Database Users

[Q] Setting up a VPN that my xoom can access.

I want to set up a VPN at home that my xoom can access. I tried a simple PPTP with dd-wrt but I can't seem to access or ping anything, even though it connects. I want to do this so I don't have to forward SSH, RDP, and other ports that expose my stuff to the outside world.
At home I am running a DD-WRT gateway with a linux server as well as a Windows Server 2008 VM behind the gateway, any could host the VPN service.
I don't need instructions on how to set up the VPN, but advice on what is compatible with android's built in VPN support.
Thanks in advance for any input.
Sent from my Xoom using XDA Premium App

The windows vpn service works fine for me

I was under the impression I needed to set up a domain to use the included windows VPN service, and I wasn't looking to set up a domain.
Is this an incorrect assumption?
Sent from my Xoom using XDA Premium App

Here's a link to getting OpenVPN working. Must admit it looks like it's not for everyone.

Salpula said:
I was under the impression I needed to set up a domain to use the included windows VPN service, and I wasn't looking to set up a domain.
Is this an incorrect assumption?
Sent from my Xoom using XDA Premium App
Click to expand...
Click to collapse
That was not necessary for me. If it is a requirement, it is specific to Windows Server edition

I have a Windows PPTP VPN that my Xoom can connect to. You do not need to set up a domain.
Unfortunately there is a bug in Android that makes it lose connection to the VPN after a few minutes/seconds.
See here:
http://code.google.com/p/android/issues/detail?id=4706

I just bypass androids native VPN and use Neo Router free. Available in the market. You just set up a Neo server on the computer you want to control and use the android app to open an encrypted connection to that computer. You can set up the app to forward any ports to the computer running the server. Works well. Right now im running splashtop remote and plex using it so i dont have to port forward the ports for those apps in my router.

Thanks for all the input. I am working on OpenVPN. I almost have it working (I already have my router set up for OpenVPN, just didn't know I could use it).

[Q] Splashtop remote desktop outside of home network?

I set up remote desktop with mycloud/splashtop on my tf101. I can locally remote access my computer on the home network.
But I want to be able to access my computer from any network. Would the fact that when I was asked for permissions on my pc for either private networks or public networks, I checked private be the reason why i can't connect when using a network outside of my home network? If so, how do i change this permission.
Right now, when i try to connect to my computer using an outside network like my mobile data connection tethered from my phone, it says cannot reach.

You will need to do a port forwarding rule on your router. There r threads about this just do a search.

dazz87 said:
You will need to do a port forwarding rule on your router. There r threads about this just do a search.
Click to expand...
Click to collapse
Is that the only thing I'd have to do? I wouldn't have to add it as a new device connection on my transformer would I?

i forwarded the 3 ports from this link http://support-remote.splashtop.com...nect-to-my-home-computer-from-outside-of-home
and still it says cannot reach.
Also, I enabled discover over internet with my google account on my computer.
under the status tab on the splashtop application on my pc, it says the streamer is online with the following ip addresses, and only my local area connection is listed.

xdmds said:
i forwarded the 3 ports from this link http://support-remote.splashtop.com...nect-to-my-home-computer-from-outside-of-home
and still it says cannot reach.
Also, I enabled discover over internet with my google account on my computer.
under the status tab on the splashtop application on my pc, it says the streamer is online with the following ip addresses, and only my local area connection is listed.
Click to expand...
Click to collapse
You need to set the connection with your WAN IP not your local IP. On your PC go to whatsmyip.org or similar to find out what your current WAN IP address is.
If you don't have a static IP address your WAN IP will likely change at some point. You can get a free account at dyndns.com and set it up in your router (Google it). You can then connect to your PC using YOURUSERNAME.dyndns.org or whatever you setup in DynDNS.
The alternative is to use TeamViewer or LogMeIn or similar which will automatically keep track of your PC whenever it connects to the internet.

Remote access can be real pain in the butt when you are accessing over the WAN.
As mentioned in posts above you need to set up port forwarding on your router, ensure there are relevant firewall exceptions and use your external facing IP address and set up a dynamic DNS account if you don't have a static IP - some routers have built in support for dynamic DNS.
Log me in is a good free service for this but the android app is pricey (and not very good IMO) - while the interface is not ideal it does take away all of the annoying hassles.
If you do go down the dynamic DNS, port forwarding route you might find that remote desktop via 2X RDP or similar is better than splash top anyway - although you can't do remote desktop on windows vista/7 home editions.

good video here, got it working very first try following stepby step
http://www.youtube.com/watch?v=IMSVTRqkBU8&feature=youtube_gdata_player
Sent from my Transformer TF101 using Tapatalk

nvm turns out i only forwarded the ports on my router firewall. after also forwarding the ports in my modem i can now access from an outside network

xdmds said:
Also, I enabled discover over internet with my google account on my computer.
Click to expand...
Click to collapse
Just an FYI, but auto discovery doesn't work on the Android client yet, though it is coming (it is experimental in iOS).
Wyse PocketCloud does have this facility, though it doesn't stream video/games like Splashtop.
Regards,
Dave

I would try TeamViewer. On your PC you can install the host version. That way you can access your PC before login. TeamViewer works without making changes in your router/firewall.
The Android TeamViewer client is free.
Sent from my Transformer TF101 using Tapatalk

I finally fixed my issue with doing this last night. I was forwarding all 3 ports but I was doing TCP and UDP (which I must say I've done many times before and never had an issue) but I removed the forwarding from UDP field in my router and just left the 3 ports forwarded in TCP field. Today I can now connect and perfectly use my PC from work using Splashtop w00t!

Packet Sniffing on Android

Hi Guys,
I'm writing an Android App for my diploma and i need to find a way to sniff the traffic of an unsecured wifi network. I need the session cookies, sent by other clients in the network.
I've tried to install busybox and use '/system/xbin/ifconfig eth0 promisc' to switch into promiscuous mode, and it actually does according to the output of 'system/xbin/ifconfig eth0' but i dont receive any packets of the clients in the network, only packets from my router.
My question is, what i'm doing wrong and how can i achieve to sniff cookies from other clients.
Thx in Advance!
Joker

SoSJokerSoS said:
Hi Guys,
I'm writing an Android App for my diploma and i need to find a way to sniff the traffic of an unsecured wifi network. I need the session cookies, sent by other clients in the network.
I've tried to install busybox and use '/system/xbin/ifconfig eth0 promisc' to switch into promiscuous mode, and it actually does according to the output of 'system/xbin/ifconfig eth0' but i dont receive any packets of the clients in the network, only packets from my router.
My question is, what i'm doing wrong and how can i achieve to sniff cookies from other clients.
Thx in Advance!
Joker
Click to expand...
Click to collapse
Read some good books on sockets and tcp/ip networking I can recommend Richard Stevens. O'Reilly does have some good books on tcp/ip networking. Ask your teacher how tcp/upd packets are routed in a network.

kwbr said:
Read some good books on sockets and tcp/ip networking I can recommend Richard Stevens. O'Reilly does have some good books on tcp/ip networking. Ask your teacher how tcp/upd packets are routed in a network.
Click to expand...
Click to collapse
can we read the 802.11 header( eg..probe, ARP,) with or without root into the device using just the onboard WIFI chip-set comes with the samsung S4 or any android phone.

1 Method to Circumvent T-Mobile Tether/Hotspot

Time for me to update this thread!
For all of the T-Mobile users who are still trying to find a way to circumvent the user agent checking that T-Mobile does while using a third party hotspot app and don't feel like decompiling, editing XMLs, and recompiling, or messing with editing APNs, or ETC... A simple solution that I'm using; use a VPN.
Search the market for: Hotspot Shield
▼ ▼
https://play.google.com/store/apps/details?id=hotspotshield.android.vpn&feature=nav_result
▲ ▲
Also DO NOT use the native hotspot, I state this because of all the edits I've tried, the native hotspot still connects to the APN: pcwebs.tmobile.com instead of epc.tmobile.com - Which sniffs out the user agent of your browser and sends you to the upsell page.
If you're on the Galaxy S3 and JB use this app by TrevE
▼ ▼
http://forum.xda-developers.com/showthread.php?t=1988735
▲ ▲
All others that are capable use Wifi Tether for root users.
▼ ▼
https://play.google.com/store/apps/...S5nb29nbGVjb2RlLmFuZHJvaWQud2lmaS50ZXRoZXIiXQ
▲ ▲
-----------------------------------------------------------------------------------------------------------------------
1 - Start Hotspot Shield. (As of 10/18/2013 If you select to "Restore Purchase" Redeem code is "FREE" it'l give you 30 days of elite service for free!)
2 - Wait for connection to establish and a "key icon" to show up in your statusbar.
3 - Start Wifi Tether for Root Users or TrevE Mod which ever you're using.
4 - Configure wifi tether settings.
[For SGS3 users on JB using WifiTether_TrevE_Mod Version 3.2-Beta2-041713, I've found the best setting to use is as follows:
Device Profile: Generic ICS/JB (wlan0)
Setup Method: Auto
Wifi Encryption: Your Preference
SsID: (whatever you wanna use)
Don't disable bluetooth: Checked
Wifi driver reload 2: Checked
Enable Access-Control: Checked
MMS Clamping: Checked
Routing fix: Checked
---------------------------------------------------------------------------------------------------------------------
5 - Tap icon to start tethering.
Once all of the messages stop popping up... Enjoy!
----------------------------------------------------------------------------------------
Optionally:
If you wanna setup your own personal VPN - G.I.Y.F. (Google is your friend) Search for OpenVPN methods. PPTP also works.
Im just a little too lazy to type the instructions. ლ(ಠ益ಠ)ლ
-------------------------------------------------------------------------------------
Also I'm using the following setup:
Device: SGH-T999
ROM: Synergy (R484) ► http://forum.xda-developers.com/showthread.php?t=2113452◄
Kernel: Faux (OC'd 1.62 GHz) ► http://forum.xda-developers.com/showthread.php?t=2089801◄
Modem: UVLI8 ► http://forum.xda-developers.com/showthread.php?t=1880987◄
Data Plan: Unlimited Nationwide 4G
*UVLI8 happens to be the best modem for the areas that I frequent, which ranges from Waukegan all the way to downtown Chicago; it keeps me on HSPA+ 85-90% of the time. So experiment and find out which modem works best for you in your area.
►http://forum.xda-developers.com/showthread.php?p=31409271#post31409271 ◄ Here's a map to help you guys get started on finding the right modem for you.
-----------------------------------------------------------------------------------------------------------------------
If anyone has an issue where Hotspot Shield is not working on their device and giving you the error message:
-------------------------------------------------------------------------------------------------------------
Critical Error |
VPN API is not available on your device. |
Unable to find explicit activity class |
{com.android.vpndialogs/com.android.vpndialogs.ConfirmDialog}, Have you |
declared this activity in your AndroidManifest.xml?" |
-------------------------------------------------------------------------------------------------------------
It, in my case, is caused by having Xposed Framework installed. The only fix I've found for it was to Titanium Backup my apps, then uninstall the Xposed Framework - requires you to boot into recovery and flash the zip file "Xposed-Disabler-CWM.zip" then you have to Wipe Data/Cache/Dalvik/Fix Permissions, flash your rom again, and restore from TB.
Sent from my SGH-T999 using xda premium

Vee63b said:
For all of the T-Mobile users who are still trying to find a way to circumvent the user agent checking that T Mobile while using the native hotspot app and don't feel like decompiling, editing XMLs, and recompiling, or messing with editing APNs, or ETC... A simple solution that I'm using; use a VPN.
Search the market for: VPN One Click
Also don't use the native hotspot, if you're on the Galaxy S3 and JB use this app by TrevE
All others capable use wifi tether for root users.
Enjoy! I'll post later to help you guys setup your own personal VPN. I'm currently in a moving truck moving to Chicago. ლ(ಠ益ಠ)ლ
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
Sounds nice! i'll check it out when you post your setup

imilleson said:
Sounds nice! i'll check it out when you post your setup
Click to expand...
Click to collapse
Did you have a chance to try this bypass method? And did it work for you?
Sent from my SGH-T999 using xda premium

Vee63b said:
Did you have a chance to try this bypass method? And did it work for you?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
it worked for me after a lot of screwing around on my note 2.

Working so far, I'll give it some time just to make sure it doesn't pop up again or if it just stops working. I'll report back later :thumbup:
Sent from my SGH-T999 using xda app-developers app

GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium

Vee63b said:
GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
i read about it but not quite sure how it works, does the server go on the phone or the computer? isn't there more to it then just setting up a server, otherwise why would companies make you pay for this?

robl45 said:
i read about it but not quite sure how it works, does the server go on the phone or the computer? isn't there more to it then just setting up a server, otherwise why would companies make you pay for this?
Click to expand...
Click to collapse
The way a VPN (Virtual Private Network) works is by anonymously masking ALL network traffic to it's destination. I hope my explaination can help those who doesn't understand how a VPN connection work. Here we go:
Normally -
A mobile device connects to service provider monitored internet. In T-Mobile's case, packets are sniffed out that contain any form of user-agent strings, and if the strings report anything other than a mobile device, internet connection is denied and you are redirected to the dreaded "upsell page".
Think of it as water with particles in it passing through sand before reaching the well of water below the sand.
If the water is your network traffic the particles in the water would represent your user agent and the sand is your service provider's filters; not all of the particles will make it through the sand and into the well if they arent small enough to pass through the grains of sand.
Using a VPN is kinda like shoving a tube through the sand and sending your water & particle mixture through the tube directly into the well below. Everything makes it through whether the particles are big or small.
Sorry its late and I probably used a bad analogy. Anywho I hope it made a bit of sense. Lol
I can help you set up your own private VPN. The problem is there's some many different types of routers available for everyone to use. The PPTP type VPN is actually set up through your router. For most people there will be an option to utilize the PPTP port within your router setup screen. Open a web browser, type in 192.168.0.1 or 192.168.1.1 or "routerlogin", the webpage will ask for a username and password. If you changes it, whatever your username and password is. If you didn't, the default username is "admin or administrator" and the default password is usually, "password" dig through the available settings you have and let me know if you have the option to enable anything labeled "PPTP" also let me know which router you have.
Sent from my SGH-T999 using xda premium

yea, so basically, you'd have to setup and only use at one place? is there a solution that will let you tether to any computer anywhere? like is there something you can just setup on the phone? I mean something we can setup as opposed to this 1click vpn which my guess is won't stay free for long.

robl45 said:
yea, so basically, you'd have to setup and only use at one place? is there a solution that will let you tether to any computer anywhere? like is there something you can just setup on the phone? I mean something we can setup as opposed to this 1click vpn which my guess is won't stay free for long.
Click to expand...
Click to collapse
You actually set up your home network to host you own personal VPN. So no matter where you are, your phone would always use your home network.
Your phone will still use the service provider's data service, however, it would use it only to connect to your VPN at home and then securely reroute that data back to your device. So as all of the data is moved along T-Mobile's servers the data in your VPN cannot be read by tmobile's filtering process.
So one personal vpn server would be all you need. There's an option if you check your "settings -> more settings -> VPN" that will let you use a VPN for all connections on your device. Let me know if there's anything I can clarify.
Sent from my SGH-T999 using xda premium

Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up

thanks for sharing !!

Reilly1812 said:
Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up
Click to expand...
Click to collapse
This is true, its not that bad of a lag for me here in Chicago however, normally my download speeds are between 5-7 Mbps on 4G, with the VPn running I drop to 3-5 Mbps, but I've kinda tweaked the tether apk to start OpenVPN when tethering starts and to disconnect when I turn off tethering. So for the most part I never notice the hit on my speed, I've configured packet compression on my personal VPN server. I'm using a Linksys E4200 on AT&T U-Verse. Thanks for pointing that out for me by the way Reilly, I know I've forgot to list the pros and cons of a vpn, I have a few minutes in my hectic life to hop on xda and make a few quick posts but never enough time to go into detail and proof-read my own posts.
Sent from my SGH-T999 using xda premium

giffy89 said:
thanks for sharing !!
Click to expand...
Click to collapse
No problem. I was just seeing alot of people asking for a surefire method to bypass the UA check to connect things that you can't simply use a plugin to spoof. So I decided to share how I get by it on the Nationwide Unlimited 4G plan.
Sent from my SGH-T999 using xda premium

Vee63b said:
GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
I just setup my own VPN server on my Windows Home Server 2011 box last night. I'm now tethering and haven't had any issues yet.
So far, so good. :good:
I have my UA set normally and am on the unlimited plan as well.
Reilly1812 said:
Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up
Click to expand...
Click to collapse
Yes, there is a hit but it's still MUCH faster than the slow wifi at Starbucks.

mark925 said:
I just setup my own VPN server on my Windows Home Server 2011 box last night. I'm now tethering and haven't had any issues yet.
So far, so good. :good:
I have my UA set normally and am on the unlimited plan as well.
Yes, there is a hit but it's still MUCH faster than the slow wifi at Starbucks.
Click to expand...
Click to collapse
Lol, originally I started looking for a way to bypass UA checks because I wanted to update my laptop which reports UAs as Internet Explorer through the Windows Update Center, and my Xbox 360 which also reports as IE when connected to Xbox Live. I didn't really need tethering until then. But its a pretty convenient function to have when I'm out and about.
Glad I could help out the other users on T-Mobile, lol I guess as the slogan says, "Stick Together"
Happy tethering everyone.
Sent from my SGH-T999 using xda premium

Hey, thanks for the info. If you're using a VPN it should work with most wifi tether apps though, shouldn't it? I'm on a N4 and CM10.1, which I guess should have about the same tethering app as the stock firmware. Also, it should work with BT tethering, shouldn't it?
Another question, is VPN One Click really free, or is there a catch? My router doesn't seem to have the VPN option you mentioned before, and my home internet appears to be 15mb down, but only 1mb up, which would limit considerably my speed even if I did a personal VPN.

andy o said:
Hey, thanks for the info. If you're using a VPN it should work with most wifi tether apps though, shouldn't it? I'm on a N4 and CM10.1, which I guess should have about the same tethering app as the stock firmware. Also, it should work with BT tethering, shouldn't it?
Click to expand...
Click to collapse
I use Wi-Fi Tether for Root Users and it works fine with VPN.

I tested with the native app, but it doesn't connect to the internet. So that's that.
With Wifi Tether for Root Users, it worked once but in a very flaky way. After that one time, couldn't get it working again. Tried many different profiles, and the one in which I don't get any log errors is forcing the generic one, forcing one of the setup methods. Apparently it doesn't work with the N4, there's another N4 user in the reviews that has problems too. Another very similar app is Open Garden's wifi tether, but it seems to be pretty much the same app as Wifi Tether for root users, has an almost identical interface and options. And of course, also doesn't work. Barnacle is another that doesn't work with the N4. By the way, this is all without even using VPN, so those aren't viable for us with the N4.

andy o said:
I tested with the native app, but it doesn't connect to the internet. So that's that.
With Wifi Tether for Root Users, it worked once but in a very flaky way. After that one time, couldn't get it working again. Tried many different profiles, and the one in which I don't get any log errors is forcing the generic one, forcing one of the setup methods. Apparently it doesn't work with the N4, there's another N4 user in the reviews that has problems too. Another very similar app is Open Garden's wifi tether, but it seems to be pretty much the same app as Wifi Tether for root users, has an almost identical interface and options. And of course, also doesn't work. Barnacle is another that doesn't work with the N4. By the way, this is all without even using VPN, so those aren't viable for us with the N4.
Click to expand...
Click to collapse
Possibly it's because the app hasn't been updated in months and is not playing well with 4.2.1 or having encryption issues with the device
Sent from my SGH-T999 using xda app-developers app

Is there a way to force user use Always on VPN connection on 6T phone?

Hi friends, i try to secure my children phones from accessing not wonted sites. At home i configured mikrotik router so there is no way to bypass restrictions. But i cannot control what they access from mobile network.
The ideal way would be to connect phone to home VPN . Is there a way to force phone use VPN so user could not just switch it off?
In that case all home network rules and restrictions would work.
If you have some ideas about it, please share.
P.S. I did it recently when noticed that 8 year old neighbor children are watching porn...

I never tried it, but you could check if "Multiple users" gives you the chance to create a low privileged user which could maybe not edit network/vpn/dns settings?
Maybe you could setup the main accounts &co from the admin user and secure it with your fingerprint, then grant your childs just the "guest" user access?
Maybe give it a try and check what those users (a new one you create or the guest one) are allowed to do and if that achieves your objective

migors said:
Hi friends, i try to secure my children phones from accessing not wonted sites. At home i configured mikrotik router so there is no way to bypass restrictions. But i cannot control what they access from mobile network.
The ideal way would be to connect phone to home VPN . Is there a way to force phone use VPN so user could not just switch it off?
In that case all home network rules and restrictions would work.
If you have some ideas about it, please share.
P.S. I did it recently when noticed that 8 year old neighbor children are watching porn...
Click to expand...
Click to collapse
My mother utilized Norton Family to limit what could be seen and not seen. You can also utilize the built in family link ability from google to block searches on google and app store. Link for reference: https://protectyoungeyes.com/content/android-parental-controls-complete-guide-parents/
As far as what you are asking, you could use adguard to create the persistent VPN and use their family dns set up. Once done you can always use an app locker to lock the app settings and the app itself so it can't be uninstalled.

maybe you can test an app locker. with it, they can't stop the app vpn if they haven't the code lock

gege0202 said:
maybe you can test an app locker. with it, they can't stop the app vpn if they haven't the code lock
Click to expand...
Click to collapse
You can use an APP locker to lock the settings.
If you can't access the settings you can't turn it off.

migors said:
Hi friends, i try to secure my children phones from accessing not wonted sites. At home i configured mikrotik router so there is no way to bypass restrictions. But i cannot control what they access from mobile network.
The ideal way would be to connect phone to home VPN . Is there a way to force phone use VPN so user could not just switch it off?
In that case all home network rules and restrictions would work.
If you have some ideas about it, please share.
P.S. I did it recently when noticed that 8 year old neighbor children are watching porn...
Click to expand...
Click to collapse
Try private dns: dns-family.adguard.com
Read here: https://www.google.com/amp/s/adguard.com/en/blog/adguard-dns-announcement/amp.html

One problem with the "lock the VPN settings" is that the VPN swithes off fairly randomly. On my phone, I set up a VPN using my home router, and connect to it while on mobile. But at random points in the day it disconnects. It's necessary to go back into VPN settings to turn it back on...

Frankenscript said:
One problem with the "lock the VPN settings" is that the VPN swithes off fairly randomly. On my phone, I set up a VPN using my home router, and connect to it while on mobile. But at random points in the day it disconnects. It's necessary to go back into VPN settings to turn it back on...
Click to expand...
Click to collapse
It's getting convoluted but taker can force reconnect.

Caltinpla said:
Try private dns: dns-family.adguard.com
Read here: https://www.google.com/amp/s/adguard.com/en/blog/adguard-dns-announcement/amp.html
Click to expand...
Click to collapse
I already use opendns, it blocks everything.
I do not see option to add just dns in android. Child just installs some vpn app or connects to some wifi and restrictions does not work.
On other hand if phone is connected to home vpn, there is no way to bypass it.
My microtik bloks all proxy, vpn and routes dns to opendns.
thanks for app locker suggestion. will try it

migors said:
I already use opendns, it blocks everything.
I do not see option to add just dns in android. Child just installs some vpn app or connects to some wifi and restrictions does not work.
On other hand if phone is connected to home vpn, there is no way to bypass it.
My microtik bloks all proxy, vpn and routes dns to opendns.
thanks for app locker suggestion. will try it
Click to expand...
Click to collapse
It's under Wi-Fi and internet setting but only available for Android 9 version. The adguard family dns blocks ad and adult stuff also.