Database Users

GPRS and Static IP with VPN

HI guys,
Does anyone know how to get a static IP address when using the GPRS connection to the internet. The reason being is because our corporate firewall has to recognise the device through it's IP. Is there any other possible methods for recognising the user?
Also does a VPN work well over GPRS and is there any extra configuration involved on the VPN server
Cheers
Any answers would be great.

Unfortunately there is no simple answer to your question. AFAIK you cant get a fixed ip on gprs, but if your using the right firewall and the right vpn host you dont need to.
I use and supply windows sbs 2003 servers and vpn into them regularly. I have also used citrix to achieve similar results. Might be a bit difficult to persuade your firms it dept to set up something like that for 1 person though.
PM me if youd like any advice.

BillyB said:
HI guys,
Does anyone know how to get a static IP address when using the GPRS connection to the internet. The reason being is because our corporate firewall has to recognise the device through it's IP. Is there any other possible methods for recognising the user?
Also does a VPN work well over GPRS and is there any extra configuration involved on the VPN server
Cheers
Any answers would be great.
Click to expand...
Click to collapse
Hello Billy,
You ask a good question, but the answer isn't simple. Most carriers do have two types of APN (Access Point Name) provision for your SIM: "private" APN (which provides a non-routable IP assignment from behind a NAT, for basic browsing and e-mail functionality) and "public" APN (that provides a routable IP assignment, which is the Minimum Requirement for a more sophisticated connection type, such as VPN, etc). However, both of them are assigned by a DHCP (Dynamic Host Configuration Protocol) Server on a GGSN (Gateway GPRS Support Node) of your particular GPRS network operator. In either case, the end result will obviously be a DYNAMIC IP address on your GPRS terminal (be it a laptop PC, a PDA, or phone)
Some carriers do offer what is called a "dedicated APN" provision, which gives the subscriber their own IP range to choose from (almost like a small subnet), but it is only available to corporate giants like Pepsi (for example).
Now, to sum it up, you must have the proper APN provisioned on your Mobile SIM account (which the provider will normally call something like a "VPN data package" in billing terms). Then, you must obviously establish a GPRS session before you can connect your VPN client (but remember that most basic VPN clients work the best). It is pretty sad to say, but Microsoft Windows-embedded VPN client on Win2k/XP Pro so far has performed the best with no quirks whatsoever. It has to be via PPTP...L2TP has also worked for me..otherwise, the fancier (and more secure) the VPN tunneling protocol, the more its likely to fail. Normally all you need for a basic MS WIndows VPN client config is the Server name (or IP address), the user name, and the password.
Hope this helps,
Let me know how it goes,
Alex
PS. PM me if you have further questions.

VPN and TS Its like pulling teeth
hi all this has got to be the most anoying problem ever. i can connect to O2 vpn access point and hence i can connect to my work vpn server. however as soon as i try to open a TS connection to my desktop (through the vpn) the VPN connection is dropped and i never connect. Can anybody tell me why? if i have a vpn connection to my work server why does TS try to make another connection and bomb out the original. Is there a fix or another way of doing this i.e. does a external IP have to be nat'd to my desktop IP on port 3389? all help greatly appreciated. Ian

Proxy app?

Does anyone know of an app that allows your phone to become a web proxy?
Let me explain my situation... I work for a corporation that filters all their internet connections through a web proxy, which sucks cuz I can't visit any of the fun sites... one way around this I've found was to use ICS on my phone but that interferes with the default gateway on the current network.
All traffic on the network by default goes to an internal gateway on the local intranet and it really needs to stay this way because there are too many work ip's and ports to be able to statically route all of them through a specific destination and leave the default gateway as the ICS 192.168.1.1.
I have been able to create static routes to specific ip addresses (like my home computer) which override the default gateway and use ICS instead.. this is great but obviously not that great for web browsing and masking my use on the internet... what I would like to be able to do is set the HTTP proxy to my phone and have it handle all of the redirection... that would allow me to have a single route in the routing tables but span out to wherever I want on the web...
Oh, and yes, I have thought of just setting up a proxy on my home comp and routing through the phone -> home comp -> back through phone but that obviously limits me to the upstream bandwidth of my home network... which isn't TERRIBLE, and is feasible but obviously if I could eliminate the extra jump it would be much much better.
I can handle the routing tables np, they're easy to add from command-line.. problem is I need some kind of a proxy application on the phone that will handle all of the HTTP calls... anyone know of an application such as this?
Thanks

Hm can't say I know of an app that does this... it is planned for one of the upcoming releases of WMWifiRouter but that's still a while away and may give you the gateway issue again.

Chainfire said:
Hm can't say I know of an app that does this... it is planned for one of the upcoming releases of WMWifiRouter but that's still a while away and may give you the gateway issue again.
Click to expand...
Click to collapse
Ya I did more googling and still can't find anything... I just setup dante server on my linux vm at home and got a good socks proxy going.. seems to be working very well.. my upstream on cable is 80k/sec so that's not too bad I guess.
I'll keep an eye on wmwifirouter release notes though thanks

ATT rolling my IP address every few seconds on wap.cingular

Hello,
If I connect via wap.cingular (my account cannot connect on isp.cingular) I am having major issues using outlook web access, rapidshare, and a few other web apps. this is apparently due to ATT rolling my IP address every few seconds.
If I go on my phone (HTC FUZE/RAPHAEL) to http://whatismyip.com/ and refresh the page a few times, I get a different IP almost every time. it is always in the same subnet, so far (only the last numbers change ie, aaa.bbb.ccc.xxx, where xxx changes all the time, and a, b, and c, don't).
I use a huge load of data. Have they put me on some blacklist because I stream media all the time? This actually doesn't affect streaming media, but it screws up legitimate work usage.
Is there some keepalive utility I could use that would fix this as a countermeasure? Is anyone else running into this, or am I just special?
Thanks in advance for your help

wwwes said:
Hello,
If I connect via wap.cingular (my account cannot connect on isp.cingular) I am having major issues using outlook web access, rapidshare, and a few other web apps. this is apparently due to ATT rolling my IP address every few seconds.
If I go on my phone (HTC FUZE/RAPHAEL) to http://whatismyip.com/ and refresh the page a few times, I get a different IP almost every time. it is always in the same subnet, so far (only the last numbers change ie, aaa.bbb.ccc.xxx, where xxx changes all the time, and a, b, and c, don't).
I use a huge load of data. Have they put me on some blacklist because I stream media all the time? This actually doesn't affect streaming media, but it screws up legitimate work usage.
Is there some keepalive utility I could use that would fix this as a countermeasure? Is anyone else running into this, or am I just special?
Thanks in advance for your help
Click to expand...
Click to collapse
I'll plead ignorance on this, but I always switch off the proxy for the media net and get great usage for doing that. I don't know if you have tried it yet, but here is what I do.
Start/settings/connections/connections
Once it brings up the page, click advanced on the bottom.
Select networks
I use media net for both drop down. Click on edit. Select Proxy Settings on the bottom. Uncheck this network uses a proxy server to connect to the internet.
If you cannot get to the edit because it is not available, all you need to do is install the HTC Connection Setup and run it. Soft reset and the settings are available. It just rewrites the information but undoes what AT&T did to the phone.
Hope this helps.

Thanks for the reply.
I also use media net without the proxy. I only have issues with timeouts on my outlook web access server, and sites like rapidshare that make you wait 30 seconds to download a file and then complain of session timeouts.
With the proxy I get an IP address range in the 162.xxx.xxx.xxx family, which interestingly enough whois reports to be a verizon dsl modem address.
Without the proxy I get an IP address range in the 32.xxx.xxx.xxx family, which is ATT.
Either way, the address rolls every few seconds.
one workaround I have found is that Opera mini apparently uses an opera-run proxy server to access the internet, and opera mini does not have this logout issue on my outlook web access server even when the IP address rolls, since the proxy is not changing.
I believe the ISP.cingular APN would also fix this issue, but I have yet to find anyone at ATT willing to add it to my account so I can try it out, since they sell it with a tethering plan as an extra feature. I would have to convince my employer to add this to my plan, which is not likely.

Modifying host file -> blocking pornography

Hi everyone,
Simple question ... I've installed Ad free to download (I guess) a host file containing ad sources so browsing is less frustrating and probably faster.
Is there a similar way to add a list of porn websites to the host file? If it's not similar, how difficult could it be? I know a bit of Java and linux, but doing this on a phone might be out of my reach at this point.
Some direction would be welcome. Thanks!

If you know the sites you'd like to block, you could pull the hosts file yourself, edit it with notepad, and then repush it.

Just want to make sure I'm reading this right.... 3shirtlessmen wants to modify his hosts file to block pornography.
Sounds like a great setup for a joke.

timmins said:
Just want to make sure I'm reading this right.... 3shirtlessmen wants to modify his hosts file to block pornography.
Sounds like a great setup for a joke.
Click to expand...
Click to collapse
Look at the nick...

on wifi you can set the DNS server to openDNS I've never used it but from what i understand you can configure it to block sites, also i believe there was a script that could be run on rooted phones to change the 3g DNS server as well but i don't know if it works on the nexus or where to find it other than on the g1 board.

godsfilth said:
on wifi you can set the DNS server to openDNS I've never used it but from what i understand you can configure it to block sites, also i believe there was a script that could be run on rooted phones to change the 3g DNS server as well but i don't know if it works on the nexus or where to find it other than on the g1 board.
Click to expand...
Click to collapse
I use opendns on my router to block filesharing and proxies - it works well (though someone fairly technical will always find a way around it). The issue I have is that it does not play nice with vpn's (even when I have configured the opendns account for the vpn) and I can't change the dns settings on my nexus to use google dns (even with the settings in the dns field), as it still seems to pick up the settings from the router. If you don't use vpn, and are happy for all devices to be subject to the same restrictions, then opendns may be the answer (or at least it will block that content on your internet connection).

OpenDNS is used on my home network, and it does block pornography. This is meaningless on a phone when you can disable wireless though. Thanks for the tip.
How do I push and pull the host file from the phone?

Nesousx said:
Look at the nick...
Click to expand...
Click to collapse
I literally mention the nick in my post.

Haha, yeah. No joke here. Though it is kinda ironic . . .

[Q]proxy blocked vpn connection

hi guys,the company i am current working at uses a proxy connection for accessing the internet.(you have to go through the proxy in order to access the internet).but the proxy blocked most websites,so i tried to use a vpn connection over the company proxy to bypass the internet restriction.The problem is ,vpn connections are not allowed to go through the proxy.is there any way to bypass the block to use vpn or bypassing the proxy?I am currently using my company's wifi on an android device.please kindly help me to solve this problem.Sorry for my bad english and thank you for any help.
best wishes,
sunnytse1
*thanks button will be clicked if helped!

Anyone?
Sent from my LG-P880 using XDA Premium HD app

sunnytse1 said:
hi guys,the company i am current working at uses a proxy connection for accessing the internet.(you have to go through the proxy in order to access the internet).but the proxy blocked most websites,so i tried to use a vpn connection over the company proxy to bypass the internet restriction.The problem is ,vpn connections are not allowed to go through the proxy.is there any way to bypass the block to use vpn or bypassing the proxy?I am currently using my company's wifi on an android device.please kindly help me to solve this problem.Sorry for my bad english and thank you for any help.
best wishes,
sunnytse1
*thanks button will be clicked if helped!
Click to expand...
Click to collapse
the company i am current working also use VPN by setting the IP adress
the concrete operation is a little complicated, you'd better google for help
Good luck

The easiest solution would be to use 3G/4G and thus avoid any filter/proxy that your company WiFi has.
Assuming you don't want to do that, you should try to figure out what kind of VPN you're using. There are 4 main types:
1) PPTP - This one is old but supported in almost every OS natively (including Android). It's easy to setup a server for these using any Pro version of Windows. It's also easy to block.
2) L2TP - This one is more secure but also less supported. This one is also fairly easy to block. I think only Server editions of Windows can create this type of VPN.
3) IPSec - This is your Cisco-type VPNs. These tend to be more difficult to setup on the server side. Depending on how the network is configured this may be blocked too (but less likely).
4) OpenVPN - This is probably your best bet to avoid workplace blocking. You can configure it to use any protocol or port that you want, however it is very difficult to configure for a first time user. There are tutorials available online to help. You'll need an app (and maybe root) to use an OpenVPN-based VPN.