ICMP Tunneling on Rhodium (Windows Mobile)? - Touch Pro2, Tilt 2 Windows Mobile General

Rhodium Friends,
I am trying to think of a method for tunneling ICMP to our lovely Rhodium device? An ICMP tunnel establishes a covert connection between two remote computers (a client and proxy), using ICMP echo requests and reply packets. This is great for mobile ISPs which permit ping to your phone, but disallow all incoming ports to your phone.
I'm sure the Linux-based phones (Android, Nokia N900) would allow this by using a Linux program called Loki or Ptunnel, but what are we Windows Mobile users to do?
The idea is to have an application that allows you to reliably tunnel TCP connections to a remote host using ICMP echo request and reply packets, commonly known as ping requests and replies.
Use Case Scenario: You're on the go, and stumble across an open wireless network. The network gives you an IP address, but won't let you send TCP or UDP packets out to the rest of the internet, for instance to check your mail. What to do? By chance, you discover that the network will allow you to ping any computer on the rest of the internet. With ICMP tunneling, you can utilize this feature to check your mail, or do other things that require TCP.
Does anyone have any ideas?
Thanks!

mail_e36 said:
Rhodium Friends,
I am trying to think of a method for tunneling ICMP to our lovely Rhodium device? An ICMP tunnel establishes a covert connection between two remote computers (a client and proxy), using ICMP echo requests and reply packets. This is great for mobile ISPs which permit ping to your phone, but disallow all incoming ports to your phone.
I'm sure the Linux-based phones (Android, Nokia N900) would allow this by using a Linux program called Loki or Ptunnel, but what are we Windows Mobile users to do?
The idea is to have an application that allows you to reliably tunnel TCP connections to a remote host using ICMP echo request and reply packets, commonly known as ping requests and replies.
Use Case Scenario: You're on the go, and stumble across an open wireless network. The network gives you an IP address, but won't let you send TCP or UDP packets out to the rest of the internet, for instance to check your mail. What to do? By chance, you discover that the network will allow you to ping any computer on the rest of the internet. With ICMP tunneling, you can utilize this feature to check your mail, or do other things that require TCP.
Does anyone have any ideas?
Thanks!
Click to expand...
Click to collapse
MOST cellphone users are NAT'ed so it wouldn't matter, period. You can't directly connect from the outside to the phone no matter what.

Tmobile in the US does give you a 'static' non-NAT'd address... if you request it. This type of IP address would permit ICMP tunneling, if we can figure out a way to do it.

Related

Server Running over Cellular on Rhodium?

Hello everyone,
I am looking into the idea of being able to run an SSH or VNC server on the Windows Mobile, specifically our Rhodium, platform over cellular (3G). I know for a fact Tmobile can assign a 'route-able' IP address to a phone here in the USA (this has been tested). I can ping this IP address from any computer on the internet (albeit with some substantial latency). Perhaps there is a way to use the Tmobile allowed "pinging your device" to tunnel SSH or VNC traffic.
I would like to figure out a way to reach an SSH or VNC server on my phone using this method. We would need to somehow "open" an inbound port to the phone (this would function like basic port forwarding).
All of this works perfectly over WiFi, of course, but the goal is to get this working over cellular 3G (in particular, Tmobile). I see this as a technical challenge we can overcome as a group.
Does anyone have any ideas on this?
Folks, someone must have some ideas on this!
Here's a few links I came across:
http://kar1107.blogspot.com/2006/03/running-servers-on-cell-phones.html
http://digg.com/software/Run_a_web_server_from_your_phone
it isnt possible they close all ports except if you use port 80 on your phone for the server then you can run vnc server mobile
Antonius123,
So you're saying I can run a vnc server on port 80 on Tmobile? I have tried to run a web server on port 80 with no success.
Which mobile VNC server allows you to set the listening port?
its a program that is in alpha mode.
you can get your ip adress from your mobile phone trough php it is sending the real ip and not the fake.
But you must be aware that ip changes every time you get tro a difrent tower (gsm tower).
create a php page on a webserver with this code
PHP:
<?php
echo $_SERVER['REMOTE_ADDR'];
?>
Thanks for your reply, but I have additional questions.
I am able to get my real IP address from the phone by using VxUtil. This application tells me my IP address. Remember, I am able to have Tmobile assign me a 'route-able' IP address.
What is this program you speak of, which is in "alpha mode"?
The PHP code you provided, as I understand it, will simply give me my IP address, which VxUtil is able to do.
Were you able to somehow successfully access your device using the cellular connection? Which VNC software did you use, or did you use a different protocol?
It's interesting to note that when I check connectivity to my phone by doing "telnet IP_ADDRESS_HERE 80" I do not get a failure, the screen does hang as expected (Telnet can be used to see if ports are open without having a Telnet service running on my phone).
Can anyone please provide input?

Ptunnel

Hello,
Has anyone heard of any Ptunnel implementations for Windows Mobile (CE)? I would love to get this running on my Rhodium.
Ptunnel is an application that allows you to reliably tunnel TCP connections to a remote host using ICMP echo request and reply packets, commonly known as ping requests and replies.
Setting: You're on the go, and stumble across an open wireless network. The network gives you an IP address, but won't let you send TCP or UDP packets out to the rest of the internet, for instance to check your mail. What to do? By chance, you discover that the network will allow you to ping any computer on the rest of the internet. With ptunnel, you can utilize this feature to check your mail, or do other things that require TCP.
The only reference to Ptunnel on Windows Mobile is here:
http://unsyncopated.com/wiki/ICMP Echo Request Tunnel for Windows Mobile 5
Has anyone tried anything like this?
Has anyone heard of this concept?
I use pocketputty and ssh tunnels. If you have access to an ssh shell, you can easily set up any local port to tunnel to different hosts.
This is a good writeup on what ssh tunneling is, and how it works. It mainly is written for full Windows Putty or linux ssh, but pocketputty setup is alot the same.
http://souptonuts.sourceforge.net/sshtips.htm
As a network admin, I hate you I hate you I hate you. Wasting my bandwidth inefficiently sending TCP over ICMP (at an overhead that approaches 100%) and screwing over the paying customers (because I prioritize ICMP, so your packets lag theirs) is not cool.
Moreover, it is in fact illegal in the US and while I'm not such a curmudgeonly bastard to press charges, many other admins will. Consider yourself warned.
jarettk said:
I use pocketputty and ssh tunnels. If you have access to an ssh shell, you can easily set up any local port to tunnel to different hosts.
Click to expand...
Click to collapse
Yes, but SSH runs over regular TCP, which would require (GASPS!) paying for wifi!
Yes, specifically I am looking for a tool to run traffic over ICMP.
And I understand the questionable nature of this proposition, I am more interested in the technical nature of this implementation, just to see if it can be done.
I guess I could tether my phone to a PC and try running Ptunnel on a Linux box?
nonzenze said:
Moreover, it is in fact illegal in the US and while I'm not such a curmudgeonly bastard to press charges, many other admins will. Consider yourself warned.
Click to expand...
Click to collapse
Can you cite a source on this? I know of no criminal laws (which would have to be federal in this case) specifying anything to do with TCP/IP packet types. For now I'm going to have to call BS on that.
rickerbr said:
Can you cite a source on this? I know of no criminal laws (which would have to be federal in this case) specifying anything to do with TCP/IP packet types. For now I'm going to have to call BS on that.
Click to expand...
Click to collapse
There are probably laws on theft, though...
A justification that oh-they-already-offered-ICMP-so-I-took-advantage-of-this-service probably doesn't stand up to they-hacked-my-network-and-stole-the-Internets!
That said, no, I wasn't able to find any concrete whitepapers on the legality of ptunnel.

Remote Desktop Client problems connecting

I just bought a program called Remote Desktop Client (by Xtralogic) and installed it.
However, when I tried to connect to my work, I get a notification 'Socket Is Not Connected'. I called the helpdesk of my work and they say it is not possible to have the server running on my mobile device......
The address I m trying to connect to is 172.20.20.20 with domain 'flexinet.local'. I used the correct username and password.
Maybe you guys can help me on my way?
First...I wouldn't go sticking those IP details up for the world to see. I'm sure it's safe enough but still. Next, have you checked not only the IP but the ports are correct? Then you should ensure that those ports are forwarded from the external domain you're connecting to.
Another thing you may want to check is if this app needs the prefix, i.e. http://YourDomain.com etc.
Lastly...are you attempting to connect from outside the network? Are you connected to the network via WiFi or are you attempting to connect via 3G from a remote location?
172.20.20.20 is a private address... 10.x.x.x, 192.x.x.x and 172.16.x.x to 172.30.x.x are private ranges and not valid on the internet - you'd need the external ip address or the fully qualified domain name (FQDN)... RDP uses port 3389 (if it's not been changed on the server) so your firewall will also need to be open and the transport you use to connect will also need to allow 3389 (WIFI / 3G)...
That is assuming you're trying to get to your server from outside your local network...
Did you try connecting to your work vpn (if you have one) so you can get inside your work network, then use the rdp client to connect to your machine?
Sent from my HTC Desire using XDA App

[Q] Port Forwarder Ultimate for Newbies

Dear All,
Anyone managed to use "Port Forwarder Ultimate" app from Playstore? https://play.google.com/store/apps/details?id=com.icecoldapps.portforwarderultimatepro&hl=en
I'm not a technical person but this method has other potentials to explore. Maybe someone has patient to teach non-IT person.
I know that I should be satisfied with "USB tethering" in android. But users experience improves with new things.
As prerequisite, we should be able to ping our phone's public IP. but how to ping mobile Public IP?
A detailed guide with screenshot or video will help.
Thanks,
AB
This app does not provide such a feature, it would work if it was installed on your carrier router.
You have an class c address witch is not routable.
The app provide means for running a server app on your phone that is using a port below 1024 , ex: ftp, web etc. If you are connected on your wifi network and make proper port forwarding on your router than you will be able to access your phone from the Internet. But it does not make any sense in doing so.
To access your phone's external ip address regularly you need to run the DynDNS client that forwards your ip to dyndns. When you setup an account with DynDNS you select a url to use and DYDNS will forward any requests to that URL to your phone's current ip address. Naturally you will need a service running on your phone like a web server, ftp or vnc depending on what you want to do.
mdalacu said:
This app does not provide such a feature, it would work if it was installed on your carrier router.
You have an class c address witch is not routable.
The app provide means for running a server app on your phone that is using a port below 1024 , ex: ftp, web etc. If you are connected on your wifi network and make proper port forwarding on your router than you will be able to access your phone from the Internet. But it does not make any sense in doing so.
Click to expand...
Click to collapse
I purchased the below item from ebay. I'm thinking of pushing my phone's internet to standard router. Then I will have wired and wireless connection. USB tethering works but I want a bigger network. Maybe you guys can suggest an easy procedures?
http://www.ebay.com/itm/190466358913?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1439.l2649
If there is still help needed with Port Forwarder Ultimate, I'm one of the developers
Themuzz said:
If there is still help needed with Port Forwarder Ultimate, I'm one of the developers
Click to expand...
Click to collapse
Hi developer,
This what I want to set-up (he ethernet jack will come soon). Internet from phone to Buffalo router! Can you please share the solution?

[Q] Is there a way to unblock inbound traffic?

I cannot ping my IP while tethering on my phone. Is there a way to unblock inbound connections on the site, or is it a phone option? There are apps to do this, but they all say you need to be able to ping the phone, and I can't.
I use my phone's tethering as my main internet while at home (unlimited plan) but can't host any games because no one can connect to me.
Still not a thing? I can't ask anywhere else due to the post limitations.
While your computer is tethered to the Internet through your phone, what are the IP numbers of the phone and of the computer?
What IP number are you trying to ping, and whence?
jpradley said:
While your computer is tethered to the Internet through your phone, what are the IP numbers of the phone and of the computer?
What IP number are you trying to ping, and whence?
Click to expand...
Click to collapse
The current IP for all computers connected to my phone is: 70.194.2.149
Using that IP I cannot host any games. Though for some reason I can on PS4, so I have no idea what's going on there.
squat251 said:
The current IP for all computers connected to my phone is: 70.194.2.149
Using that IP I cannot host any games. Though for some reason I can on PS4, so I have no idea what's going on there.
Click to expand...
Click to collapse
Every ethernet port, wired or not, has an IP address. Two devices cannot have the same IP address, each address on a network has to be unique. 70.194.2.149 is the (public WAN) address of a single device, probably that of the incoming port of your router. Your computers each have their own IP numbers (typically in the 192.168.x.y numbering scheme). Your router also has an address in that same number range, for use on its inside (private LAN) ethernet connections.
I don't want to write a dissertation on NAT (network address translation), but that is what the router performs so that your browsers or your Telo "appear" to be coming from 70.194.2.149. Net result,as far as your computers are concerned: they can call out, intitiate a connection to wherever, but nothing can initiate any contact to them from the outside world (short of doing some "port forwarding" in the router). Look up NAT iand port forwarding in a search engine.
BTW, what is "PS4"?
jpradley said:
Every ethernet port, wired or not, has an IP address. Two devices cannot have the same IP address, each address on a network has to be unique. 70.194.2.149 is the (public WAN) address of a single device, probably that of the incoming port of your router. Your computers each have their own IP numbers (typically in the 192.168.x.y numbering scheme). Your router also has an address in that same number range, for use on its inside (private LAN) ethernet connections.
I don't want to write a dissertation on NAT (network address translation), but that is what the router performs so that your browsers or your Telo "appear" to be coming from 70.194.2.149. Net result,as far as your computers are concerned: they can call out, intitiate a connection to wherever, but nothing can initiate any contact to them from the outside world (short of doing some "port forwarding" in the router). Look up NAT iand port forwarding in a search engine.
BTW, what is "PS4"?
Click to expand...
Click to collapse
Playstation 4. All of my PC's connect to the internet through my phone. There is no router, there is no ethernet. They all share the same IP because that is the IP of my phone (my best guess.) That is why all the targeted ads are from the same town. I don't know where in my first post, or any there after you gathered that I am having issues with a router.
squat251 said:
Playstation 4. All of my PC's connect to the internet through my phone. There is no router, there is no ethernet. They all share the same IP because that is the IP of my phone (my best guess.) That is why all the targeted ads are from the same town. I don't know where in my first post, or any there after you gathered that I am having issues with a router.
Click to expand...
Click to collapse
Ah, OK. Then it is your phone which is acting as a router and is doing the NAT procedures. I don't know how to make a phone forward specific IP ports to specific IP addresses.
You need a port forwarding app to allow incoming traffic to reach the right device on the network.
Forward what ever port(s) your game uses from the public wan ip to the game consoles ip provided by the phone.
So lets say forward port 1234 (or all ports) to 192.168.1.10, or what ever the game consoles ip is.
cmlusco said:
You need a port forwarding app to allow incoming traffic to reach the right device on the network.
Forward what ever port(s) your game uses from the public wan ip to the game consoles ip provided by the phone.
So lets say forward port 1234 (or all ports) to 192.168.1.10, or what ever the game consoles ip is.
Click to expand...
Click to collapse
That would work, only all the port forwarding apps require that you be able to ping your public IP. I cannot, all packets are lost no matter what method I use. I would call and ask Verizon, but I have unlimited data, and there is no way I will let them weasel that out of me.

Categories

Resources