mmorciegov / android-wifi-tether

Automatically exported from code.google.com/p/android-wifi-tether
7 stars 3 forks source link

PPTP vpn not working #221

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
Tried using a regular vpn in XP, and it refused to work, with "error 619" all 
the time.

I think this might have to do with NAT. Thought I'd document that here. Might 
be possible to open ports to make it work, but I cant find any such settings.

Original issue reported on code.google.com by sop...@gmail.com on 7 Jan 2010 at 6:13

GoogleCodeExporter commented 9 years ago
I also tried using Cisco VPN and same thing.  The VPN clien connects and just 
as 
quickly disconnects.  This is both in Wifi mode as well bluetooth mode.

Original comment by kamy...@gmail.com on 10 Feb 2010 at 5:28

GoogleCodeExporter commented 9 years ago
Would be interesting to know if its possible to open ports using commandline 
iptables?

Original comment by sop...@gmail.com on 10 Feb 2010 at 7:39

GoogleCodeExporter commented 9 years ago
PPTP uses another protocol (besides TCP) called GRE (protocol ID 47).
I'd try to setup a rule like

iptables -A wireless-tether -p 47 -j ACCEPT

this rule must be BEFORE the DROP rule

so after the tethering is up and running, do

/data/data/android.tether/bin/iptables -F wireless-tether
/data/data/android.tether/bin/iptables -A wireless-tether -m state --state
ESTABLISHED,RELATED -j ACCEPT
/data/data/android.tether/bin/iptables -A wireless-tether -s 192.168.2.0/24 -j 
ACCEPT
/data/data/android.tether/bin/iptables -A wireless-tether -p 47 -j ACCEPT
/data/data/android.tether/bin/iptables -A wireless-tether -j DROP

and retry

Original comment by grozan.m...@gmail.com on 13 Apr 2010 at 3:15

GoogleCodeExporter commented 9 years ago
it would be nice to integrate this into the program.

Original comment by bch...@gmail.com on 27 Jul 2010 at 10:13

GoogleCodeExporter commented 9 years ago
Ok. The iptable-rule changes suggested by grozan.mobile are now in 2.0.5-pre4:
http://android-wifi-tether.googlecode.com/files/wireless_tether_2_0_5-pre4.apk

Please check if that really resolves the issue you have with pptp.

Thanks.

Original comment by harald....@gmail.com on 27 Jul 2010 at 10:37

GoogleCodeExporter commented 9 years ago
2.0.5-pre4 didn't work for me.

Original comment by bch...@gmail.com on 28 Jul 2010 at 12:55

GoogleCodeExporter commented 9 years ago
2.0.5 pre4 didn't work for me either. 

Original comment by john.d.h...@gmail.com on 28 Jul 2010 at 1:57

GoogleCodeExporter commented 9 years ago
Well ignore my last post. I have 2.0.5 pre4 working to establish a vpn with my 
laptop while tethered with Wifi Tether. Not sure what I did that made it work. 
The steps I did were pretty simple and not sure if it will work very everyone 
but I have rebooted both of my devices since it worked and it is working again 
so I don't think it's a fluke. I have emailed the dev to see what he thinks 
about what I did. 

Original comment by john.d.h...@gmail.com on 28 Jul 2010 at 3:02

GoogleCodeExporter commented 9 years ago
I tried rebooting this morning. It still doesn't work. It works when I use 
PDANET.
Here's my setup. My Macbook is connected to Wifi tether, and the macbook shares 
the airport with ethernet cable which is connected to another laptop that uses 
VPN connection. This works when I use PDANET, but not WifiTether.

Original comment by bch...@gmail.com on 28 Jul 2010 at 11:00

GoogleCodeExporter commented 9 years ago
Everything that was working stopped working for me. However I am starting to 
wonder if it is not something on sprints network. it worked fine at home, I 
changed nothing then got to work and it wouldn't work. Not sure why it started 
working then stopped. 

Original comment by john.d.h...@gmail.com on 29 Jul 2010 at 3:45

GoogleCodeExporter commented 9 years ago
I never got it to work. Pdanet works.

Original comment by bch...@gmail.com on 20 Aug 2010 at 11:45

GoogleCodeExporter commented 9 years ago
I believe to "implement" a pptp-passthrough we would need some additional 
kernel-modules - like:

ip_nat_pptp 
ip_conntrack_pptp
ip_nat_proto_gre
ip_conntrack_proto_gre

... and modified iptables-rules.

Pdanet works because they don't do NAT (network address translation).

Original comment by harald....@gmail.com on 21 Aug 2010 at 6:57

GoogleCodeExporter commented 9 years ago
Is there an android GUI for netfilter rules creation and management?

(iptables)

DroidWall does not (yet?) offer this functionality.

alternately .. Recommendations to script additions on boot?  And platform 
agnostic GUI to construct rules for android's netfilter (limitations?)  ?

Original comment by lfu8b4sk...@spambox.us on 10 Sep 2011 at 5:30