NordVPN Connection Failed

spiteful · December 19, 2020, 11:49pm

Hi, I am trying to use a client released by NordVPN on my fresh install of openSUSE Tumbleweed, but I was not able to use the client and I received this error:

Whoops! Connection failed. Please try again. If the problem persists, contact our customer support.

I reached out to NordVPN’s support, but they have not been able to help me. They did let me know that I can access the logs at:

/var/log/nordvpn/daemon.log

This is a cleaned up snippet of the really long log output, maybe someone can make sense of what is wrong:

2020/12/19 14:12:24 Get "https://zwyr157wwiu6eior.com/v1/helpers/ips/insights": dial tcp: lookup zwyr157wwiu6eior.com on ::1]:53: read udp ::1]:38098->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://zwyr157wwiu6eior.com/v1/helpers/ips/insights": dial tcp: lookup zwyr157wwiu6eior.com on ::1]:53: read udp ::1]:37139->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://boi9osyg1uwtyafn.com/v1/helpers/ips/insights": dial tcp: lookup boi9osyg1uwtyafn.com on ::1]:53: read udp ::1]:56385->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://x9fnzrtl4x8pynsf.com/v1/helpers/ips/insights": dial tcp: lookup x9fnzrtl4x8pynsf.com on ::1]:53: read udp ::1]:48583->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://icpsuawn1zy5amys.com/v1/helpers/ips/insights": dial tcp: lookup icpsuawn1zy5amys.com on ::1]:53: read udp ::1]:40148->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://2ohvff3e8v46kb8.info/v1/helpers/ips/insights": dial tcp: lookup 2ohvff3e8v46kb8.info on ::1]:53: read udp ::1]:45202->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://4qlnp8csnrj5zla.me/v1/helpers/ips/insights": dial tcp: lookup 4qlnp8csnrj5zla.me on ::1]:53: read udp ::1]:58823->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://q8uvnsgljgste3f.info/v1/helpers/ips/insights": dial tcp: lookup q8uvnsgljgste3f.info on ::1]:53: read udp ::1]:35416->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://w569ut7zbkiqf5b.xyz/v1/helpers/ips/insights": dial tcp: lookup w569ut7zbkiqf5b.xyz on ::1]:53: read udp ::1]:55341->::1]:53: read: connection refused
2020/12/19 14:12:24 Get "https://w569ut7zbkiqf5b.xyz/v1/servers?limit=1073741824&filters[servers.status]=online&fields[servers.id]&fields[servers.name]&fields[servers.hostname]&fields[servers.station]&fields[servers.load]&fields[servers.created_at]&fields[servers.groups.id]&fields[servers.groups.title]&fields[servers.technologies.id]&fields[servers.technologies.metadata]&fields[servers.technologies.pivot.status]&fields[servers.specifications.identifier]&fields[servers.specifications.values.value]&fields[servers.locations.country.name]&fields[servers.locations.country.code]&fields[servers.locations.country.city.name]&fields[servers.locations.country.city.latitude]&fields[servers.locations.country.city.longitude]&fields[servers.locations.country.city.hub_score]": dial tcp: lookup w569ut7zbkiqf5b.xyz on ::1]:53: read udp ::1]:40323->::1]:53: read: connection refused
2020/12/19 14:12:24 error on making client request: Head "https://cdn.zwyr157wwiu6eior.com/configs/templates/ovpn/1.0/template.xslt": dial tcp: lookup cdn.zwyr157wwiu6eior.com on ::1]:53: read udp ::1]:51020->::1]:53: read: connection refused
2020/12/19 14:12:24 error on making client request: Head "https://downloads.otmwumj6qw5em0zb.me//configs/templates/ovpn_xor/1.0/template.xslt": dial tcp: lookup downloads.otmwumj6qw5em0zb.me on ::1]:53: read udp ::1]:54435->::1]:53: read: connection refused
2020/12/19 14:12:24 error on making client request: Head "https://downloads.ltlxvxjjmvhn.me//configs/templates/ovpn_xor/1.0/template.xslt": dial tcp: lookup downloads.ltlxvxjjmvhn.me on ::1]:53: read udp ::1]:52026->::1]:53: read: connection refused
2020/12/19 14:12:24 error on making client request: Head "https://downloads.p99nxpivfscyverz.me//configs/templates/ovpn_xor/1.0/template.xslt": dial tcp: lookup downloads.p99nxpivfscyverz.me on ::1]:53: read udp ::1]:51028->::1]:53: read: connection refused
2020/12/19 14:12:24 error on making client request: Head "https://downloads.wutlk3t9mybdz.info//configs/templates/ovpn_xor/1.0/template.xslt": dial tcp: lookup downloads.wutlk3t9mybdz.info on ::1]:53: read udp ::1]:60382->::1]:53: read: connection refused
2020/12/19 14:12:24 error on making client request: Head "https://downloads.icpsuawn1zy5amys.com//configs/templates/ovpn_xor/1.0/template.xslt": dial tcp: lookup downloads.icpsuawn1zy5amys.com on ::1]:53: read udp ::1]:44276->::1]:53: read: connection refused
2020/12/19 14:12:24 error on making client request: Head "https://downloads.x9fnzrtl4x8pynsf.com//configs/templates/ovpn/1.0/template.xslt": dial tcp: lookup downloads.x9fnzrtl4x8pynsf.com on ::1]:53: read udp ::1]:33783->::1]:53: read: connection refused
2020/12/19 14:12:24 error on making client request: Head "https://downloads.ns8469rfvth42.xyz//configs/dns/cybersec.json": dial tcp: lookup downloads.ns8469rfvth42.xyz on ::1]:53: read udp ::1]:40240->::1]:53: read: connection refused
2020/12/19 14:14:27 releasing /etc/resolv.conf
2020/12/19 14:20:34 PRE_CONNECT system info:
App Version: 3.8.7
OS Info:
NAME="openSUSE Tumbleweed"
# VERSION="20201216"
ID="opensuse-tumbleweed"
ID_LIKE="opensuse suse"
VERSION_ID="20201216"
PRETTY_NAME="openSUSE Tumbleweed"
ANSI_COLOR="0;32"
CPE_NAME="cpe:/o:opensuse:tumbleweed:20201216"
BUG_REPORT_URL="https://bugs.opensuse.org"
HOME_URL="https://www.opensuse.org/"
DOCUMENTATION_URL="https://en.opensuse.org/Portal:Tumbleweed"
LOGO="distributor-logo"

System Info:Linux localhost.localdomain 5.9.14-1-default #1 SMP Sat Dec 12 06:57:32 UTC 2020 (c648a46) x86_64 x86_64 x86_64 GNU/Linux


Routing Table:
default via 192.168.1.1 dev wlp58s0 proto dhcp metric 600 
192.168.1.0/24 dev wlp58s0 proto kernel scope link src 192.168.1.239 metric 600 

IP Rules:
0:    from all lookup local
32766:    from all lookup main
32767:    from all lookup default

IP Tables:
filter:
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT

nat:
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT

mangle:
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT

raw:
-P PREROUTING ACCEPT
-P OUTPUT ACCEPT

security:
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT


2020/12/19 14:20:35 invalid .ovpn file config: file:///etc/xml/suse-catalog.xml:1: parser error : document is empty
2020/12/19 14:20:35 POST_CONNECT system info:
Routing Table:
default via 192.168.1.1 dev wlp58s0 proto dhcp metric 600 
192.168.1.0/24 dev wlp58s0 proto kernel scope link src 192.168.1.239 metric 600 

IP Rules:
0:    from all lookup local
32766:    from all lookup main
32767:    from all lookup default

IP Tables:
filter:
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT

nat:
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT

mangle:
-P PREROUTING ACCEPT
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT

raw:
-P PREROUTING ACCEPT
-P OUTPUT ACCEPT

security:
-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT

tsu2 · December 20, 2020, 12:10am

Some info in the log you posted is useful,
Your machine is able to establish early network connectivity to a number of servers,
But you are actively denied from connecting.
Beyond that, you don’t have info…
Possible causes might include
Wrong credentials (username/password)
Encryption used to login is not supported. TW sometimes has a problem with this, but at this point you’re using standard SSL. Is NordVPN properly updating their machines to support latest stable encryption protocols? It’s their problem and not yours if this is the problem.

Bottom line is that the things you can check on your end are limited (You should fully update your TW with zypper dup) and your username/password is correct and properly entered into their system.
Other than that, there’s not much you can do, the problem is almost certainly on their end.

TSU

spiteful · December 20, 2020, 4:32am

Hi tsu2, thanks for the reply. Before connecting, we actually needed to log into our NordVPN account. I got past that step so I don’t know if it’s the login. There was another option that worked where I could configure Network Manager to connect to one of their servers, but I wouldn’t be able to automatically connect to their fastest server anymore.

I guess I can continue engaging with their support to see if the problem can be fixed. I want openSUSE users to have a good VPN experience with NordVPN.

tsu2 · December 20, 2020, 8:44pm

It’s definitely something having to do with the login.
You’re not getting past that to where you even start setting up the VPN itself.

TSU

spiteful · December 24, 2020, 7:50am

An update following up with a solution. You should be able to use the NordVPN client if you switched to using nordlynx using the command: nordvpn set technology nordlynx. Nordlynx is pretty much built around Wireguard.

tsu2 · December 24, 2020, 10:23pm

Another approach which you didn’t ask about is the more usual way of using Network Manager… Like Nordvpn, it also bypasses pre-authentication using SSL.

https://support.nordvpn.com/Connectivity/Linux/1061938702/How-to-connect-to-NordVPN-using-Linux-Network-Manager.htm

TSU

spiteful · December 25, 2020, 6:05am

I actually used this as the workaround, but you aren’t always guaranteed to be connecting to the fastest server, which was pretty noticeable. I was trying to figure out the solution for getting their client to work so that people could have another way to use NordVPN when using openSUSE.