Muddog VPN traffic
Choose which traffic to send through the VPN under Settings → VPN traffic. You can also open these settings by clicking Traffic settings on the Connection screen.
Choose a mode
| Option | Traffic that uses the VPN | Traffic that uses your regular internet connection |
|---|---|---|
| Use VPN for all internet traffic | IPv4 internet traffic. This is the default. | Traffic covered by existing local network routes |
| Use VPN only for specified IPs and ranges | Traffic sent to destination IPs in the list | Traffic sent to destinations outside the list |
| Exclude specified IPs and ranges from VPN | IPv4 internet traffic outside the list | Traffic to listed destinations and traffic covered by existing local network routes |
| Only apps launched here (Linux and Windows) | IPv4 internet traffic from apps launched through Muddog and their child processes | Traffic from other apps and local network communication |
macOS supports three modes: all internet traffic, IP/range inclusion, and IP/range exclusion. Per-app VPN is not available on macOS.
IPv6 does not go through the VPN. Per-app mode on Windows blocks IPv6 traffic from selected apps; in all other cases, IPv6 uses your regular connection. See Per-app VPN for instructions on launching apps in per-app mode.
Include or exclude IP addresses and ranges
For example, to access only specific destinations through another country, select Use VPN only for specified IPs and ranges. To use the VPN for most internet traffic but your regular connection for certain destinations, select Exclude specified IPs and ranges from VPN.
- Under Settings → VPN traffic, select the inclusion or exclusion mode.
- Enter one address per line in IP addresses or ranges.
- Review the resulting Addresses and ranges to apply.
- Click Save changes.
- Connect to the VPN. If you are already connected, disconnect and reconnect.
The following examples show the input format. Replace them with the addresses of the destinations you actually want to access.
203.0.113.7
198.51.100.0/24
| Input | Meaning |
|---|---|
203.0.113.7 | A single IPv4 address. It appears as 203.0.113.7/32 after saving. |
198.51.100.0/24 | The range from 198.51.100.0 to 198.51.100.255 |
You can also paste a list separated by commas or spaces. You can specify
up to 128 entries, and duplicates are removed. An entry such as
198.51.100.42/24 is normalized to its network range, 198.51.100.0/24,
so review the results before saving.
Domain names, website URLs, and IPv6 addresses are not accepted. Inclusion and exclusion modes require at least one address. Switching to the all internet traffic mode keeps your saved list of valid addresses.
When changes take effect
Settings apply to your next VPN connection after you save. Saving while connected keeps the current connection active. On the Connection screen, check the current traffic mode and the reconnection notice, then click Disconnect → Connect VPN.
Limits of IP-based settings
IP and range modes apply to all programs whose destination IP matches. On Linux and Windows, use per-app mode to select a particular program. Per-app mode and IP/range modes are separate options and cannot be combined.
Websites may use multiple IP addresses or change addresses, so adding a single IP does not necessarily cover all communication with that website. DNS requests are also routed according to whether the DNS server's destination IP matches the inclusion or exclusion list.
All-traffic and exclusion modes keep existing local network routes. In inclusion mode, explicitly listing a range that overlaps your local network makes Muddog attempt to send that range through the VPN as well, which can prevent access to local devices. These settings are not intended to provide access to the connected peer's private network.