Database Develop

Running OpenVPN on the Kaiser (3G)

I've been struggling with OpenVPN on my Vario III on T-Mobile and hope someone can throw me a bit of a lifeline.
I can connect to my OpenVPN (running on my WRT54GS router) via wifi but the problem is when I try over 3G. Even when I've specified the provider and ticked "exclusive", it manages to connect to my OpenVPN server but I get no further connectivity (to webpages etc).
As said, via wifi this config on my Kaiser works perfectly...
Code:
remote xxxxxx.homeip.net
port 22
dev tap
secret "\\Program files\\OpenVPN\\config\\secret.key"
proto tcp-client
resolv-retry infinite
nobind
comp-lzo
cipher AES-256-CBC
route gateway 192.168.xxx.xxx
redirect-gateway
dhcp-option DNS 192.168.xxx.xxx
but when tried via 3G it seems to have a problem with setting the routing..
Code:
Mon Oct 22 21:58:00 2007 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.
Just wondering if there is something either with the T-Mobile network or the Vario III which is specifically stopping me from using OpenVPN
Or are my settings misconfigured?
I've also attached a full copy of the log.
Thanks for any help you can give (Give generously)
CP

Sounds suspiciously like a NAT traversal or proxy issue to me. On the HSDPA network, there's a proxy in the picture. I don't believe that's the case for the Edge network. That could easily be the cause of the problem.

Surely once the connection has been established the NAT issue shouldn't be a problem?
TBH I thought the route addition problem was due to the software being unable to update the local routing table?

NAT traversal issues often manifest themselves as connections that look like they're established, then die immediately. The VPN participants have to know the actual IP addresses of the devices involved, and understand that NAT is happening. Proxies also need to play a role in that process since they're effectively "standing in" for your device. And they may be configured not to permit IPSec traffic at all.
What you've described sounds exactly like NAT traversal issues - the negotiation appears to go just fine, but the actual connection dies on the vine. Since the end points don't have the right data from the negotiation (actual valid addresses to build the tunnel around), the route they try to build is invalid and fails.
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Proxies + NAT +IPSec = small nightmares. This is one of the reasons SSL VPNs have gained significantly in popularity.

Try Hamachi vpn
https://secure.logmein.com/products/hamachi/vpn.asp
Surur

PerfAlbion said:
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Click to expand...
Click to collapse
You have PM

Quick update:
I've just connected my Laptop to the internet via my Kaiser using 3G.
Ran OpenVPN and it connected without a problem.
Technically this would suggest that I should be able to connect with my kaiser but theres either a problem with my config or a bug in the PPC openvpn software :S
I haven't tried on UDP yet which will be my next test....
Any ideas?

Blimey, I didn't know there was a PPC client! I'll try it to see if it works with my setup.

Well I can't even get it to talk to my server so won't be able to help !

Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.

PerfAlbion said:
Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.
Click to expand...
Click to collapse
?? When you connect a laptop via BT to the kaiser, (using internet sharing) it creates a NAT which the traffic is passed over through the 3G service. Essentially using the same service..
Unless you mean the "service" between the windows software & the PPC/WM software is different?
Plus how'd you mean fire up the card in my laptop?
Cheers for your help on this btw.

I'm assuming that the Laptop data service and the PDA data service are treated differently within the AT&T network. While the PDA passes through a proxy, I suspect the laptop does not.
When I say "fire up the laptop card," I mean establish a connection and look at your IP address (ipconfig from a command prompt will show it). It may be a different IP address range than the PDA receives (which you could see using VxIPConfig or VxUtils). Even if it's within the same range, it may be bypassing the proxy.
So while you're using essentially the same technology, I suspect the services are implemented very differently, and that's what we're trying to sort out.

I dont believe it!!!
I downloaded VM Net Brower checked what IP addresses were being assigned and connected successfully! Loaded up www.whatismyip.org and it came up with the proxy of my PC at home.
Unfortunately, my phone was running incredibly slow and thought it best to do a soft reset... afterwards no matter what I do, I can't connect. I just cant figure out why or replicate what I did
Argh.. this is getting to me now... next on the agenda is to try changing the port number from 22 to 8080 or 80 and see what happens.

A cry for help!!!

I want to ask anyone with better knowledge of the android os for help.
I need to be able to connect to ADHOC networks. I have a laptop with LAN internet connection and I want to connect my G1 to the laptop's wi-fi. I used to do that with windows mobile.
YES I know there are similar topics, but they are all abandoned and ignored.
I almost feel that it's forbidden to talk about that.
WHY I need that. I live in a country with NO unlimited data plans and very expensive mobile internet. That's it. I want to be able to sync, download and watch youtube while relaxing on the sofa at home without pennies dropping off my pockets for every tiny byte I download.
OK HERE's THE SOLUTION. Thanks to everyone who made the great tutorials available to us :
http://hydtech.wordpress.com/2009/09/14/how-to-connect-to-ad-hoc-networks-using-tmobile-g1-android/
The important part is to tweak the windows part - you need to tell the broadband/adsl internet connection to share itself to the Private wireless network (the network manging your Wireless adapter). If you are having trouble with the windows part (say you connect and have full bars on the phone but no access to web) google ICS (internet connection sharing) in windows and you should get it working.
*Important notice: AdHoc will drain your battery very fast (1hour tops)
Maybe one of the reasons they disabled it... If you cant cope with taht - get a router. I'm cheap and I'm using it like that

Possible solution
I downloaded aNETSHARE - a free aplication for wifi tethering posted on this forum as well. Inside the apk there is a tiwlan_ini file which might be executed when running the app so you can create adhoc connection on the phone. I have replaced the /etc/wifi/tiwlan.ini with this file and tonight I'm gonna try it on the laptop, but I guess it will only enable creation of adhoc networks on the phone.

Am I talking to myself?
I it's not the tiwlan.ini to be edited. There is a wpa_suplicant.conf file where the AP are stored. I will edit it tomorow and see if it works. Helloo unix gurus. Have some mercy on my mortal soul and help a little.

axlastro said:
I it's not the tiwlan.ini to be edited. There is a wpa_suplicant.conf file where the AP are stored. I will edit it tomorow and see if it works. Helloo unix gurus. Have some mercy on my mortal soul and help a little.
Click to expand...
Click to collapse
wish i could help, by the time someone does youll of figured it out lol

axlastro said:
I it's not the tiwlan.ini to be edited. There is a wpa_suplicant.conf file where the AP are stored. I will edit it tomorow and see if it works. Helloo unix gurus. Have some mercy on my mortal soul and help a little.
Click to expand...
Click to collapse
You do want to use a modified tiwlan.ini, but do not replace the system one.
Simply create a new one somewhere and use a command like this
Code:
insmod /system/lib/modules/wlan.ko
wlan_loader -f /system/etc/wifi/Fw1251r1c.bin -e /proc/calibration -i /data/local/tiwlan.ini
netcfg tiwlan0 dhcp
setprop net.dns1 208.67.222.222
The last two lines are to set up the proper IP address and dns server.

the backend of the wifi config gui uses wpa_supplicant. simply edit this and add whatever type of wireless connection you want. this is how we obtained wpa2 enterprise support. it was capable, the gui is just setup, for some reason, to ignore wpa2 enterprise/adhoc/whatever networks.
here's the original post from forever ago
http://forum.xda-developers.com/archive/index.php/t-450915.html

... Wouldn't it be easier to turn your laptop into an Access Point?
Assuming you are under Windows, you can enable ICS (Internet Connection Sharing) and then use your G1 to connect to that.
Many people do the same to connect their XBOX360 for example to their laptop or computer to go online.

NeoBlade said:
... Wouldn't it be easier to turn your laptop into an Access Point?
Assuming you are under Windows, you can enable ICS (Internet Connection Sharing) and then use your G1 to connect to that.
Many people do the same to connect their XBOX360 for example to their laptop or computer to go online.
Click to expand...
Click to collapse
This is what he's trying to do. The thing is, by default a G1 does not see/connect to Ad-hoc connections, which is what the ICS setup will create.
All the information he needs to get his G1 to see/connect to Ad-hoc networks has been listed in this thread by now. Whether or not he will read any of it is another story.

Aaaahh... My bad. I thought the programs already had such a feature >_< Would be interested in this also incase I don't have any signal for whatever reason.

billc.cn said:
You do want to use a modified tiwlan.ini, but do not replace the system one.
Simply create a new one somewhere and use a command like this
Code:
insmod /system/lib/modules/wlan.ko
wlan_loader -f /system/etc/wifi/Fw1251r1c.bin -e /proc/calibration -i /data/local/tiwlan.ini
netcfg tiwlan0 dhcp
setprop net.dns1 208.67.222.222
The last two lines are to set up the proper IP address and dns server.
Click to expand...
Click to collapse
Thank you! I needed some help on that.
So if I create a internet connection in XP I have to specify a dns there and then enter the same dns in the last line, right?
I actually replaced the system tiwlan.ini (i kept the original) with the one from the aNETSHARE.apk but as expected it created an AP on the G1. I guess I will have to modify the WPA_SUPPLUCANT.CONF too. it should be something like
SSID="test adhoc"
MODE=1 (i think 1 stands for adhoc)
and some other lines i dont remember like the encryption mode and frequency. There are plenty of sample config files. Tonight I will try to do it.
But the question is - what do I modify in tiwlan.ini - is it only the line adhoc=0 to adhoc=1 enough or should I specify ip address and dns there too.
btw I did configure an adhoc network using the wifiHELPER app but all it did was add it to my wifi connections list without being able to see it. The only option was to "forget" the network.
Anyway. I think you helped enough, I will figure read the thread pointed by breaultm. Thanks. I actually couldn't find this very thread cos I searched with "adhoc" as a keyword. Thank you again. I really don't see why they omitted the support for this type of connection. My guess - either a security concern or they just want to make you pay for data plan.

Some reason you don't just use a wireless access point? They're DIRT CHEAP... for example: http://www.infonec.com/site/main.php?module=detail&id=352591 -- thats a wireless router (just disable dhcp server and don't use the wan port) PLUS a wireless nic for $34 CDN.

lbcoder said:
Some reason you don't just use a wireless access point? They're DIRT CHEAP... for example: http://www.infonec.com/site/main.php?module=detail&id=352591 -- thats a wireless router (just disable dhcp server and don't use the wan port) PLUS a wireless nic for $34 CDN.
Click to expand...
Click to collapse
Well, I know. The cheapest routers are like 35 USD here in Bulgaria. Why not buy one? Call me cheap, but I'd better buy a bigger sd card first (I use a 4gb one now). I used to connect wirelessly with a pocketPC to the laptop and the connection was very stable. If I can't manage to connect the hard way then I will buy a router...

*help*Tether access to VPN

I'm trying to use my G1 to allow my laptop access my employer's VPN (PPTP) and can't make it work. There's a defect logged with android-wifi-tether so apparently I'm not the only one having this problem. I've tried the USB tether built into cyanogenmod and can't get in that way either.
Anyone have any ideas or personal success? Anyone want to confirm that I just can't do what I'm trying to?
thanks,
--e

I believe that the correct approach is to have the phone itself NOT part of the VPN, tether the computer to the internet via the phone, and initiate the VPN from the computer itself.
Is that what you are trying? Or are you trying to VPN the phone and just tether?

i was able to get on vpn network though wired tether ..i have super d1.8..not sure why you cant.

Thanks much for the replies, I really appreciate it.
I haven't tried logging into the VPN with the phone itself because I didn't figure that would get my laptop on the VPN (though I could try that).
I am connecting to the internet using the phone either as a modem (USB tether) or an ad-hoc network (android-wifi-tether) and the internet works beautifully except that I'm not able to log into the VPN.
I'm getting an error 721 and my android-ignorant IT geek is grumbling about GRE and NAT and blocked ports and goodness knows what else.
rshemeld - what method are you using to tether? do you know if your VPN is using PPTP?
Thanks!
--eric

Hey there!
I'm not a VPN pro, but PPTP error 721 generally means that GRE is being blocked somewhere along the line. This could be the router (in this case your phone) or an upstream router (your wireless providers router). One way to test is to connect to the VPN with the phones built-in PPTP client like someone suggested, that would at least narrow down the problem.
If the problem turns out to be that your phone is blocking the GRE packets then you'd need to port forward port 1723 on the phone to your local machine and also protocol forward (note that this is a protocol forward, not a port forward) protocol 47, which is GRE.
EDIT:
iptables -t nat -i your_radio -p tcp --dport 1723 -j DNAT --to your_computer
iptables -t nat -i your_radio -p 47 -j DNAT --to your_computer
Click to expand...
Click to collapse
EDIT2:
Ignore the above code, its for setting up a server behind your NAT not letting a PPTP client through the NAT. Not sure what I was thinking.

--e said:
I'm getting an error 721 and my android-ignorant IT geek is grumbling about GRE and NAT and blocked ports and goodness knows what else.
Click to expand...
Click to collapse
I wouldn't expect much help from a windoze-monkey-button-pusher. They don't include brains in those.

ivanfilippov said:
Hey there!
I'm not a VPN pro, but PPTP error 721 generally means that GRE is being blocked somewhere along the line. This could be the router (in this case your phone) or an upstream router (your wireless providers router). One way to test is to connect to the VPN with the phones built-in PPTP client like someone suggested, that would at least narrow down the problem.
If the problem turns out to be that your phone is blocking the GRE packets then you'd need to port forward port 1723 on the phone to your local machine and also protocol forward (note that this is a protocol forward, not a port forward) protocol 47, which is GRE.
EDIT:
Click to expand...
Click to collapse
Wow, I'm your new biggest fan. I'll get the VPN info from my geeks and verify that the phone itself can get on (I suspect it'll be able to).
The code you posted, do I enter that in the terminal application on the phone? Or should I boot to Aman-Ra and use that terminal?
Thanks for your patience and your help, everyone.
--eric

lbcoder said:
I wouldn't expect much help from a windoze-monkey-button-pusher. They don't include brains in those.
Click to expand...
Click to collapse
lol, he means well

Yeah i set a profile up first(on my PC) i am not using the vpn client/rsa token.

Hey!
Yep put that in your phone terminal. I'll see if I can get a more concrete example for you.
EDIT:
Oops, my iptables lines were totally wrong, ignore those. I just did some testing and realized what I posted was not set up for what you needed. Let me try a couple things here with my PPTP and I'll let you know how it goes.
EDIT2:
I've tried a couple ways and I'm not able to connect to both of my PPTP servers directly from my phone (I'm guessing this is Rogers' doing, or a big blunder on my part), so I can't help with too much more troubleshooting, but try getting on your PPTP server with just your phone and if that works. If it does then you can most likely get on it with your laptop behind your phone. You might not even need any iptables rules, but like I said I can't really test it for you. Good luck.

Solution, see cross link
See http://forum.xda-developers.com/showpost.php?p=33749904&postcount=10

IP address release and renew?

great forum - hope this is the right place to ask this question
New to android and smart phones but doing it up with my new Nexus One on stock froyo ROM.
My work network has some issues including erroneous DHCP addresses being dished up in the wrong 192.168... range (old office infrastructure fix for the problem is someone else's gig).
I want to do a /release /renew on my Nexus One to pick up a legit ip address (on our windoze machines we just do the ipconfig /release /renew).
Is there an equivalent for this phone and Android? I have searched around and picked up a couple of network stat apps but they don't have the release/renew. Sure I can keep rebooting or killing WiFi and reconnecting but would like to know if there is a better way.
thanks!

Instead of trying to band-aid a problem, you should just fix the existing DHCP issue.
Seriously, DHCP is one of the simplest protocols to set up. Take 10 minutes, track down the range issue, correct it, and never worry about it again.

If I understand it correctly, you're looking for "netcfg eth0 dhcp" command, or possibly:
"netcfg eth0 down"
"netcfg eth0 up"
"netcfg eth0 dhcp"

Jack_R1 said:
If I understand it correctly, you're looking for "netcfg eth0 dhcp" command, or possibly:
"netcfg eth0 down"
"netcfg eth0 up"
"netcfg eth0 dhcp"
Click to expand...
Click to collapse
Jack, I tried those commands, and on the last one I got this:
action 'dhcp' failed (No such process)
Also, if I just run netcfg between down and up, it seems like eth0 is never disabling properly. I am in superuser mode.
Any hints?

try netcfg alone
Andresehn said:
Jack, I tried those commands, and on the last one I got this:
action 'dhcp' failed (No such process)
Also, if I just run netcfg between down and up, it seems like eth0 is never disabling properly. I am in superuser mode.
Any hints?
Click to expand...
Click to collapse
I just ran 'netcfg' alone and it turns out it's wlan0 instead of eth0.

To do a DHCP release and renew:
Fire up terminal emulator and type:
su
dhcpcd -k wlan0
dhcpcd -n wlan0
Turn wifi off/on and you'll get a new dhcp ip address rather than just a refresh on the existing one.

mickrick said:
To do a DHCP release and renew:
Fire up terminal emulator and type:
su
dhcpcd -k wlan0
dhcpcd -n wlan0
Turn wifi off/on and you'll get a new dhcp ip address rather than just a refresh on the existing one.
Click to expand...
Click to collapse
If it's a different interface, say eth1, you might need to run 'dhcpcd eth1' first. You can verify the DHCP configuration via 'getprop | grep dhcp'.

I'm trying to use a site on my LG stilo 3. The site keeps redirecting me an is saying Im using a proxy IP or VPN an I don't even know really what they are let alone how to use them. How do I set it so my IP doesn't hide when I try to use said site??? Please help!! Thank you

[Q] Help with reverse tethering

Hey there,
I would like to use reverse tethering over my usb cable.
Before I start I'll let you know my setup:
Windows 7 x64 machine, sdk (inc. adb) installed but adb seems to make problems
i9000 running infinitum 2.1 with devil2 v0.72
These are the steps I used:
-connect the phone
-activate usb-tethering on the phone
-PC: change the ip on the new network adapter to 192.168.2.1
-PC: set my local area connection to share my internet connection with the new network adapter
-PC: add http service to the shared internet services
-open terminal on the phone
-executing the following commands:
Code:
ifconfig rndis0 192.168.2.2 netmask 255.255.255.0 up
route add default gw 192.168.2.1 dev rndis0
iptables -F
iptables -F -t nat
setprop net.dns1 78.42.43.62
setprop "net.gprs.http-proxy" ""
Funny part is: I can't ping a domain like google.de also no app is able to access the internet... BUT I can ping 173.194.35.151 (google.de ip afaik?!).
So I DO have a connection... somehow (tested with WiFi off and mobile data off) but no app has access and it can't resolve any domain names?!
78.42.43.62 is the correct ip for my dns provider!
Here are two screenshots proving what I'm talking about: Screen1 Screen2
So what can I do? Can some1 help me out here?
EDIT: I just wanted to point out that normal tethering IS WORKING, I do have a stable connection to my phone (even when transfering data), drivers are working!

Read the following post.. maybe it'll help you
Reverse Tethering