How do we set Opendns on 3G/EDGE/WCDMA? - G1 Android Development

Ok T-Mobile as well as other isps have been known to log dns servers to see
what users access and is a big privacy concern, I would like to use OpenDns
but I have not been able to do so, any help would be appreciated, here is
what I have tried:
added this to init.rc:
setprop ro.kernel.android.ndns 2
setprop net.rmnet0.dns1 208.67.222.222
setprop net.rmnet0.dns2 208.67.220.220
setprop net.dns1.108 208.67.222.222 # random dns setting set???
setprop net.dns2.108 208.67.220.220 # wtf
setprop net.dns1 208.67.222.222
setprop net.dns2 208.67.220.220
and also ran in terminal, restarted interface and still wont use opendns,
verified at welcome.opendns.com that opendns isnt setup properly...
T-Mobile/Google have obviously made it hard to change dns settings for a reason and I would like to control this myself, as well as others should for privacy/security purposes, so lets figure this out
defcon
P.S. I know you can change DNS on wifi, through ipsettings with anycut, the mobile network dns settings seem to be set by dhcp and are static and we cant seem to change them within a gui, so we gotta figure out how to hack the dns settings on boot or when the interface connects to T-Mobile or your cell network...

Maybe you might want to reconsider:
http://forum.xda-developers.com/showthread.php?t=508149
If you're too lazy to read the entire thread, basically there is evidence someone has registered some t-mo gateway ips with their opendns account and is poisoning some of the resolves. Atleast one gateway seems to be blocking resolves of gmail.
Anyway, T-Mo can track your traffic without DNS, I assure you. Unless you are running some kind of end-to-end encryption like tor or a vpn tunnel, they can (and probably do) perform deep packet inspection.

the dns settings are automatically reset when your network status changes and this seems to happen extremely often, so there's basically no point in using setprop

yea obviously, so we need to find an alternative solution.

this one works

You're fooling yourself if you think using an alternate DNS server is buying you any increase in privacy. Everything you are viewing over GSM is going through a proxy server. If you really don't want T-Mobile to know where you're going, your choices are basically:
1. Only use Wifi for browsing
2. Set up some kind of encrypted tunnel (via VPN, SSH tunnel, etc.) and point your web browser to it.
3. Only visit HTTPS sites (in which case T-Mobile will know the IP address you're going to but not necessarily the website domain).

jashsu said:
they can (and probably do) perform deep packet inspection.
Click to expand...
Click to collapse
I can confirm they DO use deep packet inspection.

Related

New ROMs and OpenDNS...

To speed up browsing I use the free DNS servers provided by OpenDNS. They are 208.67.222.222 and 208.67.220.220. See www.opendns.com for details.
Anyways, when I enter specific DNS servers for my ISP's connection, I cannot connect. I'm wondering if my ISP has changed their policy to prevent access to external DNS servers, or if there is something wrong with the way the new ROMs operate. Previously, I had been able to use these DNS servers with no problem.
So, everyone still uses their ISP's DNS servers?
floepie said:
So, everyone still uses their ISP's DNS servers?
Click to expand...
Click to collapse
I've noticed that on my current wm6 rom it doesn't matter if I specify the opendns servers in the gprs connection settings..it's still using the isp's...you can test this by going to http://www.opendns.com/welcome
If you get the oops page..you are not using the opendns servers and I'm not sure if it's a wm6 issue or a tmobile issue.

OpenDNS blocking gmail while using wifi tether for root users?

What the hell? Never even heard of opendns...wtf is it?
How do I fix it?
KidJethro said:
What the hell? Never even heard of opendns...wtf is it?
How do I fix it?
Click to expand...
Click to collapse
Are you using Wifi or 3G/Edge? Looks like the problem is with the admin that setup your Wifi.
Well sounds like you are using their DNS servers and someone blocked gmail.
go to opendns.com while tethering to change your settings if you can. You should see a "dashboard" link at the top right of the page.
OpenDNS is an alternative DNS service (normally DNS is provided by the ISP). Wifi-Tether-For-Root by default has OpenDNS hardcoded in as the default DNS (instead of T-Mo's DNS servers). Since all traffic on T-Mo 3G is routed through their central server, regardless of where you are physically, your ip on the internet will appear as coming from a T-Mo data center in Missouri or Kansas or something. Perhaps someone has maliciously set up an OpenDNS account with this ip and locked out gmail.
Edit: I am having no problems getting to gmail using WT4R. My tmo ip was different from the usual though. Perhaps they are load-balancing their US network. Last time I checked, my tmo ip came out in Kansas. This time however, it came out of Rhode Island. Strange, considering I am physically in California.
Could you lookup your internet-side ip address while tethering and see which tmo datacenter you appear to be coming from when your gmail access is restricted?
This is the first time I've ever used wifi tether. Was kinda wierd to see gmail was blocked. Working on setting up an opendns acct now.
Ok....I'm totally lost now. I've got an opendns acct setup. I'm lookin at the dashboard thing, and have no idea what to change to fix this issue?
You are going to want to go here https://www.opendns.com/dashboard/settings/
It should show your current IP in the drop down.
Turn off the filtering and make sure nothing down below is added.
jashsu said:
OpenDNS is an alternative DNS service (normally DNS is provided by the ISP). Wifi-Tether-For-Root by default has OpenDNS hardcoded in as the default DNS (instead of T-Mo's DNS servers). Since all traffic on T-Mo 3G is routed through their central server, regardless of where you are physically, your ip on the internet will appear as coming from a T-Mo data center in Missouri or Kansas or something. Perhaps someone has maliciously set up an OpenDNS account with this ip and locked out gmail.
Edit: I am having no problems getting to gmail using WT4R. My tmo ip was different from the usual though. Perhaps they are load-balancing their US network. Last time I checked, my tmo ip came out in Kansas. This time however, it came out of Rhode Island. Strange, considering I am physically in California.
Could you lookup your internet-side ip address while tethering and see which tmo datacenter you appear to be coming from when your gmail access is restricted?
Click to expand...
Click to collapse
Easy enough to figure out my ip addy....but no idea how to do the rest.
Weird thing though...I signed up fro an opendns acct, browsed around a bit in the dashboard and now gmail works? ~edit~ nvermind, spoke too soon...gmail is blocked again.
For some reason I have a problem wrapping my brain around this kinda stuff.
your ip could have changed
neoobs said:
You are going to want to go here https://www.opendns.com/dashboard/settings/
It should show your current IP in the drop down.
Turn off the filtering and make sure nothing down below is added.
Click to expand...
Click to collapse
I see my IP under the network tab. Under the settings tab it says "to control your settings, you need to add a network to your account." If I click "add a network" it takes me back to the network tab where my ip is displayed. If I click add network, it says network already exists?
Bleh....
Like i said, T-Mo is likely load balancing across their many gateways. My guess is whoever locked gmail out only did it to one of the gateways. Your best bet is to change the DNS servers away from opendns.
KidJethro said:
I see my IP under the network tab. Under the settings tab it says "to control your settings, you need to add a network to your account." If I click "add a network" it takes me back to the network tab where my ip is displayed. If I click add network, it says network already exists?
Bleh....
Click to expand...
Click to collapse
The reason is because only one openvpn account can control a network. Whoever has messed up that tmo gateway has full control of it until that person or openvpn changes the situation.
jashsu said:
Like i said, T-Mo is likely load balancing across their many gateways. My guess is whoever locked gmail out only did it to one of the gateways. Your best bet is to change the DNS servers away from opendns.
Click to expand...
Click to collapse
Ok, need this in baby talk, barney style. I have no idea how to change dns servers?
KidJethro said:
Easy enough to figure out my ip addy....but no idea how to do the rest.
Click to expand...
Click to collapse
http://www.ip2location.com/
jashsu said:
http://www.ip2location.com/
Click to expand...
Click to collapse
IP Address : 208.54.94.59 Location :
UNITED STATES, WEST VIRGINIA, CHARLESTON Latitude / Longitude : 38.3515 LATITUDE, -81.632 LONGITUDE Connecting through : T-MOBILE USA Time Zone : UTC -05:00
IDD Code : 1 Area Code : 304 Weather Station : USWV0138 - CHARLESTON
KidJethro said:
Ok, need this in baby talk, barney style. I have no idea how to change dns servers?
Click to expand...
Click to collapse
It might be enough to edit /data/data/android.tether/conf/dnsmasq.conf with a text editor and substitute out the DNS values in there with your own DNS. I'll try it out later.
jashsu said:
It might be enough to edit /data/data/android.tether/conf/dnsmasq.conf with a text editor and substitute out the DNS values in there with your own DNS. I'll try it out later.
Click to expand...
Click to collapse
"wifi tether" should update the dnsmasq.conf-file automatically (will take the dns from your 2G/3G-connection) - this was introduced in version 0.95.
Type ... "getprop net.dns1" into terminal ... that should exactly be the nameserver in dnsmasq.conf (after you have started tethering).
Bleh....I need a break from phone tweaking for a bit. Buuurn ouuuut
Works for me
I just got home, tethered just to see if it would affect me too. Not problems at all.
harry_m said:
"wifi tether" should update the dnsmasq.conf-file automatically (will take the dns from your 2G/3G-connection) - this was introduced in version 0.95.
Type ... "getprop net.dns1" into terminal ... that should exactly be the nameserver in dnsmasq.conf (after you have started tethering).
Click to expand...
Click to collapse
harry_m is right. When I tethered to my G1 via WT4R (ver 0.9.6) and visited opendns.com, it showed the "Start using OpenDNS" button, indicating my currently used DNS was not OpenDNS. I verified that WT4R had fetched the G1's internal DNS setting by checking the dnsmasq.conf:
Code:
$ su
# cat /data/data/android.tether/conf/dnsmasq.conf
no-resolv
no-poll
server=10.177.0.34
server=10.176.80.242
I suggest you reinstall WT4R and choose no when it gives you the option to import old settings. This way, it will build your configuration files from scratch (and not use OpenDNS).

Changing DNS

This thread was initially started in the general G1 board although I believe it will get more attention here from individuals that would know more about it. Basically what I and the original thread author would like to know is if there is a way to manually configure the DNS. The objective is to use Opendns. Thanks in advance.
Original Thread- http://forum.xda-developers.com/showthread.php?t=517553
change dns
#change dns servers
setprop net.dns1 dnsaddress1
setprop net.dns2 dnsaddress2
Opendns
208.67.222.222
208.67.220.220
Use getprop command to check it after.
Works on dudes 1.1
It won't stick after reboot. Add to init for a more perminent effect. Also not sure how consistent it is, it'll pass open dns check for example but there's more dns entries when you check getprop.
I really want to know the facility of the dns changing while turn from wifi to edge or 3g, vice versa. It seemed the dns define in resolve.conf doesn't work while connect to edge.

WiFi DNS Does not Update

I've posted this over at the Rhodium Thread located here:
http://forum.xda-developers.com/showthread.php?t=731292
but haven't gotten a single response yet. Since this is a concern for more than one device I feel like I should post it here. Mods feel free to move this to the correct location if need be.
===================
So it seems to me that this is a problem on ALL Android devices that I have tested with. Here's the situation
I have a router in my house in which I have DHCP turned off so my device will grab an IP (Not Static) and DNS from the ISP. I need to find a way to be able to just change the DNS Settings to 208.67.222.222 and 208.67.220.220 on android without having to manually put in an IP since the IP will automatically get changed every few day's.
Android doesn't seem to let me do that. Does anyone know how? Going into the Advance Menu in the Wifi settings and changing the dns does not actually change anything... I noticed this on the following android devices as well: Moto Cliq, MyTouch 3g, old Kaiser running android on NAND, and my Rhodium Devices running android.
Any reason as to why Android isn't updating my DNS Settings? Any help would be appreciated.
starmena said:
I have a router in my house in which I have DHCP turned off so my device will grab an IP (Not Static) and DNS from the ISP. I need to find a way to be able to just change the DNS Settings to 208.67.222.222 and 208.67.220.220 on android without having to manually put in an IP since the IP will automatically get changed every few day's.
Click to expand...
Click to collapse
Ok so DHCP is assigning your network config, but you want to use different DNS servers than the DHCP allocated ones?
starmena said:
Android doesn't seem to let me do that. Does anyone know how? Going into the Advance Menu in the Wifi settings and changing the dns does not actually change anything... I noticed this on the following android devices as well: Moto Cliq, MyTouch 3g, old Kaiser running android on NAND, and my Rhodium Devices running android.
Click to expand...
Click to collapse
On my HTC Hero running an Android 2.1 ROM, unless "Static IP" is selected, I dont even get the option to change the DNS servers (option is greyed-out).
One way to manually change DNS is via shell if you have root access on your phone using ADB shell (or ssh, telnet etc if your ROM supports them), see this thread [Q] Help! Changing DNS settings .
Any network config tools on the app store?
-jc
starmena said:
I've posted this over at the Rhodium Thread located here:
http://forum.xda-developers.com/showthread.php?t=731292
but haven't gotten a single response yet. Since this is a concern for more than one device I feel like I should post it here. Mods feel free to move this to the correct location if need be.
===================
So it seems to me that this is a problem on ALL Android devices that I have tested with. Here's the situation
I have a router in my house in which I have DHCP turned off so my device will grab an IP (Not Static) and DNS from the ISP. I need to find a way to be able to just change the DNS Settings to 208.67.222.222 and 208.67.220.220 on android without having to manually put in an IP since the IP will automatically get changed every few day's.
Android doesn't seem to let me do that. Does anyone know how? Going into the Advance Menu in the Wifi settings and changing the dns does not actually change anything... I noticed this on the following android devices as well: Moto Cliq, MyTouch 3g, old Kaiser running android on NAND, and my Rhodium Devices running android.
Any reason as to why Android isn't updating my DNS Settings? Any help would be appreciated.
Click to expand...
Click to collapse
I'm confused by your question. If you have DHCP turned off your device's are not going to grab an IP address from your router. Why don't you turn on DHCP and let your router assign IP addresses. As doing so your devices will also use the DNS setting from the router which will be your ISP's DNS ip address. Unless you change your DNS settings in your router to one of the many public DNS servers available. My recommendation is turn DHCP to "ON" on your router. Maybe start your DHCP IP assignment at 192.168.1.100 and go up to 150. That way you can use the range from .2 to .99 for static IP's. This is how I configured my router but I'm also using DD-WRT firmware on my router which highly customizes the router. Alternately you can change your routers DNS ip setting to Open DNS server so there would be no need for you to change it on the phone if you are using WIFI. Just let your router do all that work for you. Hope this helps. Viva Santiago Rep Dom y NYC.

Need DNS changer app (or method) which actively locks DNS servers

I have tried all methods in the following link except DNS+DNSCrypt (having issues in flashing files):
https://forum.xda-developers.com/ge...-to-change-dns-android-device-t3273769/page1
.
I need something which actively locks DNS after I set it.
I have tried Override DNS & scripts but that only set my specified DNS after reboot and connectivity change and do not prevent DNS servers from changing.
you can lock your DNS server use using iptables on condition that you have NAT in both IPv4 and IPv6 in your kernel I posted this already in the AFWALL thread https://forum.xda-developers.com/showthread.php?t=1957231&page=456turning on or off a network device resets iptables but if the script is put into afwall that should not be a problem. I did not explain it there but if the need arises I will post again. By unsing something like this you transfer all DNS requests to the server of your choice regardless of what the Rom has configured the DNS to. However this does not hide from your service provider who can see the traffic only DNScrypt does.

Categories

Resources