Certain domains resolve but cannot be reached when using a GUI VPN

I have a VPN qube (fedora 34) that I have installed the IVPN GUI onto. I have made /opt/ivpn persistent so that it I do not have to log in every time that it starts.

This is how it is connected: appvm → sys-IVPN → sys-firewall → sys-net

Originally, I had DNS issues and saw that another user used the qubes-setup-dnat-to-ns script to fix it but had problems where if they changed the vpn server, they would need to run the command again. I believe this is because IVPN and mullvad use their own DNS servers internally. I wrote this script that runs in sys-IVPN to attempt to fix that:

sudo /usr/lib/qubes/qubes-setup-dnat-to-ns
ivpnstatus=$(ivpn status)
while [ “true” ]
teststatus=$(ivpn status)
if [[ “$ivpnstatus” == “$teststatus” ]]
echo “No changes. Sleeping for a bit”
sleep 5
echo “Fixing dns thingy”
sudo /usr/lib/qubes/qubes-setup-dnat-to-ns

It just runs the dnat-to-ns script whenever there is a change in the VPN. DNS appears to work, however there are a couple domains or IP address that will resolve correctly but that I cannot actually reach. Attempting to go to duckduckgo or aol doesn’t work. Running dig www.duckduckgo.com on my appvm returns however I cannot ping either the domain or ip on the appvm. (typing that ip into tor on a whonix cube (not connected to the vpn) gets me to duckduckgo but running dig duckduckgo.com on a whonix terminal returns a different ip than what I got on my appvm through the vpn)

Running a traceroute on duckduckgo and its IP reveals that my request makes it out of the VPN server and bounces around several times before stopping. I am not sure if the issues I am having are still related to the DNS or something else.

Some websites (duckduckgo aol) don’t work at all. Others (github) work sometimes. And others (google searx be) work normally.

Does anyone know of any possible causes or fixes? Or are GUI VPNs just not something that works well with qubes. Thank you, I’m not too proficient with qubes, linux, networking or bash yet but am determined to learn.

1 Like