yashsingh1/xdaforums huggingface dataset:
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
~~~~~~ TO RUN A SSH SERVER WITHOUT A COMPUTER ~~~~~~~

If you dont like the idea of running a PC 24/7 at home, you can turn your wireless router into a SSH server.

Look at the hardware list here

http://wiki.openwrt.org/TableOfHardware

If your router's model number and revision has "SUPPORTED" under status, you might just be in luck!!!

You can install a linux based firmware operating system on your wireless router. It will replace your router's OS completely with a MUCH MUCH more powerful one.

I recommend X-WRT since it is VERY userfriendly

http://x-wrt.org/

But OpenWRT is good for advanced linux users

http://wiki.openwrt.org/OpenWrtDocs/Installing

There's also DD-WRT for the complete n00b

http://www.dd-wrt.com/dd-wrtv2/index.php

All of them, once installed, have a SSH server right out of the box.

So your server is your router.
[8525, TyTN, MDA Vario II, JasJam General] cd85233:
Thanks, I will try this.

If I remember correctly there are FON routers on Ebay for dirt cheap that can use this DWRT thingy.
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
I'd recommend a Linksys WRT54GL if you are going to dish out the cash for a new router. Might as well buy a POWERFUL router. The WRT54GL can be overclocked to 250mhz (mine runs at 262mhz stable) and you can mod it to add a flash SD card to it to expand the memory to install OTHER applications.

You can run a small HTTP server with 1-2GB of storage with the SD mod.

I run an Asterisk VoIP server + HTTP + the SSH tunnel thing + router can become a relay access point (the router is a WIFI CLIENT!!) and a bunch of other linux applications.

WRT54G and WRT54GS are good too, but you need to find an older revision number.

FON routers are... meh...

edit - Im out for the night, Ill check back in the morning for questions and problems.
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
PLEASE READ!!!!

I forgot a VERY important registry setting for PocketPutty in Step 10

LocalPortAcceptAll = 1

VERY IMPORTANT!!!! ok? ;)

sorry for the mistakes
[8525, TyTN, MDA Vario II, JasJam General] cd85233:
Me no Likey SSH

Hmm SSH server has given me lots of trouble. I think I would rather use an HTTP proxy if this made things work.

Nothing really works, and my internet connection is messed up when I use the SSH server.

I won't give up though. THIS IS A GREAT GUIDE.

If this is the way to kick T-Mo's Butt, I'm going to drive this into the ground!

Please try this, and post your results.

Alkizmo and I will hopefully get time to get this to work.

More Alkizmo than I, I'll be the guinea pig :-)
[8525, TyTN, MDA Vario II, JasJam General] mmoroz:
almost working... help please ^^

Alkizmo thanks for the great guide!

I got almost everything to work.. but I guess there's something still missing..

Pocketputty correctly connects to the SSH server with the correct tunnel settings (checked many times). Registry settings for Pocketputty are set correctly as well (also checked..). By the way, Pocketputty doesn't seem to know how to start EDGE/GPRS connection on demand, so I either manually connect, or start Opera browser and go to a random website to start the connection.

The proxy settings changed under the T-Mobile Data network, with HTTP proxy pointing to the T-Mobile well-known proxy server, and the SOCKS proxy (tried both SOCKS4 and SOCKS5) pointing to the localhost:1080 (tried 127.0.0.1, tried the id of the phone).

No luck... Windows Live Messenger still cannot connect.

Let's try to find out the missing piece!

Thank you!

p.s. using AT&T Tilt, with Dutty's hybrid ROM.
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
sorry for the late reply. It's been a while since i've roamed these forums.

So, you should try the SSH tunnel on another computer with the PC version of Putty and see if you can tunnel through sock4, so you can eliminate the server as a fault.

Second, you can do another test to see if it's pocketputty's fault or T-Mobile's proxy being very strange.

You test it by changing pocketputty's proxy settings to be very specific with a pop3 email server as explained in the guide. Then create a pop3 email account on your phone to connect through the pocketputty proxy.

If that doesnt work, then im thinking that there's something else at work to prevent you from tunneling. I had someone else with t-mobile that couldnt SSH tunnel for some reason.
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
I found your MISTAKE mmoroz!

You enter in the SOCKS proxy - localhost:1080

however, as specified in the step #3, you have to first give a unique ID name to your phone. Name it : mmoroz

Settings / System / About / Device ID / Device Name : mmoroz

THEN in SOCKS proxy, you enter - mmoroz:1080

WM5/6 dont seem to understand localhost or 127.0.0.1, that's why you got to specify your phone's Device ID as the localhost address.
[8525, TyTN, MDA Vario II, JasJam General] navy2010:
windows live mail on windows mobile

Does windows live mail (hotmail) works with this method? The instruction looks complicated, but I'm willing to do it if it works with live mail with push feature. By the way, do I need static ip address for the server?

Thank a lot! This is a great guide!
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
Hotmail push email will work. The moment you're connected to messenger, all the other services will follow.

You dont need a static IP, but you'd need to have a system to either update your DNS address with your new IP every time, or manually change it yourself.

I got a dynamic IP, but since im on broadband, the connection is active all the time, so my IP pretty much never changes.
[8525, TyTN, MDA Vario II, JasJam General] navy2010:
Thanks A LOT! I'm working hard to get this work (no xbox for past 48 hrs). I'm using dd-wrt router to do the SSH server, but i have to change my verizon router to bridge mode first & i'm still trying to change it. Anyway, i will keep you update w/ my progress.
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
Guys, I STRONGLY recommend you setup a TEMPORARY SSH server before making all this effort to setup a permanent one. You can do this on your computer directly connected to the internet.

You should TEST with your phone BEFORE making a permanent server. That way, if your carrier blocks something special prevent SSH access, then you wouldn't have wasted your time setting up the server.
[8525, TyTN, MDA Vario II, JasJam General] navy2010:
problems!

Hi,

I set up a SSH server on my Buffalo router with DD-WRT firmware. Instead of just use password, I used a private key for SSH server authorization. I did load/save the private on to the client on my phone. I got this error msg. on my phone when I try to connect to the SSH server.

PuTTY Fatal Error

"Server unexpectedly closed network connection"

I check the firewall log on the router, it confirmed that it accepted the connection from my phone. I did double check the IP address of the phone and confirmed that it's the same IP address from log:

Source IP------Protocol------Destination Port Number-----Rule

66.94.XX.XX------TCP ---------------------https------Accepted

By the way, I'm using T-Mobile USA service. Please see the attached picture for the SSH setting on my router (I did exactly as show on the picture, but I copied the pic from the web). I also enabled SSH remove management on my router.

I have been reading a lot of information regarding SSH. I can't figure out the problems yet. Please offer any suggestions.
[8525, TyTN, MDA Vario II, JasJam General] aes512:
I wouldn't suggest leaving any router, whether it be DD-WRT, OpenWRT or etc... open to SSH for an extended period of time... you're going to open up a bad can of worms security-wise. It's cool to do it for a short amount of time for testing, but when your done... close the hole and shut it down :cool:
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
You're not using port 443. You need to use port 443, that's one of the only ports opened by the T-Mobile proxy.

Also, im not sure if SSHD will work with my trick. I only tested with SSH

Make the password extra extra long and block your router from responding to ping requests and you'll be fine. SSH is a very very very secure protocol.
[8525, TyTN, MDA Vario II, JasJam General] mutti_wilson:
Any idea on how to get this working for a smartphone? There is a SSH program called zaTunnel that works great on smartphones, I just don't understand this all enough to make it work.

The connection menu is different on PPC/Smartphone so that is throwing me off.

I have the ssh server up and running.
[8525, TyTN, MDA Vario II, JasJam General] npole:
Thanks alot alki!!! I were doing the same today.. figuring how tunneling a connection because of my provider limitation until i foud this wonderfull thread! :D

Now to the problems (argh!) ...it is partially working here, i have checked each step many times just to be sure everything is setup properly but it still won't work.

I can connect on my PC via SSH and login smoothly, so apparently the connection is working (over 443 port) but apart that the rest isn't.

I've setup the dynamic port on Putty (1080) then the two ports forwarding (local) used by gmail with the respective servers, so i have:

D1080

L35995@pop.gmail.com:995 (<< you wrote 993 here.. is it a mistyping?)

L35465@smtp.gmail.com:465

So i've configure the email client to connect to mymobile:35995 ...but well the connection just timeout and it seems it won't initiate the connection via the ssh tunneling.

There's any way to check if the "request" arrived to my local PC or any other way to easily debug the process and figure what's wrong here?

Thanks again!
[8525, TyTN, MDA Vario II, JasJam General] navy2010:
If you have a firewall, you can check the incoming log of the firewall.
[8525, TyTN, MDA Vario II, JasJam General] npole:
Solved.. well not really solved, but i've changed the approach, im now using OpenVPN and it runs great! No ports and forwarding to configure and all the traffic is routed via remote machine. Hurra!
[8525, TyTN, MDA Vario II, JasJam General] navy2010:
can you give me some details? by the way, do u have tmobile usa?
[8525, TyTN, MDA Vario II, JasJam General] navy2010:
I am able to connect to the SSH server if I don't modify the registry setting on my phone. Once I modified the registry setting, I'm not able to connect to the SSH server. "Network error: Connection reset by peer"

Thanks
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
No, zaTunnel won't work. You need Putty for PPC, it should work on a smartphone though (I think).

No, it's 993

http://mail.google.com/support/bin/answer.py?answer=78799

If you can connect without the registry settings, it means you're connecting without using your cellphone carrier's proxy. Meaning you arent forced to use their proxy....

meaning you dont need this guide at all.

Good job!

I actually started my tunneling attempts with SSH because I was more familiar with it. Also because when I started my researching in google to bypass a http proxy, most results were about using putty on a PC :p

Here are misconceptions I started off with :

- I thought the HTTP proxy would sniff out that the connection on port 443 wasnt used for SSL unless I used SSH.

- I thought using Putty was going to be simple like on the PC

- I thought VPN on PPC required a direct connection, thus couldnt connect through a HTTP proxy

- I had trouble with OpenVPN already on my PC to start with :p

I dropped this project a while ago since I moved to China. GPRS is cheap there, no proxy to bypass. I used my SSH tunnel only to get to websites blocked by the Chinese government ;) ( Can you believe they block wikipedia?!?!?!?!? :O )

I'll try to do OpenVPN one day on my PPC for the heck of it. However, if I screw something up on my router back in Canada, I can't connect to it anymore and the people residing where my router is don't know how to fix it :|
[8525, TyTN, MDA Vario II, JasJam General] npole:
I'm confused, 993 it is the "imap" port (imap.gmail.com) ...the pop3 port it is 995 (pop.gmail.com).

Me too.. and it's because you effort that i start to investigate a more reliable solution and ended on OpenVPN. It is alot less simple to configure but alot more solid that a SSH tunnelling that isn't (originally) designed for durability. Anyway as i said, if it wasn't for you i would probably never finished my project (different approach but the "concept" would be the same).

That's not the case, since the traffic runs on 443 that is intended for HTTPS (SSL) usage and OpenVPN uses SSL too (and encrypted), so the traffic is impossible to distinguish from each other. The only way to figure it out, it is with a "manual" investigation: the provider must connect to the end point to figure the service that is running there it is a OpenVPN instead of a HTTP(s) server. But this problem remains even using a SSH tunnel... but i cannot believe that a "guy" comes to check your endpoint manually over tenth thousand of other customers. Plus they cannot block it! Since they cannot HTTPs traffic happening, and they cannot blacklist your IP (it is public and dynamic so it wouldn't work), they only cease your connectivity contract.. and all this effort for some buks in a month.

That's correct, your solution took me 10 minutes to setup and have it working... OpenVPN took off my weekend (and no sleeping at all!).

We figured it works. :)

- I had trouble with OpenVPN already on my PC to start with :p

Me too.. initially, i were a bit disoriented, but i learned alot in 2 days. :)

Yes i can, here in Italy there's a paper article about china censorship almost every week. ;)

You'll not touch the router (apart the port forwarding)... but surely you will touch the network (or at least a client there that will serve as openvpn server). Actually i'm getting more ambitous: instead having a server (PC) running h24 and loaded with the software (you know.. a power failure, or a OS error would be fatal if you're not around to adjust it.. and you'll be NOT around since it is supposed that you'll used it outside) i would like to connect a router with a modded firmware and a unix soapbox to my network (those fonera routers are perfect for this pourpose) and install OpenVPN there, so i will have my tunnel working h24 without care about PC's.
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
Oh they changed the page (very slightly so I dont notice). It used to be pop.gmail.com showing there instead of imap. They added imap but didnt keep the pop.gmail.com settings.

Anyway, 993 still works for pop as well (using outlook that was setup more than a year ago)

oh, I'm not worried about "touching" the router. I'm worried about losing remote control of it by messing around with OpenVPN. It happened to me a lot while testing for OpenVPN a long long time ago.

If I lose remote control of it, I can't physically connect to it. Router's in Canada, I'm in China

You just reminded me of another reason why I dropped OpenVPN. I DONT have a PC that I can just leave there, turned on 24/7. I'm limited to my linksys router with the modified firmware. The CPU in it is only 250mhz and a minuscule amount of RAM. When I got OpenVPN working on it and connected via my PC, the router would slow down to a crawl, making it unusable.

However, I think a mobile phone wouldn't tax the router's processing power too much. As long as you dont use HSDPA type speeds on it with streaming radio or bittorrent :p

I'm just glad my project/guide has inspired people to continue the work. I spent a boat load of time on finding out how to do this. Had to figure out something that was never ever designed for a cellphone. I almost gave up until I realized that the very old/oudated/unstable Pocket Putty was in core the same thing as Putty for PC. No GUI options, but the registry keys were there :p

Then spent another boat load of time figuring out what the hell was the localhost address of the phone. Localhost and 127.0.0.1 don't work, can you believe that?

Anyway, when I go back to Canada, I'll definitively use OpenVPN ;) Would be fun to give my phone internal network access too.
[8525, TyTN, MDA Vario II, JasJam General] npole:
Hmm.. i've seen guys running OpenVPN (in different configuration) on similar CPU's speed.. anyway you may just link a second router (or any other device capable of running a minimal linux installation...) to the main one and use it exclusively for your OpenVPN.

Well it depends.. yeah, use your VoIP watch sh*t on youtube, to not talk about pr0n ("hey watch this!" to your friend) and you'll fill a 10mbit. :D

eheh.. they fixed it in wm6, your solution worked with localhost and 127.0.0.1 on my phone.

Until you try to fit (that's happened to me yesterday) a 1920x1200 screen res into a QVGA and you forget to disable the option "fit into the screen"... when i've returned at home i've found all my windows and desktop icons squeeeeezed into a 320x200 piece of desktop at the left top corner screen. argh!
[8525, TyTN, MDA Vario II, JasJam General] npole:
Hi there, i've put up a web page with some nice stuff:

http://arctic-things.blogspot.com/2008/01/internet-gateway-openvpn-openwrt-on.html

...it's not teoric, it is actually working. ;)
[8525, TyTN, MDA Vario II, JasJam General] breakx:
nice guide alkizmo ...but I have a problem ...I can't connect to the ssh server "Putty Fatal Error Proxy error: 403 Tunnel or SSL Forbidden"
[8525, TyTN, MDA Vario II, JasJam General] breakx:
I have solved the problem ...I have made a mistake in registri settings. The connection is ok now and I have tested it like this: I configured the local port to 35888 and the destination to google.com:80 then I typed in web browser http://WMbreakx:35888 and google web page is loaded.

My problem is now that I don't know how to set port forwarding for using YMSG protocol with IM+ or agile mes
[8525, TyTN, MDA Vario II, JasJam General] breakx:
I have solved the problem ...I have made a mistake in registri settings. The connection is ok now and I have tested it like this: I configured the local port to 35888 and the destination to google.com:80 then I typed in web browser http://WMbreakx:35888 and google web page is loaded.

My problem is now that I don't know how to set port forwarding for using YMSG protocol with IM+ or agile messenger( i know the port used by ymsg is 5050) ...but i don't know what destination I can use

Another questions is what function have the socks proxy configured to userID:1080
[8525, TyTN, MDA Vario II, JasJam General] Calibrae:
I followed the tutorial. Everything works great! I can TSE on my server, etc etc.

But, I can't seem to manage to connect to Windows Live Messenger. I got all the config screens, and it fails to synchyronize on the last one ("Please check your connection blah blah blah). Tried both socks4 and socks5... no frelling luck.

Can't we use a dynamic port in putty directly instead of using the socks proxy?
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
dynamic port is the socks proxy

so, if you do dynamic port forwarding on local port 1080, then you got to setup your phone to use socks proxy on 1080

and it's socks4, not 5.

Be sure to identify the socks proxy address as "phone name" : port

so, in "settings \ About \ Device ID" if your Device name is : mytytn

then socks4 address would be : mytytn on port 1080
[8525, TyTN, MDA Vario II, JasJam General] Calibrae:
Thanks for the answers alkizmo!

Now putty works seamlessly, I've been trying to set up the same VPN I use at work to connect at home. The config is ok, i can connect, blablabla.

But I can't seem to find anything that allows us to mes with the routing table of the phone. Route.exe anyone? : )=
[8525, TyTN, MDA Vario II, JasJam General] OSX:
GREAT guide

thank you VERY much. it's JUST what I've been looking for SOOO LONG!!

however, I still have a small problem that - I guess - will be resolved in time.

"I'm still using dial up"!!:( cuz it's almost impossible to get an ADSL here:(:(:( at least for now...
[8525, TyTN, MDA Vario II, JasJam General] shizueleven:
I've followed all the steps, but when I arrive at putty, 127.0.0.1 port 443 it says "Server Unexpectedly Closed Network Connection".

What did I do wrong? :/
[8525, TyTN, MDA Vario II, JasJam General] shizueleven:
somehow I redid it and it worked - but how do you check your SSH's outgoing ip address? :D
[8525, TyTN, MDA Vario II, JasJam General] CescoAiel:
Together with BlackBerry Connect?...

Ok, I read this and thought "this is a great way to make use of the unlimited data plan that comes with Tmob's Blackberry plan", because if I run everything through the BES/MDS service, it is part of the BlackBerry data, and thus "free"... :D

Sounded like a good plan, but as soon as I installed OpenVPN on my phone (a Kaiser/TytnII/Vario III, but as it runs WinMob it is the same difference...) the BBC client no longer connected... :eek:

Has anybody tried OpenVPN and BlackBerry Connect on the same device before?... :confused:
[8525, TyTN, MDA Vario II, JasJam General] alkizmo:
Blackberry connect uses a DIRECT connection with your carrier (Tmobile). You cant proxy connect considering that you would be connecting as if you were coming through your VPN server (outside the cellphone network).

Same reason you cant do BBC through home WiFi.

See red path going back to the BBC network? The line from unrestricted external internet to BBC is not allowed by T-Mob. They restrict access only to those within the wireless network.
[8525, TyTN, MDA Vario II, JasJam General] CescoAiel:
Yes, but...

IMHO you forgot a few lines in that graph... ;)

The BES (MDS, or as you named it BBC) server is reached by PIE for Internet Access through a proxy. If you use other apps that can use a proxy, and direct them to the same proxy as PIE, it will use MDS.

OpenVPN has the possibility to use proxies too. So if I point it at my OpenVPN server through the BBC Proxy, I should be able to do unlimited Internet...

So that would be something like:

Me [- Open VPN] -> BBC Client proxy -> BBC/MDS -> VPN Gateway -> "free" unlimited (albeit somewhat slow) Internet

The real problem (I think) is that as soon as I have OpenVPN installed, the BBC on my WinMob phone no longer wants to connect... :(

Anyway, it is worth some more experimenting when I have the time... :D
[8525, TyTN, MDA Vario II, JasJam General] tetrakouna:
I posted a question about a simillar situation a couple of months ago in the section networking in this forum but unfortunately i had no reply since then. Here's the original message:

--------------------------------------------------------------------------

First of all congratulations to all users for this excellent forum.

Here's the situation:

In my country one specific carrier provider has a data plan with only 3,5 euros/month which offer unlimited browsing to internet (port 80 i assume) and unlimited downloads with the restriction that the file youre downloading does not exceed 1 MB.

The point in this story is that you cant work with applications that works in other port than the ports that they have open (eg voip).

They also have a proxy server to set up on your mobile device which is at 192.168.200.10 at port 9401.

The obvious question is if theres a possibility to establish a vpn connection between my mobile and a home server in order to "pass" all the traffic through their 9401 port so to conclude to use this service as truly unlimited (i mean "port free")?!?

Can anybody suggest the necessary software (vpn etc) to set up in both machines to give it a try? What kind of configuration is required in the vpn software you will suggest?Is there a point that i am missing?

My mobile device is an htc touch diamond.

Thank you!!

--------------------------------------------------------------------------

I've tried Alkizmo's method (putty-cygwin) with the explained configurations and so far i managed to establish a ssh connection between ppc and pc ONLY. The rest of the programs (messenger , youtube streaming etc) does not work.

I suppose the problem is somewere in the mysterious port 9401 my provider uses in its proxy.

Please give me some help to get this working and CONGRATULATIONS again for the tutorials.