[Q] OpenVPN Problems with Droid 3 - Motorola Droid 3

Tried setting up OpenVPN with rooted Steel Droid and it
connects but doesn't route traffic over the browser.
Wondering if I need to set routing tables differently for it to work since these custom kernels don't work on Droid 3.
Using SSL with tun.ko enabled.
OpenVPN binary set to /system/xbin/openvpn and configurations in /sdcard/openvpn.
Done a who.is and it still comes back with Verizon IP address.
Any suggestions or possibly a routing table example?

Did you read this:
http://forum.xda-developers.com/showthread.php?t=1271536

I'm having the exact same problem. OpenVPN connects, but no traffic goes through VPN..

Paste your outpout of
ip route
ip addr
so we can figure it out what is happening.

Here is the output when OpenVPN is connected:
Code:
C:\Users\Matt\Desktop>"C:\Program Files (x86)\Android\android-sdk-windows\platform-tools\adb.exe" shell
[email protected]_solana:/$ ip route
ip route
10.10.0.5 dev tun0 proto kernel scope link src 10.10.0.6
98.145.116.191 via 66.174.201.132 dev ppp0
66.174.201.132 dev ppp0 scope link
66.174.201.132 dev ppp0 proto kernel scope link src 10.228.114.160
default via 66.174.201.132 dev ppp0
[email protected]_solana:/$ ip addr
ip addr
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: usb0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 8e:cd:9b:8e:73:75 brd ff:ff:ff:ff:ff:ff
3: gether0: <BROADCAST,MULTICAST> mtu 1428 qdisc noop state DOWN qlen 1000
link/ether 5e:bf:ba:15:68:12 brd ff:ff:ff:ff:ff:ff
4: sit0: <NOARP> mtu 1480 qdisc noop state DOWN
link/sit 0.0.0.0 brd 0.0.0.0
5: ip6tnl0: <NOARP> mtu 1460 qdisc noop state DOWN
link/tunnel6 :: brd ::
6: tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 500
link/ether 56:65:b5:b7:5c:98 brd ff:ff:ff:ff:ff:ff
10: ppp0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 3
link/ppp
inet 10.228.114.160 peer 66.174.201.132/32 scope global ppp0
12: tun0: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 100
link/[65534]
inet 10.10.0.6 peer 10.10.0.5/32 scope global tun0
[email protected]_solana:/$
My OpenVPN server IP is 98.145.116.191, yet when I go to whatismyip.com on my phone it is still 174.255.162.200.
Here is my OpenVPN server config
Code:
port 5555
dev tun
proto tcp
comp-lzo
float
keepalive 10 60
ping-timer-rem
resolv-retry 60
status openvpn-status.txt
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
server 10.10.0.0 255.255.255.0
verb 4
mode server
push "redirect-gateway def1"
My client config
Code:
client
remote zone117x.dyndns.info 5555
proto tcp
comp-lzo
dev tun
float
ping-timer-rem
resolv-retry infinite
route-gateway 10.10.0.1
dhcp-option DNS 10.10.0.1
keepalive 10 120
ca ca.crt
cert client1.crt
key client1.key

I confess, I'm a little bit surprised by your output. ifconfig seems to have worked, and there is a host route to your VPN server, which is good, too.
However the default route didn't switch.
Could you please try the following, as root on command line:
route add -net 0.0.0.0/1 dev tun0
route add -net 128.0.0.0/1 dev tun0
Does this help?
BTW, even if this works, I guess you will run into MTU issues. Add something like "mssfix 1200" to your openvpn config.

It's saying invalid argument when I try both of those. Should I be using those IPs?
Sorry, I'm mostly clueless with this networking..

Resurrect from the dead.
I don't mean to resurrect this but I still can't get OpenVPN. I was wondering if anybody knew if a custom TUN.ko was still needed but the locked bootloader prohibited this still.
On another note I was hoping I could just reconfigure the iptables or iproute from the Droid 3 source and somehow use AOKP CM9 build to try this out. OpenVPN wasn't listed in the CM9 VPN listings but didn't know if it were possible to change that or revert to Stock Rom and go from there.

OpenVPN
I am running Maverick ROM 3.5 (based on stock firmware system files) and something really strange is happening.
I am able to connect to my openvpn server and i am able to access the file shares on the network and of course copy, delete or upload files. I am also able to connect to ssh server. BUT i cannot connect to any http servers inside to remote network !!!
Its really weird as i know my openvpn conf files are fine (i was using the same files with an openvpn client to a different phone and i was able to access the http servers from there.)

Related

HOWTO: Set up your G1's Wi-Fi (in order to make it actually *work*)

I've received my Dream yesterday and the wi-fi is painfully slow. At first it didn't work at all, so I entered all settings by hand, assigned it a static IP address and other stuff. Then it worked, albeit very slowly. So, here's what you need to do if your wi-fi isn't too fast.
Go to Wi-Fi settings, press Menu and select Advanced Settings. On your computer (if you're using an unix based OS, at least - can some Windows guru help me out with this?), get to a terminal emulator and type:
Code:
ifconfig en1
This should give you output like this:
Code:
Wiktoria:~ Nekkoru$ ifconfig en1
en1: flags=8863<UP,BROADCAST,SMART,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether 00:1c:b3:bd:b9:cb
inet6 fe80::21c:b3ff:febd:b9cb%en1 prefixlen 64 scopeid 0x6
inet 192.168.55.102 netmask 0xffffff00 broadcast 192.168.55.255
media: <unknown subtype>
status: active
Wiktoria:~ Nekkoru$ [CODE]
The IP address after inet (192.168.55.102 in my case) is what you're after. On your phone, enter your IP address as the IP adress you got, with the last block changed to anything that's not being used on your network. I assigned 192.168.55.69 to my phone, because it's easy to remember and it's kind of childish.
Now, your "Gateway" should be your router's IP address. Your router's IP should be specified in it's manual - or your system settings. Your subnet mask should always be 255.255.255.0.
We need your DNS settings now - this is where most of us screw up and this is what you need to fix the most. Go back to your computer's terminal and type in
[CODE]dig
Look at the bottom. You're interested in a line that says "SERVER: xxx.xxx.xxx.xxx". That's your primary, first DNS. If you give that to your phone, your wi-fi should work way faster. Set it up as the second DNS as well, unless you know a better DNS server than your ISP's (anyone?).
I'm sorry this got so complicated, but that's the best way to set up your G1's internet if it gives you any trouble. I hope I helped somewhat.

[SCRIPT] Change Hostname

No credit to me please.
I modified the script attached in http://forum.xda-developers.com/showthread.php?t=1366934, for LG Revo.
I merely changed /bin/hostname to /system/xbin/hostname, which is the correct path to access the hostname command in GingerVolt 1.3
Run using script manager, (su and on-boot).
Why change hostname ? Well by default the hostname is something like 'android_<IMEI-NO>', which is way too long, and makes it difficult to spot your device in your routers 'attached devices' log.
Change the "LGRevo" in the line "devName=LGRevo", to what ever hostname you like.
Code:
#!/system/bin/sh
#change devName to whatever you want.
devName=LGRevo
if [ "$(/system/xbin/hostname)" = "$devName" ] && [ "$(getprop net.hostname)" = "$devName" ]
then
echo "Device hostname does not need to be changed."
else
echo "Device hostname is being changed to $devName."
/system/xbin/hostname $devName
setprop net.hostname $devName
if [ "$(/system/xbin/hostname)" != "$devName" ] && [ "$(getprop net.hostname)" != "$devName" ]
then
echo "Device hostname has not been changed."
else
echo "Device hostname has been successfully changed."
fi
fi
gumnaam.sur said:
Why change hostname ? Well by default the hostname is something like 'android_<IMEI-NO>', which is way too long, and makes it difficult to spot your device in your routers 'attached devices' log.
Click to expand...
Click to collapse
Nice find, just a quick question though.
Is there any way you could elaborate a little more on this? Why is shortening the hostname and making it easier to find in the "attached devices" log important?
More explanation on why change the hostname....
As of this writing I have about 6 android devices connected to my home wifi router. Most wifi routers have a page which shows the details of attached devices. This helps you to determine if any unwanted device has managed to hook on your wifi etc.
With the default hostname like 'android_<IMEI-NO>', the list of attached devices is hard to de-cipher. So changing the hostname enables me to make some sense out of the 'attached devices' page. I know exactly which device has hooked to my router.
Secondly, on my router's config, I have assigned static DHCP for all these devices, and also entered them in the DNS. That way each device can talk to another if needed, say over 'SMB' / 'SSH', simply by using the other device's hostname, w/o having to remember each devices IP.
Makes sense ?
gumnaam.sur said:
More explanation on why change the hostname....
As of this writing I have about 6 android devices connected to my home wifi router. Most wifi routers have a page which shows the details of attached devices. This helps you to determine if any unwanted device has managed to hook on your wifi etc.
With the default hostname like 'android_<IMEI-NO>', the list of attached devices is hard to de-cipher. So changing the hostname enables me to make some sense out of the 'attached devices' page. I know exactly which device has hooked to my router.
Secondly, on my router's config, I have assigned static DHCP for all these devices, and also entered them in the DNS. That way each device can talk to another if needed, say over 'SMB' / 'SSH', simply by using the other device's hostname, w/o having to remember each devices IP.
Makes sense ?
Click to expand...
Click to collapse
Oh ok cool! I never even thought of doing it so it's easier to check for unwanted devices. Very nice find, thanks!

About A-GPS Servers (gps.conf)

Hi there,
Galaxy SIII has "XTRA_SERVER_1=http://gllto.glpals.com/4day/latest/lto.dat" server line in gps.conf file, while Galaxy S has "XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin".
What is the difference between those servers? And which is better for faster GPS fix? Or "XTRA_SERVER_1=http://gllto.glpals.com/4day/latest/lto.dat" server is compatible with I9000?
Thanks in advance.
no answers?
They're different servers, that said, they're interchangeable. Why don't you try interchanging them? Remember to back up.
Here's mine, it's the fastest in my country:
NTP_SERVER=0.ca.pool.ntp.org
NTP_SERVER=1.ca.pool.ntp.org
NTP_SERVER=2.ca.pool.ntp.org
NTP_SERVER=3.ca.pool.ntp.org
NTP_SERVER=ca.pool.ntp.org
XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin
XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra.bin
XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra.bin
# DEBUG LEVELS:
# 0 - none, 1 - Error,
# 2 - Warning, 3 - Info
# 4 - Debug, 5 - Verbose
DEBUG_LEVEL =0
ACCURACY_THRES=5
INTERMEDIATE_POS=0
ENABLE_WIPER=1
SUPL_HOST=supl.google.com
SUPL_PORT=7276
REPORT_POSITION_USE_SUPL_REFLOC=1
# blank
xtra.bin is basically used by QUALCOMM , lto.dat is used by Broadcom Chip of BCM47511. Do a whois on glpals.com and gpsonextra.net and you will know which company uses which services. There is no great idea to change the Software of GPS to Qualcomm from broadcom ...
Gps-nitz-ntp
Hi all,
Sorry to post there but after lot of search, i haven't get any information
Does NITZ protocol is used only by GSM network and is it the default protocol used by android system to sync time?
Things I know is that:
- user can't set time without root privileges
- NTP server could be used only with third-party apps
- there is a gps.conf file in /system/etc and inside there is a line NTP_SERVER=... I want to know the meaning of gps.conf file cause my final goal is to try to sync device with NTP server wihout root priviledge but by redirecting NTP request to my own NTP server (changing DNS maybe) I used some packets sniffer and I can't see some NTP packets (over Wi-fi or GSM)
Thanks fo help

Chromecast wifi issues

Hello, I have a 1131 ag attached is the config. I have added the lines to it but my chromecast still will not work. It works fine on my 1220 ag
both bands enabled and setup for wpa.
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
logging rate-limit console 9
enable secret 5 $1$o2d7$6r3jZxnOElqERIRaI5vdt.
!
no aaa new-model
!
!
no ip igmp snooping
no dot11 igmp snooping-helper
dot11 syslog
!
dot11 ssid SUN KING
authentication open
authentication key-management wpa
guest-mode
wpa-psk ascii 7 15010403082F327C7B
no ids mfp client
!
!
!
username Cisco password 7 13261E010803
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
ssid SUN KING
!
antenna gain 128
speed basic-1.0 2.0 5.5 11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface Dot11Radio1
no ip address
no ip route-cache
!
encryption mode ciphers tkip
!
ssid SUN KING
!
antenna gain 128
no dfs band block
speed basic-6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address 192.168.1.2 255.255.255.0
no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779...onfig/help/eag
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
!
end
If all else fails I could downgrade to 12.3.8
I had to hard reboot

[Q] (Problem) Make Raspberry pi share internet via Ethernet (Filter)

Greetings,
I use Raspbian.
I come over here, I'm a beginner, and I would like to ask for help on an issue (draft) I'm doing.
Explained below:
First of all I have Raspbian in my Raspberry Pi, then I want to do is set this as a network node to monitor through "dumpcap" packets that pass through my network, I've done I installed everything necessary in fact I've already running great, I've done through a Wireless (USB) adapter from functioning as "Access Point" wireless (so will download the files to be saved), I've come this far following this tutorial: (Photo Attached) and another pair.
The fact is that since I could configure all my peripherals, the problem lies in the following:
I need to connect from my local home router or from the Internet source (ADSL Modem), through an Ethernet cable to my Raspberry Pi (which work to record all packets My network traffic by "dumpcap") it is noteworthy that this will have perfectly configured, then I need through another Ethernet cable which my computer (PC) will be connected by a transformer USB-> Ethernet (attached reference picture), for example, that I have done and the only mistake that happens to me is that my PC does not receive Internet remains limited, in theory I need to do is that the Raspberry Pi function as a filter through which to capture packets of dumpcap store in some files (this is already done), but then the computer will connect by USB-port Ethernet continues to have internet and work perfectly as if connecting from the ADSL modem to the PC directly.
Could anyone help?
Thanks in advance.
-----------------
Deputy contents of the most usual configuration files so that any expert tell me if I have an error .
/etc/default/isc-dhcp-server
Code:
# Defaults for isc-dhcp-server initscript
# sourced by /etc/init.d/isc-dhcp-server
# installed at /etc/default/isc-dhcp-server by the maintainer scripts
#
# This is a POSIX shell fragment
#
# Path to dhcpd's config file (default: /etc/dhcp/dhcpd.conf).
DHCPD_CONF=/etc/dhcp/dhcpd.conf
# Path to dhcpd's PID file (default: /var/run/dhcpd.pid).
DHCPD_PID=/var/run/dhcpd.pid
# Additional options to start dhcpd with.
# Don't use options -cf or -pf here; use DHCPD_CONF/ DHCPD_PID instead
#OPTIONS=""
# On what interfaces should the DHCP server (dhcpd) serve DHCP requests?
# Separate multiple interfaces with spaces, e.g. "eth0 eth1".
INTERFACES="wlan0 eth0 eth1"
/etc/dhcp/dhcpd.conf
Code:
#...
# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
authoritative;
#...
subnet 192.168.42.0 netmask 255.255.255.0 {
range 192.168.42.10 192.168.42.50;
option broadcast-address 192.168.42.255;
option routers 192.168.42.1;
default-lease-time 600;
max-lease-time 7200;
}
/etc/network/interfaces
Code:
auto lo
iface lo inet loopback
auto eth0
#iface eth0 inet dhcp
#iface lo inet loopback
iface eth0 inet static
address 192.168.42.2
netmask 255.255.255.0
#gateway 192.168.0.1
auto eth1
#iface eth1 inet static
#iface lo inet loopback
iface eth1 inet static
address 192.168.42.3
netmask 255.255.255.0
#gateway 192.168.0.1
auto wlan0
#allow-hotplug wlan0
iface wlan0 inet static
address 192.168.42.1
netmask 255.255.255.0
#auto wlan0
#allow-hotplug wlan0
#iface wlan0 inet manual
#wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf
auto wlan1
allow-hotplug wlan1
iface wlan1 inet manual
wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf
up iptables-restore < /etc/iptables.ipv4.nat
/etc/hostapd/hostapd.conf
Code:
interface=wlan0
driver=rtl871xdrv
ssid=OggunLab
hw_mode=g
channel=6
macaddr_acl=0
auth_algs=1
ignore_broadcast_ssid=0
wpa=2
wpa_passphrase=Shabukenke01
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP
/etc/default/hostapd
Code:
# Defaults for hostapd initscript
#
# See /usr/share/doc/hostapd/README.Debian for information about alternative
# methods of managing hostapd.
#
# Uncomment and set DAEMON_CONF to the absolute path of a hostapd configuration
# file and hostapd will be started during system boot. An example configuration
# file can be found at /usr/share/doc/hostapd/examples/hostapd.conf.gz
#
DAEMON_CONF="/etc/hostapd/hostapd.conf"
# Additional daemon options to be appended to hostapd command:-
# -d show more debug messages (-dd for even more)
# -K include key data in debug messages
# -t include timestamps in some debug messages
#
# Note that -B (daemon mode) and -P (pidfile) options are automatically
# configured by the init.d script and must not be added to DAEMON_OPTS.
#
----------------------

Categories

Resources