Develop Bugs

Guide - ALL PORTS opened through carrier proxy 3G/HSDPA

Notice - This topic is for the very advanced computer users.
I will need help from WM6 developers and SUPER advanced users for a variant of this. Please go to the COMPLETE bottom to read what I need for help.
What is it for? : Gain full access to TCP ports while using carrier's WAP/GPRS/HTTP proxy. Access IMAP/POP3/Internet Radio/Streaming TV/Skype while still using your carrier's cheap/free GPRS APN.
(currently only works on tethered, but I am working on making it work directly from the phone, I need help from those in the know-how)
Summary: The PC is tethered to the phone for GPRS/3G internet. PuTTY client connects to a SSH server THROUGH the carrier's proxy and opens up a SSH tunnel with dynamic forwarding on port 1080.
What you need :
- PC with Windows or Linux
- PuTTY http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
- A simple SSH server directly connected to the internet (could be a modified Linksys WRT54G/GS/GL router with OpenWRT, no need for a PC)
optional - ProxyCap or SocksCap (commercial, look on bittorrent). They force softwares that required DIRECT internet acess to work with this guide
Settings:
1- Your SSH server needs to listen to port 443
2- In Windows go to Control Panel / Internet Options / Connections / LAN Settings / Proxy Server /
-Check the box "Use a Proxy Server for your LAN"
-Click advanced under SOCKS: , write: localhost" with port: 1080
3- In PuTTY
-Session TAB
Hostname = IPaddressOfYourSSHServer
port = 443
-Connection / Proxy
Proxy Type = HTTP
Proxy hostname = YourCarrierProxyAddress
Port = 80 or 8080 (whatever your carrier tells you to put)
-Connection / SSH / Tunnels
At the bottom, select Dynamic & IPv4
Source port = 1080
Click ADD
You should see "4D1080" appear in the white box under "forwarded ports"
-Session
Type any name you want under Saved Sessions
Click "Save" so that anytime you reload Putty, you click ony your sessions and load to restore all the above settings.
Final Step
- Disconnect your PC from any internet access
- Connect your PC to your phone's GPRS/3G internet
- In Putty, load the session and click on OPEN (This should open up a black window with no text)
- Wait a few seconds, you should see a new window asking you if you accept a new KEY for the new host you are connecting to. Click YES
NOTE: this will only happen the first time you connect to the SSH server through GPRS. It will never appear again
- You'll be asked to enter your username and password (those are the ones from your SSH server). You'll then gain SSH terminal access to your SSH server.
- type and enter "top" in your SSH terminal
WHY? : Your carrier's PROXY closes any IDLE connections. "top" makes the SSH server send you the server status every few seconds, keeping the connection active.
- Open internet explorer and see if you can load web pages.
- Congrats, you got non-carrier-proxied non-carrier-cached internet access.
TROUBLESHOOTING
Problem: PuTTY times out when I open my session
Diagnostic: PuTTY cant connect to your SSH server, this could be due to :
- Check if you got the right SSH server IP address
- SSH Server does not listen to TCP port 443
- SSH Server is behind a firewall that blocks port 443
- Your ISP may block port 443 (mine blocks port 80)
- Your wireless carrier may not allow SSL connections, test by loading a HTTPS web page while using their HTTP proxy (find a web page such as ebay, paypal, or whatever that requires an encrypted login, see if HTTPS is in the address bar). You're screwed if its blocked
- Your wireless carrier's proxy might not be on port 80/8080, please check
- Double check your Putty settings for your session.
Problem: PuTTY says "connection not allowed" "permission denied" or something
Diagnostic - Your wireless carrier probably does not allow SSL on 443, or scans your packets to see if it is TRUELY SSL. You're screwed in that case.
Problem: When I type my username and password, I get denied
Diagnostic: you don't know your OWN SSH server's access information, moron
Problem: Im connected to my SSH server, but IE won't load pages
Diagnostic: Either you forgot to set the dynamic port forwarding (review step 3 in settings) or you didn't set the proxy settings in IE (review step 2)
Please make sure you got NO other proxies entered other than in the SOCKS section of IE
WHAT I NEED FOR HELP
As you can see, this is only for using GPRS/3G on a PC/Laptop
Im very close to getting this to work directly on the phone.
PocketPutty is a conversion of PuTTY for WM5/6
http://www.pocketputty.net/
There is no Proxy tab in PocketPutty, but go in the registry
HKEY_current_user/Software/SimonTatham/Putty/Sessions/YourSessionName
This is IDENTICAL to what you'll find on your windows PC if you create a session. Create the proper session on your PC and copy the registry entries onto your phone's registry.
I got it to connect to my SSH server the same way you do on a PC, however, I can't get Pocket IE or any other software to use localhost:1080 socks proxy.
I've tried the obvious "proxy settings" in the connections manager, but IE still tries to connect directly unless I specify a HTTP proxy. Putty cannot do HTTP proxy so I can't just open up a second dynamic port on 80.
I tried in the registry to manually enter data. I noticed that even if you got NO proxy settings, you still got two proxy entries in the registry
HTTP , which uses "new-inet" on 1118
null-corp, which uses "new-corp" on 1118
I've made some tests and come to the conclusion that IE will only listen to the HTTP proxy entry in the registry. However, it will not use it if the "type" is set to "0". Setting it to "4" (SOCKS) gives me an error that IE cannot use my GPRS connection.
Im at loss here since im not a programmer or anything. Im wondering if any programmer/developper/professionals knew anything on the matter. It's only a matter of dynamic forwarding. I know PocketPutty can do it.

I was wondering if this was possible myself... I run a linux server at home and when I am at school/work/etc. I like to use my server as a socks proxy (using the method you stated) in order to get around those pesky firewalls and content filters. I've found that in general I like to tunnel everything through my home ISP's connection. It just 'feels' more secure, albeit a lot slower due to roadrunner's poor upstream bandwidth.
Pocket IE apparently did leave out the SOCKS proxy feature, and I don't know if it's even possible to tunnel through SOCKS on a WinMo phone.
This ancient guide from 1999 says that SOCKS is not implemented on WinCE, but surely this is outdated and useless information, right?
So I ask: Does anyone out there know how to use a SOCKS proxy on a PocketPC?

I don't know how much this will help you, I'm not nearly as advanced, but I saw the word SOCKS and a bell rang. Under Settings > Connections > Connections, when you setup or edit the proxy server, the SOCKS option is at the bottom. I always manually put in the AT&T proxy settings when I need to so it sounded familiar. Hope that helps.

Hey alkizmo !
I think that your idea is not really good, because there is an easier solution, with OpenVPN. This vpn allows you to do HTTP encapsulation, like PuTTY ...
And OpenVPN server/client is faster to install.

TKz said:
Hey alkizmo !
I think that your idea is not really good, because there is an easier solution, with OpenVPN. This vpn allows you to do HTTP encapsulation, like PuTTY ...
And OpenVPN server/client is faster to install.
Click to expand...
Click to collapse
A VPN connection cannot be initiated through a proxy where all ports are blocked except 8080/80/443
VPN is not the solution to proxy bypass.
Then again, go ahead, try to prove me wrong and you'd have found a much simpler solution.
oh and this thread is outdated, I did finalize this project and have it working now.
http://forum.xda-developers.com/showthread.php?t=316890

alkizmo said:
A VPN connection cannot be initiated through a proxy where all ports are blocked except 8080/80/443
VPN is not the solution to proxy bypass.
Then again, go ahead, try to prove me wrong and you'd have found a much simpler solution.
oh and this thread is outdated, I did finalize this project and have it working now.
http://forum.xda-developers.com/showthread.php?t=316890
Click to expand...
Click to collapse
Ok, i know your solution work, but three things :
1. Mine too (sorry, I bypass proxy through vpn)
2. Mine is easier ... that's all !
3. http://ovpnppc.ziggurat29.com/ovpnppc-main.htm

Personaly, I think the problem inlies with the way Pocket PC use proxys. If there was a way to make the Phone use the same proxy for everything it would work. but from what I can tell, the phone choses the right proxy for the right thing. by looking at the proxy settings it has a for Http wap, etc.
Well, the other programs don't work with these proxies, as far as I can tell. The best wayt, IMHO, would be to make a program that routes all connections to one proxy, and maybe then the prxys would work correctly.

TKz said:
Ok, i know your solution work, but three things :
1. Mine too (sorry, I bypass proxy through vpn)
2. Mine is easier ... that's all !
3. (deleted link, no url posting privileges for new members)
Click to expand...
Click to collapse
excellent.
As of this writing, the link is still alive. And the latest release of openvpn ppc is 2.1 released December 10/2009. Or, about a month ago.
see:
the changelog

Constantly losing 'Work' proxy settings

Hi all, have a little problem, am going to see if Toms 4.1 rom has the same issue, and something in the back of my mind tells me that it's there by design.
Basically, i connect to two different types of wireless networks, those are:
Work: I go to different schools, all part of the same WAN, the access points are different, keys etc, but the proxy is always 172.1.0.5:8080
Everywhere else: no proxy, random addressing, the usual stuff.
Every time i enter the work proxy server and leave the connections tab, the proxy settings dissapear, it only seems to be the main proxy settings, as the WAP, Secure WAP and Socks settings keep. As soon as i connect to the work network, goodbye proxy, as soon as i disconnect, the proxy settings return.
I really need that to work the other way around.
Currently using Toms B&B 4.0, as previously stated i'll check to see what happens in 4.1, but i have a sneaky idea that it's there for a reason.
Any workarounds? registry hacks?
Thanks
Kai

Still having trouble with my proxy settings, tried B&B 4.0, 4.1 and Artemis touch WWE.
All have the same problem, Proxy server settings dissapear when and only when i use the Work settings for connection. If i use the 'Internet' setup or simply disconnect from Wifi, the proxy settings re-appear.
If i can't get this to work, i'll have to go back to the official rom, all of the other bells and whistles are just fluff, i need this more than anything else.
Thanks

same deal here. they certificate secured services with my problem. connect fine, and get DHCP address assigned, but the proxy server settings don't stick. internal sites are fine, but can't get outside as all access is barred except via the proxies. i figured it was a bug and live with it! please let me know if the official ROM fixes it or you find a workaround though!

jdl1306 said:
same deal here. they certificate secured services with my problem. connect fine, and get DHCP address assigned, but the proxy server settings don't stick. internal sites are fine, but can't get outside as all access is barred except via the proxies. i figured it was a bug and live with it! please let me know if the official ROM fixes it or you find a workaround though!
Click to expand...
Click to collapse
Had no problems with proxy settings with the official WM5 or WM6 roms, but with B&B and WWE i've had no luck at all.
I do hope someone knows why this is happening.

Well, think i found the solution to this.
I was thinking that there had to be something specific to the 'cooked' roms which would disable the proxy, and the only thing i could in common with the Three cooked roms that i've tried has been battery status. It's the only utility that mentions specifically 'disabling the proxy for wifi'.
In the options for battery status you will find an option that will do just that, i enabled it(thus theoretically stopping the proxy from working), and then disabled it again. And now when i connect through my work connection, the proxy settings are still active and i can recieve my mail.
**and before anyone asks, i didn't enable the option before **

standard proxy settings

hi,
i am new to windows mobile. i am trying to connect to internet using my mobile over bluetooth/wifi. I can connect to active using either of them.
To access internet we have to use a http proxy with authentication for internet & specify 'no proxy' for internal websites.(for browsers)
in windows mobile, where should i specify these settings? I went to settings--> proxy and added http proxy, but couldn't figure out those 'connect from' work, wap etc. (connect what from what?)
i can access internal websites. using kavana's wm6.1

pay for unlimited web like the rest of us..i pay $30.00 every month for mine
and if everyone was paying for the unlimted internet maybe it would be cheaper than these people trying to set up proxy's

F$#k Proxy hack
If that's the way you want to go I suggest do a search/or google it 'cause I agree with hovax, the more people hack proxy's the more money we have to pay for our unlimited plans. I'm not speaking for everyone , but I know a lot of people here pay for their plan, rather than steal it.

well, i am from india. the plans we have here gives too low speed (10 to 15kbps) not worth it

timepassman said:
well, i am from india. the plans we have here gives too low speed (10 to 15kbps) not worth it
Click to expand...
Click to collapse
s**t outta luck

hi i have the 20.00 unlimted internet plan. is there a better proxy setting for the dash? because sometimes all the applications (sky fire, PIE, flick) refuses to connect to EDGE

okay im going to breakdown US only i dont think india has this
WINDOWS MOBILE 6.1 INTERNET SETTINGS!
ok first of all both of you guys that posted settings, they will work for the older versions. Good job for that cuz of the million tmobile phones I used that on!
Here are the settings for WM6.1
settings
connections
gprs
edit the existing T-Mobile Data with the following
connects to: wap network
access point: wap.voicestream.com
username and passwork: (leave blank)
authentication type: none
primary dns: 216.155.165.50
secondaty dns: 0.0.0.0
ip address: (leave blank)
now go back to connections menu
select gprs
select New...
name: tmobile gprs
connects to: wap network
access point: wap.voicestream.com
user name and password: (leave blank)
authentication type: none
primary dns: 216.155.165.50
secondary dns: 0.0.0.0
ip address: (leave blank)
now go to proxy from the connections menu
add new proxy
name: tmobile proxy
connects from: wap network
connects to: the internet
proxy (name port): 216.155.165.50:8080
type: HTTP
username and password: (leave blank)
now go back to the connections menu
click menu
select advanced
set all connections to automatic
now open IE
click menu
select tools
select options
select connections
check automatically detect settings
select network: wap network
I know you shouldnt need to GPRS accounts but for some reason on certain WM6 phones it ONLY works with both, doesnt matter if you have one or the other it wont work unless you have both (on certain phones), mine as well just put it all in, wont hurt anyway
P.S., this was all tested on 4 different t-mobile dash phones
Edge and IE work fine on any of the T-Zones plans with these settings on the dash just pop them in to Settings / Connection /
http://www.htcwiki.com/page/The+Dash+FAQ
NEXT TIME DO SOME RESEARCH GOOGLE IT OR USE THE SEARCH FORUM ABOVE^^^^ and maybe you wont have to ask stupid questions. most of this stuff is already on the web you just have to SEARCH
if it's not on the forum look at some other sites because most likely there's people like us that's had this problem before and solved it already.

there is already a tread regarding it
http://forum.xda-developers.com/showthread.php?t=374413

[GUIDE] SSH Proxy with ConnectBot and ProxyDroid

For anyone interested in data security the ability to encrypt network traffic is obviously important-- especially in light of the myriad of recent well publicized reports of private and government electronic snooping. It is also relevant to mention that to date no one has come close to cracking "TwoFish" encryption which can be used by SSH. With this in mind, consider the following tutorial which describes a method for encrypting all 3g, 4g, and Wi-Fi data, thus beefing up phone and personal data security.
Setting up a global SSH Tunnel on Android phones
This tutorial assumes the reader possesses a fully configured SSH server and rooted phone. In lieu of a server, (eg., the reader only has only a Windows-based operating system), research into CYGWIN is recommended. I use CYGWIN to run my SSH server and I have found that it is the most robust option for Windows users; however, setting this up on Windows can be a daunting task.
Setting up global SSH Tunnel on Android
1. Download 2 apps from the Google Playstore: ConnectBot and ProxyDroid
2. Install ConnectBot and ProxyDroid on your phone.
3. In ConnectBot set up Port forwards for your SSH connection. For "Type" field use "Dynamic (SOCKS)." For “Source Port” use 56001 or any local port not being used. The reasoning behind using port 56001 is this: System Ports (0-1023), User Ports (1024-49151), and the Dynamic and/or Private Ports (49152-65535)
4. Open ProxyDroid and configure as follows:
Host: 127.0.0.1
Port: 56001 (or the port you chose to use in step 3)
Proxy Type: SOCKS5
Global Proxy: Check the box
The above procedure accomplishes several things. First, ConnectBot remotely connects to your SSH server. Next, the ConnectBot connection forwards to the local port 56001. ProxyDroid then redirects all network traffic through the localhost on port 56001. Once you are connected through ConnectBot and ProxyDroid is activated all of your data will be tunneled through the encrypted ConnectBot session. This is an excellent way to set up a global proxy because it does not require manual configuration of any applications to connect through the proxy. You can test the functionality of the connection by opening up your phone browser and performing the Google search: What is my IP. If the proxy is functional you will see the WAN IP of the network of your SSH server. Additional and more thorough testing can be done with packet sniffers such as WireShark.
An application called "SSH Tunnel" is an alternative to accomplishing the above. However, I find ConnectBot and ProxyDroid is more elegant and gives better control-- not to mention being more sophisticated/chic. When correctly performed the ConnectBot and ProxyDroid method encrypts all 3g, 4g and Wi-Fi data on your phone. This is obviously useful for phone access of sensitive materials especially using unfamiliar or alien network connections. With the current proliferation of identity theft via electronic snooping on mobile devices I do not advocate using cellular phones for any banking or electronic transactions without setting up a robust and reliable encrypted connection.

I would also add that you need to run connectbot first then run ProxyDroid. If you do it in reverse Connectbot will have problems connecting.

Dr.Tautology said:
For anyone interested in data security the ability to encrypt network traffic is obviously important-- especially in light of the myriad of recent well publicized reports of private and government electronic snooping. It is also relevant to mention that to date no one has come close to cracking "TwoFish" encryption which can be used by SSH. With this in mind, consider the following tutorial which describes a method for encrypting all 3g, 4g, and Wi-Fi data, thus beefing up phone and personal data security.
Setting up a global SSH Tunnel on Android phones
This tutorial assumes the reader possesses a fully configured SSH server and rooted phone. In lieu of a server, (eg., the reader only has only a Windows-based operating system), research into CYGWIN is recommended. I use CYGWIN to run my SSH server and I have found that it is the most robust option for Windows users; however, setting this up on Windows can be a daunting task.
Setting up global SSH Tunnel on Android
1. Download 2 apps from the Google Playstore: ConnectBot and ProxyDroid
2. Install ConnectBot and ProxyDroid on your phone.
3. In ConnectBot set up Port forwards for your SSH connection. For "Type" field use "Dynamic (SOCKS)." For “Source Port” use 56001 or any local port not being used. The reasoning behind using port 56001 is this: System Ports (0-1023), User Ports (1024-49151), and the Dynamic and/or Private Ports (49152-65535)
4. Open ProxyDroid and configure as follows:
Host: 127.0.0.1
Port: 56001 (or the port you chose to use in step 3)
Proxy Type: SOCKS5
Global Proxy: Check the box
The above procedure accomplishes several things. First, ConnectBot remotely connects to your SSH server. Next, the ConnectBot connection forwards to the local port 56001. ProxyDroid then redirects all network traffic through the localhost on port 56001. Once you are connected through ConnectBot and ProxyDroid is activated all of your data will be tunneled through the encrypted ConnectBot session. This is an excellent way to set up a global proxy because it does not require manual configuration of any applications to connect through the proxy. You can test the functionality of the connection by opening up your phone browser and performing the Google search: What is my IP. If the proxy is functional you will see the WAN IP of the network of your SSH server. Additional and more thorough testing can be done with packet sniffers such as WireShark.
An application called "SSH Tunnel" is an alternative to accomplishing the above. However, I find ConnectBot and ProxyDroid is more elegant and gives better control-- not to mention being more sophisticated/chic. When correctly performed the ConnectBot and ProxyDroid method encrypts all 3g, 4g and Wi-Fi data on your phone. This is obviously useful for phone access of sensitive materials especially using unfamiliar or alien network connections. With the current proliferation of identity theft via electronic snooping on mobile devices I do not advocate using cellular phones for any banking or electronic transactions without setting up a robust and reliable encrypted connection.
Click to expand...
Click to collapse
I know that this is an old thread but is there any way to ssh-tunnel wifi traffic only ? Especially "untrusted wifi" traffic only?
Thanks

how to set up connect bot? please can you provide the information in detail?

Okay so I was using this setup of connect-bot and proxy-droid on kit kat. It was working great. I upgraded my phone to lollipop and connectbot would not port forward (the port data would be crossed out after connecting)
I decided to replace connectbot with ssh tunnel in this config
https://play.google.com/store/apps/details?id=org.sshtunnel
it did not work with global proxy in ssh-tunnel so I used proxy-droid like the OP did and it worked.
so basically substituting connect-bot with ssh-tunnel from the OP
setup:
root required
instead of connect-bot configure ssh-tunnel
host= ip address of ssh server
port= 22
user=ssh username
password=ssh passworrd
check use socks proxy box
set proxy port to 56001
do not check global proxy
now configure Proxy droid same as mentioned by OP
Open ProxyDroid and configure as follows:
Host: 127.0.0.1
Port: 56001
Proxy Type: SOCKS5
Global Proxy: Check the box
this should work great for devices absent of vpn files but have root access
launch and connect ssh-tunnel the proxy-droid. then use a browser to connect to local lan.
I have tested using a rasberry pi running ssh and in sshd_config allowed root access and maybe also tcp forwarding.
I have also tested on dd-wrt 3.0beta with tcp forwarding checked. (ssh is mostly broken/disabled in v2.4)

is there any other option instead of proxy droid ...because proxydroid is not working on Youwave..

Could an app like SSH Tunnel be used without ProxyDroid? I noticed that with ProxyDroid I was able to cloak my IP address at an IP reveal website, but couldn't do so without it. Unfortunately ProxyDroid requires root, which my current phone does not have. What good would SSH Tunnel be without ProxyDroid?

Not solve the problem, when ConnectBot connects first, and I enable SocksDroid second. ConnectBot will drop the SSH connection.
It's tool late, but the problem solved:
On SocksDroid, need select: Per-App proxy and select BypassMode, and add org.connectbot (NOT only ConnectBot) to the App List. With this settings, ConnectBot ALWAYS bypass the proxy.
Tesetd, working satble.

[Q] Tethering issues Note II custom APN T-Mobile

Hello!
I'm having issues getting wifi/hotspot tethering to work when pointing the Note II toward a non-standard APN.
Current environment:
Note II devices on T-Mobile US. Provisioning on the T-Mobile side allows access to the B2B APN, as opposed to the standard fast/epc APN the device normally comes configured to access. Turning B2B APN provisioning on actually disables access to the standard fast.t-mobile.com APN for native data, and the PCWEB APN for tethered connections. On the B2B APN, data originating on the device itself works just fine, but devices tethered to the Note II are not able to access the internet.
Wi-Fi connected PC receives an IP address of 192.168.43.16 (standard setup from Samsung), so the device is firing up the hotspot and handing out DHCP addresses. Network trace from T-Mobile shows 192.168.43.16 as the source address of the session, rather than showing the carrier address being handed to the phone. In short, it looks like the native tethering application is failing to NAT the session when pointed at the b2b.tmobile.com APN.
This is a rooted device with a custom ROM, so I side-loaded the WiFi Tether application. After some tweaks, I got tethering to work using the following options:
Device Profile: Generic ICS/JB (wlan0)
Setup Method: Netd-Ndc (master)
Set Netd Max Client Cmd (checked)
Wireless driver reload (checked)
Wireless driver reload 2 (checked)
Enable routing-fix (checked)
So, is there a way to tweak the settings in the native tethering function on the device to get the NAT to behave properly? Customer does not want to push the .apk for WiFi tether out to the devices in the field as the application requires root access and configuration. Entire install base of devices is custom ROM, and SOTI managed. If there is a way to easily push the app and config out to the devices, and have a push button wifi tethering experience for the end users, I might be able to convince them to go that route.
Your thoughts are appreciated!

Hi rob,
There's a dedicated T-Mobile(US) Note 2 Thread. This is the international forum.