Softbank X01HT w/ OpenVPN, any luck? - 8525, TyTN, MDA Vario II, JasJam General

Hi all,
I've had my phone Englished for the past couple days, everything is working well here.. Japanese input, the works.
I am now attempting to set up the OpenVPN client on the phone so that I can do Yahoo, MSN, etc. I've got it so close that I can taste it, but I'm not quite there. Right now it establishes the connection to my server, and sets the VPN connection up as the default gateway. When I traceroute or ping outside the network, it uses the VPN connection as it should. Even sending UDP packets works (DNS queries to external servers is fine, for instance) -- all has been verified by looking at tcpdump output from the server machine.
However, when the phone tries to send a TCP packet (HTTP, for instance), right away I see a "TCP Connection Error" message, and actually the OpenVPN server never even sees the packet. This is the case with either NetFront or Agile Messenger.
I'm so close I can taste it -- as I said, ping and traceroute work just fine. Has anyone else had any success using OpenVPN?
Thanks,
- awh

I just want to verify -
did you follow MixerSoft instructioned on this web site of how to change Softbank X01HT from Japan OS to English OS, or did you ask Softbank to install English OS your phone? because i'm planning to purchase one in Japan.
thanks in advance.

awh_tokyo said:
When I traceroute or ping outside the network, it uses the VPN connection as it should. Even sending UDP packets works
[...]
However, when the phone tries to send a TCP packet (HTTP, for instance), right away I see a "TCP Connection Error" message, and actually the OpenVPN server never even sees the packet.
Click to expand...
Click to collapse
I used openvpn some time ago and din't had this problems (3G vodfone spain connection, connecting through pocketpc openvpn client to my home linux server), evrything (tcp or udp) was encapsulated in the tunnel and reached the endpoint... i didn't use it for internet access, just to reach my intranet (only routed class C subnet through the tunel).
For what you say the problem seems to be on the OpenVPN server not natting correctly TCP packets, but that's just my guess... To troubleshoot use tcpdump on the server side and these tools on your pocketpc: vxutil, myipconfig and mtoken.
Hope that helps

otoro_315 said:
did you follow MixerSoft instructioned on this web site of how to change Softbank X01HT from Japan OS to English OS, or did you ask Softbank to install English OS your phone?
Click to expand...
Click to collapse
I don't think that Softbank will install an English OS even if you asked them to. I upgraded the phone myself using a bunch of different information that I found here and there...

otoro_315 said:
I just want to verify -
did you follow MixerSoft instructioned on this web site of how to change Softbank X01HT from Japan OS to English OS, or did you ask Softbank to install English OS your phone? because i'm planning to purchase one in Japan.
thanks in advance.
Click to expand...
Click to collapse
I think that you've just coming to Japan, if you live for along time about 3 months, you was not asking like that. You will never get any phone have only English without Japanese, only Japanese is ok!
I a PDA, you can have only one language version, that is Japanese (because the Japanese seem to be very hate English, because it very hard with them). And you cannot ask Softbank to install English OS for you, if you don't like, go away!!!

mptu said:
I think that you've just coming to Japan, if you live for along time about 3 months, you was not asking like that. You will never get any phone have only English without Japanese, only Japanese is ok!
I a PDA, you can have only one language version, that is Japanese (because the Japanese seem to be very hate English, because it very hard with them). And you cannot ask Softbank to install English OS for you, if you don't like, go away!!!
Click to expand...
Click to collapse
what is the point here?

Related

O2 UK SSH access (port 22) over GPRS?!

Hi everyone,
I was going to buy the XDA II, but ended up with the Siemens M65 (sorry!)... I was too worried I'd break the XDA as I use my phone quite heavily under rough conditions.
Anyway, I figured this would be a good place to ask... is it possible to connect to port 22 (SSH) over the O2 UK GPRS network? Do they support TCP/IP networking? I have two Java SSH clients for my M65 (mobiSh and FloydSSH) and they just return an error saying 'no route to host'.
I've got my GPRS setup as I can access HTML web pages and download emails from POP accounts, but I have a feeling port 22 is blocked..?
Many thanks!
Matt
Maybe your JAVA VM can't connect to Internet? Try PocketPuTTY! This is working for me in Hungary/Vodafone. It is a simple applicatio.n, doesn't need Java.
My question; there is any SIP that can send function keys? For example, I like to quit from MidnightCommander, but the internal keyboard doesn't have an F10 key.
Maybe your JAVA VM can't connect to Internet? Try PocketPuTTY! This is working for me in Hungary/Vodafone. It is a simple applicatio.n, doesn't need Java.
My question; there is any SIP that can send function keys? For example, I like to quit from MidnightCommander, but the internal keyboard doesn't have an F10 key.
It *has* to be Java for it to work on my Siemens phone.
I was just hoping there would be some O2 GPRS users here Anyway, I solved it... I changed the port on my SSH server to a more O2-friendly port (it seems they didn't like me using port 22). It works fine now.
Thanks!
Matt

New Exec Owner - Help Please ....

Hey gurus
being a proud owner of new xda exec (O2 UK) 've got the following questions .....
KINDLY GIVE ME STEP-BY-STEP PROCESS PLS....
1) Wireless Modem --- How can I use my exec's browsing on my laptop either by bluetooth or usb ? I tried with bluetooth where in which I can detect my laptop in my device and i started wireless modem (selecting bluetooth) and clicked 'start'...later from laptop's bluetooth wizard i initiated dial-up-networking and GOT STUCK! wats my user id and password and which number to dial ? i tried giving my mobile number(device mobile number) without any user id and password but with no joy...all i got is error message saying that couldn't connect ....Retry
2) Terminal Client -- All I understood from manufacturer's provided guide and forums is this just like pcAnywhere stuff -- controlling remote computres..... i 'm interested in doing the same with my laptop... I tried here but which server name should i give while configuring it in the device ? even if i give my computer name how on earth it can detect my laptop ? shud i do some config change in my laptop like making it visible externally ???
3) GPRS vs WAP -- My exec is preloaded with both as it comes with Welcome Browse & Download tariff of O2. I've got one ready-made connection under 'My ISP' and 'My Work Network' which are as follows :
My ISP
Name - 'Mobile Web' of type Cellular Line(GPRS, 3G)
Access point -- mobile.o2.co.uk
My Work Netwrk
Name - 'O2 Active' of type Cellular Line (GPRS, 3G)
Access point -- wap.02.co.uk
As GPRS is charged based on content downloaded where as WAP is charged based on the online duration (correct me if i'm wrong pls )... what should i do if i always wants to use GPRS ? Can i delete 'My work Network' as it's access point is pointing to WAP?? Am i correct in saying this ?? If i delete this wud u see any probs in browsing and other functionalities of my device???
4) Active Sync Support Code 85010014 -- Searched a lot on this nasty bug and all i found is remedy but not the fix
lately i 'm finding myself reinstalling outlook everytime when i want to sync my outlook stuff ?? but no user reported such frequent reinstallations ?? is it something really gone crazy with my outlook ?? btw i installed outlook from the provided cd and synching my lotus notes with it by 'Outlook Connector for Domino' (downloaded from microsoft site).... its practically not feasible to reinstall everytime isn't it i'm looking either to get rid of this nasty bug or other means of synching my lotus notes into my device preferably freeware pls....
Thanks in advance...
Looking forward to your expert replies ...
kasu[/list]
OK, i can give a bit of insite on 2 points
2) For you to be able to connect to a machine remotely with TSC, it must be running Windows XP Pro, Server 2000 or server 2003. and have it enabled under controlpannel > System > Remote Tab.
As names translate to IPs through DNS, the computername should be fine, aslong as your device is on the same network segment (subnet) as the machine you are trying to connect to, otherwise IP is needed.
3 think of WAP as a highway, and GPRS and GSM as the cars. GSM is pay by time, and GPRS is pay by byte. Wap is just the type of connection, and you will need the wap connection to access O2 active (If it is anything like voda, you will only be ableto get O2 active through this, and you will neeed to use the other one for normal net browsing)
heliosfa said:
OK, i can give a bit of insite on 2 points
2) For you to be able to connect to a machine remotely with TSC, it must be running Windows XP Pro, Server 2000 or server 2003. and have it enabled under controlpannel > System > Remote Tab.
As names translate to IPs through DNS, the computername should be fine, aslong as your device is on the same network segment (subnet) as the machine you are trying to connect to, otherwise IP is needed.
3 think of WAP as a highway, and GPRS and GSM as the cars. GSM is pay by time, and GPRS is pay by byte. Wap is just the type of connection, and you will need the wap connection to access O2 active (If it is anything like voda, you will only be ableto get O2 active through this, and you will neeed to use the other one for normal net browsing)
Click to expand...
Click to collapse
Thanks heliosfa....'m waiting for other replies aswell...
kasu said:
heliosfa said:
OK, i can give a bit of insite on 2 points
2) For you to be able to connect to a machine remotely with TSC, it must be running Windows XP Pro, Server 2000 or server 2003. and have it enabled under controlpannel > System > Remote Tab.
As names translate to IPs through DNS, the computername should be fine, aslong as your device is on the same network segment (subnet) as the machine you are trying to connect to, otherwise IP is needed.
Click to expand...
Click to collapse
Hey
regarding the nasty bug "Synchronization Error 85010014" found info in microsoft active sync faqs ---- http://www.microsoft.com/windowsmobile/help/activesync/default.mspx
installed AS 4.1 and till now it seems to be working fine.... but frankly i don't trust MICROSOFT products....
lets see ....
try your luck...
Cheers
Click to expand...
Click to collapse

vpn client?

hey guys,
am trying to connect to my office's VPN with my vario II. the default software provided does not seem sufficient. for one, i have one of those security key ring things which means my password changes every time i want to connect.
my pc uses cisco's vpn client...
any ideas? right now i'm just synching my exchange server with my pda using activesync, but wouldnt' midn having it on the go! there's no "external" access as such for the exchange server - it does have a web front end but its highly customized and isn't as easy as just configuring it as an external data source on my pda...
This one works perfect for me..
http://www.ncp.de/english/download/testsoftware/index.html
We use AnthaVPN at my university and it's supposed to work quite well with Cisco concentrator gateways, but be warned, if you have the latest 3.3 aku, you might run into problems like I did regarding loosing 3g internet connectivity on your hermes. However it could have just been a fluke as I didn't bother trying a fresh install of antha after a hard reset or anything since 3g is just as fast as my universities wireless internet anyways
Hope this helps
You can also try Bluefire. They have a 30 day fully functional trial version.
Find out more Here
Applestar said:
http://www.ncp.de/english/download/testsoftware/index.html
Click to expand...
Click to collapse
I have installed this but can't see any way of configuring the VPN connection. How did you configure it?
You have to use the PC client in order to create a configuration file and then transfer the file to your device
duh!
thanks!
bluefire is amazing. i bought it.
I came close to getting bluefire to work on our Cisco network... But once connected it would not transfer data.
I read on a seperate post here that alledgely the medianet unlimited plan uses the wap.cingular access point. That point is NAT based and some vpn clients do not like that... So they refuse the connection based on changing ip addresses.
I am not a networking expert so I do not know if this is in fact the case.
I do know I tried every freakin setting for bluefile and could not get a vpn tunnel from my phone to our Cisco vpn... So I gave up!
NCP
Could I get more specific infos about bluefire? They wanted a 5 page survey before they would send me a (business) trial.
Well, NCP Secure Entry VPN Client works perfect for me with Lancom and other standard firewalls. And yes, configuration is made with a Win XP Desktop Application. Nice about this: They got a Desktop VPN client as well which will be configured exactly the same way. So if you got a working setting for your Laptop you can manually copy the settings and they will work on the PPC as well - thats what I did.

Hero, OpenVPN, StrongVPN and the Big China Mistery

Well I searched the forums all over the interweb for a week now, and did not find an answer so I post.
I live in China and as part of the Expat Survival Kit I run an OpenVPN service to solve my facebooktwitteryoutoube problems. The provider is strongvpn.com, or other name reliablehosting.com - reliable, they are, and responsive and helpful and everything.
The VPN uses a San Francisco server, so anytime I fire it up on my PC, I have a USA IP, and can access Youtube, Facebook, Twitter, Pandora et al. Bingo.
I struggled days to hack this connection on my Hero, and finally managed, it works, it connects. Apparently.
Now here is the hick:
- I connect on the Hero with TunnelDroid, using my original StrongVPN config file. It takes some time, but usually connects, either WiFi and Edge.
- I check my external IP, it's the good old Frisco one, I seem good to go
- I can surf sites like e.g. Amnesty International, impossible without VPN. I can use Pandora, so definitely I have US IP. Eventually if there is an embedded Youtube vid somewhere, I even can see and try to start it (although it's dead slow)!
- But, none of the social integration features work. I can not log in into twitter, facebook etc, and when I try to visit those sites with the browser, I have the same result as without VPN, nada. Timeout, service unavailable, technical problem, you name it
Now, if there is any developer / network or VPN expert / GFW operator / Google guru around... I really want to understand exactly what the problem can be - that would help some fellow Hero owners here in China
I changed the "hosts" file that I found on some forums... I tried to boost the process with some web proxy... Tried everything - nothing works.
How is it possible that I'm behind a VPN, I have American IP reported by any software you can imagine, and still I'm blocked, while everything works fine on the PC with the same VPN connection???
I can live without these apps and sites on my Hero...but can not live without finding out the truth
你有没有把DNS设置成OpenDNS的地址或者GooglePublicDNS的地址?
GFW好像会返回伪造的ip,纵然你有US的IP也无法访问一个假的IP,对吧
Ok,if you're hard to read Chinese...
Use a OpenDNS address or Google Public DNS address instead of ISP's,All of those DNS server are GFWed.They'll reply a fake ip address of Youtube.
Not working
Thanks,
I tried this way, but still no result.
How can ANY filter get through an 1024-bit secured openVPN connection anyway????
And on the PC, the same connection works flawlessly...
Is there any routetable or something like that?a modified hosts?some ROMs will do that.
a VPN connection will route all of your data in normal,but if you set a routetable,some special URL will not pass the VPN,
check them or flash a foreign ROM instead and try again.
Good luck
AFAIK the standard Hero kernel does not come with the tun.ko driver (which is necessary to capture the outgoing traffic and redirect it to the tunnel). Did you install a custom kernel, too? E.g. newer MoDaCo images have it by default.
I did nearly everything...modified hosts. Running MoDaCo 3.0 with newest 1.9 Tekn. kernel. Installed the openvpn binaries. And the connection WORKS, just not for everything...
Anybody in China who can use the social networking features on the Hero?
Ps: the reoutetable, I don't really know where to look it for...
I don't know the answer, but you can debug it yourself with a computer and wireless access point:
Hero <--wifi--> AP <--ethernet--> Computer running packet sniffer <--Internet-->
A few comments:
Don't consider Pandora as proof of a US IP. Better check on a website that gives actual info about your location.
The comments about OpenDNS and hosts files are helpful, but both assume that the wrong IPs are not already cached somewhere. Make sure all caches (DNS, browser, etc.) are flushed.
The easiest way to find out if the DNS is the problem is to do a ping to youtube.com and see if the IP range really belongs to Google or of it's a random IP elsewhere. You can use a 'whois' command or website to figure out who the IP belongs to.
Please note that OpenVPN does not encrypt at 1024-bit. 1024-bit is just the initial key length, which is unrelated to the 128-bit or 256-bit of the actual tunnel.
Btw, you don't necessarily need to use OpenVPN. Lighter protocols like PPTP and L2TP may perform better on a phone. China Unicom works well with both. China Telecom works fine with L2TP.
Greetings from Shenzhen.
open VPN
Hi,
not sure if this thread is still alive but i give it a try...
I' currently running elelinux 2.4 with [email protected] on my HTC hero and have trouble connecting to a friends VPN.
the VPN server is in Germany and it works well for my friend, who is also hosting the server. however when i try to connect the server records following:
read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
and it seems that my phone is refusing the connection to the server...
any ideas?
thanks!
hero.walker said:
Hi,
not sure if this thread is still alive but i give it a try...
I' currently running elelinux 2.4 with [email protected] on my HTC hero and have trouble connecting to a friends VPN.
the VPN server is in Germany and it works well for my friend, who is also hosting the server. however when i try to connect the server records following:
read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
and it seems that my phone is refusing the connection to the server...
any ideas?
thanks!
Click to expand...
Click to collapse
hi there , I don't use elelinux 2.4, but i encountered an same error with CM 7 nightly build, and I believe that is an issue of the kernel you are using for the kernel have some problem with the tun.ko moduel , here is the thread ( read from page 42 ) :
forum.cyanogenmod.com/topic/14455-cm7-discussion-of-nightlies/page__st__860
sorry , i haven't get the permission to post url here yet .
thanks for the link! seem like it does not work with my current kernel, will fash the flykernel from elelinux and try again.

HOWTO get Eduroam working

Some univeristies use a WLan called EduROAM.
http://www.eduroam.org/
But somehow HTC HD2 cant connect to it.Seems like a personal certificate is the problem.
Has anyone got this working on HD2 ?
It works on Nokia phones running Windows mobile 6.5
you need to download one of the latest version of securew2 client from your uni website or the developer's website. follow instruction to set up the connection given by your uni IT department.
I'm using eduroam connection now in UCL.
Thanks for your answer.
I downloaded securew2
But I still cant get it to work.
Do you have to provide this information on your campus ?
SSID: eduroam
authentication: WPA2
kryptering: AES
EAP-typ: PEAP
authentication: MSCHAP v2
For me WPA1 works better, also AES is wrong. Then you select "Secure W2" in the drop down box not peap. SecureW2 needs to be configured as well. Your university should provide you with that info. You usually don't need the radius part with the cert! That's just to protect you from connecting to the wrong network (and thus giving them your password).
Above information about WPA2 is from my campus informationsite.
After I made some settings on "Eduroam connection" i cant change them.
As soon as push eduroam it tries to connect.
The only way to change them is to install a new rom, so that the phone is
like it was from the first time.
quart666 said:
Some univeristies use a WLan called EduROAM.
http://www.eduroam.org/
But somehow HTC HD2 cant connect to it.Seems like a personal certificate is the problem.
Has anyone got this working on HD2 ?
It works on Nokia phones running Windows mobile 6.5
Click to expand...
Click to collapse
I took my mobile to my University's IT Department and they set it up for me and it works great, I get all of my student emails directly to my mobile. Hope this helps.
bahardman said:
I took my mobile to my University's IT Department and they set it up for me and it works great, I get all of my student emails directly to my mobile. Hope this helps.
Click to expand...
Click to collapse
ROM version ?
In my case,
I download SecureW2 personal client 2.04 ce, install it on my phone via active sync.
Settings>Menu>All settings>Connection>Wifi>Wireless networks>Menu>Add new
and start configuring the settings. Different network will have different settings.
I don't think ROM version matters in this case. It should work with your device, if you got the right SecureW2 client and settings set up on your phone.
Btw, IT department or university's website should provide sufficient information for you to set up the connection.
Good luck.
The IT people cant get it to work......
They say that they cant get it to work on HD2.
Thats why I turned to you guys.
Still no luck, secureW2 keeps asking for user/pass, and yes I know its the right user/pass. A friend at work tried his username and it doesnt workl either.
If I connect to Eduroam on my pc it works, so nothing wrong with user/pass
quart666 said:
The IT people cant get it to work......
They say that they cant get it to wrok on HD2.
Thats why I turned to you guys.
Still no luck, secureW2 keeps asking for user/pass
Click to expand...
Click to collapse
You might need to get another version of secureW2 client.
I tried a secureW2 client provided by my uni and i faced the same problem as you. It kept on prompting me for username and password. I changed to another client (SecureW2_Personal_Client_204_CE), downloaded from SecureW2 forum, and it worked great!
During the installation of the client, registration is needed, i could register and install it couple of times on my phone without any problem. However, yesterday when i tried to reinstall the client after upgrading my ROM, the installation failed at the registration part. Maybe because they stop providing the free version?
I managed to get it installed on my phone again via activesync though.
Cant find that version.
I downloaded version SecureW2_Enterprise_Mobile_313_GA_TRIAL.exe
bump..
I still cant get it to work
http://www.chalmers.se/insidan/SV/arbetsredskap/it/bastjanster/eduroam
Chalmers University of Technology uses Thawte premium server certificate for authentication.
What you need to do is this, go to Thawtes website and download their certificates:
(Apparently I cannot post links, but just google for "thawte root certificate" the file is at www dot thawte dot com slash roots)
The certificate you need is located in the folder Thawte Roots\Thawte SSLWeb Server Roots\thawte Premium Server CA\Thawte Premium Server CA.cer
Download that to your HTC HD2 and install it by just clicking it in the file browser on your phone.
Then you can just follow the instructions you found at their webpage.
Hope this helps.
//a
how to connect to EDUroam
Firstly, this refers to connecting an HTC android phone (specifically the HTC Desire, but what I get from the web is that they are all much the same, these HTC android interfaces).
The problem starts when an innocent user looks for a WiFi network and finds eduroam. It then asks for not particularly relevant password information and cannot connect because the configuration of the default network setup is wrong. If you try to get the phone to forget that network it appears to do so that when you reconnect it still assumes that the connection was correctly set up. In order to get it to forget their network properly you have to enter the wrong password several times so that the phone thinks you have illegally trying to access the network. It then completely forgets.
The network discovery procedure will again come up with EDUroam, and the configuration should follow the instructions on the following website from Oxford University: <search for android eduroam oxford in Google>
In fact the names given on the HTC desire setup are slightly different. The important thing is that the EAP type should be PEAP, and the secondary type should be MSCHAPv2.
You then enter the username which will be effectively your registered e-mail address at your own institution, and then use as a password the thing eduroam calls "network access token" (16 lower case alphabetic character password generated for you if you buy your institution on request.
You then connect up and miraculously you have the connection you wish!
You should check that the connection is mobile roaming capability on your phone and checking that you really do have Internet and e-mail access as you wish through the WiFi connection directly.
I have been looking for the SecureW2 Personal Client 2.0.4 for Windows CE package (original filename: "SecureW2_Personal_Client_204_CE.zip"). I have been unable to find it and the sources given in this thread no longer exist or are no longer available.
If anyone has the file, please provide it.

Categories

Resources