Why not just run it on the host/bare metal to accomplish the same concept and its 10000% easier?
Hacking / Opsec
Running Mullvad from Inside Whonix-Workstation
Started by windowsretard · Jun 28, 2026
Hi,
i will begin with the fact I am well aware it's bad for opsec to run VPN after the tor connection. With that being said: i need to succeed in connecting to Mullvad and running their IP-s from Inside Whonix - so Host OS -> Whonix/Tor connection -> Mullvad -> Random websites.
I tried so many things, but when I connect to mullvad vpn from inside workstation the internet stopped working at all. I've tried so many things - including custom dns and whatever i found around the internet as solutions but nothing really worked for me.
Do any of you got working solution to run and connect successfully to mullvad IPs form inside Whonix. Maybe it should be set up on the whonix gateway instead of the workstation or what is the trick?
I am running Whonix 18.
Thank you for the help
i will begin with the fact I am well aware it's bad for opsec to run VPN after the tor connection. With that being said: i need to succeed in connecting to Mullvad and running their IP-s from Inside Whonix - so Host OS -> Whonix/Tor connection -> Mullvad -> Random websites.
I tried so many things, but when I connect to mullvad vpn from inside workstation the internet stopped working at all. I've tried so many things - including custom dns and whatever i found around the internet as solutions but nothing really worked for me.
Do any of you got working solution to run and connect successfully to mullvad IPs form inside Whonix. Maybe it should be set up on the whonix gateway instead of the workstation or what is the trick?
I am running Whonix 18.
Thank you for the help
The isolation part is what I am going after.
I know we can achieve Host OS -> Tor -> VPN, but we can't fully trust the vpn providers I suppose. Whonix->VPN only gets the exit node connecting to the VPN and everything is isolated if the vpn soft run some backdoors or other shenanigans.
I know we can achieve Host OS -> Tor -> VPN, but we can't fully trust the vpn providers I suppose. Whonix->VPN only gets the exit node connecting to the VPN and everything is isolated if the vpn soft run some backdoors or other shenanigans.
Touching the Gateway in ANY way when you are asking these types of questions would not be an intelligent way to go.
You would create a new VM that would do what you need then.
With that, we would want to know if you are running VirtualBox or KVM.
But I'm not going to do a full write up of how either.
You would create a new VM that would do what you need then.
With that, we would want to know if you are running VirtualBox or KVM.
But I'm not going to do a full write up of how either.
I am running KVM -> Whonix.
Honestly I've tried many things already, even used few different AI-s that did the "full write up" with no success. Also found few people in the whonix forums discussing same issue from some years ago, with potential solutions that couldn't work either. I am starting to believe Mullvad might be filtering the tor exit nodes, which is weird to even be considered...
Do you think just creating new VM and then routing initially the traffic through Tor from my host os is actually sufficient isolation? Maybe that could work actually... we create the Whonix Idea just way simpler.
Honestly I've tried many things already, even used few different AI-s that did the "full write up" with no success. Also found few people in the whonix forums discussing same issue from some years ago, with potential solutions that couldn't work either. I am starting to believe Mullvad might be filtering the tor exit nodes, which is weird to even be considered...
Do you think just creating new VM and then routing initially the traffic through Tor from my host os is actually sufficient isolation? Maybe that could work actually... we create the Whonix Idea just way simpler.
Use Qubes OS for this goal.
There, you can easily create a VPN virtual machine that will connect to sys-whonix VM.
Your only problem is that you won't be able use Mullvad VPN because they no longer support OpenVPN protocol, but you need use OpenVPN TCP to connect after Tor.
You can use IVPN, for example, they still offer OpenVPN.
Connection scheme will look like this : sys-whonix - VPN VM (OpenVPN TCP) - your App VM
post/c64eb43ff38e83e863c5/#c-b07c4ed9b3d1e0f9c8
There, you can easily create a VPN virtual machine that will connect to sys-whonix VM.
Your only problem is that you won't be able use Mullvad VPN because they no longer support OpenVPN protocol, but you need use OpenVPN TCP to connect after Tor.
You can use IVPN, for example, they still offer OpenVPN.
Connection scheme will look like this : sys-whonix - VPN VM (OpenVPN TCP) - your App VM
post/c64eb43ff38e83e863c5/#c-b07c4ed9b3d1e0f9c8