem** > > * If you use systemd you have [**_systemd-resolved_**](https://wiki.archlinux.org/title/Systemd-resolved) as a part of the [systemd](https://archlinux.org/packages/?name=systemd) package that installed by default, **_but disabled_** > > > If you use [NetworkManager](https://wiki.archlinux.org/title/NetworkManager#DNS_caching_and_conditional_forwarding), all you need to do is: > > * [start](https://wiki.archlinux.org/title/Start) and [enable](https://wiki.archlinux.org/title/Enable) systemd-resolved.service > `sudo systemctl enable systemd-resolved.service && sudo systemctl start systemd-resolved.service` > > > and > > * create symbolic link to /etc/resolv.conf > `sudo ln -sf ../run/systemd/resolve/stub-resolv.conf /etc/resolv.conf` > > > NetworkManager can use [systemd-resolved](https://wiki.archlinux.org/title/Systemd-resolved) as a DNS resolver and cache. Systemd-resolved will be used automatically if /etc/resolv.conf is a [symlink](https://wiki.archlinux.org/title/Systemd-resolved#DNS) to /run/systemd/resolve/stub-resolv.conf, /run/systemd/resolve/resolv.conf or /usr/lib/systemd/resolv.conf. > > You can enable it explicitly by setting main.dns=systemd-resolved with a configuration file in /etc/NetworkManager/conf.d/: > > ``` > /etc/NetworkManager/conf.d/dns.conf > ------------------------------------------------- > [main] > dns=systemd-resolved > ``` > > @SputerSnot [@outspace](https://github.com/outspace) After all changes still dont have internet conn. but already now errors with name resolution just loop [pallad@archlinux ~]$ ping google.com ^C if i look at logs i see next ``` allad@archlinux ~]$ sudo journalctl -u AmneziaVPN.service [sudo] password for pallad: Aug 19 17:47:43 archlinux systemd[1]: Started AmneziaVPN Servi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Starte> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: IpcPro> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:47:43 archlinux AmneziaVPN-service.sh[29395]: Amnezi> Aug 19 17:48:01 archlinux AmneziaVPN-service.sh[29395]: LocalS> lines 1-36 ``` pls give me some hints
Author
Owner

@goffyara commented on GitHub (Jun 4, 2026):

The same https://aur.archlinux.org/packages/amneziavpn-bin 4.8.15.4-1 doesn't work

<!-- gh-comment-id:4620581372 --> @goffyara commented on GitHub (Jun 4, 2026): The same https://aur.archlinux.org/packages/amneziavpn-bin 4.8.15.4-1 doesn't work
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amnezia-client#197
No description provided.