acidburn0zzz / ics-openvpn

Automatically exported from code.google.com/p/ics-openvpn
1 stars 0 forks source link

Lollipop routing workaround in 0.6.26 not effective #311

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
As discussed on G+, Lollipop requires a route to the connected network to be 
added.

Simply adding the local address is rejected.

2014-12-20 20:00:17 Route rejected by Android192.168.38.9/24 Bad address
2014-12-20 20:00:17 Local IPv4: 192.168.38.9/24 IPv6: null MTU: 1500
2014-12-20 20:00:17 DNS Server: 192.168.38.1, Domain: xxxx.uk
2014-12-20 20:00:17 Routes: 10.4.0.0/16, 10.63.0.0/16, 172.20.0.0/16, 
172.21.0.0/16, 192.168.37.0/24, 192.168.38.9/24 
2014-12-20 20:00:17 Routes excluded: 192.168.192.72/24 
2014-12-20 20:00:17 VpnService routes installed: 10.4.0.0/16, 10.63.0.0/16, 
172.20.0.0/16, 172.21.0.0/16, 192.168.37.0/24, 192.168.38.9/24 

Reproduced on Nexus 7 2013 running Stock Android 5.0.1.

Original issue reported on code.google.com by nwhollo...@gmail.com on 20 Dec 2014 at 8:42

GoogleCodeExporter commented 9 years ago
The attached patch normalises the route added for the network to remove the 
host part of the address.

With this, the VPN connection is able to connect to the network address

2014-12-20 20:33:21 Local IPv4: 192.168.38.9/24 IPv6: null MTU: 1500
2014-12-20 20:33:21 DNS Server: 192.168.38.1, Domain: xxxx.uk
2014-12-20 20:33:21 Routes: 10.4.0.0/16, 10.63.0.0/16, 172.20.0.0/16, 
172.21.0.0/16, 192.168.37.0/24, 192.168.38.0/24 
2014-12-20 20:33:21 Routes excluded: 192.168.192.72/24 
2014-12-20 20:33:21 VpnService routes installed: 10.4.0.0/16, 10.63.0.0/16, 
172.20.0.0/16, 172.21.0.0/16, 192.168.37.0/24, 192.168.38.0/24 

Original comment by nwhollo...@gmail.com on 20 Dec 2014 at 8:47

Attachments:

GoogleCodeExporter commented 9 years ago
This issue was closed by revision 4c40e5142f98.

Original comment by arne@rfc2549.org on 27 Dec 2014 at 10:25

GoogleCodeExporter commented 9 years ago
Issue 322 has been merged into this issue.

Original comment by arne@rfc2549.org on 27 Jan 2015 at 1:34

GoogleCodeExporter commented 9 years ago
Sorry, it's not fixed. I tested on beta version: 
http://plai.de/android/ics-openvpn-0.6.27pre.apk and problem still exists.

Original comment by emso...@gmail.com on 27 Jan 2015 at 6:49

GoogleCodeExporter commented 9 years ago
Issue 322 has been merged into this issue.

Original comment by arne@rfc2549.org on 27 Jan 2015 at 7:22

GoogleCodeExporter commented 9 years ago
This issue is marked as fixed. But I tested your beta and it seems to be not 
fixed though. Am I testing wrong version?

Original comment by emso...@gmail.com on 27 Jan 2015 at 8:03

GoogleCodeExporter commented 9 years ago
I have tried the beta 0.6.27 and also have no routing.  I am getting the route 
added correctly for the VPN network (patch in #1), but it is rejecting the 
pushed routes.

2015-01-27 20:07:42 Local IPv4: 192.168.38.9/24 IPv6: null MTU: 1500
2015-01-27 20:07:42 DNS Server: 192.168.38.1, Domain: xxxx.uk
2015-01-27 20:07:42 Routes: 192.168.38.0/24 
2015-01-27 20:07:42 Routes excluded: 10.4.0.0/16, 10.63.0.0/16, 172.20.0.0/16, 
172.21.0.0/16, 192.168.37.0/24, 192.168.192.72/24 
2015-01-27 20:07:42 VpnService routes installed: 192.168.38.0/24

Same VPN server as above.  Nexus 7 2013, Android 5.0.2 (updated since original 
report)

Original comment by nwhollo...@gmail.com on 27 Jan 2015 at 8:15

GoogleCodeExporter commented 9 years ago
Indeed, it still is not working. Please take a look

Original comment by emso...@gmail.com on 27 Jan 2015 at 8:19

GoogleCodeExporter commented 9 years ago
I have re-installed 0.6.26 and confirmed routes pushed from VPN server are not 
excluded with Android 5.0.2.

Original comment by nwhollo...@gmail.com on 27 Jan 2015 at 8:24

GoogleCodeExporter commented 9 years ago
@9 I can at the moment not reproduce the behaviour. Care to share the whole 
log, or at least the configuration pushed to the client?

Original comment by arne@rfc2549.org on 27 Jan 2015 at 9:37

GoogleCodeExporter commented 9 years ago
Issue 322 has been merged into this issue.

Original comment by arne@rfc2549.org on 27 Jan 2015 at 9:44

GoogleCodeExporter commented 9 years ago
All neccesary info is included in Issue 322

Original comment by emso...@gmail.com on 27 Jan 2015 at 9:46

GoogleCodeExporter commented 9 years ago
Issue 322 has been merged into this issue.

Original comment by arne@rfc2549.org on 27 Jan 2015 at 10:15

GoogleCodeExporter commented 9 years ago
Issue 322 has been merged into this issue.

Original comment by arne@rfc2549.org on 28 Jan 2015 at 3:16