После подключения к VPN неработает интернет

[corben]

впн от vpngate
подключаюсь к впн
sudo openvpn --config vpngate_vpn927279694.opengw.net_udp_1644.ovpn
LOG

(Нажмите, чтобы показать/скрыть)

Sat Jun 18 13:42:33 2016 OpenVPN 2.3.4 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [MH] [IPv6] built on Nov 12 2015
Sat Jun 18 13:42:33 2016 library versions: OpenSSL 1.0.1t  3 May 2016, LZO 2.08
Sat Jun 18 13:42:33 2016 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Sat Jun 18 13:42:33 2016 Socket Buffers: R=[212992->131072] S=[212992->131072]
Sat Jun 18 13:42:34 2016 UDPv4 link local: [undef]
Sat Jun 18 13:42:34 2016 UDPv4 link remote: [AF_INET]58.88.228.69:1644
Sat Jun 18 13:42:34 2016 TLS: Initial packet from [AF_INET]58.88.228.69:1644, sid=25990fa7 91b31985
Sat Jun 18 13:42:35 2016 VERIFY OK: depth=2, C=US, O=GeoTrust Inc., CN=GeoTrust Global CA
Sat Jun 18 13:42:35 2016 VERIFY OK: depth=1, C=US, O=GeoTrust Inc., CN=RapidSSL SHA256 CA - G3
Sat Jun 18 13:42:35 2016 VERIFY OK: depth=0, OU=GT11772020, OU=See www.rapidssl.com/resources/cps (c)13, OU=Domain Control Validated - RapidSSL(R), CN=*.opengw.net
Sat Jun 18 13:42:36 2016 Data Channel Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Sat Jun 18 13:42:36 2016 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 18 13:42:36 2016 Data Channel Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Sat Jun 18 13:42:36 2016 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Jun 18 13:42:36 2016 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
Sat Jun 18 13:42:36 2016 [*.opengw.net] Peer Connection Initiated with [AF_INET]58.88.228.69:1644
Sat Jun 18 13:42:39 2016 SENT CONTROL [*.opengw.net]: 'PUSH_REQUEST' (status=1)
Sat Jun 18 13:42:40 2016 PUSH: Received control message: 'PUSH_REPLY,ping 3,ping-restart 10,ifconfig 10.211.1.17 10.211.1.18,dhcp-option DNS 10.211.254.254,dhcp-option DNS 8.8.8.8,route-gateway 10.211.1.18,redirect-gateway def1'
Sat Jun 18 13:42:40 2016 OPTIONS IMPORT: timers and/or timeouts modified
Sat Jun 18 13:42:40 2016 OPTIONS IMPORT: --ifconfig/up options modified
Sat Jun 18 13:42:40 2016 OPTIONS IMPORT: route options modified
Sat Jun 18 13:42:40 2016 OPTIONS IMPORT: route-related options modified
Sat Jun 18 13:42:40 2016 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Jun 18 13:42:40 2016 ROUTE_GATEWAY 10.211.71.161/255.255.255.224 IFACE=wwan0 HWADDR=58:2c:80:13:92:63
Sat Jun 18 13:42:40 2016 TUN/TAP device tun0 opened
Sat Jun 18 13:42:40 2016 TUN/TAP TX queue length set to 100
Sat Jun 18 13:42:40 2016 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Jun 18 13:42:40 2016 /sbin/ip link set dev tun0 up mtu 1500
Sat Jun 18 13:42:40 2016 /sbin/ip addr add dev tun0 local 10.211.1.17 peer 10.211.1.18
Sat Jun 18 13:42:40 2016 /sbin/ip route add 58.88.228.69/32 via 10.211.71.161
Sat Jun 18 13:42:40 2016 /sbin/ip route add 0.0.0.0/1 via 10.211.1.18
Sat Jun 18 13:42:40 2016 /sbin/ip route add 128.0.0.0/1 via 10.211.1.18
Sat Jun 18 13:42:40 2016 Initialization Sequence Completed

пингую гугл

(Нажмите, чтобы показать/скрыть)

ping 216.58.212.206
PING 216.58.212.206 (216.58.212.206) 56(84) bytes of data.
64 bytes from 216.58.212.206: icmp_seq=1 ttl=40 time=653 ms
64 bytes from 216.58.212.206: icmp_seq=2 ttl=40 time=614 ms
64 bytes from 216.58.212.206: icmp_seq=3 ttl=40 time=633 ms
64 bytes from 216.58.212.206: icmp_seq=4 ttl=40 time=615 ms
64 bytes from 216.58.212.206: icmp_seq=5 ttl=40 time=615 ms
64 bytes from 216.58.212.206: icmp_seq=6 ttl=40 time=635 ms
64 bytes from 216.58.212.206: icmp_seq=7 ttl=40 time=645 ms
64 bytes from 216.58.212.206: icmp_seq=8 ttl=40 time=645 ms
64 bytes from 216.58.212.206: icmp_seq=9 ttl=40 time=645 ms
64 bytes from 216.58.212.206: icmp_seq=10 ttl=40 time=605 ms
64 bytes from 216.58.212.206: icmp_seq=11 ttl=40 time=595 ms
64 bytes from 216.58.212.206: icmp_seq=12 ttl=40 time=585 ms
64 bytes from 216.58.212.206: icmp_seq=13 ttl=40 time=585 ms
64 bytes from 216.58.212.206: icmp_seq=14 ttl=40 time=616 ms
64 bytes from 216.58.212.206: icmp_seq=15 ttl=40 time=626 ms
64 bytes from 216.58.212.206: icmp_seq=16 ttl=40 time=626 ms
^C
--- 216.58.212.206 ping statistics ---
17 packets transmitted, 16 received, 5% packet loss, time 15997ms
rtt min/avg/max/mdev = 585.366/621.586/653.757/20.670 ms

пинг есть но сайты не открываються
route -n до подключения к Vpn

(Нажмите, чтобы показать/скрыть)

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.211.71.161   0.0.0.0         UG    1024   0        0 wwan0
10.211.71.160   0.0.0.0         255.255.255.224 U     0      0        0 wwan0
169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 wwan0

route -n после подключения к vpn подключения к Vpn

iptables -L

(Нажмите, чтобы показать/скрыть)

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination   

файрволом управляю firestarter'ом
он отключен

через NetworkManager таже история
пробывал разные конфиги
hideme
vpnbook
результат тот же

Где баг?
прошу помочь
с unix знакомлюсь 2й месяц
ТС не появлялся на Форуме более полугода по состоянию на 14/07/2019 (последняя явка: 18/06/2016). Модератором раздела принято решение закрыть тему.
--zg_nico