Database Develop

Running OpenVPN on the Kaiser (3G)

I've been struggling with OpenVPN on my Vario III on T-Mobile and hope someone can throw me a bit of a lifeline.
I can connect to my OpenVPN (running on my WRT54GS router) via wifi but the problem is when I try over 3G. Even when I've specified the provider and ticked "exclusive", it manages to connect to my OpenVPN server but I get no further connectivity (to webpages etc).
As said, via wifi this config on my Kaiser works perfectly...
Code:
remote xxxxxx.homeip.net
port 22
dev tap
secret "\\Program files\\OpenVPN\\config\\secret.key"
proto tcp-client
resolv-retry infinite
nobind
comp-lzo
cipher AES-256-CBC
route gateway 192.168.xxx.xxx
redirect-gateway
dhcp-option DNS 192.168.xxx.xxx
but when tried via 3G it seems to have a problem with setting the routing..
Code:
Mon Oct 22 21:58:00 2007 ROUTE: route addition failed using CreateIpForwardEntry: The parameter is incorrect.
Just wondering if there is something either with the T-Mobile network or the Vario III which is specifically stopping me from using OpenVPN
Or are my settings misconfigured?
I've also attached a full copy of the log.
Thanks for any help you can give (Give generously)
CP

Sounds suspiciously like a NAT traversal or proxy issue to me. On the HSDPA network, there's a proxy in the picture. I don't believe that's the case for the Edge network. That could easily be the cause of the problem.

Surely once the connection has been established the NAT issue shouldn't be a problem?
TBH I thought the route addition problem was due to the software being unable to update the local routing table?

NAT traversal issues often manifest themselves as connections that look like they're established, then die immediately. The VPN participants have to know the actual IP addresses of the devices involved, and understand that NAT is happening. Proxies also need to play a role in that process since they're effectively "standing in" for your device. And they may be configured not to permit IPSec traffic at all.
What you've described sounds exactly like NAT traversal issues - the negotiation appears to go just fine, but the actual connection dies on the vine. Since the end points don't have the right data from the negotiation (actual valid addresses to build the tunnel around), the route they try to build is invalid and fails.
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Proxies + NAT +IPSec = small nightmares. This is one of the reasons SSL VPNs have gained significantly in popularity.

Try Hamachi vpn
https://secure.logmein.com/products/hamachi/vpn.asp
Surur

PerfAlbion said:
In your log, it's impossible to tell since the IP addresses have been all translated to xxx.xxx.xxx.xxx. But I suspect that the ones up until the "TCP connection established with..." message are all displaying valid public IP addresses, and somewhere very shortly after that they start displaying private RFC 1918 addresses.
Click to expand...
Click to collapse
You have PM

Quick update:
I've just connected my Laptop to the internet via my Kaiser using 3G.
Ran OpenVPN and it connected without a problem.
Technically this would suggest that I should be able to connect with my kaiser but theres either a problem with my config or a bug in the PPC openvpn software :S
I haven't tried on UDP yet which will be my next test....
Any ideas?

Blimey, I didn't know there was a PPC client! I'll try it to see if it works with my setup.

Well I can't even get it to talk to my server so won't be able to help !

Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.

PerfAlbion said:
Fire up the card in your laptop and take a look at the IP address assigned to your machine. Since it's a different service, they may not be passing you through the proxy that's in place for the Kaiser. If you've received a public address, then you're on a "different network" even though both are 3G services.
Click to expand...
Click to collapse
?? When you connect a laptop via BT to the kaiser, (using internet sharing) it creates a NAT which the traffic is passed over through the 3G service. Essentially using the same service..
Unless you mean the "service" between the windows software & the PPC/WM software is different?
Plus how'd you mean fire up the card in my laptop?
Cheers for your help on this btw.

I'm assuming that the Laptop data service and the PDA data service are treated differently within the AT&T network. While the PDA passes through a proxy, I suspect the laptop does not.
When I say "fire up the laptop card," I mean establish a connection and look at your IP address (ipconfig from a command prompt will show it). It may be a different IP address range than the PDA receives (which you could see using VxIPConfig or VxUtils). Even if it's within the same range, it may be bypassing the proxy.
So while you're using essentially the same technology, I suspect the services are implemented very differently, and that's what we're trying to sort out.

I dont believe it!!!
I downloaded VM Net Brower checked what IP addresses were being assigned and connected successfully! Loaded up www.whatismyip.org and it came up with the proxy of my PC at home.
Unfortunately, my phone was running incredibly slow and thought it best to do a soft reset... afterwards no matter what I do, I can't connect. I just cant figure out why or replicate what I did
Argh.. this is getting to me now... next on the agenda is to try changing the port number from 22 to 8080 or 80 and see what happens.

Proxy Settings Issue

I am trying to hook to a public WIFI at work. The only issue is it requires a specific proxy.
So here is what I do and see happening:
Before attaching to network, I go into Connections and set up the proxy server for 'My Work Network'.
Then I go in and set up the Wireless Settings, and for Connects to I select Work. It connects to the wireless, but when I go into IE it will not connect to anything.
So with the connection up, I go back Settings/Connections, and My Work Network has nothing in it for a proxy for HTTP. I add it and save it. But I still do not connect to anything in IE.
Oh, and one other thing: I don't see how to tell if I am getting DNS server settigns. I can see what my IP and Default router are, but not DNS. I doubt this is my problem, but would be nice to see if I have a DNS server.
Any ideas?

Well, it seems to have resolved. Not sure why.
I do still interest in knowing how to determine the DNS settings.

I spoke too soon.
It has disappeared again. I am finding it inconsistent. Will soft resets affect this?
I still interest in feedback on this.

Another bit of information I just thought of, in case anyone has any ideas...
The time it worked, it had the pop-up acking which network to hook to, and I just ignored it, and it hooked to the public one, and it worked. The times it doesn't work, it hooks to the public network, but the pop-up doesn't come up.
Hoping for some ideas here...

This is a problem with WM 6.0. It's has been fixed a little bit in 6.1, but instead of the settings disappearing IE doesn't use the proxy settings.
My suggestion for now, GIVE up trying to use the proxy settings.

Arlop said:
My suggestion for now, GIVE up trying to use the proxy settings.
Click to expand...
Click to collapse
I guess this means I cannot use WIFI if a Proxy is required, which on anything other than strictly public, it ususally is.

This is a nasty bug in WM6. You could "temporarily" resolve this by doing the following reg hack. (After set the Proxy in control panel/Connections)
HKLM\Comm\Connmgr\Providers\{EF097F4C-DC4B-4C98-8FF6-AEF805DC0E8E}\HTTP-{18AD9FBD-F716-ACB6-FD8A-1965DB98B814}
Set key "Type" as 1 (DWORD)
After doing the above hack, enter the Connections then exist without doing anything. (To refresh the system, I suppose.)
After the refresh, you should be able to have PIE access outside network.
However, as soon as your ActiveSync works (via Wifi or USB) or you sometimes you enter the Connections again, the setting will be gone (not stick) and you need to reapply.
Hope this works

Thanks. I guess I'll suffer w/o it at work. That's too much of a pain in the butt. I synch a lot all day long.
I appreciate the input.
I supposed I'll be in for a hard reset/new rom one of these days on a MS update. Sounds like 6.1 is still not solid for this either.

For the proxy and ip settings, please try to use use my wifi profiles.
Your wlan network must connect to work.

RStein said:
For the proxy and ip settings, please try to use use my wifi profiles.
Your wlan network must connect to work.
Click to expand...
Click to collapse
Cool. I'll give them a try, and post back how it goes. Thanks!

RStein
I've installed the WiFi Profiles and have posted my status in your thread here at post 54.

For anyone following this, I have not been successful. The proxy disappers even with the profiles mentioned above.
He had not heard of the bug that makes them disapper, and has not had such complaints before with his software. Interesting.
He is on a 6.1 rom, and I'm on 6.0.
At any rate...still suffering no proxy.

FYI...here is another thread on this topic. It has helped some it seems, but not me.

Wireless Wierdness

Help!
I have a Netgear DG834T router as provided by Sky. I have one wired and two wireless connections running into it (let's call them WD, WL1 and WL2 respectively).
On the connections page I can see all of them under "attached devices"...but now I want to connect using my Kaiser (actually an O2 XDA Stellar)
What happens...
On the Kaiser, I get an IP address (assigned by DHCP) as normal - but can't access the internet - or at least, can only access it very rarely - http://www.google.com can't be found, but http://www.bbc.co.uk can. No idea why.
On the router, under "attached devices", not only can I NOT see the Kaiser, but WL1 and WL2 also disappear. WD remains visible. The router cannot ping the IP address of the Kaiser (timed out). If I disable WiFi on the Kaiser, then WL1 and WL2 are immediately visible again. Internet connection on WL1 and WL2 works, even when they are not visible.
I HAVE connected to this network before without any problems.
What the hooting heck is going on, and how do I fix it?
Thanks!

Time to troubleshoot! What happens with this phone on another wireless network. We need to determine if it's the phone or the network. Do you have any friends with a phone like this? Can you use their phone on your network? Do you have any ROMs flashed, has this phone ever been on the network without problems?
If the phone works on another router try looking for firmware updates for the router. Those things really do need to be updated often and it could have something to do with that.

Only have access to one network :-(. Might be a couple of weeks before I can access a hotel one or something like that.
Think next door neighbour has similar phone, but different provider...will try if he'll let me!
No ROMS flashed.
It connected fine when I first had it. As far as I know, I've changed nothing since then.
2 out of 4 answered...with an option on three...I'll get back to you as soon as I've beaten up my neighbour and stolen his phone...
Joke!

There should be somewhere you can go to test that wireless. I can walk outside the building I'm in and find one.

ChumleyEX said:
There should be somewhere you can go to test that wireless. I can walk outside the building I'm in and find one.
Click to expand...
Click to collapse
You = US, me = UK. We still think the biro is a recent invention...

Neighbour's phone on my network gives the exact same problem. I've also noticed that when I click "Renew IP" on the Kaiser it doesn't work...it gives me 0.0.0.0, but will occasionally flash up the correct IP address. It's alomst as if the connection is being lost and remade every few seconds. The status ist gives me is "associated to network"...is that different to "connected"?
I've been trying to solve this on my router, but none of the settings seem to make any difference.

Same here
I get the same with the router from sky.
Kaiser says I have an IP address, 192.168.0.5, but the it doesn't show up on the attached devices on the router.
What I find that works is hit renew IP maybe twice until you get a really wierd IP address like
169.254.*.**, actually not sure if I'm picking up another network, but for some reason I don't think I am.
I can then browse the web and sync via wifi.
Really pisses me of that it says that it has an IP address but doesn't connect.

1) Make sure you dont have a proxy set up on your wifi connection on your device.
2) The 169. address is your device getting an unauthorised IP address as the router did not receive the correct encryption key from the device.
3) You can check if its an encryption thing by simply logging in to the router (192.168.0.1 in your web browser on pc) and changing the settings to turn wpa off and testing it. The routers username and password are on the card - its something like "sky" and "admin"

Yeah I agree, there is something up with that router.

Grey Area said:
Neighbour's phone on my network gives the exact same problem. I've also noticed that when I click "Renew IP" on the Kaiser it doesn't work...it gives me 0.0.0.0, but will occasionally flash up the correct IP address. It's alomst as if the connection is being lost and remade every few seconds. The status ist gives me is "associated to network"...is that different to "connected"?
I've been trying to solve this on my router, but none of the settings seem to make any difference.
Click to expand...
Click to collapse
with my router.....i have to set the wifi power mode on my kaiser to "best performance", any other setting and i get that "associated to network" ****. been this way every since the hermes and the wizard.

unwired4 said:
1) Make sure you dont have a proxy set up on your wifi connection on your device.
2) The 169. address is your device getting an unauthorised IP address as the router did not receive the correct encryption key from the device.
3) You can check if its an encryption thing by simply logging in to the router (192.168.0.1 in your web browser on pc) and changing the settings to turn wpa off and testing it. The routers username and password are on the card - its something like "sky" and "admin"
Click to expand...
Click to collapse
No, proxy set-up as the device was bought unbranded in US.
Because there are issues with this router, encryption and media streaming devices, I have only restricted the mac addresses with no encryption.
Still don't know about the 169. ip address beacuse doesn't seem to come up as am ISP.

Now then, how wierd is this?
After all these issues and kind of giving up on it as a bad job, I also noticed that out on the road, my GPRS wasn't working either - TomTom couldn't connect to the "plus" traffic service.
I get on the phone to O2 who told me that my phone hadn't been "provisioned". After one false start where they didn't seem to do anything about it, I have just (literally) had them tell me to go to the O2 Operator settings and tell it to update the "O2 UK Post Pay_GPRS" and reboot.
GPRS now works. And magically, so does my WiFi - IP address negotiated and full access to internet and my router's setup page granted. Working like a charm again.
So - seems to me it's an account setting, and nothing to do with either me poor ol' router or me nice new phone.
For completeness, I was occasionally getting the 169 IP address too, so it sounds like we have EXACTLY the same problem - suggest you get onto your service provider ASAP.

Proxy Settings for Work WiFi

I finally got the proxy settings for work working properly. I can now browse the Web at work.

Mind sharing this solution? I'd love to use the nook at work, but need to specify a gateway and dns server.
Sent from my T-Mobile myTouch 3G Slide using XDA App

Here you go
This took me days to find. But it's worth it.
http://gszyszka.blogspot.com/2010/05/how-to-browse-internet-from-behind.html
enjoy..

I could not get this to work for me. I got Firefox installed and made sure it would browse at home. At work, I fire it up, plug in the network.proxy.http and network.proxy.http.port, then change network.proxy.type to 1. No joy. Note, I'm using the exact same settings as are in my iPod Touch 3G for the same network which works flawlessly (shameless NC/Android dig, sorry). Any tips?
Homer

Ditto, I can't seem to find a clean solution.
So far my best bet is to use connectbot to tunnel all my conections through to my server. I'm not sure how to go about that but we'll see what happens.
I'm about to put Nookie Froyo on this b/c I really want Internet at school.

Would this setting perhaps allow me to use my nook color on a linksys wireless bridge? When the bridge is plugged in, I get a "connected but no internet" and when it's unplugged, I get, "connected to the internet" but with a weak signal.
I'm not sure what the issue is, but the Nook is the only device that constantly has this problem.

A better solution is use Opera Mobile 10 beta and select opera:config. The proxy setting is in there. Works 10 times better then Fennec/Firefox.

but what I really want is something that can proxy the whole system, so that market and gmail and other apps have access to the internet
Are you all sure that there's no solution to that? even as of now?

NC Strange Network Problems

Hi Folks,
I just got a Nook Color for xmas and I am seeing some very odd issues when I try to connect to my home wireless network. I am seeing the issue when it tells me it's "Connected, but no internet". The odd thing I am seeing is that it seems to be stuck trying to use the same IP and default gateway no matter what I do. I have a Belkin router and it was using WEP. The device was assigned an IP of 192.168.2.36 and it worked for a little bit. Then it stopped working. I tried changing it to WPA2 and still no luck. Figuring it was my router I bought a new one. I created a new wireless network with a new name and new subnet of 192.168.5.0/28 and STILL when the nook connects to this network it tries to use the IP 192.168.2.36. I put the network back to 192.168.2.0/28 and still it does not work. I setup the Belkin again as a wireless access point and made it open with no security with a totally different network SSID and it still wants to use this IP address. I connected to the nook with adb shell and tried ipconfig, netcfg, setting default route etc all with no luck. At some point during this process I rebooted it 8 times and flashed back to 1.0.0 firmware, wiped the /data directory and it STILL tries to use the 192.168.2.36 IP address. I am at a loss as to what to try at this point. The odd thing is I can connect to my neighbors open access point which is using 192.168.1.0/28 as its subnet and the NC works. Any suggestions anyone could provide would be much appreciated.
Thanks in advance.

You need to get the latest update.

ovidsmuse said:
You need to get the latest update.
Click to expand...
Click to collapse
I have software version 1.0.1