I looked through all 4 pages of posts as well as the working apps list and thus far I have not found anyone who has gotten a proxy to work. Has anyone been able to use a VPN on the firetv? What about with xbmc on the firetv?
Thanks :good:
mcsephoenix said:
I looked through all 4 pages of posts as well as the working apps list and thus far I have not found anyone who has gotten a proxy to work. Has anyone been able to use a VPN on the firetv? What about with xbmc on the firetv?
Thanks :good:
Click to expand...
Click to collapse
can you list the VPN apps you have used? so im not repeating any
The only VPN I own is PIA which does not work. The rest I am just reading about. I did see a thread where droidvpn might work with tun.ko but I am trying to find out more about this method.
mcsephoenix said:
The only VPN I own is PIA which does not work. The rest I am just reading about. I did see a thread where droidvpn might work with tun.ko but I am trying to find out more about this method.
Click to expand...
Click to collapse
I'm making pretty good progress with PIA - I'm down to an issue with SSL verification. The core problem with newer guides is that the software assumes a device running Android 4.2 has access to the Google VPN API, which the FireTV does not.
I'm using the tools outlined in this guide
https://strongvpn.com/setup_android_open.shtml
which include an openvpn binary installer which I was surpised to see did work on the FTV (it didn't work on a cm11 device.)
I've added the Tun installer to the mix, so the process for me has been:
- have ADB available and working
- have a wifi keyboard available and working
- have Droidmote client able to access the system - there are times when it's super helpful to be able to yank down a menu
Setup and test openVPN - and get a known working config - on another device.
Root the FTV
Install Busybox (actually did that long ago)
Install "OpenVPN Installer" - this will get you the openvpn binary; you can confirm you have it by running openvpn in adb - if the openvpn binary isn't in your path, it'll error out otherwise it'll give you all the openvpn options.
Install the tun.ko installer from droidvpn
Install the "Open VPN Settings" app - this was very important for me, as with more recent openvpn installers, I was not able to import / export config files.
Import a working openvpn config file into openVPN settings (default path is /sdcard/openvpn/
Attempt to connect, fail, long press on the failing connection in order to
- enable logging
- make config changes on the fly
I currently have the PIA cert inline in my openvpn config and am pointing the config to their CRL file.
Most of the config seems to work; the remaining issue is in the TLS handshakes.
There are two rounds of verification, depth 0 and depth 1 - and one is failing. I forget which one just now.
Editing and testing the ovpn config in a gui and then reexporting us super helpful - looking over the guide at
https://www.privateinternetaccess.c...iguration-on-android-instead-of-pptp-ipsec/p1
gives a good walkthrough on the basics.
The openvpn binary installed for use on the ftv does not support all the options that the config generated there supports, though, which is why looking at the logs and editing the configs on the fly is so helpful.
mcsephoenix said:
The only VPN I own is PIA which does not work. The rest I am just reading about. I did see a thread where droidvpn might work with tun.ko but I am trying to find out more about this method.
Click to expand...
Click to collapse
Use Hola, it requires a mouse
http://forum.xda-developers.com/fire-tv/help/mlb-blackout-restriction-dns-unblock-t2825086
Post #9
Related
Short Version:
Got an OpenVPN server on my NAS. GN connects & works fine; remote resources are reachable. I now want to know how I can route all traffic through the tunnel. (Is this possible?)
Long Version:
For those times when I'm traveling (domestically and internationally) and/or using a questionable Internet connection, I'd like to secure the connection.
I've got a [stock] rooted GN running Jelly Bean with BusyBox installed. My NAS has two built-in VPN solutions one of which being OpenVPN so I got that setup which created an .ovpn file containing the following configuration:
Code:
dev tun
tls-client
remote YOUR_SERVER_IP 1194
# The "float" tells OpenVPN to accept authenticated packets from any address,
# not only the address which was specified in the --remote option.
# This is useful when you are connecting to a peer which holds a dynamic address
# such as a dial-in user or DHCP client.
# (Please refer to the manual of OpenVPN for more information.)
#float
# If redirect-gateway is enabled, the client will redirect it's
# default network gateway through the VPN.
# It means the VPN connection will firstly connect to the VPN Server
# and then to the internet.
# (Please refer to the manual of OpenVPN for more information.)
#redirect-gateway
# dhcp-option DNS: To set primary domain name server address.
# Repeat this option to set secondary DNS server addresses.
#dhcp-option DNS DNS_IP_ADDRESS
pull
proto udp
script-security 2
ca ca.crt
comp-lzo
reneg-sec 0
auth-user-pass
After installing OpenVPN Installer & OpenVPN Settings, I had to manually symlink busybox, ifconfig, and route from /system/bin to /system/xbin in order for OpenVPN to run properly.
Code:
#Note: In an attempt to be thorough, and for any Googlers or forum searchers (+1)...
#First I had to mount /system as read/write via:
mount -o -rw,remount /system
#Then create the symlinks via:
ln -s /system/bin/busybox /system/xbin/busybox
ln -s /system/bin/ifconfig /system/xbin/ifconfig
ln -s /system/bin/route /system/xbin/route
#Then remount /system as read-only via:
mount -o ro,remount /system
Once all of the above was setup, I initiated the connection, successfully authenticated, and was able to reach remote resources without issue.
What I would like to do at this point is get it setup so that I can have a second profile that routes all traffic through the VPN. I assume its a client-side configuration change but I really don't know at this juncture.
Many thanks!
Doesn't CyanogenMod ROM have native OpenVPN support? I think the OpenVPN client on CM has an option to route all traffic through the VPN. I think for what you want to do you should need a custom ROM or kernel that supports iptables.
iptables is a system file that allows the system to redirect network traffic usually for apps like tethering, firewalls, and proxies.
Sent from my Galaxy Nexus using Tapatalk 2
Thanks for taking the time to reply KemikalElite.
I've got BusyBox 1.20.2 installed and I do have an iptables binary (v1.4.11.1). With solutions like Hotspot Shield VPN that don't require root yet supports encryption for all traffic, I figured root + OpenVPN + BusyBox + iptables would be sufficient.
My initial assumption was that I would need to make some changes to my OpenVPN configuration to encrypt & route all traffic through the tunnel. But maybe I've been thinking about this all wrong and its less about OpenVPN and more about running a custom script once connected to route everything through the tunnel; and vice versa when I disconnect to restore the original configuration.
Perhaps I should be scouring OpenVPN forums?
Phylum said:
Thanks for taking the time to reply KemikalElite.
I've got BusyBox 1.20.2 installed and I do have an iptables binary (v1.4.11.1). With solutions like Hotspot Shield VPN that don't require root yet supports encryption for all traffic, I figured root + OpenVPN + BusyBox + iptables would be sufficient.
My initial assumption was that I would need to make some changes to my OpenVPN configuration to encrypt & route all traffic through the tunnel. But maybe I've been thinking about this all wrong and its less about OpenVPN and more about running a custom script once connected to route everything through the tunnel; and vice versa when I disconnect to restore the original configuration.
Perhaps I should be scouring OpenVPN forums?
Click to expand...
Click to collapse
You have the tun module as well right?
code.google.com/p/android-openvpn-settings/issues/list
Check through some of those issues. Something did say that the DNS servers may need to be manually set.
OpenVPN is so complex because of the config options. I find it easier to use native PPTP connections since there's no config only authentication and it routes all traffic automatically.
Sent from my Galaxy Nexus using Tapatalk 2
You need to enter "redirect-gateway" into your ovpn config file.... Just remove the # in the your config
Thanks for the reply ZiCoN!
I should have mentioned this sooner - terribly sorry for omitting this.
Once I got the VPN connected, I did the old 'what is my ip' to verify the route. It was still using the provider's network, but I could reach my NAS and other remote devices in the 192.168.x.x range - so the VPN itself was working. After reading the mini explanation in the config file I enabled 'redirect-gateway' and after reconnecting I could no longer access the Internet. I checked the OpenVPN Manual I added 'def1' after the 'redirect-gateway' statement, reconnected but still no go: I can no longer access the Internet. Remote resources are still accessible in both scenarios.
KemikalElite said:
You have the tun module as well right?
code.google.com/p/android-openvpn-settings/issues/list
Check through some of those issues. Something did say that the DNS servers may need to be manually set.
OpenVPN is so complex because of the config options. I find it easier to use native PPTP connections since there's no config only authentication and it routes all traffic automatically.
Sent from my Galaxy Nexus using Tapatalk 2
Click to expand...
Click to collapse
I somehow missed this when drafting my last reply. I think you're right about it being a DNS problem. I made a change to the config file (adding a few lines for 'dhcp-option DNS x.x.x.x') and within OpenVPN used the 'Fix DNS' button.
Thanks all for your time, thoughts, opinions and instructions!
Phylum said:
Thanks for the reply ZiCoN!
I should have mentioned this sooner - terribly sorry for omitting this.
Once I got the VPN connected, I did the old 'what is my ip' to verify the route. It was still using the provider's network, but I could reach my NAS and other remote devices in the 192.168.x.x range - so the VPN itself was working. After reading the mini explanation in the config file I enabled 'redirect-gateway' and after reconnecting I could no longer access the Internet. I checked the OpenVPN Manual I added 'def1' after the 'redirect-gateway' statement, reconnected but still no go: I can no longer access the Internet. Remote resources are still accessible in both scenarios.
Click to expand...
Click to collapse
You probably need to allow traffic to route back along the vpn film the internet. On your gateway, route vpn addresses to the VPN server and make sure forwarding is enabled on the vpn server.
Questions go in Q&A
Read forum rules and stickies before posting
Thread moved
FNM
Did someone successfully installed OpenVPN on a (rooted) Z1 compact?
Are there any TUN modification necessary or does it run out of the box with the OpenVPN installer in Google Play?
XDATestMaster2001 said:
Did someone successfully installed OpenVPN on a (rooted) Z1 compact?
Are there any TUN modification necessary or does it run out of the box with the OpenVPN installer in Google Play?
Click to expand...
Click to collapse
I wasn't able to get it running but it's possible I did something wrong, as it works fine on my tablet z
Also if you're running your own vpn server I'd recommend switching to SoftEther VPN as it supports the built in android l2tp/ipsec vpn and is also much easier to set up
Thank you for your reply.
Currently I have only an OpenVPN server at home (and franky, I'm quite happy with it) :cyclops:
By now I have my z1 compact and rooted it with still locked bootloader.
The OpenVPN installer from the store does not work, because it cannot mount /system/xbin as r/w.
I have the binary on my old phone, copied it to the new phone and moved it to the /system/xbin directory with RootExplorer.
Of course I had to mount the /system/xbin as r/w with Root Explorer and make the file executable.
The VPN tunnel is up and works fine, except DNS resolution to my home DNS server. Obviously the phone does not even try to use the DNS server. I guess the home DNS server is not added to the DNS server list in the operating system. Bad luck )
Quick follow-up:
I switched to the app "OpenVPN for Android" instead of "OpenVPN Installer" / "OpenVPN Settings" and now everything is working really good.
It hasn't been necessary to be rooted for VPN since ics I believe.
ARBEIT ANGST KONSUMTERROR
Just to directly answer the question though... Yes OpenVPN support is enabled on the Sony stock kernel. I extracted the defconfig of the stock sony kernel and I can see
Code:
CONFIG_TUN=y
Install openvpn and then place your edited client vpn config files and certificate files on the storage of FireTV similar to the raspberry pi method in the thread below:
h**p xbmchub.com/forums/threads/24769-How-to-set-up-your-VPN-on-raspberry-pi-using-Brain-Hornsby-Openvpn-for-XBMC
Thanks for anyone that may know more than me that could maybe get this to work...
Hmm would be nice if that worked. Did u get a chance to try it?
Sent from my Nexus 5 using XDA Free mobile app
tdfsu said:
h**p xbmchub.com/forums/threads/24769-How-to-set-up-your-VPN-on-raspberry-pi-using-Brain-Hornsby-Openvpn-for-XBMC
Click to expand...
Click to collapse
I'm working on something like this just now. Here's the thing: in my logs for the simplest openvpn app to install (not straight openvpn, it turns out, as there's a windowing issue there that makes it difficult / impossible to navigate through setup, even with a keyboard and Droidmote) once I have a config, I get errors in logcat informing me
"Your image does not support the VPNService API, sorry "
There is a manually installable openvpn binary that I've looked at a bit but not yet configured. It is going to require adding a binary to /system/xbin directly, as the installer (at least on my phone) does not understand where /system/xbin really lives and issues a remount command to a nonexistent partition.
If you're running dd-wrt or similar configurable firewall, another option is to get an account with a provider who is set up to let you do a firewall to firewall connection, and then route either all of your traffic or the traffic from your firetv through that firewall-to-firewall connection.
I have a Private Internet Access vpn account.
Installed openvpn on FireTV--
http play.google.com/store/apps/details?id=de.schaeuffelhut.android.openvpn.installer&hl=en
Installed busybox on FireTV--
http play.google.com/store/apps/details?id=stericson.busybox&hl=en
I created a pass.txt file with my PIA username on the first line and password on the second line, nothing else, then saved the file as a text file (pass.txt).
Download the following to PC--
http privateinternetaccess.com/openvpn/openvpn.zip
Extracted the zip file.
Edited the location specific .ovpn file (see below), changing the 'remote', 'ca', 'crl' and 'auth' lines to the following--
client
dev tun
proto udp
remote us-florida.privateinternetaccess.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /storage/sdcard0/openvpn/ca.crt
tls-client
remote-cert-tls server
auth-user-pass /storage/sdcard0/openvpn/pass.txt
comp-lzo
verb 1
reneg-sec 0
crl-verify /storage/sdcard0/openvpn/crl.pem
Then, save the USFlorida.ovpn file.
Upload ca.crt, crl.pem, pass.txt, and .ovpn file to FireTV to /storage/sdcard0/openvpn/
Open terminal on FireTV. I use jackpal's terminal app below, but you can also use adb.
http play.google.com/store/apps/details?id=jackpal.androidterm
In terminal, type the following--
su
openvpn cd /storage/sdcard0/openvpn/USFlorida.ovpn
But I get several errors. Anyway, that's where I'm at. Maybe someone else more knowledgeable than me can figure it out. Sorry about the links, my low post-count will not allow me to post url's.
Also, you can sideload the following app to verify your external ip address, and it works great with the FireTV remote--
http play.google.com/store/apps/details?id=igit.WhatIsMyIp
The approach you've taken is where I'd be headed next on the client side.
One thing you might want to try is to do the same setup a less locked-down device and confirm that the config files work as expected there.
There's also a good discussion of the hardware approach (setting up a tunnel from your edge to a VPN provider) in the other VPN thread, http://forum.xda-developers.com/showthread.php?t=2797005
also, private internet access will sell a preconfigured router for this purpose!
Over the last week I've been trying to get OpenVPN Installer and then OpenVPN Settings to work on my rooted Fire TV 2 (on 5.0.5_r4). I've described the steps here : http://forum.xda-developers.com/fire-tv/help/vpn-rooted-fire-tv-t3370488
Even though the VPN turns on, it appears the Fire TV 2 internet traffic is still routed through the original pathway and the IP address remains unchanged, which I've been unable to fix. Has anyone managed to get OpenVPN Settings to work on a rooted Fire TV?
However, I recently noticed OpenVPN for Android (https://plus.google.com/communities/114121831091105660092) and gave this a try on my Fire TV 2 and it worked straight out of the box (giving an updated IP address when checked). I presumed that it only worked because my Fire TV 2 was rooted with the necessary VPN binaries installed (by OpenVPN Installer). However, the author of OpenVPN for Android communicated to me that root is not needed and, as a test, I've just tried it on my unrooted Fire TV 1 (on 5.0.5) and it also works!
Will be interesting to see if others have had similar success and can confirm findings.
I gave this a go ( OpenVPN for Android ) on my rooted firetv 1,
and sure enough it works
Does anyone know if this gives accesss to different content with a German Prime membership, e.g. when routed to an US VPN-Endpoint? Or does it just stop working?
What do you need to do to install this on an unrooted Fire Stick? My only guys is to install it on my phone, grab the apk and adb it to my stick. Any better suggestion?
Sent from my VS985 4G using XDA Labs
Bramton1 said:
What do you need to do to install this on an unrooted Fire Stick? My only guys is to install it on my phone, grab the apk and adb it to my stick. Any better suggestion?
Sent from my VS985 4G using XDA Labs
Click to expand...
Click to collapse
Thats what I did but you can install it straight from phone
Petesky said:
Thats what I did but you can install it straight from phone
Click to expand...
Click to collapse
Yeah, I installed AGK Fire onto my phone last night. It seems that's probably the best way to get that app on the stick.
guys can someone help me?
My device: fire tv 2 (rooted with firmware 5.04)
i have install the files apks (openvpninstaller+openvpnsettings+busybox)
i can see in open vpn setings under prequisites it says successful
i can see 4 green lights with successful
i have download my openvpn config files from hidemyass.com
and copy the files to my sdcard.
when i open vpnsetting i have turn first open vpn tick it on
i can see the hidemyass open vpn files under vpn configruatiuons
but can not choose it (tick on dont work)
why i can not choose my config file from open vpn settings menu?
dean4k said:
guys can someone help me?
My device: fire tv 2 (rooted with firmware 5.04)
i have install the files apks (openvpninstaller+openvpnsettings+busybox)
i can see in open vpn setings under prequisites it says successful
i can see 4 green lights with successful
i have download my openvpn config files from hidemyass.com
and copy the files to my sdcard.
when i open vpnsetting i have turn first open vpn tick it on
i can see the hidemyass open vpn files under vpn configruatiuons
but can not choose it (tick on dont work)
why i can not choose my config file from open vpn settings menu?
Click to expand...
Click to collapse
Just use the app in the op
dean4k, like Petesky says, just use 'OpenVPN for Android' found in the link in the first post - it works great and the latest version is much easier to use with just the Fire TV remote (no need of a mouse pointer) once setup!
Bramtom1 you may have already seen this useful page (on AFTVnews) but I found it a great help for learning how to connect/load stuff onto Fire TV:
http://www.aftvnews.com/sideload/
Add Proxy only for Prime
Guys I live in Argentina and can change the DNS setting on my stick to receive USA prime but doing so breaks my Netflix, also have Kodi installed and that works fine with US Dns or local. Is there any way to add some code to only Proxy prime through the US DNS server.
I tried installing DNS changer app but it does not change the Firestick settings although it says changed, my stick is also rooted.
Thanks not sure what thread to post on.
null
What VPN Service works?
For those of you that got this working, what VPN service are you using? I am trying with Private Internet Access, and the app shows connected, but when I check, I see my original IP. Thanks.
Hi Mav21,
I'm using IronSocket VPN, which works fine.
Mav21 said:
For those of you that got this working, what VPN service are you using? I am trying with Private Internet Access, and the app shows connected, but when I check, I see my original IP. Thanks.
Click to expand...
Click to collapse
Not using it just now but I was using PIA as well and it does show original ip but if you use another app to check it will show that your ip has changed
Thanks, when I check on the PIA website, it returns my original IP address and says "not protected". Any other settings that I need to look at?
Petesky said:
Not using it just now but I was using PIA as well and it does show original ip but if you use another app to check it will show that your ip has changed
Click to expand...
Click to collapse
Mav21 said:
Thanks, when I check on the PIA website, it returns my original IP address and says "not protected". Any other settings that I need to look at?
Click to expand...
Click to collapse
Ever figure this out with PIA? I only see my original IP despite installing "OpenVPN for Android" and it connecting. I also have the OpenVPN binary installed manually (I'm rooted).
People need to be very wary about this. If the PIA site sees your source IP address, you are NOT protected.
I'm seeing the same issue as others, both the PIA site and any other site the returns IP addresses shows the source IP in both Firefox and Chrome.
OpenVPN appears to connect, but traffic is not being routed through it.
May it be possibile that this only works with the fire tv and not with the fire tv stick?
Has anyone of you managed to use OpenVPN on a non-rooted fire tv stick?
I tried and my stick is connected to my VPN, but the traffic is unfortunately not routed through the tunnel
I can't get it to work. Using Iron Socket and i get the error "tls-auth enabled, but no valid --auth alogorith specified". Not sure why. Fire TV 1 running 5.2.1
No luck for me either.
I have a Firestick. I sideloaded the latest OpenVPN for Android.
Imported the profiles from EZ Explorer.
After entering password/user, it attempts connecting and I See the following errors:
Code:
Failed to open the tun interface
Error: Cannot find de.blinkt.openvpn.core.OpenVPNService
ERROR: Cannot open TUN
Exiting due to fatal error
Process exited with exit value 1
MGMT: Got unrecognized command>FATAL:ERROR: Cannot Open Tun
Not entirely sure what this means. Anyone?
Hello, everyone.
After upgrading to the latest open beta (33, for oneplus 3) no matter what, I cannot manage hosts file to work (for ad blocking purpose). I tried any possible configuration I've found on the forums.. I'm using Magisk and I've tried with adaway, and with the unified hosts module (with the GUI and with the command in terminal). Tried with and without system less mode option... Nothing works. I've also tried by adding a one line hosts file with 0.0.0.0 facebook.com, it still loads.
I've noticed I have 2 hosts file: one in /etc and one in /data but none is working. What am I missing? Any extra suggestion would be helpful.
Thank you!
Check if your operator have a proxy activated by default in systen Settings-SIM-APN and if you find it delete the proxy address and restart
Hello,
Thanks for your reply. I had no proxy set, and the issue is also present when connected to my home/work wifi connection
Thanks