[SOLVED] OpenVPN client dead after 6 days.

[alex303]

Im running OPNsense 23.1.7_3 on 4 port protectli vault. I have a mullvad vpn openvpn client setup and everything was running perfectly fine for 6 days straight, until today. There were no updates, no configuration changes, no power outages, nothing. I rebooted my appliance and it booted up normally as usual. Open vpn client is showing status connected as well as openvpn dashboard widget but there is no connectivity at all. I rechecked my firewall and NAT rules and everything is fine. I had my config file backed up few days ago (with all settings working) so instead of going through a troubleshooting process i just did a quick fresh opnsense installation hoping that everything will work fine when i restore my backup.

Fresh installation went fine. I got my internet connection working. Restored my configuration from few days ago and same thing happens. Everything looks fine on both dashboard and openvpn client status, but there is no connectivity.

I did fresh install again. This time i decided to restore openvpn settings only !!! I added missing mullvad certificate manually. Assigned interfaces manually. Created nat and firewall rules manually and restarted openvpn service and absolutely same thing happens. Then i thought that mullvad openvpn server is down, but that was not the case because my phone connects to that same server and works without any issues. I tried several random mullvad openvpn server IP`s just to be sure. They all connect but none of them work.

Then i did another fresh install but this time i didnt restore my xml config. I set everything up manually and guess what. Its not working even though it all looks like it does. From this point i decided to take a deeper look into whats going on because none of it makes sense.

I logged via SSH and started pinging 1.1.1.1 and this is what i see.

Code: [Select]

# ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1): 56 data bytes
64 bytes from 1.1.1.1: icmp_seq=0 ttl=58 time=18.847 ms
64 bytes from 1.1.1.1: icmp_seq=1 ttl=58 time=18.967 ms
64 bytes from 1.1.1.1: icmp_seq=2 ttl=58 time=19.235 ms
64 bytes from 1.1.1.1: icmp_seq=3 ttl=58 time=18.980 ms
64 bytes from 1.1.1.1: icmp_seq=4 ttl=58 time=18.803 ms
64 bytes from 1.1.1.1: icmp_seq=5 ttl=58 time=19.341 ms
64 bytes from 1.1.1.1: icmp_seq=6 ttl=58 time=19.251 ms
64 bytes from 1.1.1.1: icmp_seq=7 ttl=58 time=19.034 ms
64 bytes from 1.1.1.1: icmp_seq=8 ttl=58 time=37.724 ms
ovpnc1: link state changed to DOWN
64 bytes from 1.1.1.1: icmp_seq=9 ttl=58 time=18.890 ms
ovpnc1: link state changed to UP
64 bytes from 1.1.1.1: icmp_seq=10 ttl=58 time=19.408 ms
64 bytes from 1.1.1.1: icmp_seq=11 ttl=58 time=19.098 ms
64 bytes from 1.1.1.1: icmp_seq=12 ttl=58 time=19.109 ms
64 bytes from 1.1.1.1: icmp_seq=13 ttl=58 time=19.432 ms
64 bytes from 1.1.1.1: icmp_seq=14 ttl=58 time=19.187 ms
64 bytes from 1.1.1.1: icmp_seq=15 ttl=58 time=18.552 ms
64 bytes from 1.1.1.1: icmp_seq=16 ttl=58 time=18.719 ms
64 bytes from 1.1.1.1: icmp_seq=17 ttl=58 time=18.431 ms
64 bytes from 1.1.1.1: icmp_seq=18 ttl=58 time=20.341 ms
64 bytes from 1.1.1.1: icmp_seq=19 ttl=58 time=18.588 ms
64 bytes from 1.1.1.1: icmp_seq=20 ttl=58 time=19.276 ms
64 bytes from 1.1.1.1: icmp_seq=21 ttl=58 time=18.961 ms
64 bytes from 1.1.1.1: icmp_seq=22 ttl=58 time=19.011 ms
64 bytes from 1.1.1.1: icmp_seq=23 ttl=58 time=19.057 ms
64 bytes from 1.1.1.1: icmp_seq=24 ttl=58 time=19.342 ms
64 bytes from 1.1.1.1: icmp_seq=25 ttl=58 time=19.365 ms
64 bytes from 1.1.1.1: icmp_seq=26 ttl=58 time=19.904 ms
64 bytes from 1.1.1.1: icmp_seq=27 ttl=58 time=19.678 ms
64 bytes from 1.1.1.1: icmp_seq=28 ttl=58 time=18.550 ms
64 bytes from 1.1.1.1: icmp_seq=29 ttl=58 time=18.912 ms
64 bytes from 1.1.1.1: icmp_seq=30 ttl=58 time=19.154 ms
64 bytes from 1.1.1.1: icmp_seq=31 ttl=58 time=19.275 ms
64 bytes from 1.1.1.1: icmp_seq=32 ttl=58 time=19.236 ms
64 bytes from 1.1.1.1: icmp_seq=33 ttl=58 time=19.366 ms
64 bytes from 1.1.1.1: icmp_seq=34 ttl=58 time=20.007 ms
64 bytes from 1.1.1.1: icmp_seq=35 ttl=58 time=19.127 ms
64 bytes from 1.1.1.1: icmp_seq=36 ttl=58 time=18.640 ms
64 bytes from 1.1.1.1: icmp_seq=37 ttl=58 time=18.446 ms
64 bytes from 1.1.1.1: icmp_seq=38 ttl=58 time=18.764 ms
64 bytes from 1.1.1.1: icmp_seq=39 ttl=58 time=19.242 ms
64 bytes from 1.1.1.1: icmp_seq=40 ttl=58 time=19.059 ms
64 bytes from 1.1.1.1: icmp_seq=41 ttl=58 time=19.080 ms
64 bytes from 1.1.1.1: icmp_seq=42 ttl=58 time=19.142 ms
64 bytes from 1.1.1.1: icmp_seq=43 ttl=58 time=18.472 ms
64 bytes from 1.1.1.1: icmp_seq=44 ttl=58 time=18.904 ms
64 bytes from 1.1.1.1: icmp_seq=45 ttl=58 time=18.846 ms
64 bytes from 1.1.1.1: icmp_seq=46 ttl=58 time=18.804 ms
64 bytes from 1.1.1.1: icmp_seq=47 ttl=58 time=18.834 ms
64 bytes from 1.1.1.1: icmp_seq=48 ttl=58 time=19.274 ms
64 bytes from 1.1.1.1: icmp_seq=49 ttl=58 time=18.619 ms
64 bytes from 1.1.1.1: icmp_seq=50 ttl=58 time=19.267 ms
64 bytes from 1.1.1.1: icmp_seq=51 ttl=58 time=19.446 ms
64 bytes from 1.1.1.1: icmp_seq=52 ttl=58 time=24.796 ms
64 bytes from 1.1.1.1: icmp_seq=53 ttl=58 time=18.860 ms
64 bytes from 1.1.1.1: icmp_seq=54 ttl=58 time=19.062 ms
64 bytes from 1.1.1.1: icmp_seq=55 ttl=58 time=18.882 ms
64 bytes from 1.1.1.1: icmp_seq=56 ttl=58 time=18.521 ms
64 bytes from 1.1.1.1: icmp_seq=57 ttl=58 time=19.037 ms
64 bytes from 1.1.1.1: icmp_seq=58 ttl=58 time=19.246 ms
64 bytes from 1.1.1.1: icmp_seq=59 ttl=58 time=18.762 ms
64 bytes from 1.1.1.1: icmp_seq=60 ttl=58 time=18.762 ms
64 bytes from 1.1.1.1: icmp_seq=61 ttl=58 time=18.867 ms
64 bytes from 1.1.1.1: icmp_seq=62 ttl=58 time=19.406 ms
64 bytes from 1.1.1.1: icmp_seq=63 ttl=58 time=19.153 ms
64 bytes from 1.1.1.1: icmp_seq=64 ttl=58 time=19.937 ms
64 bytes from 1.1.1.1: icmp_seq=65 ttl=58 time=19.516 ms
64 bytes from 1.1.1.1: icmp_seq=66 ttl=58 time=20.184 ms
64 bytes from 1.1.1.1: icmp_seq=67 ttl=58 time=18.914 ms
64 bytes from 1.1.1.1: icmp_seq=68 ttl=58 time=18.880 ms
64 bytes from 1.1.1.1: icmp_seq=69 ttl=58 time=19.031 ms
ovpnc1: link state changed to DOWN
64 bytes from 1.1.1.1: icmp_seq=70 ttl=58 time=19.144 ms
ovpnc1: link state changed to UP
64 bytes from 1.1.1.1: icmp_seq=71 ttl=58 time=19.330 ms
64 bytes from 1.1.1.1: icmp_seq=72 ttl=58 time=19.582 ms
64 bytes from 1.1.1.1: icmp_seq=73 ttl=58 time=18.946 ms
64 bytes from 1.1.1.1: icmp_seq=74 ttl=58 time=19.586 ms
64 bytes from 1.1.1.1: icmp_seq=75 ttl=58 time=19.460 ms
64 bytes from 1.1.1.1: icmp_seq=76 ttl=58 time=19.102 ms
64 bytes from 1.1.1.1: icmp_seq=77 ttl=58 time=19.000 ms
64 bytes from 1.1.1.1: icmp_seq=78 ttl=58 time=19.038 ms
64 bytes from 1.1.1.1: icmp_seq=79 ttl=58 time=19.377 ms
64 bytes from 1.1.1.1: icmp_seq=80 ttl=58 time=19.272 ms
64 bytes from 1.1.1.1: icmp_seq=81 ttl=58 time=18.726 ms
64 bytes from 1.1.1.1: icmp_seq=82 ttl=58 time=19.447 ms
64 bytes from 1.1.1.1: icmp_seq=83 ttl=58 time=19.547 ms
64 bytes from 1.1.1.1: icmp_seq=84 ttl=58 time=18.654 ms
64 bytes from 1.1.1.1: icmp_seq=85 ttl=58 time=18.570 ms
64 bytes from 1.1.1.1: icmp_seq=86 ttl=58 time=20.179 ms
64 bytes from 1.1.1.1: icmp_seq=87 ttl=58 time=19.673 ms
64 bytes from 1.1.1.1: icmp_seq=88 ttl=58 time=20.617 ms
64 bytes from 1.1.1.1: icmp_seq=89 ttl=58 time=18.892 ms
64 bytes from 1.1.1.1: icmp_seq=90 ttl=58 time=19.123 ms
64 bytes from 1.1.1.1: icmp_seq=91 ttl=58 time=18.978 ms
64 bytes from 1.1.1.1: icmp_seq=92 ttl=58 time=19.380 ms
64 bytes from 1.1.1.1: icmp_seq=93 ttl=58 time=19.507 ms
64 bytes from 1.1.1.1: icmp_seq=94 ttl=58 time=19.320 ms
64 bytes from 1.1.1.1: icmp_seq=95 ttl=58 time=18.902 ms
64 bytes from 1.1.1.1: icmp_seq=96 ttl=58 time=19.591 ms
64 bytes from 1.1.1.1: icmp_seq=97 ttl=58 time=18.969 ms
64 bytes from 1.1.1.1: icmp_seq=98 ttl=58 time=19.039 ms
64 bytes from 1.1.1.1: icmp_seq=99 ttl=58 time=19.339 ms
64 bytes from 1.1.1.1: icmp_seq=100 ttl=58 time=18.678 ms
64 bytes from 1.1.1.1: icmp_seq=101 ttl=58 time=18.815 ms
64 bytes from 1.1.1.1: icmp_seq=102 ttl=58 time=19.711 ms
64 bytes from 1.1.1.1: icmp_seq=103 ttl=58 time=19.346 ms
64 bytes from 1.1.1.1: icmp_seq=104 ttl=58 time=18.919 ms
64 bytes from 1.1.1.1: icmp_seq=105 ttl=58 time=19.054 ms
64 bytes from 1.1.1.1: icmp_seq=106 ttl=58 time=19.143 ms
64 bytes from 1.1.1.1: icmp_seq=107 ttl=58 time=19.063 ms
64 bytes from 1.1.1.1: icmp_seq=108 ttl=58 time=18.863 ms
64 bytes from 1.1.1.1: icmp_seq=109 ttl=58 time=18.433 ms
64 bytes from 1.1.1.1: icmp_seq=110 ttl=58 time=19.728 ms
64 bytes from 1.1.1.1: icmp_seq=111 ttl=58 time=18.704 ms
64 bytes from 1.1.1.1: icmp_seq=112 ttl=58 time=19.229 ms
64 bytes from 1.1.1.1: icmp_seq=113 ttl=58 time=19.834 ms
64 bytes from 1.1.1.1: icmp_seq=114 ttl=58 time=19.205 ms
64 bytes from 1.1.1.1: icmp_seq=115 ttl=58 time=19.406 ms
64 bytes from 1.1.1.1: icmp_seq=116 ttl=58 time=19.449 ms
64 bytes from 1.1.1.1: icmp_seq=117 ttl=58 time=19.142 ms
64 bytes from 1.1.1.1: icmp_seq=118 ttl=58 time=18.886 ms
64 bytes from 1.1.1.1: icmp_seq=119 ttl=58 time=18.876 ms
64 bytes from 1.1.1.1: icmp_seq=120 ttl=58 time=19.844 ms
64 bytes from 1.1.1.1: icmp_seq=121 ttl=58 time=19.606 ms
64 bytes from 1.1.1.1: icmp_seq=122 ttl=58 time=19.442 ms
64 bytes from 1.1.1.1: icmp_seq=123 ttl=58 time=19.196 ms
64 bytes from 1.1.1.1: icmp_seq=124 ttl=58 time=19.098 ms
64 bytes from 1.1.1.1: icmp_seq=125 ttl=58 time=19.177 ms
64 bytes from 1.1.1.1: icmp_seq=126 ttl=58 time=19.641 ms
64 bytes from 1.1.1.1: icmp_seq=127 ttl=58 time=18.745 ms
64 bytes from 1.1.1.1: icmp_seq=128 ttl=58 time=18.641 ms
64 bytes from 1.1.1.1: icmp_seq=129 ttl=58 time=19.400 ms
64 bytes from 1.1.1.1: icmp_seq=130 ttl=58 time=20.503 ms
64 bytes from 1.1.1.1: icmp_seq=131 ttl=58 time=20.312 ms
ovpnc1: link state changed to DOWN
64 bytes from 1.1.1.1: icmp_seq=132 ttl=58 time=18.554 ms
ovpnc1: link state changed to UP
64 bytes from 1.1.1.1: icmp_seq=133 ttl=58 time=18.738 ms
64 bytes from 1.1.1.1: icmp_seq=134 ttl=58 time=18.493 ms
64 bytes from 1.1.1.1: icmp_seq=135 ttl=58 time=19.100 ms
64 bytes from 1.1.1.1: icmp_seq=136 ttl=58 time=20.158 ms
64 bytes from 1.1.1.1: icmp_seq=137 ttl=58 time=19.558 ms
64 bytes from 1.1.1.1: icmp_seq=138 ttl=58 time=19.451 ms
64 bytes from 1.1.1.1: icmp_seq=139 ttl=58 time=19.982 ms
64 bytes from 1.1.1.1: icmp_seq=140 ttl=58 time=18.724 ms
64 bytes from 1.1.1.1: icmp_seq=141 ttl=58 time=18.457 ms
64 bytes from 1.1.1.1: icmp_seq=142 ttl=58 time=19.155 ms
64 bytes from 1.1.1.1: icmp_seq=143 ttl=58 time=19.006 ms
64 bytes from 1.1.1.1: icmp_seq=144 ttl=58 time=19.348 ms
64 bytes from 1.1.1.1: icmp_seq=145 ttl=58 time=19.177 ms
64 bytes from 1.1.1.1: icmp_seq=146 ttl=58 time=19.720 ms
64 bytes from 1.1.1.1: icmp_seq=147 ttl=58 time=19.030 ms
64 bytes from 1.1.1.1: icmp_seq=148 ttl=58 time=19.148 ms
64 bytes from 1.1.1.1: icmp_seq=149 ttl=58 time=18.994 ms
64 bytes from 1.1.1.1: icmp_seq=150 ttl=58 time=19.114 ms
64 bytes from 1.1.1.1: icmp_seq=151 ttl=58 time=19.260 ms
64 bytes from 1.1.1.1: icmp_seq=152 ttl=58 time=18.594 ms
64 bytes from 1.1.1.1: icmp_seq=153 ttl=58 time=19.080 ms
64 bytes from 1.1.1.1: icmp_seq=154 ttl=58 time=19.274 ms
64 bytes from 1.1.1.1: icmp_seq=155 ttl=58 time=19.382 ms
64 bytes from 1.1.1.1: icmp_seq=156 ttl=58 time=19.225 ms
64 bytes from 1.1.1.1: icmp_seq=157 ttl=58 time=18.942 ms
64 bytes from 1.1.1.1: icmp_seq=158 ttl=58 time=18.621 ms
64 bytes from 1.1.1.1: icmp_seq=159 ttl=58 time=18.849 ms
64 bytes from 1.1.1.1: icmp_seq=160 ttl=58 time=19.771 ms
64 bytes from 1.1.1.1: icmp_seq=161 ttl=58 time=19.293 ms
64 bytes from 1.1.1.1: icmp_seq=162 ttl=58 time=18.950 ms
64 bytes from 1.1.1.1: icmp_seq=163 ttl=58 time=19.074 ms
64 bytes from 1.1.1.1: icmp_seq=164 ttl=58 time=19.534 ms
64 bytes from 1.1.1.1: icmp_seq=165 ttl=58 time=18.848 ms
64 bytes from 1.1.1.1: icmp_seq=166 ttl=58 time=18.859 ms
64 bytes from 1.1.1.1: icmp_seq=167 ttl=58 time=18.666 ms
64 bytes from 1.1.1.1: icmp_seq=168 ttl=58 time=19.497 ms
64 bytes from 1.1.1.1: icmp_seq=169 ttl=58 time=18.957 ms
64 bytes from 1.1.1.1: icmp_seq=170 ttl=58 time=18.761 ms
64 bytes from 1.1.1.1: icmp_seq=171 ttl=58 time=19.172 ms
64 bytes from 1.1.1.1: icmp_seq=172 ttl=58 time=18.457 ms
64 bytes from 1.1.1.1: icmp_seq=173 ttl=58 time=19.049 ms
64 bytes from 1.1.1.1: icmp_seq=174 ttl=58 time=18.662 ms
64 bytes from 1.1.1.1: icmp_seq=175 ttl=58 time=19.411 ms
64 bytes from 1.1.1.1: icmp_seq=176 ttl=58 time=19.394 ms
64 bytes from 1.1.1.1: icmp_seq=177 ttl=58 time=19.604 ms
64 bytes from 1.1.1.1: icmp_seq=178 ttl=58 time=18.661 ms
64 bytes from 1.1.1.1: icmp_seq=179 ttl=58 time=19.699 ms
64 bytes from 1.1.1.1: icmp_seq=180 ttl=58 time=18.803 ms
64 bytes from 1.1.1.1: icmp_seq=181 ttl=58 time=19.714 ms
64 bytes from 1.1.1.1: icmp_seq=182 ttl=58 time=19.576 ms
64 bytes from 1.1.1.1: icmp_seq=183 ttl=58 time=18.754 ms
64 bytes from 1.1.1.1: icmp_seq=184 ttl=58 time=18.582 ms
64 bytes from 1.1.1.1: icmp_seq=185 ttl=58 time=18.838 ms
64 bytes from 1.1.1.1: icmp_seq=186 ttl=58 time=18.777 ms
64 bytes from 1.1.1.1: icmp_seq=187 ttl=58 time=19.122 ms
64 bytes from 1.1.1.1: icmp_seq=188 ttl=58 time=19.417 ms
64 bytes from 1.1.1.1: icmp_seq=189 ttl=58 time=19.270 ms
64 bytes from 1.1.1.1: icmp_seq=190 ttl=58 time=19.327 ms
64 bytes from 1.1.1.1: icmp_seq=191 ttl=58 time=19.289 ms
64 bytes from 1.1.1.1: icmp_seq=192 ttl=58 time=19.025 ms
64 bytes from 1.1.1.1: icmp_seq=193 ttl=58 time=19.232 ms
64 bytes from 1.1.1.1: icmp_seq=194 ttl=58 time=19.265 ms
ovpnc1: link state changed to DOWN
64 bytes from 1.1.1.1: icmp_seq=195 ttl=58 time=19.147 ms
ovpnc1: link state changed to UP
64 bytes from 1.1.1.1: icmp_seq=196 ttl=58 time=19.547 ms
64 bytes from 1.1.1.1: icmp_seq=197 ttl=58 time=18.877 ms
64 bytes from 1.1.1.1: icmp_seq=198 ttl=58 time=18.648 ms
64 bytes from 1.1.1.1: icmp_seq=199 ttl=58 time=19.221 ms
64 bytes from 1.1.1.1: icmp_seq=200 ttl=58 time=18.866 ms
64 bytes from 1.1.1.1: icmp_seq=201 ttl=58 time=19.223 ms
64 bytes from 1.1.1.1: icmp_seq=202 ttl=58 time=19.078 ms
64 bytes from 1.1.1.1: icmp_seq=203 ttl=58 time=18.602 ms
64 bytes from 1.1.1.1: icmp_seq=204 ttl=58 time=18.508 ms
64 bytes from 1.1.1.1: icmp_seq=205 ttl=58 time=19.377 ms
64 bytes from 1.1.1.1: icmp_seq=206 ttl=58 time=18.812 ms
64 bytes from 1.1.1.1: icmp_seq=207 ttl=58 time=19.349 ms
64 bytes from 1.1.1.1: icmp_seq=208 ttl=58 time=19.473 ms
64 bytes from 1.1.1.1: icmp_seq=209 ttl=58 time=19.538 ms
64 bytes from 1.1.1.1: icmp_seq=210 ttl=58 time=18.814 ms
^Z                                                <-------------------- THIS IS WHERE I PRESSED Ctrl+X to stop pinging.
Suspended
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
ovpnc1: link state changed to UP

If i untick Don't pull routes and Don't add/remove routes in openvpn client settings this is what happens when i attempt to ping again.

Code: [Select]

ping 1.1.1.1
PING 1.1.1.1 (1.1.1.1): 56 data bytes
ovpnc1: link state changed to DOWN
64 bytes from 1.1.1.1: icmp_seq=54 ttl=58 time=19.409 ms
64 bytes from 1.ovpnc1: link state changed to UP
1.1.1: icmp_seq=55 ttl=58 time=18.545 ms
ovpnc1: link state changed to DOWN
64 bytes from 1.1.1.1: icmp_seq=117 ttl=58 time=20.186 ms
ovpnc1: link state changed to UP
ovpnc1: link state changed to DOWN
64 bytes from 1.1.1.1: icmp_seq=180 ttl=58 time=18.573 ms
ovpnc1: link state changed to UP

Openvn interface goes down. Ping gets through once. Interface goes up and it stays up for 60 seconds and while its up, ping is not getting through.

At this point i thought this must be a hardware issue so i did the unimaginable. I installed pfsense 2.6. Configured openvpn client exactly the same way and it all works without any issue.

At this point i was lost. I decided to do another fresh install of opnsense but this time i didnt restore any configuration and i didnt configure openvpn clients. Instead, i installed and configured wireguard by following opnsense official documentation and guess what. Everything works perfectly fine. Im successfully connected to mullvad WG server. No dns leaks no issues whatsoever. So i proceed and configure openvpn again while leaving WG and as soon as i did that. It all goes down and both wireguard and openvpn gatways stop working while they all show up as up and running.

Then i removed openvpn interface and stopped openvpn client. As soon as i do that, everything starts working normally. Im losing my mind over here. Please help.

[level]

Apparently Mullvad updated their openvpn servers today to 2.6.

https://twitter.com/mullvadnet/status/1656621481386819585?ref_src=twsrc%5Etfw

Running OPNsense 22.7.11_1-amd64 here, and mullvad openvpn has been stable for the last few months.  Now it won't connect.  Nothing changed on my end.  So maybe something in their new OpenVPN 2.6 isn't playing well?

Dashboard shows not connected and it keeps failing if I try to start it.

[alex303]

That makes no sense because pfsense 2.6 is running openvpn v2.5.4 and it works without any issues. I just downloaded openvpn.conf files from mullvad and i see no changes there that would cause openvpn to connect but not work. Btw, latest version of opnsense is using ipenvpn 2.6.

[alex303]

I fixed the issue. It turned out Mullvad have indeed changed settings at their end regarding openvpn compression method. Its no longer Legacy - Disabled LZO Algorithm (--comp-lzo no). its No Preference now.

I reinstalled opnsense one last time, restored my config file, changed compression to No Preference and its all working like a charm. Marking this as resolved.