In case of changes/updates to ppp, you will need to re-run chmod -v u+s /usr/sbin/pppd.

Here one that been stick with 10.2, but I decided to give a try latest version.

First of all, important to start NEService. systemctl start NEService

NetExtender overwrites /etc/resolv.conf via resolvconf with only the VPN DNS servers when you connect. These VPN DNS servers only resolve internal hostnames, so all public internet DNS (google.com, etc.) breaks.

To fix this, add permanent fallback nameservers to /etc/resolvconf.conf so they always stay in resolv.conf regardless of what NetExtender pushes: echo 'name_servers="192.168.1.1 1.1.1.1"' | sudo tee -a /etc/resolvconf.conf

Then reload: sudo resolvconf -u

Replace 192.168.1.1 with your router's IP if different. 1.1.1.1 is Cloudflare as a public fallback. After this, when NetExtender connects, resolv.conf will contain both the VPN DNS servers and your local/public DNS (for internet), and both will work simultaneously.

This applies if you are using NetworkManager with rc-manager=resolvconf. Check with:
cat /etc/NetworkManager/conf.d/rc-manager.conf

Thank you @satoki for picking up this package!

I had to make some changes in my system for this update to work, here's a summary in case it helps anyone:

• Config files are now located in /etc/SonicWall/NetExtender/Config/. If you have a dotfiles repository, you may need to update it.

• In my system, the connection is now called snwl_ssltunnel instead of ppp0.

• Like @chris-allen said, you will need to run sudo systemctl enable --now NEService.service because it's not enabled by default.

• To make DNS work, I had to run sudo systemctl enable --now systemd-resolved.service. This made most apps work, except for those that read /etc/resolv.conf directly, such as dig. To fix those, I ran sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf. @chris-allen Maybe this was the problem you were facing?

• It seems that the chmod u+s /usr/sbin/pppd workaround is no longer needed. :)

The first hurdle I came across was any attempt to run nxcli would result in:

Error: connect to nx service failed: dial tcp :51330: connect: connection refused

It appears the updates to the package don't automatically start or enable the service. You can manually fix this by running:

sudo systemctl enable NEService
sudo systemctl start NEService

I am however having an issue with DNS failing to resolve once connected. It's pretty annoying to not be able to use a browser while connected to a VPN. The previous CLI had a --dns-only-local flag which prevented this issue. Does anyone have a different solution for 10.3.0?

10.3 doesn't work.

I was going to be happy that someone finally made it work since I was planning to adopt the package if/when I managed to make 10.3 work but latest still doesn't work.

@laasonen Mh, can't reproduce :/ it builds on my system.

But I need to abandon this package anyway, because I do not need to access a sonic wall anymore, nor do I have a system to test the software.

I'm unable to install. The post install script seems to fail:

makepkg -i

==> Making package: netextender 10.2.850-1 (2025-06-23T13:13:56 EEST)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Downloading NetExtender.Linux-10.2.850.x86_64.tgz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 5394k  100 5394k    0     0  5967k      0 --:--:-- --:--:-- --:--:-- 5967k
  -> Downloading general-product-agreement...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   824  100   824    0     0  12596      0 --:--:-- --:--:-- --:--:-- 12676
==> Validating source_x86_64 files with sha256sums...
    NetExtender.Linux-10.2.850.x86_64.tgz ... Passed
    general-product-agreement ... Skipped
==> Extracting sources...
  -> Extracting NetExtender.Linux-10.2.850.x86_64.tgz with bsdtar
==> Entering fakeroot environment...
==> Starting package()...
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
==> ERROR: A failure occurred in package().
    Aborting...

I'm running x86_64:

uname -m
x86_64

The new client (10.3.0) is completely different than the previous version and does not seem to work yet (even if you do use their questionable install.sh). Therefore, I won't update this package yet until I get it to work.

Hello! Since few days ago, I am not able to use netextender. I thought it would be because pppd updates but I already tried adding the suggested permissions, reverting it back and applying it again. The file has the following: .rwsr-xr-x 432k root 27 Dec 2023 /usr/sbin/pppd

In logs I see the following error: [general error 30319] ERROR: Could not sent SIGTERM to pppd or stop WireGuard failed: Permission denied (13)

Any suggestion?

Thanks in advance

@alexleach

YES. I've recently realised it's doing this. Following the logs it is a NetExtender issue and nothing to do with PPPD.

The only way i could work out how to fix it was to use the systemd-resolved drop-in file replacement (https://wiki.archlinux.org/title/Systemd-resolved#Manually) - but this would break whenever not connected to VPN, so the systemd config file has to be created in /etc/ppp (or wherever), then create a bash file in /etc/ppp/ip-up.d/ that moves the file from /etc/ppp/{your_systemd-resolved.conf} to /etc/systemd/resolved.conf.d/.

Make sure to remember to make the bash file executable.

Then a cleanup file that does the opposite of the above must be added to /etc/ppp/ip-down.d/

The real fix for this is with NetExtender to properly make use of systemd.