Well I searched the forums all over the interweb for a week now, and did not find an answer so I post.
I live in China and as part of the Expat Survival Kit I run an OpenVPN service to solve my facebooktwitteryoutoube problems. The provider is strongvpn.com, or other name reliablehosting.com - reliable, they are, and responsive and helpful and everything.
The VPN uses a San Francisco server, so anytime I fire it up on my PC, I have a USA IP, and can access Youtube, Facebook, Twitter, Pandora et al. Bingo.
I struggled days to hack this connection on my Hero, and finally managed, it works, it connects. Apparently.
Now here is the hick:
- I connect on the Hero with TunnelDroid, using my original StrongVPN config file. It takes some time, but usually connects, either WiFi and Edge.
- I check my external IP, it's the good old Frisco one, I seem good to go
- I can surf sites like e.g. Amnesty International, impossible without VPN. I can use Pandora, so definitely I have US IP. Eventually if there is an embedded Youtube vid somewhere, I even can see and try to start it (although it's dead slow)!
- But, none of the social integration features work. I can not log in into twitter, facebook etc, and when I try to visit those sites with the browser, I have the same result as without VPN, nada. Timeout, service unavailable, technical problem, you name it
Now, if there is any developer / network or VPN expert / GFW operator / Google guru around... I really want to understand exactly what the problem can be - that would help some fellow Hero owners here in China
I changed the "hosts" file that I found on some forums... I tried to boost the process with some web proxy... Tried everything - nothing works.
How is it possible that I'm behind a VPN, I have American IP reported by any software you can imagine, and still I'm blocked, while everything works fine on the PC with the same VPN connection???
I can live without these apps and sites on my Hero...but can not live without finding out the truth
你有没有把DNS设置成OpenDNS的地址或者GooglePublicDNS的地址？
GFW好像会返回伪造的ip，纵然你有US的IP也无法访问一个假的IP，对吧
Ok,if you're hard to read Chinese...
Use a OpenDNS address or Google Public DNS address instead of ISP's,All of those DNS server are GFWed.They'll reply a fake ip address of Youtube.
Not working
Thanks,
I tried this way, but still no result.
How can ANY filter get through an 1024-bit secured openVPN connection anyway????
And on the PC, the same connection works flawlessly...
Is there any routetable or something like that?a modified hosts?some ROMs will do that.
a VPN connection will route all of your data in normal,but if you set a routetable,some special URL will not pass the VPN,
check them or flash a foreign ROM instead and try again.
Good luck
AFAIK the standard Hero kernel does not come with the tun.ko driver (which is necessary to capture the outgoing traffic and redirect it to the tunnel). Did you install a custom kernel, too? E.g. newer MoDaCo images have it by default.
I did nearly everything...modified hosts. Running MoDaCo 3.0 with newest 1.9 Tekn. kernel. Installed the openvpn binaries. And the connection WORKS, just not for everything...
Anybody in China who can use the social networking features on the Hero?
Ps: the reoutetable, I don't really know where to look it for...
I don't know the answer, but you can debug it yourself with a computer and wireless access point:
Hero <--wifi--> AP <--ethernet--> Computer running packet sniffer <--Internet-->
A few comments:
Don't consider Pandora as proof of a US IP. Better check on a website that gives actual info about your location.
The comments about OpenDNS and hosts files are helpful, but both assume that the wrong IPs are not already cached somewhere. Make sure all caches (DNS, browser, etc.) are flushed.
The easiest way to find out if the DNS is the problem is to do a ping to youtube.com and see if the IP range really belongs to Google or of it's a random IP elsewhere. You can use a 'whois' command or website to figure out who the IP belongs to.
Please note that OpenVPN does not encrypt at 1024-bit. 1024-bit is just the initial key length, which is unrelated to the 128-bit or 256-bit of the actual tunnel.
Btw, you don't necessarily need to use OpenVPN. Lighter protocols like PPTP and L2TP may perform better on a phone. China Unicom works well with both. China Telecom works fine with L2TP.
Greetings from Shenzhen.
open VPN
Hi,
not sure if this thread is still alive but i give it a try...
I' currently running elelinux 2.4 with [email protected] on my HTC hero and have trouble connecting to a friends VPN.
the VPN server is in Germany and it works well for my friend, who is also hosting the server. however when i try to connect the server records following:
read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
and it seems that my phone is refusing the connection to the server...
any ideas?
thanks!
hero.walker said:
Hi,
not sure if this thread is still alive but i give it a try...
I' currently running elelinux 2.4 with [email protected] on my HTC hero and have trouble connecting to a friends VPN.
the VPN server is in Germany and it works well for my friend, who is also hosting the server. however when i try to connect the server records following:
read UDPv4 [ECONNREFUSED]: Connection refused (code=111)
and it seems that my phone is refusing the connection to the server...
any ideas?
thanks!
Click to expand...
Click to collapse
hi there , I don't use elelinux 2.4, but i encountered an same error with CM 7 nightly build, and I believe that is an issue of the kernel you are using for the kernel have some problem with the tun.ko moduel , here is the thread ( read from page 42 ) :
forum.cyanogenmod.com/topic/14455-cm7-discussion-of-nightlies/page__st__860
sorry , i haven't get the permission to post url here yet .
thanks for the link! seem like it does not work with my current kernel, will fash the flykernel from elelinux and try again.
Time for me to update this thread!
For all of the T-Mobile users who are still trying to find a way to circumvent the user agent checking that T-Mobile does while using a third party hotspot app and don't feel like decompiling, editing XMLs, and recompiling, or messing with editing APNs, or ETC... A simple solution that I'm using; use a VPN.
Search the market for: Hotspot Shield
▼ ▼
https://play.google.com/store/apps/details?id=hotspotshield.android.vpn&feature=nav_result
▲ ▲
Also DO NOT use the native hotspot, I state this because of all the edits I've tried, the native hotspot still connects to the APN: pcwebs.tmobile.com instead of epc.tmobile.com - Which sniffs out the user agent of your browser and sends you to the upsell page.
If you're on the Galaxy S3 and JB use this app by TrevE
▼ ▼
http://forum.xda-developers.com/showthread.php?t=1988735
▲ ▲
All others that are capable use Wifi Tether for root users.
▼ ▼
https://play.google.com/store/apps/...S5nb29nbGVjb2RlLmFuZHJvaWQud2lmaS50ZXRoZXIiXQ
▲ ▲
-----------------------------------------------------------------------------------------------------------------------
1 - Start Hotspot Shield. (As of 10/18/2013 If you select to "Restore Purchase" Redeem code is "FREE" it'l give you 30 days of elite service for free!)
2 - Wait for connection to establish and a "key icon" to show up in your statusbar.
3 - Start Wifi Tether for Root Users or TrevE Mod which ever you're using.
4 - Configure wifi tether settings.
[For SGS3 users on JB using WifiTether_TrevE_Mod Version 3.2-Beta2-041713, I've found the best setting to use is as follows:
Device Profile: Generic ICS/JB (wlan0)
Setup Method: Auto
Wifi Encryption: Your Preference
SsID: (whatever you wanna use)
Don't disable bluetooth: Checked
Wifi driver reload 2: Checked
Enable Access-Control: Checked
MMS Clamping: Checked
Routing fix: Checked
---------------------------------------------------------------------------------------------------------------------
5 - Tap icon to start tethering.
Once all of the messages stop popping up... Enjoy!
----------------------------------------------------------------------------------------
Optionally:
If you wanna setup your own personal VPN - G.I.Y.F. (Google is your friend) Search for OpenVPN methods. PPTP also works.
Im just a little too lazy to type the instructions. ლ(ಠ益ಠ)ლ
-------------------------------------------------------------------------------------
Also I'm using the following setup:
Device: SGH-T999
ROM: Synergy (R484) ► http://forum.xda-developers.com/showthread.php?t=2113452◄
Kernel: Faux (OC'd 1.62 GHz) ► http://forum.xda-developers.com/showthread.php?t=2089801◄
Modem: UVLI8 ► http://forum.xda-developers.com/showthread.php?t=1880987◄
Data Plan: Unlimited Nationwide 4G
*UVLI8 happens to be the best modem for the areas that I frequent, which ranges from Waukegan all the way to downtown Chicago; it keeps me on HSPA+ 85-90% of the time. So experiment and find out which modem works best for you in your area.
►http://forum.xda-developers.com/showthread.php?p=31409271#post31409271 ◄ Here's a map to help you guys get started on finding the right modem for you.
-----------------------------------------------------------------------------------------------------------------------
If anyone has an issue where Hotspot Shield is not working on their device and giving you the error message:
-------------------------------------------------------------------------------------------------------------
Critical Error |
VPN API is not available on your device. |
Unable to find explicit activity class |
{com.android.vpndialogs/com.android.vpndialogs.ConfirmDialog}, Have you |
declared this activity in your AndroidManifest.xml?" |
-------------------------------------------------------------------------------------------------------------
It, in my case, is caused by having Xposed Framework installed. The only fix I've found for it was to Titanium Backup my apps, then uninstall the Xposed Framework - requires you to boot into recovery and flash the zip file "Xposed-Disabler-CWM.zip" then you have to Wipe Data/Cache/Dalvik/Fix Permissions, flash your rom again, and restore from TB.
Sent from my SGH-T999 using xda premium
Vee63b said:
For all of the T-Mobile users who are still trying to find a way to circumvent the user agent checking that T Mobile while using the native hotspot app and don't feel like decompiling, editing XMLs, and recompiling, or messing with editing APNs, or ETC... A simple solution that I'm using; use a VPN.
Search the market for: VPN One Click
Also don't use the native hotspot, if you're on the Galaxy S3 and JB use this app by TrevE
All others capable use wifi tether for root users.
Enjoy! I'll post later to help you guys setup your own personal VPN. I'm currently in a moving truck moving to Chicago. ლ(ಠ益ಠ)ლ
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
Sounds nice! i'll check it out when you post your setup
imilleson said:
Sounds nice! i'll check it out when you post your setup
Click to expand...
Click to collapse
Did you have a chance to try this bypass method? And did it work for you?
Sent from my SGH-T999 using xda premium
Vee63b said:
Did you have a chance to try this bypass method? And did it work for you?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
it worked for me after a lot of screwing around on my note 2.
Working so far, I'll give it some time just to make sure it doesn't pop up again or if it just stops working. I'll report back later :thumbup:
Sent from my SGH-T999 using xda app-developers app
GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium
Vee63b said:
GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
i read about it but not quite sure how it works, does the server go on the phone or the computer? isn't there more to it then just setting up a server, otherwise why would companies make you pay for this?
robl45 said:
i read about it but not quite sure how it works, does the server go on the phone or the computer? isn't there more to it then just setting up a server, otherwise why would companies make you pay for this?
Click to expand...
Click to collapse
The way a VPN (Virtual Private Network) works is by anonymously masking ALL network traffic to it's destination. I hope my explaination can help those who doesn't understand how a VPN connection work. Here we go:
Normally -
A mobile device connects to service provider monitored internet. In T-Mobile's case, packets are sniffed out that contain any form of user-agent strings, and if the strings report anything other than a mobile device, internet connection is denied and you are redirected to the dreaded "upsell page".
Think of it as water with particles in it passing through sand before reaching the well of water below the sand.
If the water is your network traffic the particles in the water would represent your user agent and the sand is your service provider's filters; not all of the particles will make it through the sand and into the well if they arent small enough to pass through the grains of sand.
Using a VPN is kinda like shoving a tube through the sand and sending your water & particle mixture through the tube directly into the well below. Everything makes it through whether the particles are big or small.
Sorry its late and I probably used a bad analogy. Anywho I hope it made a bit of sense. Lol
I can help you set up your own private VPN. The problem is there's some many different types of routers available for everyone to use. The PPTP type VPN is actually set up through your router. For most people there will be an option to utilize the PPTP port within your router setup screen. Open a web browser, type in 192.168.0.1 or 192.168.1.1 or "routerlogin", the webpage will ask for a username and password. If you changes it, whatever your username and password is. If you didn't, the default username is "admin or administrator" and the default password is usually, "password" dig through the available settings you have and let me know if you have the option to enable anything labeled "PPTP" also let me know which router you have.
Sent from my SGH-T999 using xda premium
yea, so basically, you'd have to setup and only use at one place? is there a solution that will let you tether to any computer anywhere? like is there something you can just setup on the phone? I mean something we can setup as opposed to this 1click vpn which my guess is won't stay free for long.
robl45 said:
yea, so basically, you'd have to setup and only use at one place? is there a solution that will let you tether to any computer anywhere? like is there something you can just setup on the phone? I mean something we can setup as opposed to this 1click vpn which my guess is won't stay free for long.
Click to expand...
Click to collapse
You actually set up your home network to host you own personal VPN. So no matter where you are, your phone would always use your home network.
Your phone will still use the service provider's data service, however, it would use it only to connect to your VPN at home and then securely reroute that data back to your device. So as all of the data is moved along T-Mobile's servers the data in your VPN cannot be read by tmobile's filtering process.
So one personal vpn server would be all you need. There's an option if you check your "settings -> more settings -> VPN" that will let you use a VPN for all connections on your device. Let me know if there's anything I can clarify.
Sent from my SGH-T999 using xda premium
Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up
thanks for sharing !!
Reilly1812 said:
Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up
Click to expand...
Click to collapse
This is true, its not that bad of a lag for me here in Chicago however, normally my download speeds are between 5-7 Mbps on 4G, with the VPn running I drop to 3-5 Mbps, but I've kinda tweaked the tether apk to start OpenVPN when tethering starts and to disconnect when I turn off tethering. So for the most part I never notice the hit on my speed, I've configured packet compression on my personal VPN server. I'm using a Linksys E4200 on AT&T U-Verse. Thanks for pointing that out for me by the way Reilly, I know I've forgot to list the pros and cons of a vpn, I have a few minutes in my hectic life to hop on xda and make a few quick posts but never enough time to go into detail and proof-read my own posts.
Sent from my SGH-T999 using xda premium
giffy89 said:
thanks for sharing !!
Click to expand...
Click to collapse
No problem. I was just seeing alot of people asking for a surefire method to bypass the UA check to connect things that you can't simply use a plugin to spoof. So I decided to share how I get by it on the Nationwide Unlimited 4G plan.
Sent from my SGH-T999 using xda premium
Vee63b said:
GREAT! Now is everyone using the vpn one click app or has anyone attempted to set their own vpn server yet?
Sent from my SGH-T999 using xda premium
Click to expand...
Click to collapse
I just setup my own VPN server on my Windows Home Server 2011 box last night. I'm now tethering and haven't had any issues yet.
So far, so good. :good:
I have my UA set normally and am on the unlimited plan as well.
Reilly1812 said:
Just remember the hit on network performance. Your home network is downloading from the net, encrypting it, and uploading it to your device. This assumes you're outside your home network.
Still Charged Up
Click to expand...
Click to collapse
Yes, there is a hit but it's still MUCH faster than the slow wifi at Starbucks.
mark925 said:
I just setup my own VPN server on my Windows Home Server 2011 box last night. I'm now tethering and haven't had any issues yet.
So far, so good. :good:
I have my UA set normally and am on the unlimited plan as well.
Yes, there is a hit but it's still MUCH faster than the slow wifi at Starbucks.
Click to expand...
Click to collapse
Lol, originally I started looking for a way to bypass UA checks because I wanted to update my laptop which reports UAs as Internet Explorer through the Windows Update Center, and my Xbox 360 which also reports as IE when connected to Xbox Live. I didn't really need tethering until then. But its a pretty convenient function to have when I'm out and about.
Glad I could help out the other users on T-Mobile, lol I guess as the slogan says, "Stick Together"
Happy tethering everyone.
Sent from my SGH-T999 using xda premium
Hey, thanks for the info. If you're using a VPN it should work with most wifi tether apps though, shouldn't it? I'm on a N4 and CM10.1, which I guess should have about the same tethering app as the stock firmware. Also, it should work with BT tethering, shouldn't it?
Another question, is VPN One Click really free, or is there a catch? My router doesn't seem to have the VPN option you mentioned before, and my home internet appears to be 15mb down, but only 1mb up, which would limit considerably my speed even if I did a personal VPN.
andy o said:
Hey, thanks for the info. If you're using a VPN it should work with most wifi tether apps though, shouldn't it? I'm on a N4 and CM10.1, which I guess should have about the same tethering app as the stock firmware. Also, it should work with BT tethering, shouldn't it?
Click to expand...
Click to collapse
I use Wi-Fi Tether for Root Users and it works fine with VPN.
I tested with the native app, but it doesn't connect to the internet. So that's that.
With Wifi Tether for Root Users, it worked once but in a very flaky way. After that one time, couldn't get it working again. Tried many different profiles, and the one in which I don't get any log errors is forcing the generic one, forcing one of the setup methods. Apparently it doesn't work with the N4, there's another N4 user in the reviews that has problems too. Another very similar app is Open Garden's wifi tether, but it seems to be pretty much the same app as Wifi Tether for root users, has an almost identical interface and options. And of course, also doesn't work. Barnacle is another that doesn't work with the N4. By the way, this is all without even using VPN, so those aren't viable for us with the N4.
andy o said:
I tested with the native app, but it doesn't connect to the internet. So that's that.
With Wifi Tether for Root Users, it worked once but in a very flaky way. After that one time, couldn't get it working again. Tried many different profiles, and the one in which I don't get any log errors is forcing the generic one, forcing one of the setup methods. Apparently it doesn't work with the N4, there's another N4 user in the reviews that has problems too. Another very similar app is Open Garden's wifi tether, but it seems to be pretty much the same app as Wifi Tether for root users, has an almost identical interface and options. And of course, also doesn't work. Barnacle is another that doesn't work with the N4. By the way, this is all without even using VPN, so those aren't viable for us with the N4.
Click to expand...
Click to collapse
Possibly it's because the app hasn't been updated in months and is not playing well with 4.2.1 or having encryption issues with the device
Sent from my SGH-T999 using xda app-developers app
I have the nvidia android tv and I also have a pptp security premium vpn service with Anonvpn.io a lifetime subscription in fact.My problem is this system seems to be missing the vpn settings pane to be able to connect to it,any idea how I may be able to accomplish this,but please could it be a bit layman as i have issues with my learning.Thanks in advance to anyone who can help me succeed or just help in general.
I solved this,Anonvpn.io now use the open vpn connect app to setup using downloaded vpn profiles to use it,I have my subscription now working.They have toronto seattle miami new york frankfurt and uk servers to choose from,high bandwith connections one I used and tested on ethernet stated 78mbps.