yas2003 / android-openvpn-settings

Automatically exported from code.google.com/p/android-openvpn-settings
GNU General Public License v3.0
0 stars 0 forks source link

option to fix routing on new HTC Roms #35

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
After some debugging i managed to get openvpn working on my Desire with the new 
HTC froyo roms so i am sharing the workaround and maybe hope to be able to set 
it up in openvpn-settings for an automatic fix.

I only tested in LeeDroid 1.3a but i guess this may just as well be the same in 
other HTC Sense roms since they have the same base.

The problem is that on this ROM HTC is defining multiple routing tables:

sh-3.2# ip rule                  
0:      from all lookup local 
3001:   from all lookup wifi 
32766:  from all lookup main 
32767:  from all lookup default 

and when the VPN connects it only modifies the routes on the main table, so the 
wifi table which defines the wifi default GW is still in use: nothing goes into 
the tunnel (the nasty thing is that the network still works so users might not 
even realize they are on the unsecure channel)

The easiest workaround is to issue:
ip rule del from all lookup wifi

IMHO there is nothing of value in the wifi table, before the vpn connects it 
has the same routes as the main table; and it is "safe" as it gets recreated 
when the wifi reconnects.

So would love to see an advanced option to do just that; or better make the 
program detect the situation by itself (since most user probably won't).

Original issue reported on code.google.com by jwick...@gmail.com on 19 Jul 2010 at 9:51

GoogleCodeExporter commented 9 years ago
Rock

Original comment by carlos.l...@gmail.com on 26 Jul 2012 at 5:15

GoogleCodeExporter commented 9 years ago
Laukinkeialex@gmail.com

Original comment by laukinke...@gmail.com on 12 Oct 2012 at 7:12

GoogleCodeExporter commented 9 years ago
hi i have a problem on my s3.the open vpn is not connecting it says timeout.at 
first was able to conncet but now icant connect.this is my .ovpn .plz help...

client
dev tun

proto tcp
remote *my server*
http-proxy *my server* *my server port*

persist-key
persist-tun
resolv-retry infinite
route-metric 1

nobind
pull

verb 3

auth-user-pass

<ca>
-----BEGIN CERTIFICATE-----
...........................
-----END CERTIFICATE-----
</ca>

<cert>
-----BEGIN CERTIFICATE-----
.........................
-----END CERTIFICATE-----
</cert>

<key>
-----BEGIN PRIVATE KEY-----
...........................
-----END PRIVATE KEY-----
</key>

Original comment by mehrdad....@gmail.com on 12 Apr 2013 at 9:01

GoogleCodeExporter commented 9 years ago
Pls i dont knw how to use this...
Can anyone mail me on how to use the open vpn? 
Ucheroy@gmail.com

Thanks 

Original comment by uche...@gmail.com on 11 Aug 2013 at 3:34

GoogleCodeExporter commented 9 years ago
Its showing connecting and remains like that.

Original comment by uche...@gmail.com on 11 Aug 2013 at 3:37

GoogleCodeExporter commented 9 years ago
Tanks

Original comment by Reza.hab...@gmail.com on 3 Nov 2013 at 6:31

GoogleCodeExporter commented 9 years ago
Thanks

Original comment by lisanjoe...@gmail.com on 5 Apr 2014 at 7:13

GoogleCodeExporter commented 9 years ago
Panchito.fjas9email.com
170556054

Original comment by panchito...@gmail.com on 4 May 2014 at 4:44

GoogleCodeExporter commented 9 years ago
No me sirve no me coneta

Original comment by 5.2lejen...@gmail.com on 26 Aug 2014 at 1:34

GoogleCodeExporter commented 9 years ago
Thanks

Original comment by pamuss...@gmail.com on 27 Aug 2014 at 2:45

GoogleCodeExporter commented 9 years ago
Donya@sip.server

Original comment by donyaza...@gmail.com on 5 Sep 2014 at 2:19

GoogleCodeExporter commented 9 years ago
rizaaygun.6565@gmail.com

Original comment by rizaaygu...@gmail.com on 4 Apr 2015 at 7:04

GoogleCodeExporter commented 9 years ago
Thanks

Original comment by salemabd...@gmail.com on 15 Jun 2015 at 8:44

GoogleCodeExporter commented 9 years ago
ي

Original comment by haamooi2...@gmail.com on 30 Jun 2015 at 10:23