Package Details: netextender 10.3.6_39-1

Git Clone URL: https://aur.archlinux.org/netextender.git (read-only, click to copy)
Package Base: netextender
Description: SonicWALL SSL VPN Client
Upstream URL: https://www.sonicwall.com/en-us/products/remote-access/vpn-client
Keywords: dell netextender sonicwall ssl sslvpn vpn
Licenses: LicenseRef-SonicWall-General-Product-Agreement
Submitter: None
Maintainer: satoki
Last Packager: satoki
Votes: 32
Popularity: 0.000535
First Submitted: 2010-07-02 22:09 (UTC)
Last Updated: 2026-09-04 14:38 (UTC)

Pinned Comments

satoki commented on 2026-06-18 21:26 (UTC) (edited on 2026-08-27 23:43 (UTC) by satoki)

This is to consolidate the necessary changes after installing this package.

Upgrading from 10.3.5_36-1 or earlier — three one-time steps

  1. If the upgrade fails with /usr/bin/resolvconf exists in filesystem, that symlink was created by the old package (or by SonicWall's install.sh) and is not owned by anything. Remove it and retry:

    sudo rm /usr/bin/resolvconf

    The package now depends on resolvconf instead of forging that symlink, so pacman will ask which provider to install. Pick systemd-resolvconf if you use systemd-resolved, openresolv otherwise.

  2. NEService.service moved from /etc/systemd/system to /usr/lib/systemd/system, where packaged units belong. If you had enabled it, the old symlink now dangles and the daemon will not start at boot — refresh it:

    sudo systemctl reenable NEService.service

  3. pppd is no longer involved (10.3.x speaks PPP itself over /dev/net/tun), so the setuid bit from the previous instructions can be reverted:

    sudo chmod u-s /usr/bin/pppd

After installing

  1. Enable and start the NEService daemon:

    sudo systemctl enable --now NEService.service

  2. DNS during the session: NetExtender hands its nameservers to resolvconf on connect and withdraws them on disconnect. With systemd-resolvconf that goes into systemd-resolved rather than rewriting the file, so /etc/resolv.conf should point at one of resolved's files:

    sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf sudo ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf

Do note the DNS resolution depends on the servers received by NetExtender, and thus may not allow resolving external hostnames, or hostnames in your local network. If you experience DNS failures, add fallback nameservers to /etc/systemd/resolved.conf under [Resolve]

FallbackDNS=1.1.1.1 8.8.8.8

Then restart: sudo systemctl restart systemd-resolved

Latest Comments

1 2 3 4 5 6 .. 12 Next › Last »

satoki commented on 2026-06-18 21:26 (UTC) (edited on 2026-08-27 23:43 (UTC) by satoki)

This is to consolidate the necessary changes after installing this package.

Upgrading from 10.3.5_36-1 or earlier — three one-time steps

  1. If the upgrade fails with /usr/bin/resolvconf exists in filesystem, that symlink was created by the old package (or by SonicWall's install.sh) and is not owned by anything. Remove it and retry:

    sudo rm /usr/bin/resolvconf

    The package now depends on resolvconf instead of forging that symlink, so pacman will ask which provider to install. Pick systemd-resolvconf if you use systemd-resolved, openresolv otherwise.

  2. NEService.service moved from /etc/systemd/system to /usr/lib/systemd/system, where packaged units belong. If you had enabled it, the old symlink now dangles and the daemon will not start at boot — refresh it:

    sudo systemctl reenable NEService.service

  3. pppd is no longer involved (10.3.x speaks PPP itself over /dev/net/tun), so the setuid bit from the previous instructions can be reverted:

    sudo chmod u-s /usr/bin/pppd

After installing

  1. Enable and start the NEService daemon:

    sudo systemctl enable --now NEService.service

  2. DNS during the session: NetExtender hands its nameservers to resolvconf on connect and withdraws them on disconnect. With systemd-resolvconf that goes into systemd-resolved rather than rewriting the file, so /etc/resolv.conf should point at one of resolved's files:

    sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf sudo ln -sf /run/systemd/resolve/resolv.conf /etc/resolv.conf

Do note the DNS resolution depends on the servers received by NetExtender, and thus may not allow resolving external hostnames, or hostnames in your local network. If you experience DNS failures, add fallback nameservers to /etc/systemd/resolved.conf under [Resolve]

FallbackDNS=1.1.1.1 8.8.8.8

Then restart: sudo systemctl restart systemd-resolved

polo070770 commented on 2026-04-16 12:11 (UTC)

Here one that been stick with 10.2, but I decided to give a try latest version.

First of all, important to start NEService. systemctl start NEService

NetExtender overwrites /etc/resolv.conf via resolvconf with only the VPN DNS servers when you connect. These VPN DNS servers only resolve internal hostnames, so all public internet DNS (google.com, etc.) breaks.

To fix this, add permanent fallback nameservers to /etc/resolvconf.conf so they always stay in resolv.conf regardless of what NetExtender pushes: echo 'name_servers="192.168.1.1 1.1.1.1"' | sudo tee -a /etc/resolvconf.conf

Then reload: sudo resolvconf -u

Replace 192.168.1.1 with your router's IP if different. 1.1.1.1 is Cloudflare as a public fallback. After this, when NetExtender connects, resolv.conf will contain both the VPN DNS servers and your local/public DNS (for internet), and both will work simultaneously.

This applies if you are using NetworkManager with rc-manager=resolvconf. Check with:
cat /etc/NetworkManager/conf.d/rc-manager.conf

wheremygit commented on 2025-12-10 12:47 (UTC)

If anyone is having trouble with the latest version "Server not Reachable", just find, download and install the v10.3.0 from the link.

https://www.mysonicwall.com/muir/freedownloads

polr commented on 2025-07-25 09:55 (UTC) (edited on 2025-07-25 09:59 (UTC) by polr)

Thank you @satoki for picking up this package!

I had to make some changes in my system for this update to work, here's a summary in case it helps anyone:

  • Config files are now located in /etc/SonicWall/NetExtender/Config/. If you have a dotfiles repository, you may need to update it.

  • In my system, the connection is now called snwl_ssltunnel instead of ppp0.

  • Like @chris-allen said, you will need to run sudo systemctl enable --now NEService.service because it's not enabled by default.

  • To make DNS work, I had to run sudo systemctl enable --now systemd-resolved.service. This made most apps work, except for those that read /etc/resolv.conf directly, such as dig. To fix those, I ran sudo ln -sf /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf. @chris-allen Maybe this was the problem you were facing?

  • It seems that the chmod u+s /usr/sbin/pppd workaround is no longer needed. :)

chris-allen commented on 2025-07-23 12:22 (UTC) (edited on 2025-07-24 16:48 (UTC) by chris-allen)

The first hurdle I came across was any attempt to run nxcli would result in:

Error: connect to nx service failed: dial tcp :51330: connect: connection refused

It appears the updates to the package don't automatically start or enable the service. You can manually fix this by running:

sudo systemctl enable NEService
sudo systemctl start NEService

I am however having an issue with DNS failing to resolve once connected. It's pretty annoying to not be able to use a browser while connected to a VPN. The previous CLI had a --dns-only-local flag which prevented this issue. Does anyone have a different solution for 10.3.0?

intersectRaven commented on 2025-07-23 01:02 (UTC)

10.3 doesn't work.

I was going to be happy that someone finally made it work since I was planning to adopt the package if/when I managed to make 10.3 work but latest still doesn't work.

techge commented on 2025-06-29 12:46 (UTC)

@laasonen Mh, can't reproduce :/ it builds on my system.

But I need to abandon this package anyway, because I do not need to access a sonic wall anymore, nor do I have a system to test the software.

laasonen commented on 2025-06-23 10:17 (UTC) (edited on 2025-06-23 10:23 (UTC) by laasonen)

I'm unable to install. The post install script seems to fail:

makepkg -i

==> Making package: netextender 10.2.850-1 (2025-06-23T13:13:56 EEST)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Downloading NetExtender.Linux-10.2.850.x86_64.tgz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 5394k  100 5394k    0     0  5967k      0 --:--:-- --:--:-- --:--:-- 5967k
  -> Downloading general-product-agreement...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   824  100   824    0     0  12596      0 --:--:-- --:--:-- --:--:-- 12676
==> Validating source_x86_64 files with sha256sums...
    NetExtender.Linux-10.2.850.x86_64.tgz ... Passed
    general-product-agreement ... Skipped
==> Extracting sources...
  -> Extracting NetExtender.Linux-10.2.850.x86_64.tgz with bsdtar
==> Entering fakeroot environment...
==> Starting package()...
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
--- SonicWall NetExtender 10.2.850 Installer ---
ERROR: This copy of NetExtender is intended for 32-bit systems.
       Please install a copy of the 64-bit version of NetExtender.
==> ERROR: A failure occurred in package().
    Aborting...

I'm running x86_64:

uname -m
x86_64

techge commented on 2024-12-11 09:14 (UTC)

The new client (10.3.0) is completely different than the previous version and does not seem to work yet (even if you do use their questionable install.sh). Therefore, I won't update this package yet until I get it to work.

polo070770 commented on 2024-08-27 06:01 (UTC)

Hello! Since few days ago, I am not able to use netextender. I thought it would be because pppd updates but I already tried adding the suggested permissions, reverting it back and applying it again. The file has the following: .rwsr-xr-x 432k root 27 Dec 2023 /usr/sbin/pppd

In logs I see the following error: [general error 30319] ERROR: Could not sent SIGTERM to pppd or stop WireGuard failed: Permission denied (13)

Any suggestion?

Thanks in advance