Skip to main content

How to enable VPN over ICMP / DNS in SoftEther VPN

Or where is the damn VPN over ICMP / DNS setting in SoftEther

Because the infrequent times I need to install a SoftEther server I seem to waste half an hour trying to locate this setting.

BUT, it's already enabled by default.

Well enjoy this tip and if this has helped do thank me by following me on twitter @danielsokolows.


  1. Daniel, I have quick question.

    I have an ftp server as well as media server sitting right on the same machine where softether is installed. all those 3 services under the same pc. at first my ftp was working then not, short after that was my media server. The ports are set in softether to listen but no luck. Any suggestions? By the way I have a bridged connection... 2 ethernet ports bridged as one..

    1. Not sure what the issue is, the last 5 minutes thinking about this and I can only suggest you start with the most basic setup and begin adding things and see what brakes things - maybe it's the bridged connection.

  2. but how to setup the Softether VPN Client to use ICMP???

    waiting for your answer.

    Thank you.

    1. I haven't been able to test this myself (the initial requirements I had no longer are there) BUT my understanding was from all my reading that the client will automatically select ICMP once all other options are tried and fail.

    2. Daniel is right.
      I bumped into this page searching for the same answer..
      You cannot force the client to use icmp or dns. if TCP and UDP ports are blocked then ICMP is being used, if ICMP is blocked and UDP port 53 is open then DNS is used.
      I tested it by blocking protocols one by one with iptables.
      works like charm :)

  3. I tried to disable all ports from the server. But still unable to connect from my client to server. The client set to connect port 443.

  4. Would you still need to setup port forwarding on your router to forward port 53 (DNS) and ICMP port (not sure what port it is and I don't think you can forward this type of protocol on a router), to your Softether VPN server?

    1. No I don't believe you need to do that, the idea is that these are automatically allowed.

  5. If china also block
    Also Local Bridge not work on wireless card, so impossible to make site-to-site config with wireless card, only point=to-site is possible
    Compare to Microsoft builtin IpEnableRouter and SSTP VPN, site-to-site work flawless with wireless card


Post a Comment

Popular posts from this blog

Opera SOCKS Proxy Setup Issues

SOCKS error: Connection closed by remote server When setting up SOCKS only proxy in Opera web browser make sure to specify the IP address instead of your fully qualified domain name (FQDN). Using a host name will not work and Opera simply fails to connect to the proxy server. Sample working setup screen shot with a Dante proxy server , note that HTTP, HTTPS, FTP, SSH options are left blank. Bug DSK-364301 has been filled with Opera, if it has been a while since this post and the issue still not fixed feel free to add your word of encouragement by emailing :)

Storing passwords in PuTTY

How to save SSH username/password for auto login in PuTTy The answer is you can't do least in plain PuTTy. However there is an awesome fork with that let's you store the username and password and other additional features called KiTTy.

So grab yourself a copy and +1 this if you do, thanks.

How to child proof a fireplace

DIY - Do it yourself fireplace child guard Our wonderful 8.5 month old Sofia has become a crawling race car with an untamed thirst for exploration. And so with the cold nights approaching we needed to child proof the fireplace. This however proved to be more difficult than would reasonably expect, I've checked the local Toys "R" Us, Walmart, and even a Canadian Tire with no success for a ready to use product. Internet search was more fruitful and returned a few online stores one could order from, however in all honestly they didn't look too sturdy to me. So I build my own relatively quickly and inexpensively. Materials needed is a privacy plastic lattice - the smallest hole pattern - a few screws and anchors; tools needed are a drill, and a handsaw if you don't have the lattice cut at the store - that’s it. The construction consits of screwing the lattice into the wall and the final product is easiest explained through following pictures. Feel free to +1 this po…