Database Users

Hero, OpenVPN, StrongVPN and the Big China Mistery

Well I searched the forums all over the interweb for a week now, and did not find an answer so I post.
I live in China and as part of the Expat Survival Kit I run an OpenVPN service to solve my facebooktwitteryoutoube problems. The provider is strongvpn.com, or other name reliablehosting.com - reliable, they are, and responsive and helpful and everything.
The VPN uses a San Francisco server, so anytime I fire it up on my PC, I have a USA IP, and can access Youtube, Facebook, Twitter, Pandora et al. Bingo.
I struggled days to hack this connection on my Hero, and finally managed, it works, it connects. Apparently.
Now here is the hick:
- I connect on the Hero with TunnelDroid, using my original StrongVPN config file. It takes some time, but usually connects, either WiFi and Edge.
- I check my external IP, it's the good old Frisco one, I seem good to go
- I can surf sites like e.g. Amnesty International, impossible without VPN. I can use Pandora, so definitely I have US IP. Eventually if there is an embedded Youtube vid somewhere, I even can see and try to start it (although it's dead slow)!
- But, none of the social integration features work. I can not log in into twitter, facebook etc, and when I try to visit those sites with the browser, I have the same result as without VPN, nada. Timeout, service unavailable, technical problem, you name it
Now, if there is any developer / network or VPN expert / GFW operator / Google guru around... I really want to understand exactly what the problem can be - that would help some fellow Hero owners here in China
I changed the "hosts" file that I found on some forums... I tried to boost the process with some web proxy... Tried everything - nothing works.
How is it possible that I'm behind a VPN, I have American IP reported by any software you can imagine, and still I'm blocked, while everything works fine on the PC with the same VPN connection???
I can live without these apps and sites on my Hero...but can not live without finding out the truth

你有没有把DNS设置成OpenDNS的地址或者GooglePublicDNS的地址？
GFW好像会返回伪造的ip，纵然你有US的IP也无法访问一个假的IP，对吧
Ok,if you're hard to read Chinese...
Use a OpenDNS address or Google Public DNS address instead of ISP's,All of those DNS server are GFWed.They'll reply a fake ip address of Youtube.

Not working
Thanks,
I tried this way, but still no result.
How can ANY filter get through an 1024-bit secured openVPN connection anyway????
And on the PC, the same connection works flawlessly...

Is there any routetable or something like that?a modified hosts?some ROMs will do that.
a VPN connection will route all of your data in normal,but if you set a routetable,some special URL will not pass the VPN,
check them or flash a foreign ROM instead and try again.
Good luck

AFAIK the standard Hero kernel does not come with the tun.ko driver (which is necessary to capture the outgoing traffic and redirect it to the tunnel). Did you install a custom kernel, too? E.g. newer MoDaCo images have it by default.

I did nearly everything...modified hosts. Running MoDaCo 3.0 with newest 1.9 Tekn. kernel. Installed the openvpn binaries. And the connection WORKS, just not for everything...
Anybody in China who can use the social networking features on the Hero?

Ps: the reoutetable, I don't really know where to look it for...

I don't know the answer, but you can debug it yourself with a computer and wireless access point:
Hero <--wifi--> AP <--ethernet--> Computer running packet sniffer <--Internet-->

A few comments:
Don't consider Pandora as proof of a US IP. Better check on a website that gives actual info about your location.
The comments about OpenDNS and hosts files are helpful, but both assume that the wrong IPs are not already cached somewhere. Make sure all caches (DNS, browser, etc.) are flushed.
The easiest way to find out if the DNS is the problem is to do a ping to youtube.com and see if the IP range really belongs to Google or of it's a random IP elsewhere. You can use a 'whois' command or website to figure out who the IP belongs to.
Please note that OpenVPN does not encrypt at 1024-bit. 1024-bit is just the initial key length, which is unrelated to the 128-bit or 256-bit of the actual tunnel.
Btw, you don't necessarily need to use OpenVPN. Lighter protocols like PPTP and L2TP may perform better on a phone. China Unicom works well with both. China Telecom works fine with L2TP.
Greetings from Shenzhen.

open VPN
Hi,
not sure if this thread is still alive but i give it a try...
I' currently running elelinux 2.4 with [email protected] on my HTC hero and have trouble connecting to a friends VPN.
the VPN server is in Germany and it works well for my friend, who is also hosting the server. however when i try to connect the server records following:
read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
and it seems that my phone is refusing the connection to the server...
any ideas?
thanks!

hero.walker said:
Hi,
not sure if this thread is still alive but i give it a try...
I' currently running elelinux 2.4 with [email protected] on my HTC hero and have trouble connecting to a friends VPN.
the VPN server is in Germany and it works well for my friend, who is also hosting the server. however when i try to connect the server records following:
read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
and it seems that my phone is refusing the connection to the server...
any ideas?
thanks!
Click to expand...
Click to collapse
hi there , I don't use elelinux 2.4, but i encountered an same error with CM 7 nightly build, and I believe that is an issue of the kernel you are using for the kernel have some problem with the tun.ko moduel , here is the thread ( read from page 42 ) :
forum.cyanogenmod.com/topic/14455-cm7-discussion-of-nightlies/page__st__860
sorry , i haven't get the permission to post url here yet .

thanks for the link! seem like it does not work with my current kernel, will fash the flykernel from elelinux and try again.

Proxy internet help

I have a stock X10i on R2BA020 and I want to connect to the wifi in my univeristy. But according to the tech people there, I need proxy settings to login. Thats why they said apparently, BB users cant connect to the wifi there because with BB you cant set a proxy. My question is... Is there anyway to get a proxy for the x10 without rooting it? like a certain app or anything I can download to get some sort of proxy on the phone? or is it a weakness of Android in general?
So the only viable workaround is the app that tricks your browser but you arent allowed to use any of the apps, youtube etc?
thanks for your help!
PS im a noob with networking jargon so excuse me for being a nub

Wifi Proxy settings for Xperia X8

I recently bought this device, but I am disappointed since there are no wifi proxy settings.
I rooted it and installed trans proxy, proxymator etc,
but i cant use the web through wifi proxy,
any solution ?

manivas said:
I recently bought this device, but I am disappointed since there are no wifi proxy settings.
I rooted it and installed trans proxy, proxymator etc,
but i cant use the web through wifi proxy,
any solution ?
Click to expand...
Click to collapse
Wifi proxy? That does not even exist !!!
Just go and get yourself a wired phone.

Check it properly
I mean using google services and browsing by through a proxy on wifi

manivas said:
I mean using google services and browsing by through a proxy on wifi
Click to expand...
Click to collapse
You can do PPTP vpn if u need to, web proxy is so last century..

There's no wifi proxy baked into android. This makes it useless for most enterprise networks, I.e. you can't use an android with a radius server for enterprise WPA authentication and proxy. Apparently we might be getting it in gingerbread.
If you look in the general android discussion there's a kludge that kinda works.
Your other option is to get an iPhone, ios has had support for wifi proxy/ enterprise wpa from the get go.
I know, it's ridiculous, blame Google...
Sent from my ZX81.

On my ELM (j10i2) there is proxy in wifi settings.
And i often USE IT.
In our organization network with proxy.
I'm set my book into wifi spot - and use internet by phone wifi.
---
_____wifi____________lan___________________
ELM ----- NOTEBOOK ----- PROXY ---- INETNET
---
Is it possible to do on X8 ?

It won't work if you are connecting via ad-hoc. You may install connectify to your laptop and use that internet connection for your x8/whatever phone/device.

wifi
Isn't any app that can help up with the proxy settings?
I am beginning to get sick of this phone and this OS, no wifi proxy, no way to install to SD card except of hundreds of steps, google navi doesn't work, get's stucked at the beginning, exagerated price for unlocking...

Try custom Rom.. floyo has proxy in settings
Sent from my X8 using XDA App

As I see you posted in this thread Racht, I ask you how to configure an OpenVPN in Floyo.
Do I have to install something ?
I tried with a .conf file but I don't know where to put the .ca certificate.
I also tried to install OpenVPN config.
Have you got a link to a good tutorial ?
Thanks.

hi, please u check for ASProxy from market, it works for me.. but it is paid version.. and required rooted device only..

I thought about a custom rom, but it seems I couldn't find a stable one here, all have bugs with either bluetooth, camera or gps, and maybe I am too blind to find an xrecovery link to download it.Do you have a link with a good rom? Thanks in advance

-snip-
--------------

alil said:
hi, please u check for ASProxy from market, it works for me.. but it is paid version.. and required rooted device only..
Click to expand...
Click to collapse
ASProxy requires your phone to be rooted and iptables are required.
How to add iptables to X8 ?

iptables?
i really dont know about it, but it is fully working for me.. as i rooted it, then install this apps.. it is working like expected..

If u want to visit some web pages undercover or UMG blocked vids on utube,...., then try this page :
www.hidemyass.com

racht said:
Try custom Rom.. floyo has proxy in settings
Click to expand...
Click to collapse
Where? - I have been try your great Floyo 1.0b and CM7-138 but I cannot find it.

VPN

it's there a way to connect or use my company VPN on android?
my company uses cisco VPN.

Yes. Look in the "Settings -> Wireless and Networks -> VPN".
Which way will you be connecting to your VPN? L2TP? PSK? Cert?
It may be important for you to know up front that Android doesn't yet support 3DES encryption, only DES.

I had the same problem until I switched to an older APN... Under Settings, Wireless and Network, Mobile Network Settings, Access Point Names (APN), add a new APN, all you need is to name it and the APN is internet2.voicestream.com This is an older APN T-Mobile used to allow for VPN connections. As soon as I used it instead of the epc APN, I connected without issue.

Bradical said:
I had the same problem until I switched to an older APN...
Click to expand...
Click to collapse
What problem was that? Unless I misunderstood the OP's post, the problem is how to connect to one's corporate VPN infrastructure from an Android phone. Your post seems unrelated to that unless I'm missing something.

epakrat75 said:
Yes. Look in the "Settings -> Wireless and Networks -> VPN".
Which way will you be connecting to your VPN? L2TP? PSK? Cert?
It may be important for you to know up front that Android doesn't yet support 3DES encryption, only DES.
Click to expand...
Click to collapse
Yea I looked under there but I read online that Android 2.2 doesn't support pure Ipsec witch is what I need....I just can't believe Google dropped the ball like this! I hope they took care of that in Honeycomb because my company wants to buy tablet but without VPN is a no go....

And the funnything is that Google knows about it since 2009:
http://code.google.com/p/android/issues/detail?id=3902

emonero said:
I hope they took care of that in Honeycomb because my company wants to buy tablet but without VPN is a no go....
Click to expand...
Click to collapse
While running the Honeycomb SDK Preview on my Nook Color, I checked this very thing out and found that no additional support / options were provided to me. I'd like to think this additional functionality was left out of the SDK preview but I'm not convinced. Perhaps it'll be different on either the Motorola XOOM and G-Slate tablets but I'm not optimistic since they've had so much time to deal with it but seem to not have done anything yet.

Another Tech and I installed Honeycomb on a Nook color just to check that settings and it doesn't have it...I hope Moto include it like they did with the droid Pro...

emonero said:
I hope Moto include it like they did with the droid Pro...
Click to expand...
Click to collapse
Interesting. I didn't realize that the Droid Pro even supported it. It might the only device that currently does. If that functionality were extracted and offered as a mod for the Vibrant, etc that would be worth paying for.
As such, I have had to advise my company away from using Android because it doesn't work our SonicWall VPN. However, the few Apple iDevices we have already connect to our VPN.

Cisco VPN Working on Vibrant
You can get it to work, you need to get open vpn installer, open vpn settings, vpn robot, and tun.ko file for the vibrant. Need to be rooted. It was a pain to get setup but works like a charm with an ASA 8.2 box. Cisco Anyconnect has been launched on a few android devices such as the vibrant 4G, hopefully this will get ported to the vibrant 3G, it would be so much easier and better since its all SSL based and not ipsec.

[Q] VPN problems with CM7.1

I'm having with trouble getting VPN to work on my Nook Color, running cm7.1 encore stable. It seems every time I enter my password to connect, the status changes to 'Connecting...' and freezes the nook. Has anyone gotten VPN to work on CM7.1? I'm outside the US so I would like to run VPN to connect to Hulu and Crackler...
Any help on this would be appreciated

BUMP
I'm having the same issue with CM 7.1.0.1 (stable). Like the original poster stated in his post every time I connect to a VPN my Nook Color freezes and I have to do a hard reboot.
I use VPN a lot on my Android devices so it would be great if someone could tell me how I can get it to work on the Nook Color.

If you can use OpenVPN, that works very well for me via the OpenVPN Settings app.

swaaye said:
If you can use OpenVPN, that works very well for me via the OpenVPN Settings app.
Click to expand...
Click to collapse
My provider charges extra for OpenVPN so I'm stuck for now trying to get PPTP VPN to work on my NC.

I straight up have the answer for you. DroidVPN is in beta right now, search them on the forums. They will provide you with VPN for free. They require that you email them for a registration code and that's it.
Highly recommended. Quick connection and nice servers. Download and browsing speed mostly equivalent to what I was getting before.
Give them a try. You will need a tun.ko in your system/lib/module folder, but it is built into the kernel. I just bring that up so it doesn't seem to be a stumbling block to anyone looking into the app.

mateorod said:
I straight up have the answer for you. DroidVPN is in beta right now, search them on the forums. They will provide you with VPN for free. They require that you email them for a registration code and that's it.
Highly recommended. Quick connection and nice servers. Download and browsing speed mostly equivalent to what I was getting before.
Give them a try. You will need a tun.ko in your system/lib/module folder, but it is built into the kernel. I just bring that up so it doesn't seem to be a stumbling block to anyone looking into the app.
Click to expand...
Click to collapse
I already have a prepaid subscription to a VPN provider (StrongVPN) which allows me to have an IP address from anywhere in the world. I watch shows on the BBC iPlayer which only streams to UK IPs. I also used this before to watch Netflix while in Europe with a US IP.
This DroidVPN sounds fine for folks that aren't needing international IPs although I don't know how many servers they have and what type of speeds one can expect using them.