Cannot connect using bridges

Custom bridges

1. Not behind any firewall blocking.

   When I try to start Tor a custom bridges from bridges.torproject.org from my laptop on this same network, I can connect successfully.

   obfs4 162.218.224.167:20695 5592D9B167ADBA7F41A953413082120E5261F6D3 cert=rTRghmZgvJxkAYWC+usA0AWfYbkuxo6mmg8b3FzymS70xavBJvAsy5v/qtShs8P/Q0Imfg iat-mode=0

   tor.service logs

   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.735 [notice] Tor 0.4.7.16 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.11, Zlib 1.2.13, Liblzma 5.4.1, Libzstd 1.5.4 and Glibc 2.36 as libc.
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.735 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.735 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc".
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.735 [notice] Read configuration file "/etc/tor/torrc".
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.737 [notice] Opening Socks listener on 127.0.0.1:9050
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.737 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.737 [notice] Opening DNS listener on 127.0.0.1:9053
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.737 [notice] Opened DNS listener connection (ready) on 127.0.0.1:9053
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.737 [notice] Opening Transparent pf/netfilter listener on 127.0.0.1:9040
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.737 [notice] Opened Transparent pf/netfilter listener connection (ready) on 127.0.0.1:9040
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.737 [notice] Opening Control listener on 127.0.0.1:9051
   May 09 12:35:58 localhost tor[419005]: May 09 12:35:58.737 [notice] Opened Control listener connection (ready) on 127.0.0.1:9051
   May 09 12:35:58 localhost Tor[419005]: We compiled with OpenSSL 300000b0: OpenSSL 3.0.11 19 Sep 2023 and we are running with OpenSSL 300000b0: 3.0.11. These two versions should be binary compatible.
   May 09 12:35:58 localhost Tor[419005]: Tor 0.4.7.16 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.11, Zlib 1.2.13, Liblzma 5.4.1, Libzstd 1.5.4 and Glibc 2.36 as libc.
   May 09 12:35:58 localhost Tor[419005]: Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/
   May 09 12:35:58 localhost Tor[419005]: Read configuration file "/usr/share/tor/tor-service-defaults-torrc".
   May 09 12:35:58 localhost Tor[419005]: Read configuration file "/etc/tor/torrc".
   May 09 12:35:58 localhost Tor[419005]: Opening Socks listener on 127.0.0.1:9050
   May 09 12:35:58 localhost Tor[419005]: Opened Socks listener connection (ready) on 127.0.0.1:9050
   May 09 12:35:58 localhost Tor[419005]: Opening DNS listener on 127.0.0.1:9053
   May 09 12:35:58 localhost Tor[419005]: Opened DNS listener connection (ready) on 127.0.0.1:9053
   May 09 12:35:58 localhost Tor[419005]: Opening Transparent pf/netfilter listener on 127.0.0.1:9040
   May 09 12:35:58 localhost Tor[419005]: Opened Transparent pf/netfilter listener connection (ready) on 127.0.0.1:9040
   May 09 12:35:58 localhost Tor[419005]: Opening Control listener on 127.0.0.1:9051
   May 09 12:35:58 localhost Tor[419005]: Opened Control listener connection (ready) on 127.0.0.1:9051
   May 09 12:35:58 localhost Tor[419005]: Parsing GEOIP IPv4 file /usr/share/tor/geoip.
   May 09 12:35:58 localhost Tor[419005]: Parsing GEOIP IPv6 file /usr/share/tor/geoip6.
   May 09 12:35:58 localhost Tor[419005]: Bootstrapped 0% (starting): Starting
   May 09 12:35:59 localhost Tor[419005]: Starting with guard context "bridges"
   May 09 12:35:59 localhost Tor[419005]: Delaying directory fetches: No running bridges
   May 09 12:35:59 localhost Tor[419005]: new bridge descriptor 'DockerObfs4Bridge' (cached): $5592D9B167ADBA7F41A953413082120E5261F6D3~DockerObfs4Bridge [N7FLSNqwxCruN5HKz8UPOjXliLN6qsecUHv1iVzCzHY] at 162.218.224.167
   May 09 12:35:59 localhost Tor[419005]: Signaled readiness to systemd
   May 09 12:36:00 localhost Tor[419005]: Bootstrapped 1% (conn_pt): Connecting to pluggable transport
   May 09 12:36:00 localhost Tor[419005]: Opening Socks listener on /run/tor/socks
   May 09 12:36:00 localhost Tor[419005]: Opened Socks listener connection (ready) on /run/tor/socks
   May 09 12:36:00 localhost Tor[419005]: Opening Control listener on /run/tor/control
   May 09 12:36:00 localhost Tor[419005]: Opened Control listener connection (ready) on /run/tor/control
   May 09 12:36:00 localhost Tor[419005]: Bootstrapped 2% (conn_done_pt): Connected to pluggable transport
   May 09 12:36:00 localhost Tor[419005]: Bootstrapped 10% (conn_done): Connected to a relay
   May 09 12:36:00 localhost Tor[419005]: Bootstrapped 14% (handshake): Handshaking with a relay
   May 09 12:36:00 localhost Tor[419005]: Bootstrapped 15% (handshake_done): Handshake with a relay done
   May 09 12:36:00 localhost Tor[419005]: Bootstrapped 75% (enough_dirinfo): Loaded enough directory info to build circuits
   May 09 12:36:00 localhost Tor[419005]: Bootstrapped 95% (circuit_create): Establishing a Tor circuit
   May 09 12:36:02 localhost Tor[419005]: Bootstrapped 100% (done): Done
   

2. Configure the same custom bridge in Tor VPN + "All apps protected".

3. Force stop Tor VPN.

4. Start Tor VPN and connect. Get "connected" very quickly (1-2 seconds).

   Tor VPN logs

   01:00:59:980 169.254.42.1:42970->149.154.175.59:443: FAILED: failed to connect to TorAddr { host: Ip(149.154.175.59), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:59:976 169.254.42.1:42970->149.154.175.59:443: FAILED connection to 149.154.175.59:443: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] (app 10488) 01:00:59:973 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:42970:149.154.175.59:443 01:00:59:968 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:59:554 [fc00::]:54632->[fec0:59f6:14f5:bbd9:2798:2e63:13e3:6aab]:443: FAILED: failed to connect to TorAddr { host: Hostname("z-m-gateway.facebook.com"), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:59:549 [fc00::]:54632->[fec0:59f6:14f5:bbd9:2798:2e63:13e3:6aab]:443: FAILED connection to z-m-gateway.facebook.com:443: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] (app 10081) 01:00:59:549 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple [fc00::]:54632:[fec0:59f6:14f5:bbd9:2798:2e63:13e3:6aab]:443 01:00:59:547 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:59:438 169.254.42.1:58182->10.5.203.69:443: FAILED: failed to connect to TorAddr { host: Hostname("z-m-gateway.facebook.com"), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:59:431 169.254.42.1:58182->10.5.203.69:443: FAILED connection to z-m-gateway.facebook.com:443: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] (app 10081) 01:00:59:427 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:58182:10.5.203.69:443 01:00:59:421 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:58:952 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:58:951 169.254.42.1:42970->149.154.175.59:443: FAILED: failed to connect to TorAddr { host: Ip(149.154.175.59), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:58:949 169.254.42.1:42970->149.154.175.59:443: FAILED connection to 149.154.175.59:443: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] (app 10488) 01:00:58:945 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:42970:149.154.175.59:443 01:00:58:182 169.254.42.1:48288->10.177.149.3:443: FAILED: failed to connect to TorAddr { host: Hostname("g.whatsapp.net"), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:58:179 169.254.42.1:48288->10.177.149.3:443: FAILED connection to g.whatsapp.net:443: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] (app 10275) 01:00:58:177 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:48288:10.177.149.3:443 01:00:58:171 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:58:031 169.254.42.1:56482->10.102.221.116:5228: FAILED: failed to connect to TorAddr { host: Hostname("mtalk.google.com"), port: 5228 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:58:017 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:56482:10.102.221.116:5228 01:00:58:014 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:58:005 [fc00::]:40316->[fec0:93e1:38de:1896:f32a:9adf:a455:1ece]:443: FAILED: failed to connect to TorAddr { host: Hostname("g.whatsapp.net"), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:57:956 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple [fc00::]:40316:[fec0:93e1:38de:1896:f32a:9adf:a455:1ece]:443 01:00:57:954 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:57:900 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:57:900 192.168.3.74:38878->169.254.42.53:853: FAILED: failed to connect to TorAddr { host: Ip(169.254.42.53), port: 853 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:57:898 192.168.3.74:38878->169.254.42.53:853: FAILED connection to 169.254.42.53:853: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] (app 1051) 01:00:57:893 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 192.168.3.74:38878:169.254.42.53:853 01:00:57:601 [fc00::]:54632->[fec0:59f6:14f5:bbd9:2798:2e63:13e3:6aab]:443: FAILED: failed to connect to TorAddr { host: Hostname("z-m-gateway.facebook.com"), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:57:539 [fc00::]:54632->[fec0:59f6:14f5:bbd9:2798:2e63:13e3:6aab]:443: FAILED connection to z-m-gateway.facebook.com:443: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] (app 10081) 01:00:57:538 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple [fc00::]:54632:[fec0:59f6:14f5:bbd9:2798:2e63:13e3:6aab]:443 01:00:57:535 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:57:422 169.254.42.1:58182->10.5.203.69:443: FAILED: failed to connect to TorAddr { host: Hostname("z-m-gateway.facebook.com"), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:57:418 169.254.42.1:58182->10.5.203.69:443: FAILED connection to z-m-gateway.facebook.com:443: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] (app 10081) 01:00:57:414 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:58182:10.5.203.69:443 01:00:57:409 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:642 [fc00::]:54632->[fec0:59f6:14f5:bbd9:2798:2e63:13e3:6aab]:443: FAILED: failed to connect to TorAddr { host: Hostname("z-m-gateway.facebook.com"), port: 443 } via Arti: tor: error connecting to Tor: Failed to obtain exit circuit for ports [scrubbed] 01:00:56:592 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:58182:10.5.203.69:443 01:00:56:588 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple [fc00::]:54632:[fec0:59f6:14f5:bbd9:2798:2e63:13e3:6aab]:443 01:00:56:580 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:576 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:56482:10.102.221.116:5228 01:00:56:573 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:564 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple [fc00::]:40316:[fec0:93e1:38de:1896:f32a:9adf:a455:1ece]:443 01:00:56:562 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:562 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:562 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:562 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:562 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:562 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:562 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:562 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:561 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 192.168.3.74:38878:169.254.42.53:853 01:00:56:559 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:56482:10.102.221.116:5228 01:00:56:558 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple [fc00::]:40316:[fec0:93e1:38de:1896:f32a:9adf:a455:1ece]:443 01:00:56:557 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:48288:10.177.149.3:443 01:00:56:557 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:557 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:557 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:556 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:556 W/onionmasq: Attempt 7: Spent too long trying to construct circuits for this request 01:00:56:556 W/onionmasq: Attempt 6: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:556 W/onionmasq: Attempt 5: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:556 W/onionmasq: Attempt 4: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:556 W/onionmasq: Attempt 3: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:556 W/onionmasq: Attempt 2: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:556 W/onionmasq: Attempt 1: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:556 W/onionmasq: tor_circmgr: Failed to build preemptive circuit [scrubbed]: error: Tried to find or build a circuit 7 times, but all attempts failed 01:00:56:555 W/onionmasq: Attempt 12: Spent too long trying to construct circuits for this request 01:00:56:555 W/onionmasq: Attempt 11: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:555 W/onionmasq: Attempt 10: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:555 W/onionmasq: Attempt 9: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:555 W/onionmasq: Attempt 8: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:555 W/onionmasq: Attempt 7: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:555 W/onionmasq: Attempt 6: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:555 W/onionmasq: Attempt 5: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 4: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 3: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 2: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 1: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: tor_circmgr: Failed to build preemptive circuit [scrubbed]: error: Tried to find or build a circuit 12 times, but all attempts failed 01:00:56:554 W/onionmasq: Attempt 8: Spent too long trying to construct circuits for this request 01:00:56:554 W/onionmasq: Attempt 7: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 6: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 5: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 4: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 3: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 2: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: Attempt 1: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 01:00:56:554 W/onionmasq: tor_circmgr: Failed to build preemptive circuit [scrubbed]: error: Tried to find or build a circuit 8 times, but all attempts failed 01:00:56:554 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:553 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:56:538 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:54:868 W/onionmasq: tor_circmgr::hspool: Too many preemptive onion service circuits failed; waiting a while. 01:00:54:798 W/onionmasq: tor_circmgr::mgr: Request failed 01:00:54:798 W/onionmasq: tor_circmgr::mgr: Reached circuit build retry limit, exiting... 01:00:24:857 W/onionmasq: tor_circmgr::hspool: Too many preemptive onion service circuits failed; waiting a while. 12:59:56:849 I/onionmasq: tor_dirmgr: Directory is complete.attempt=1 12:59:56:842 I/onionmasq: tor_dirmgr: Marked consensus usable. 12:59:56:598 Bootstrap at: Bootstrapping complete 12:59:56:597 CONNECTED 12:59:56:560 I/onionmasq: onionmasq_mobile: Bootstrapping completed. 12:59:56:560 I/onionmasq: tor_dirmgr: Loaded a good directory from cache. 12:59:56:546 Bootstrap at: 85%: connecting to the internet; directory is fetching microdescriptors (7218/7218) 12:59:56:539 I/onionmasq: tor_dirmgr: Marked consensus usable. 12:59:54:979 W/onionmasq: tor_circmgr::mgr: Request failed 12:59:54:979 W/onionmasq: tor_circmgr::mgr: Reached circuit build retry limit, exiting... 12:59:54:979 W/onionmasq: tor_circmgr::hspool: Too many preemptive onion service circuits failed; waiting a while. 12:59:54:979 I/onionmasq: tor_dirmgr::bootstrap: 2: Downloading a consensus.attempt=2 12:59:54:979 W/onionmasq: Attempt 6: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 12:59:54:979 W/onionmasq: Attempt 5: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 12:59:54:978 W/onionmasq: Attempt 4: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 12:59:54:978 W/onionmasq: Attempt 3: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 12:59:54:978 W/onionmasq: Attempt 2: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 12:59:54:978 W/onionmasq: Attempt 1: Unable to select a guard relay: No usable guards. Rejected 12/12 as down, then 0/0 as pending, then 0/0 as unsuitable to purpose, then 0/0 with filter. 12:59:54:978 W/onionmasq: tor_dirmgr::bootstrap: error while downloading: error: Problem downloading directory object: Error while getting a circuit: Tried to find or build a circuit 6 times, but all attempts failed 12:59:54:978 W/onionmasq: tor_circmgr::mgr: Request failed 12:59:54:978 W/onionmasq: tor_circmgr::mgr: Reached circuit build retry limit, exiting... 12:59:54:978 I/onionmasq: tor_dirmgr::bootstrap: 1: Downloading a consensus.attempt=2 12:59:54:978 I/onionmasq: tor_dirmgr: Directory is complete.attempt=1 12:59:54:978 I/onionmasq: tor_dirmgr: Marked consensus usable. 12:59:54:978 I/onionmasq: onionmasq_mobile: Bootstrapping completed. 12:59:54:977 I/onionmasq: tor_dirmgr: Loaded a good directory from cache. 12:59:54:977 I/onionmasq: tor_dirmgr: Marked consensus usable. 12:59:54:977 I/onionmasq: onion_tunnel::dns: Starting DNS manager 12:59:54:977 D/onionmasq: onionmasq_mobile: starting bootstrap event listening ... 12:59:54:977 D/onionmasq: onionmasq_mobile: starting onionmasq... 12:59:54:977 D/onionmasq: onionmasq_mobile: successfully created tun interface 12:59:54:977 I/onionmasq: arti_client::client: Running without a keystore 12:59:54:977 D/onionmasq: onionmasq_mobile: creating onion_tunnel... 12:59:54:977 D/onionmasq: onionmasq_mobile: Onionmasq_runProxy on Android API 31 12:59:54:977 --------- beginning of main 12:59:54:959 169.254.42.1:46692->10.176.162.86:7275: FAILED: failed to connect to TorAddr { host: Ip(10.176.162.86), port: 7275 } via Arti: tor: target address disabled locally: Cannot connect to a local-only address without enabling allow_local_addrs 12:59:54:958 169.254.42.1:46692->10.176.162.86:7275: FAILED connection to 10.176.162.86:7275: tor: target address disabled locally: Cannot connect to a local-only address without enabling allow_local_addrs (app 1021) 12:59:54:954 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:46692:10.176.162.86:7275 12:59:54:858 Bootstrap at: 0%: connecting to the internet; not downloading 12:59:54:765 Start reading onionmasq logs from logcat 12:59:54:707 CONNECTING

   In tcpdump, I only see a successful connection to the DNS server configured in the code, but nothing about 162.218.224.167 :

   19:16:58.195498 IP 192.168.1.66.37468 > 169.254.42.53.853: Flags [S], seq 356683494, win 65535, options [mss 1460,sackOK,TS val 2292075435 ecr 0,nop,wscale 10], length 0

5. Visit checkip.amazonaws.com in Chrome. The site can't be reached.

Built-in bridges

When I try built-in obfs4 bridges, I get the same apparent behavior (very quick "Connected" but failures on "checkip.amazonaws.com") but actually some TCP connections on tcpdump:

19:28:42.686570 IP 192.168.1.66.51426 > 192.95.36.142.443: Flags [S], seq 1397376088, win 65535, options [mss 1460,sackOK,TS val 1470833174 ecr 0,nop,wscale 10], length 0

Tor VPN logs

12:54:56:743 D/onionmasq: onionmasq_mobile::scaffolding: AndroidScaffolding::protect() for fd 95 12:54:56:730 D/onionmasq: onionmasq_mobile::scaffolding: AndroidScaffolding::protect() for fd 6 12:54:46:734 D/onionmasq: onionmasq_mobile::scaffolding: AndroidScaffolding::protect() for fd 116 12:54:46:725 D/onionmasq: onionmasq_mobile::scaffolding: AndroidScaffolding::protect() for fd 6 12:54:46:722 E/onionmasq: onionmasq_pt_wrapper: obfs4([scrubbed]:443) - outgoing connection failed: dial: connect: no route to host 12:54:44:206 I/onionmasq: tor_dirmgr: Directory is complete.attempt=1 12:54:44:199 I/onionmasq: tor_dirmgr: Marked consensus usable. 12:54:43:946 Bootstrap at: Bootstrapping complete 12:54:43:945 CONNECTED 12:54:43:912 I/onionmasq: onionmasq_mobile: Bootstrapping completed. 12:54:43:901 I/onionmasq: tor_dirmgr: Loaded a good directory from cache. 12:54:43:901 Bootstrap at: 85%: connecting to the internet; directory is fetching microdescriptors (7218/7218) 12:54:43:893 I/onionmasq: tor_dirmgr: Marked consensus usable. 12:54:43:220 D/onionmasq: onionmasq_mobile::scaffolding: AndroidScaffolding::protect() for fd 116 12:54:43:204 D/onionmasq: onionmasq_mobile::scaffolding: AndroidScaffolding::protect() for fd 108 12:54:42:533 I/onionmasq: onion_tunnel::dns: Starting DNS manager 12:54:42:533 D/onionmasq: onionmasq_mobile: starting bootstrap event listening ... 12:54:42:533 D/onionmasq: onionmasq_mobile: starting onionmasq... 12:54:42:533 D/onionmasq: onionmasq_mobile: successfully created tun interface 12:54:42:533 I/onionmasq: arti_client::client: Running without a keystore 12:54:42:532 D/onionmasq: onionmasq_mobile: creating onion_tunnel... 12:54:42:532 D/onionmasq: onionmasq_mobile: Onionmasq_runProxy on Android API 31 12:54:42:532 --------- beginning of main 12:54:42:332 169.254.42.1:46536->10.176.162.86:7275: FAILED: failed to connect to TorAddr { host: Ip(10.176.162.86), port: 7275 } via Arti: tor: target address disabled locally: Cannot connect to a local-only address without enabling allow_local_addrs 12:54:42:330 169.254.42.1:46536->10.176.162.86:7275: FAILED connection to 10.176.162.86:7275: tor: target address disabled locally: Cannot connect to a local-only address without enabling allow_local_addrs (app 1021) 12:54:42:329 WARNING: Unknown FailedConnectionEvent with proxySrc:proxyDst tuple 169.254.42.1:46536:10.176.162.86:7275 12:54:42:219 Bootstrap at: 0%: connecting to the internet; not downloading 12:54:42:107 Start reading onionmasq logs from logcat 12:54:42:062 CONNECTING

When I test the same bridge from my laptop, I get a dead slow bootstrap and then a failure:

tor.service logs

May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.282 [notice] Tor 0.4.7.16 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.11, Zlib 1.2.13, Liblzma 5.4.1, Libzstd 1.5.4 and Glibc 2.36 as libc. May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.282 [notice] Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/ May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.282 [notice] Read configuration file "/usr/share/tor/tor-service-defaults-torrc". May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.282 [notice] Read configuration file "/etc/tor/torrc". May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.284 [notice] Opening Socks listener on 127.0.0.1:9050 May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.284 [notice] Opened Socks listener connection (ready) on 127.0.0.1:9050 May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.284 [notice] Opening DNS listener on 127.0.0.1:9053 May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.284 [notice] Opened DNS listener connection (ready) on 127.0.0.1:9053 May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.284 [notice] Opening Transparent pf/netfilter listener on 127.0.0.1:9040 May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.284 [notice] Opened Transparent pf/netfilter listener connection (ready) on 127.0.0.1:9040 May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.284 [notice] Opening Control listener on 127.0.0.1:9051 May 09 12:37:41 localhost tor[419045]: May 09 12:37:41.284 [notice] Opened Control listener connection (ready) on 127.0.0.1:9051 May 09 12:37:41 localhost Tor[419045]: We compiled with OpenSSL 300000b0: OpenSSL 3.0.11 19 Sep 2023 and we are running with OpenSSL 300000b0: 3.0.11. These two versions should be binary compatible. May 09 12:37:41 localhost Tor[419045]: Tor 0.4.7.16 running on Linux with Libevent 2.1.12-stable, OpenSSL 3.0.11, Zlib 1.2.13, Liblzma 5.4.1, Libzstd 1.5.4 and Glibc 2.36 as libc. May 09 12:37:41 localhost Tor[419045]: Tor can't help you if you use it wrong! Learn how to be safe at https://support.torproject.org/faq/staying-anonymous/ May 09 12:37:41 localhost Tor[419045]: Read configuration file "/usr/share/tor/tor-service-defaults-torrc". May 09 12:37:41 localhost Tor[419045]: Read configuration file "/etc/tor/torrc". May 09 12:37:41 localhost Tor[419045]: Opening Socks listener on 127.0.0.1:9050 May 09 12:37:41 localhost Tor[419045]: Opened Socks listener connection (ready) on 127.0.0.1:9050 May 09 12:37:41 localhost Tor[419045]: Opening DNS listener on 127.0.0.1:9053 May 09 12:37:41 localhost Tor[419045]: Opened DNS listener connection (ready) on 127.0.0.1:9053 May 09 12:37:41 localhost Tor[419045]: Opening Transparent pf/netfilter listener on 127.0.0.1:9040 May 09 12:37:41 localhost Tor[419045]: Opened Transparent pf/netfilter listener connection (ready) on 127.0.0.1:9040 May 09 12:37:41 localhost Tor[419045]: Opening Control listener on 127.0.0.1:9051 May 09 12:37:41 localhost Tor[419045]: Opened Control listener connection (ready) on 127.0.0.1:9051 May 09 12:37:41 localhost Tor[419045]: Parsing GEOIP IPv4 file /usr/share/tor/geoip. May 09 12:37:41 localhost Tor[419045]: Parsing GEOIP IPv6 file /usr/share/tor/geoip6. May 09 12:37:41 localhost Tor[419045]: Bootstrapped 0% (starting): Starting May 09 12:37:41 localhost Tor[419045]: Starting with guard context "bridges" May 09 12:37:41 localhost Tor[419045]: Delaying directory fetches: No running bridges May 09 12:37:41 localhost Tor[419045]: Signaled readiness to systemd May 09 12:37:42 localhost Tor[419045]: Opening Socks listener on /run/tor/socks May 09 12:37:42 localhost Tor[419045]: Opened Socks listener connection (ready) on /run/tor/socks May 09 12:37:42 localhost Tor[419045]: Opening Control listener on /run/tor/control May 09 12:37:42 localhost Tor[419045]: Opened Control listener connection (ready) on /run/tor/control May 09 12:37:42 localhost Tor[419045]: Bootstrapped 1% (conn_pt): Connecting to pluggable transport May 09 12:37:42 localhost Tor[419045]: Bootstrapped 2% (conn_done_pt): Connected to pluggable transport May 09 12:39:53 localhost Tor[419045]: Proxy Client: unable to connect OR connection (handshaking (proxy)) with 192.95.36.142:443 ID= RSA_ID=CDF2E852BF539B82BD10E27E9115A31734E378C2 ("general SOCKS server failure")

So maybe the actual problem is different for custom and built-in bridges even though the apparent behavior is the same ("Connected" when not).