Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

I've got two macs, both on the same network, both using Tunnelblick to connect to vpn. Both with same settings. Both connect fine and both have the same settings for DNS and search domain applied after connection. The only difference actually is that one is Lion and second one is Mountain Lion. That's the end of the differences.

After connecting to my vpn on Mountain Lion I cannot ping nor ssh to any address using domain name. And I don't mean local/private domain. I mean google.com for example. Nothing! However, when using nslookup/dig/host domain name is resolved just fine. On the second machine with Lion everything works just fine. With the exact same settings.

Any thoughts?

I've already tried adding -AlwaysAppendSearchDomains and it didn't work [why would it, google.com is not under the search domain specified in my dns settings...].

share|improve this question
Same problem here. Did you find a solution for this problem? –  Oliver F. Jun 6 '13 at 19:01
Not really. The only solution for me was to manuall enter the DNS address from vpn [even though it was exactly the same as the address updated by tunnelblick]. it seems that tunnelblick/openvpn is missing a step which would flush/update the dns system on newer mac. –  Krystian Jun 7 '13 at 10:05
BTW, adding the DNS server manually was the only way to solve this issue before switching to an other VPN client. Indeed I had to add two DNS serer. The internal of my company and a public one. Somehow I wasn't able to resolve public names while being connected. –  Oliver F. Jun 7 '13 at 17:20
You tried adding -AlwaysAppendSearchDomains to what? –  Daniel Serodio Aug 26 '14 at 19:40
Yes, but it doesn't work even for fully qualified domains. –  Krystian Aug 27 '14 at 8:13

2 Answers 2

I solved my problem by switching to Vicosity. After installing Viscosity I imported my Tunnelblick configuration and have been able to connect to the VPN of my company instantly. In opposite to Tunnelblick Viscosity is not free. But the price is fine for me.

share|improve this answer
up vote 0 down vote accepted

Currently the solution for tunnelblick [ver 3.3 beta 54] is to manually configure DNS settings to have two entries: 1. your VPN dns address 2. your regular dns address

for me it looks like this:


I know it's not perfect, but it works. I guess that for most people it shouldn't be a problem, especially that in osx you can configure multiple network profiles which will automatically switch when they detect changes in your network configuration.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.