Connects to the VPN, but doesn't work
On This Page
Troubleshooting this problem could be very simple: try connecting the VPN with and without "Set nameserver" selected. If one way or the other solves your problem, you're done!
OpenVPN is such a powerful tool with so many options, and computer configurations are so varied, that it is impossible to have an exhaustive troubleshooting guide. This guide is meant for the most common setups, so if it doesn't apply to your situation, or doesn't help, see the Support page for guidance.
This page assumes that you are successfully connected to a VPN server. If not, or if you aren't sure, look at Common Problems.
If OpenVPN is connected to the server but you can't access the Internet
After connecting, if you can't reach the Internet, it's likely that your setup has
Tunnelblick includes the ability to diagnose some DNS problems and will warn you about some common configuration problems.
Check for a DNS problem: If OpenVPN connected to the server properly, but you are having trouble connecting to websites, the first thing to find out is if there is a DNS problem. To check that, try to access a website by using its IP address instead of its name. If the IP address works, but the name doesn't, there is a DNS problem. (Consider the IP address to be "working" if any of the webpage loads.)
If you don't have a DNS problem then there is something else going on. See the Support page for guidance.
If you have a DNS problem:
How to check your DNS settings
Note: If the DNS server list is dimmed (grayed out), it was set via DHCP, not manually.
How to use a different DNS server
There are two ways to set up a different DNS server:
Use a different DNS server whether or not a VPN is active
You can set your computer up to use a different DNS server all the time. Google Public DNS is free, and OpenDNS has a free version. There are lots of others. To use such a DNS server all the time (whether or not a VPN is connected):
This will set up your computer to always (whether or not you are connected to the VPN) use two Google DNS servers and two OpenDNS servers (in that order). Substitute the addresses for the DNS provider of your choice if you want.
Use a different DNS server only when the VPN is active
Note: This will only work if you specify "Set nameserver" in Tunnelblick's settings for the configuration.
Add a line to your OpenVPN configuration file for each DNS server: "
If OpenVPN is connected to the server but your IP address does not change
If you have a check in the "Check if the apparent public IP address changed after connecting" checkbox on the "Settings" tab of Tunnelblick's "VPN Details" window, and your IP address doesn't change after connecting, a window will pop up to notify you.
If OpenVPN connects to the server properly but your IP address does not change, your OpenVPN setup needs to include the "--redirect-gateway" option. By default, OpenVPN only sends some traffic through the VPN — traffic that is specifically destined for the VPN network itself. The "--redirect-gateway" option tells OpenVPN to send all IPv4 traffic through the VPN.
There are three ways the option can be added; you need only use one:
(The "--" at the start of an OpenVPN option is omitted when the option appears in a configuration file.)
How to test your IP address
You can find out what IP address your computer is using by going to https://tunnelblick.net/ipinfo.
The first number shown is your apparent public IP address:
If you have checked "Check if the apparent public IP address changed after connecting", the IP address will be displayed in the Tunnelblick menu while you are connected: