Database Users

Ssh tunnel

Hi all.
I have a question that I have searched for, tried some apps, and have yet to get what I am seeking and shoud be kinda easy IMO.
I am seeking a way to forward all traffic over wifi through a remote ssh server of mine. I am hoping to do so without changing browsers as I am seeking more than just a browser proxy. I tried apps that claim to do it without success (like the Tor app, and transperent proxy). I think icould get connectbot do do it if it was aded to su, but haven't figured that one out yet.
Any suggestions would be loved.
Thanks.
J
Sent from my SPH-D700 using XDA App

Guss this iras harder than I assumed. Does anyone have any suggested solution for my needs? Could ready use some advice fire travel tomorrow.
Sent from my SPH-D700 using XDA App

Sorry for bump
Sent from my SPH-D700 using XDA App

You should be able to foward (nearly) all traffic with OpenVPN. This requires having OpenVPN installed on the proxy machine. Setting this up is a bit tricky, but there should be HOWTO guides available online for it. One of the things you'll need is tunnel device support for your kernel. If it's not compiled in (might be on some of the custom ones), you'll need a tun.ko module. The one in this thread is for the DI18 kernel. If you're running Froyo kernel (e.g., DK28) and it's not compiled in, then you're probably out of luck for now.
Alternatively, if you can live with just HTTP/HTTPS traffic being forwarded, you can use an SSH tunnel along with an HTTP proxy (e.g., tinyproxy) on the proxy end. If you're using the stock browser, you'll need a proxy that supports transparent proxying (tinyproxy does) and you'll have to add firewall rules to the phone to force HTTP traffic over the tunnel. Some alternate browsers (e.g., Opera Mobile) support HTTP proxies directly, so you don't need to add firewall rules.
Assuming you already have an SSH tunnel setup on (localhost) 8888, this firewall rule (entered from a terminal like ConnectBot local) will force all traffic destined for port 80 (HTTP) over it:
Code:
iptables -t nat -A OUTPUT -p tcp --dport 80 -j REDIRECT --to-ports 8888
you can clear the rule with:
Code:
iptables -t nat -F OUTPUT
To forward HTTPS traffic, add a second rule using "dport" 443 instead of 80.
You should be able to use ConnectBot to setup the tunnel. Assuming the proxy port on the proxy-end is 8888, you'd setup a rule for "Source port: 8888", "Destination: localhost:8888".
However, the last time I tried doing port-forwarding with ConnectBot it didn't quite work, pages would load partially then stop. Using another ssh client solved the problem. You could try installing dropbear, then from a terminal (e.g., ConnectBot local) run "ssh -L 8888:localhost:8888 [email protected]".

Mk... Thanks for the detailed reply. I will play with your recommendations.
Sent from my SPH-D700 using XDA App

How to connect to your Raspberry Pi from from outside, behind NAT with SSH tunneling

original source
To do this, you will need a server or vps with ssh enabled and a public ip address,
what we are going to do is to use the server as a tunnel to your Raspberry Pi like this:
Code:
Raspberry Pi ----> SERVER <---- A computer outside your home network
To make everything easier, configure your server to use public key authentication, so you
are not going to be asked for a password everytime you connect.
First of all, put your ssh key inside ~/.ssh/ BOTH of your raspberry and the computer you
want to use to access the RPI, then we we'll configure the server to tunnel connections
to the bind address we specify, so edit your server /etc/ssh/sshd_config and add at the end:
Code:
GatewayPorts clientspecified
Now we are ready, open a screen session on your raspberry and type:
Code:
ssh -R your-server-interface-ip:2222:localhost:22 [email protected]
So, if you want the SSH port to be tunneled only on the server localhost, you shall type:
Code:
ssh -R localhost:2222:localhost:22 [email protected]
Otherwise, if you want it to be tunneled on the public ip address:
Code:
ssh -R your-server-address:2222:localhost:22 [email protected]
Now you are ready, if you used the localhost bind interface, you can reach your RPI connecting
to your server and then, from the inside of the ssh session type:
Code:
ssh -p2222 [email protected]
Else, if you choose the public ip, you will simply connect with:
Code:
ssh -p2222 [email protected]
Enjoy ^_^

Dynamic DNS
Your home connection may not have a static IP address, so most home routers now give the option of filling in dynamic DNS account information that will assign a hostname to your IP address automatically. This means you don't have to keep track of your IP address manually.
Google for "how to set up dynamic dns" -- Wired.com has a nice step-by-step tutorial. (Can't post links yet. :-/) I use DynDNS as my provider, they allow you to set up a hostname using their domains for free.
=RV=

redvelociraptor said:
Your home connection may not have a static IP address, so most home routers now give the option of filling in dynamic DNS account information that will assign a hostname to your IP address automatically. This means you don't have to keep track of your IP address manually.
Google for "how to set up dynamic dns" -- Wired.com has a nice step-by-step tutorial. (Can't post links yet. :-/) I use DynDNS as my provider, they allow you to set up a hostname using their domains for free.
=RV=
Click to expand...
Click to collapse
Considering in this tutorial i've suggested a dedicated server as tunnel, i don't get why static/dynamic ip address of your home network is important ....

control rpi over nat by http
The hopmsg.com allows you the make a free message channel by creating a random key for free (no registration,login,etc) which can be used to get status / send command to your rpi:
1, Simplest way to Send/Receive message from any kind of OS/browser/platform just by clicking on a link, only need to know the ID of your msg!
Example: set your message by opening a link : hopmsg.com/ctl.php?id=YOUR_UNIQUE_KEY&value=message
get your message from any device by opening: hopmsg.com/ctl.php?id=YOUR_UNIQUE_KEY
or use the Android App to get/set it.
2, Control your device inside Nat/Lan
Example: set your command by opening a link : hopmsg.com/ctl.php?id=YOUR_UNIQUE_KEY&value=command
get your command from any device by opening: hopmsg.com/ctl.php?id=YOUR_UNIQUE_KEY
or use the Android App to get/set it.
3, Basic monitoring system
Bash script checking uptime:
UP=`uptime | sed -e 's/ /_/g'`; curl "hopmsg.com/ctl.php?id=YOUR_UNIQUE_KEY&value=`echo ${UP}`"
and use the Android App or a browser to check the status of the device.
4, Get your IP address, the message source, poor man's dyndns
If you set some values, with src=1 parameter your IP and the UTC time also added to your message
Example:
hopmsg.com/ctl.php?id=YOUR_UNIQUE_KEY&value=VALUE&src=1
wget -qO- hopmsg.com/ctl.php?id=YOUR_UNIQUE_KEY > result.txt
to use with some script.

Hi,
another option is dataplicity , very easy installation , 0 configuration and really good features

[Q] netflix connection error -100

Hi, I have this network setup
Dd-wrt where netflix.com and netflix.net are going through us server as I am in country where netflix is not officialy supported. I can open netflix on my pc or tablet app and it works
On nexus player I also modified my dns to use my us server
When I sideload tablet netflix apk it can connect but GUI is terrible for tv so I installed official netflix for androidTv but it still shows me error -100, cannot connect
As all other on same network works I assume it is a problem of new app
Any idea what can it be?
Thanks

Are you blocking the following google DNS IP's on your router: 8.8.8.8 and 8.8.4.4
http://help.unotelly.com/support/ar...public-dns-lookups-requires-supported-router-

thanks
I tried this, set it on my dd-wrt router, added -s 192.168.1.5 what is IP of my nexus player (I want to have access to google dns from my other devices) but didnt help...I rebooted nexus player, cleared netflix data but still same error
edit:
so I tried to add lot of other free DNS servers, but still no progress
iptables -I FORWARD -s 192.168.1.5 -d 8.8.8.8 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 8.8.4.4 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 209.244.0.3 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 209.244.0.4 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 208.67.222.222 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 208.67.220.220 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 84.200.69.80 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 84.200.70.40 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 8.26.56.26 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 8.20.247.20 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 156.154.70.1 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 156.154.71.1 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 199.85.126.10 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 199.85.127.10 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 81.218.119.11 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 209.88.198.133 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 195.46.39.39 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 195.46.39.40 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 216.87.84.211 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 208.115.243.35 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 199.5.157.131 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 208.71.35.137 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 208.76.50.50 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 208.76.51.51 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 216.146.35.35 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 216.146.36.36 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 37.235.1.174 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 37.235.1.177 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 89.233.43.71 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 91.239.100.100 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 74.82.42.42 -j DROP
iptables -I FORWARD -s 192.168.1.5 -d 109.69.8.51 -j DROP

so I did lot of tests...disable this blocking and tried to reroute google DNS to my US DNS server but still didnt help
just thinking if better solution will be to hack netflix app and remove hardcoded google DNS

There are no hard coded DNS IPs in the Netflix app nor the Nexus Player.

so now I am confused...I read somewhere else that it is hardcoded there
but anyway, I also tried this
iptables -A PREROUTING -t nat -p udp -s 192.168.1.5 --dport 53 -j DNAT --to-destination <myUSdnsServer>
iptables -A PREROUTING -t nat -p tcp -s 192.168.1.5 --dport 53 -j DNAT --to-destination <myUSdnsServer>
but didnt help and still have -100error
any idea what else I can try? thanks

ok got it work finally
I had to remove dnsmasq settings on router, then I just put my US dns server in network settings and did block google public DNS with iptables on router as mentioned in posts before
now it is running fine

Blocking Google is an unnecessary step. But, glad you got it working.

you are right, I did remove that blocking setup in router config and netflix does work...so only blockingpoint was dnsmasq setup

I'm having troubles with this too still.
I've tried many things:
- Set my US DNS settings directly on the Nexus player (both wireless and wired via USB adapter)
- DNSMasq (which works fine with Netflix on my other devices)
- Drop 8.8.8.8 and 8.8.4.4 requests on my network
- Re-route 8.8.8.8 and 8.8.4.4 requests on my network
- Reinstall Netflix
Nothing is working, in fact if I remove all settings from my router, I still get the -100 error. Something is very weird here

Yesterday when I had to reflash my NP I had same problem again even I set my US DNS on my nexus...but I fixed it this way
I set DHCP and I have my local provider DNS
I put this into DNSmasq
server=/netflix.com/xxx.xxx.xxx.xxx
server=/netflix.net/xxx.xxx.xxx.xxx
server=/nflxvideo.net/xxx.xxx.xxx.xxx
server=/llnwd.net/xxx.xxx.xxx.xxx
Where xxx.xxx.xxx.xxx is your US dns IP
And I reinstalled netflix app with my US google account (blank account created jut for this) and switch back to my original account and it works

Just for info, I was getting -100 trying to use Netflix in Europe with an European account on a NP. I got the -100 even before being able to login.
Turns out it was because I was using the Google DNS (8.8...). Using my EU provider DNS solved the issue.

So I made it a little bit further. It turns out there was an address that my US DNS provider was not forwarding (specifically: android.nccp.netflix.com ). They don't forward *.netflix.com to maximize customer privacy, which is nice.
Now I'm able to get to the error screen in Netflix where I can choose more details and go down to Connection information. I am getting randomly failed connections to one or more of the 4 netflix servers now. It changes, sometimes it's just one, sometimes it's 3, and the ones failing all change.
I get a nw-2-5 error code on these servers.
I don't believe any other addresses are missing as I've got my router traffic going through wireshark and there are no other DNS requests with addresses the US DNS provider isn't already forwarding.
Anyone have any more ideas? Does it really make a difference using a US Play store account to install the apps? I'm pretty sure it's the same Netflix APK across stores...

this netflix app is really pain in the ass
it was working fine for almost a month...then I reinstalled my NP, installed netflix app again (router settings with dnsmasq for netflix) were not touched and netflix shows me again -100 error before login screen
once, dunno how I was able to get login screen with message my country is not supported, but it happened only once, now still -100 error and I am trying various network settings
update:
so here is the way how to fix this (in my case)
remove dnsmasq settings to fwd netflix via US dns server. Run netflix app, which shows that it is not allowed in my country bla bla, click on sign in and try to sign in, it will sign and show again not supported in my country. Then I re-added my dnsmasq settings on router and apply...click on try again in netflix app (cannot exit the app while changing setup of router), after 2nd try it shows ui-113 error, I tried again and it finally started

Why didn't / don't you just add the US DNS settings into your NP WI-FI settings?

It didnt work (still -100 error) and that US DNS I use is custom and dunno why google services are not working with it

I got the same error, well I should say I've had many errors with the Netflix app and if I uninstall it and re-downdload it and sign in then it always works.

Unotelly dns settings are on the router. And 8.8.8.8 only is refirected to a fake ip. Netflix is working on Np and chromecasts.

from today I cant run netflix again...nothing changed on my router/network...I thought it is issue that I have older version so I updated the netflix app on my nexus but now it is doing still same...I click on netflix, it shows loading and then exit to home screen
any idea what went wrong?
Update: ok after 2 days it magically starts working again, it looks some issue on netflix side with android apk because during that time also netflix on my nexus 7 didnt work but worked in browser

habskilla said:
There are no hard coded DNS IPs in... the Nexus Player.
Click to expand...
Click to collapse
So it's different to the Chromecast in that respect?

[SOLUTION] Fixing VPN DNS leaks

Hi guys!
I've been using OpenVPN for connecting my phones to my home network.
When I replaced my old phone with Note 4, I noticed that when VPN connectivity is established, DNS is leaking. If you use VPN you can test it here to see if you're also affected by this: https://dnsleaktest.com.
I tried to fix this, but despite all my efforts, DNS traffic just refused to go through the VPN tunnel or DNS not working at all.
Eventually I figured out the series of steps needed and I'd like to share this with you in case someone is having the same problem.
Many thanks to users MaxChinni and Transfusion from this Stack Exchange thread for providing useful information.
Here is how my connection sequence looks like. Needless to say, you need root for this:
1. openvpn --config client.ovpn --daemon
2. iptables -t nat -F OUTPUT
3. iptables -t nat -A OUTPUT -p udp --dport 53 -j DNAT --to-destination 192.168.1.1
(192.168.1.1 is the internal IP address of my router that has DNS server running and intercepting all packets sent to UDP port 53)
4. pkill netd
5. Set DNS:
ndc resolver flushif tun0
ndc resolver flushdefaultif
ndc resolver setifdns tun0 208.67.222.222 208.67.220.220
ndc resolver setdefaultif tun0
Here is the disconnection sequence:
1. pkill openvpn
2. iptables -t nat -F OUTPUT
3. pkill netd
5. Set DNS:
ndc resolver flushif wlan0
ndc resolver flushdefaultif
ndc resolver setifdns wlan0 208.67.222.222 208.67.220.220
ndc resolver setdefaultif wlan0
Note: wlan0 interface is my Wi-Fi. If I'm on 4G, then I use "rmnet_data0" instead.
Attached are the exported Tasker tasks. I'm using some icons from these icon packs, so unless you want to change these tasks to use your own icons, you might want to install them first:
Ipack / Kyo-Tux Aeon HD
Ipack / Crystal Project HD
IMPORTANT:
* OpenVPN profiles are expected to be in "/storage/extSdCard/OpenVPN". Replace this path with your own if you want to use a different location.
* Before running "VPN Toggle" task you will need to set %VPN_PROFILE variable to the file name of OpenVPN profile you woudl like to use, e.g. "client.ovpn".
* I have a check for my home Wi-Fi to prevent starting VPN accidentally in this case, so you might want to change the reg-exp in "VPN Toggle" task that checks %SSID variable. It's currently checking for SSIDs to start with "FBIVan".
* You might also want to add a task that runs on boot to set the widget name to the one you want.
After you import these tasks, just create a widget on your desktop to run "VPN Toggle" task.

Nice, any chance of posting that tasked profile? I would appreciate it

Amd4life said:
Nice, any chance of posting that tasked profile? I would appreciate it
Click to expand...
Click to collapse
Updated the first post with exported tasks.

G955F Galaxy S8/S8+ Wifi Tether VPN Route for Unlimited Tethering

So I figured I post a guide here for any of you having trouble routing a VPN through the wifi tether interface.
Before I start, you must have a root! Which means this will only work on international varients of the Galaxy S8/S8+ with unlocked bootloader's.
There are plenty of guides online on how to root.
First off, native tethering does NOT use the wlan0 as the interface! Instead the Galaxy S8/S8+ use an interface named swlan0. This means forget all the apps you may have been using like "Android Wifi Tether" etc. You will have to do this manually.
How to setup your phone:
1. First off start buy downloading a VPN app from the play store. My preferred app is "NordVPN" as they offer Netflix and Hulu access. Yes, NordVPN does cost money so your welcome to use any VPN of your choice.
2. Now download an app called "Scripter" from the play store and open it. https://play.google.com/store/apps/details?id=com.faziklogic.scripter
3. Click "Create Script"
4. In the first box name it anything you want like "Tether Hack"
5. In the second box labeled "Commands" copy and paste the below code:
iptables -t filter -F FORWARD
iptables -t nat -F POSTROUTING
iptables -t filter -I FORWARD -j ACCEPT
iptables -t nat -I POSTROUTING -j MASQUERADE
ip rule add from 192.168.43.0/24 lookup 61
ip route add default dev tun0 scope link table 61
ip route add 192.168.43.0/24 dev swlan0 scope link table 61
ip route add broadcast 255.255.255.255 dev swlan0 scope link table 61
And click "Save"
6. (Optional) Download an app called "Wifi Hotspot Widget" https://play.google.com/store/apps/details?id=com.aiuspaktyn.hotspot so you can add it to your home screen layout for quick access to start Android's wifi tethering feature. While your at it make a quick shortcut of the VPN app you chose and the "Scripter" app so you can easily start the tethering with VPN.
7. Now the fun parts, start you VPN first. Then start your Android wifi tethering feature. Finally, open the "Scripter" app and select the script you made earlier. It will ask if you want to run the script, click "YES".
8. Done! Now go ahead and test it out by connecting your computer to the wifi access point you made and visit a website to verify your VPN is working.
Keep in my mind the biggest advantage to this aside from security is that this will NOT use your carriers tethering data usage. So if you have unlimited data but only 7GB of tethering with this trick you WILL have UNLIMITED tethering.
If you have any questions or liked this post please feel free to comment below or PM me anytime!

Reserved

thanks

mfoster978 said:
So I figured I post a guide here for any of you having trouble routing a VPN through the wifi tether interface.
Before I start, you must have a root! Which means this will only work on international varients of the Galaxy S8/S8+ with unlocked bootloader's.
There are plenty of guides online on how to root.
First off, native tethering does NOT use the wlan0 as the interface! Instead the Galaxy S8/S8+ use an interface named swlan0. This means forget all the apps you may have been using like "Android Wifi Tether" etc. You will have to do this manually.
How to setup your phone:
1. First off start buy downloading a VPN app from the play store. My preferred app is "NordVPN" as they offer Netflix and Hulu access. Yes, NordVPN does cost money so your welcome to use any VPN of your choice.
2. Now download an app called "Scripter" from the play store and open it. https://play.google.com/store/apps/details?id=com.faziklogic.scripter
3. Click "Create Script"
4. In the first box name it anything you want like "Tether Hack"
5. In the second box labeled "Commands" copy and paste the below code:
iptables -t filter -F FORWARD
iptables -t nat -F POSTROUTING
iptables -t filter -I FORWARD -j ACCEPT
iptables -t nat -I POSTROUTING -j MASQUERADE
ip rule add from 192.168.43.0/24 lookup 61
ip route add default dev tun0 scope link table 61
ip route add 192.168.43.0/24 dev swlan0 scope link table 61
ip route add broadcast 255.255.255.255 dev swlan0 scope link table 61
And click "Save"
6. (Optional) Download an app called "Wifi Hotspot Widget" https://play.google.com/store/apps/details?id=com.aiuspaktyn.hotspot so you can add it to your home screen layout for quick access to start Android's wifi tethering feature. While your at it make a quick shortcut of the VPN app you chose and the "Scripter" app so you can easily start the tethering with VPN.
7. Now the fun parts, start you VPN first. Then start your Android wifi tethering feature. Finally, open the "Scripter" app and select the script you made earlier. It will ask if you want to run the script, click "YES".
8. Done! Now go ahead and test it out by connecting your computer to the wifi access point you made and visit a website to verify your VPN is working.
Keep in my mind the biggest advantage to this aside from security is that this will NOT use your carriers tethering data usage. So if you have unlimited data but only 7GB of tethering with this trick you WILL have UNLIMITED tethering.
If you have any questions or liked this post please feel free to comment below or PM me anytime!
Click to expand...
Click to collapse
Well cool. Cheers. You just breathed new life into an old fossil. Now I have a new target; something of interest to code for. ??