Related
Install openvpn and then place your edited client vpn config files and certificate files on the storage of FireTV similar to the raspberry pi method in the thread below:
h**p xbmchub.com/forums/threads/24769-How-to-set-up-your-VPN-on-raspberry-pi-using-Brain-Hornsby-Openvpn-for-XBMC
Thanks for anyone that may know more than me that could maybe get this to work...
Hmm would be nice if that worked. Did u get a chance to try it?
Sent from my Nexus 5 using XDA Free mobile app
tdfsu said:
h**p xbmchub.com/forums/threads/24769-How-to-set-up-your-VPN-on-raspberry-pi-using-Brain-Hornsby-Openvpn-for-XBMC
Click to expand...
Click to collapse
I'm working on something like this just now. Here's the thing: in my logs for the simplest openvpn app to install (not straight openvpn, it turns out, as there's a windowing issue there that makes it difficult / impossible to navigate through setup, even with a keyboard and Droidmote) once I have a config, I get errors in logcat informing me
"Your image does not support the VPNService API, sorry "
There is a manually installable openvpn binary that I've looked at a bit but not yet configured. It is going to require adding a binary to /system/xbin directly, as the installer (at least on my phone) does not understand where /system/xbin really lives and issues a remount command to a nonexistent partition.
If you're running dd-wrt or similar configurable firewall, another option is to get an account with a provider who is set up to let you do a firewall to firewall connection, and then route either all of your traffic or the traffic from your firetv through that firewall-to-firewall connection.
I have a Private Internet Access vpn account.
Installed openvpn on FireTV--
http play.google.com/store/apps/details?id=de.schaeuffelhut.android.openvpn.installer&hl=en
Installed busybox on FireTV--
http play.google.com/store/apps/details?id=stericson.busybox&hl=en
I created a pass.txt file with my PIA username on the first line and password on the second line, nothing else, then saved the file as a text file (pass.txt).
Download the following to PC--
http privateinternetaccess.com/openvpn/openvpn.zip
Extracted the zip file.
Edited the location specific .ovpn file (see below), changing the 'remote', 'ca', 'crl' and 'auth' lines to the following--
client
dev tun
proto udp
remote us-florida.privateinternetaccess.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /storage/sdcard0/openvpn/ca.crt
tls-client
remote-cert-tls server
auth-user-pass /storage/sdcard0/openvpn/pass.txt
comp-lzo
verb 1
reneg-sec 0
crl-verify /storage/sdcard0/openvpn/crl.pem
Then, save the USFlorida.ovpn file.
Upload ca.crt, crl.pem, pass.txt, and .ovpn file to FireTV to /storage/sdcard0/openvpn/
Open terminal on FireTV. I use jackpal's terminal app below, but you can also use adb.
http play.google.com/store/apps/details?id=jackpal.androidterm
In terminal, type the following--
su
openvpn cd /storage/sdcard0/openvpn/USFlorida.ovpn
But I get several errors. Anyway, that's where I'm at. Maybe someone else more knowledgeable than me can figure it out. Sorry about the links, my low post-count will not allow me to post url's.
Also, you can sideload the following app to verify your external ip address, and it works great with the FireTV remote--
http play.google.com/store/apps/details?id=igit.WhatIsMyIp
The approach you've taken is where I'd be headed next on the client side.
One thing you might want to try is to do the same setup a less locked-down device and confirm that the config files work as expected there.
There's also a good discussion of the hardware approach (setting up a tunnel from your edge to a VPN provider) in the other VPN thread, http://forum.xda-developers.com/showthread.php?t=2797005
also, private internet access will sell a preconfigured router for this purpose!
Over the last week I've been trying to get OpenVPN Installer and then OpenVPN Settings to work on my rooted Fire TV 2 (on 5.0.5_r4). I've described the steps here : http://forum.xda-developers.com/fire-tv/help/vpn-rooted-fire-tv-t3370488
Even though the VPN turns on, it appears the Fire TV 2 internet traffic is still routed through the original pathway and the IP address remains unchanged, which I've been unable to fix. Has anyone managed to get OpenVPN Settings to work on a rooted Fire TV?
However, I recently noticed OpenVPN for Android (https://plus.google.com/communities/114121831091105660092) and gave this a try on my Fire TV 2 and it worked straight out of the box (giving an updated IP address when checked). I presumed that it only worked because my Fire TV 2 was rooted with the necessary VPN binaries installed (by OpenVPN Installer). However, the author of OpenVPN for Android communicated to me that root is not needed and, as a test, I've just tried it on my unrooted Fire TV 1 (on 5.0.5) and it also works!
Will be interesting to see if others have had similar success and can confirm findings.
I gave this a go ( OpenVPN for Android ) on my rooted firetv 1,
and sure enough it works
Does anyone know if this gives accesss to different content with a German Prime membership, e.g. when routed to an US VPN-Endpoint? Or does it just stop working?
What do you need to do to install this on an unrooted Fire Stick? My only guys is to install it on my phone, grab the apk and adb it to my stick. Any better suggestion?
Sent from my VS985 4G using XDA Labs
Bramton1 said:
What do you need to do to install this on an unrooted Fire Stick? My only guys is to install it on my phone, grab the apk and adb it to my stick. Any better suggestion?
Sent from my VS985 4G using XDA Labs
Click to expand...
Click to collapse
Thats what I did but you can install it straight from phone
Petesky said:
Thats what I did but you can install it straight from phone
Click to expand...
Click to collapse
Yeah, I installed AGK Fire onto my phone last night. It seems that's probably the best way to get that app on the stick.
guys can someone help me?
My device: fire tv 2 (rooted with firmware 5.04)
i have install the files apks (openvpninstaller+openvpnsettings+busybox)
i can see in open vpn setings under prequisites it says successful
i can see 4 green lights with successful
i have download my openvpn config files from hidemyass.com
and copy the files to my sdcard.
when i open vpnsetting i have turn first open vpn tick it on
i can see the hidemyass open vpn files under vpn configruatiuons
but can not choose it (tick on dont work)
why i can not choose my config file from open vpn settings menu?
dean4k said:
guys can someone help me?
My device: fire tv 2 (rooted with firmware 5.04)
i have install the files apks (openvpninstaller+openvpnsettings+busybox)
i can see in open vpn setings under prequisites it says successful
i can see 4 green lights with successful
i have download my openvpn config files from hidemyass.com
and copy the files to my sdcard.
when i open vpnsetting i have turn first open vpn tick it on
i can see the hidemyass open vpn files under vpn configruatiuons
but can not choose it (tick on dont work)
why i can not choose my config file from open vpn settings menu?
Click to expand...
Click to collapse
Just use the app in the op
dean4k, like Petesky says, just use 'OpenVPN for Android' found in the link in the first post - it works great and the latest version is much easier to use with just the Fire TV remote (no need of a mouse pointer) once setup!
Bramtom1 you may have already seen this useful page (on AFTVnews) but I found it a great help for learning how to connect/load stuff onto Fire TV:
http://www.aftvnews.com/sideload/
Add Proxy only for Prime
Guys I live in Argentina and can change the DNS setting on my stick to receive USA prime but doing so breaks my Netflix, also have Kodi installed and that works fine with US Dns or local. Is there any way to add some code to only Proxy prime through the US DNS server.
I tried installing DNS changer app but it does not change the Firestick settings although it says changed, my stick is also rooted.
Thanks not sure what thread to post on.
null
What VPN Service works?
For those of you that got this working, what VPN service are you using? I am trying with Private Internet Access, and the app shows connected, but when I check, I see my original IP. Thanks.
Hi Mav21,
I'm using IronSocket VPN, which works fine.
Mav21 said:
For those of you that got this working, what VPN service are you using? I am trying with Private Internet Access, and the app shows connected, but when I check, I see my original IP. Thanks.
Click to expand...
Click to collapse
Not using it just now but I was using PIA as well and it does show original ip but if you use another app to check it will show that your ip has changed
Thanks, when I check on the PIA website, it returns my original IP address and says "not protected". Any other settings that I need to look at?
Petesky said:
Not using it just now but I was using PIA as well and it does show original ip but if you use another app to check it will show that your ip has changed
Click to expand...
Click to collapse
Mav21 said:
Thanks, when I check on the PIA website, it returns my original IP address and says "not protected". Any other settings that I need to look at?
Click to expand...
Click to collapse
Ever figure this out with PIA? I only see my original IP despite installing "OpenVPN for Android" and it connecting. I also have the OpenVPN binary installed manually (I'm rooted).
People need to be very wary about this. If the PIA site sees your source IP address, you are NOT protected.
I'm seeing the same issue as others, both the PIA site and any other site the returns IP addresses shows the source IP in both Firefox and Chrome.
OpenVPN appears to connect, but traffic is not being routed through it.
May it be possibile that this only works with the fire tv and not with the fire tv stick?
Has anyone of you managed to use OpenVPN on a non-rooted fire tv stick?
I tried and my stick is connected to my VPN, but the traffic is unfortunately not routed through the tunnel
I can't get it to work. Using Iron Socket and i get the error "tls-auth enabled, but no valid --auth alogorith specified". Not sure why. Fire TV 1 running 5.2.1
No luck for me either.
I have a Firestick. I sideloaded the latest OpenVPN for Android.
Imported the profiles from EZ Explorer.
After entering password/user, it attempts connecting and I See the following errors:
Code:
Failed to open the tun interface
Error: Cannot find de.blinkt.openvpn.core.OpenVPNService
ERROR: Cannot open TUN
Exiting due to fatal error
Process exited with exit value 1
MGMT: Got unrecognized command>FATAL:ERROR: Cannot Open Tun
Not entirely sure what this means. Anyone?
I'm trying to SFTP into Nvidia Shield TV but keep getting denied.
I have rooted the device and installed SSH Server. I do get prompted to accept the RSA Key, but then denied access.
The SSH Server app that I'm using was added to the Super User app and granted root access.
What am I doing wrong. I'm so close.....
FYI, I can use FTP but denied when using SFTP.
1) Are you rooted? Did you give SSH/SFTP root privileges?
2) Did you remember to change the default Password to something other than whatever the default was?
3) Did you remember to run the SSH/SFTP Server before trying to run it? It's NOT automatic. You have to run it Server side first!
4) Assuming you using something like Putty or WinSCP you need to login using the local IP Address of the Shield TV ex. 192.178.xxx.xxx
If you can follow most of that it shouldn't be a bother getting it to run.
Ichijoe said:
1) Are you rooted? Did you give SSH/SFTP root privileges?
2) Did you remember to change the default Password to something other than whatever the default was?
3) Did you remember to run the SSH/SFTP Server before trying to run it? It's NOT automatic. You have to run it Server side first!
4) Assuming you using something like Putty or WinSCP you need to login using the local IP Address of the Shield TV ex. 192.178.xxx.xxx
If you can follow most of that it shouldn't be a bother getting it to run.
Click to expand...
Click to collapse
1. Yes I'm rooted.
2. Yes I have a password
3. Yes, I ran SSH Server first
4. Yes I am trying to login with IP address
Give me something other then the basics here!
What about: Settings > Storage & reset > Over local network?
finsfree said:
I'm trying to SFTP into Nvidia Shield TV but keep getting denied.
I have rooted the device and installed SSH Server. I do get prompted to accept the RSA Key, but then denied access.
The SSH Server app that I'm using was added to the Super User app and granted root access.
What am I doing wrong. I'm so close.....
FYI, I can use FTP but denied when using SFTP.
Click to expand...
Click to collapse
What SSH server are you using?
Having Sideload 'Rooted SSH/SFTP Daemon. Which is listed as non Android TV compatible. I was greeted instantly with a "wtf not rooted" message. Which may be kinda the case since I never really enabled such RW permissions for SU though TWRP. Since having done so in the past kinda made OTA Updates malfunction. It's kinda the same case with Adaway as well.
But, on the Shield TV the only real tangible use of root that I have is, in being able to install Plex Channels. Which with a symlinked Folder. Works well enough.
I got it to work!
finsfree said:
I got it to work!
Click to expand...
Click to collapse
So what was the issue?
Please use the QUOTE feature when replying to me to get my attention. Thanks!
My guess would be he enabled root via TWRP. Hopefully it won't comeback to bite him in the arse. While this does make things incredibly easier, it also completely forks up any hopes of successfully installing any OTA Updates. Which may not be as much of a problem, as it was when I first got into the Shield TV last January. With the transition from Marshmallow, to Nougat.
In the latest 5.0.3 build for the 5T, I see dnsmasq is running in /system/bin/dnsmasq
Awesome, I want to use it. The question is, if I put my config file in /system/etc/dnsmasq.conf will dnsmasq see it and run my config? If not there, where does it need to go in order to work?
Interesting.
I'll give it a try later today.
I'd say put your configuration and see if that works. Not sure if cycling the connection would work or if you'll need a full reboot tho.
W.
Awesome, please let us know.
For those who are unfamiliar with dnsmasq, it allows users to block domains (e.g. malware.com) without having to also block all of its subdomains (e.g. www.malware.com, infect.malware.com, hidden01.malware.com, hidden02.malware.com, etc).
The /etc/hosts file commonly used to block connections cannot do this, it requires you to list every subdomain, which turns blocking sites into a game of whack-a-mole as malware sites simply invent new subdomains every day.
That's why dnsmasq is so important, and I'm glad to see that the service is running on Android.
dnsmasq is used only during tethering. Right?
Actually, you cannot find dnsmasq.conf in any directory. I think it is hard-coded in settings app.
But, you can follow these steps to use your own dnsmasq.conf
turn on tethering
kill dnsmasq
Code:
killall dnsmasq
run dnsmasq with your own configuration
Code:
dnsmasq -C /path/to/dnsmasq.conf -x /path/to/dnsmasq.pid
enjoy
This requires your device to be rooted. I use this method to host captive portal on my android device.
I have been having some problems of Amazon updates downloading and trying to install on my FTV and FTV2 boxes. They are rooted and I tried to block using the router address blocks and using adb commands to block. However the last two days I have seen my FTV stuck at TWRP screen. I'm think the update tried to install and got stopped by TWRP.
Just wondering if there is any new methods for blocking these updates from Amazon?
Have you tried a system app remover or disabler?
If you look through your system applications, look for com.amazon.device.software.ota and attempt to uninstall it or disable it. I mostly disable packages within adb shell, su, pm disable com.amazon.device.software.ota. Just by getting rid of this package should give you an update error which is completely normal until there's a prerooted rom available for the Fire TV. Let me know if you need any help
Personally, I have an OpenDNS setup blocking stuff. I have 2 AFTV2 boxes, and much easier to setup the dns in the wifi settings, than to do other things.
Plus, I'm all set for any future devices I may get!
On a side note, I also use Blokada. And in the section to whitelist/blacklist, I came upon a 'All apps'....and it adds, just that! I did notice a lot of those same services in the mix, but unknown if I'd trust just using that to stop updates.