Database Info

[GUIDE] OpenVPN for Dummies

Thanks to all the developers who put the bits & pieces together; without them it wouldn't be possible. You don't need to be an Android or Linux guru to get it working - SDK, ADB, etc. are not required.
What is OpenVPN?
OpenVPN is a free and open source software application that implements virtual private network (VPN) techniques for creating secure point-to-point or site-to-site connections in routed or bridged configurations and remote access facilities. It uses SSL/TLS security for encryption and is capable of traversing network address translators (NATs) and firewalls.
What's Covered in this Guide:
A step by step tutorial for configuring OpenVPN on the Evo 4G. Use at your own risk!
Not Covered:
Yea but how do I?
Requirements:
Rooted Evo
USB Data Cable
Amon RA Recovery - RA-evo-v1.8.0 (or above)
http://files.androidspin.com/downloads.php?dir=amon_ra/RECOVERY/&file=recovery-RA-evo-v1.8.0.img
Terminal Emulator (download from market)
Super Manager (download from market)
Busybox (download from market)
OpenVPN Installer (download from market)
OpenVPN Settings (download from market)
Tun.ko built for your specific kernel (recommend netarchy-toastmod, Stable: 4.1.9.1 or higher)
http://forum.xda-developers.com/showthread.php?t=719763&highlight=amon
Modified openvpn executable & matching iproute-wrapper script.
http://forum.xda-developers.com/attachment.php?attachmentid=385959&d=1282516002
An OpenVPN Account & config files.
GTech Net Tools (download from market).
Let's begin.
Root your Evo if not already done.
Install GTech Net Tools & run; select My IP & Get IP Address; External Address & Local Information are issued from your cell provider data network; record these values for later comparison.
Install Amon RA.
Install Busybox to /system/xbin.
Install OpenVPN Installer (binaries) to /system/xbin; select path to ifconfig: /system/xbin.
Install OpenVPN Settings (settings later in this guide).
Install custom kernel with built in tun.ko support; flash via Amon RA recovery & reboot.
Install Terminal Emulator.
Install Super Manager.
Open your openvpn config file & add the following to the last line, then save: 'iproute /system/xbin/iproute-wrapper.sh'.
***Make sure your config.ovpn file has NO_SPACES in name***
Connect Evo to PC via USB cable; select 'Disk Drive' & 'Done'.
Create folders on SDCard 'Downloads' (if not already there), and 'openvpn'.
Copy your config.ovpn files to SDCard/openvpn folder
Copy 'openvpn' & 'iproute-wrapper.sh' to Downloads folder on SDCard.
Disconnect USB cable.
Start Super Manager; select Settings; Enable ROOT function; press back button on phone; browse to SDCard/Downloads - copy & paste 'openvpn' & 'iproute-wrapper.sh' to /system/xbin.
Start Terminal Emulator.
@ $, type su & enter key; should now see #
Type 'chmod 755 /system/xbin/openvpn' & enter; then type 'exit' & enter.
Start Super Manager; select Settings; disable ROOT function.
Press Home button on phone.
Start OpenVPN Settings; press 'menu' button on phone; select 'advanced'; check 'load tun kernel module'.
Click 'TUN modules settings'; Check Load module using 'insmod'.
Enter Path to tun module: '/system/lib/modules/tun.ko'.
Select 'path to openvpn binary'; enter '/system/xbin/openvpn'.
Check 'Fix HTC Routes'.
Press Back button on phone.
Check OpenVPN; check your_server.ovpn; 'Username/Password required' should appear on Status bar at top of phone.
Slide Status bar down, click on 'Username/Password required', enter info & click 'OK'.
Under yourserver.ovpn view status - Wait for 'connecting...auth...get config'...should be 'connected to 111.111.111.111 as 222.222.222.222'.
Start GTech Net Tools; select My IP & Get IP Address; External Address & Local Information should now be issued from your OpenVPN provider; compare to original data you recorded earlier.
Press Home button on phone...do you see the 'Key' icon on Status bar?
If Yes.............You have done it!
Additional Resources:
OpenVPN
http://openvpn.net/
Wikipedia - OpenVPN
http://en.wikipedia.org/wiki/Openvpn
Enjoy!

Check 1st post for revisions & updates.

Thanks for the write up. However, can you dumb it down one more level. I started looking at OpenVPN when I realized that the Android VPN was broken. I have configured Windows VPN for my home Windows PC, but I assume that it won't directly work with OpenVPN.
What do I need to do to configure my PC?
I assume once I understand that, I'll also understand what you mean by "An OpenVPN account & Config Files.
I appreciate your help.

The guide is limited to OpenVPN on the Evo 4G Android platform.

I have a question also. I am stuck at the Open your openvpn config file & add the following to the last line, then save: 'iproute /system/xbin/iproute-wrapper.sh" step. Is this on the EVO or on the OpenVPN account?
Also, I signed up for the OpenVPN account and am using a Macbook-with Windows 7 installed via Parallels, an iMac and another laptop running Linux Ubuntu. Which program do I download for my setup on the OpenVPN site so that they all work? I don't see one for OSX? I have tried the EVOVPN app and it works great just for the phone....but computers won't hook up even though I have them set up using the same LAN settings.
I am hoping for something that will let me use a secure server using the EVO connecting all of my computers.
Thanks for your help and for the guide and for any advice you could share. Have a great day!

Good questions - focus on keeping things simple.
1Brite1 said:
I am stuck at the Open your openvpn config file & add the following to the last line, then save: 'iproute /system/xbin/iproute-wrapper.sh" step. Is this on the EVO or on the OpenVPN account?
Click to expand...
Click to collapse
Your OpenVPN provider posts config files to download required for their service to work. Normally no editing is necessary, but for Android it is at least for now (*more on why later).
Their config files package may include many different types of files, look for the one with .ovpn extension (there may be several - server_1.ovpn, server_2.ovpn, etc.); open the file(s) with your text editor; normally the last line of this file is 'auth-user-pass'; create a new last line 'iproute /system/xbin/iproute-wrapper.sh' (without quotation marks) and save. Copy this edited file & any other config files your provider requires to the Evo /sdcard/openvpn folder you created earlier.
1Brite1 said:
I signed up for the OpenVPN account and am using a Macbook-with Windows 7 installed via Parallels, an iMac and another laptop running Linux Ubuntu. Which program do I download for my setup on the OpenVPN site so that they all work? I don't see one for OSX? I have tried the EVOVPN app and it works great just for the phone....but computers won't hook up even though I have them set up using the same LAN settings.
Click to expand...
Click to collapse
The good news is whatever OpenVPN service provider you choose, it should work with whatever device you have. However, each operating system has different requirements, so there are clients specific to each of these OS's. For example, Windows client = openvpn client, Linux = gopenvpn, etc. For the Evo, & Android in general, the client is 'OpenVPN Settings', setup of which is included in the guide. 'EVOVPN' is not 'OpenVPN', we're not sure what it is, they don't offer any support or documentation; advise to stay away until more info is available.
1Brite1 said:
I am hoping for something that will let me use a secure server using the EVO connecting all of my computers.
Click to expand...
Click to collapse
As above, only one service provider is needed, the clients vary by operating system. If you're referring to remotely accessing your other computers via the Evo with OpenVPN running, well yes that works but is not covered here; setup for that would be the same whether or not you use OpenVPN.
*The edit to .ovpn config file is required at this time to let the Android client know which routing table is being used; it may become unnecessary with future updates.

Thank you sc10000.....I appreciate your time...nothing more frustrating than asking a question and never getting an answer or one that is so informative. I will try the set-up again...but I see also that you have to pay for the OpenVPN service. I have an OpenDNS account and wonder if that is the same type of service and it is free but not sure if it will work with EVO. I will look into that option also as I know I used to use that for my Linux system. But, as you said, that may be just operating system specific. Again, thank you for elaborating!!! Now, I get it.

Thanks for the tutorial sc10000. I just wanted to put a little bit of input into the mix.
OpenDNS is quite different from OpenVPN. OpenVPN is strictly for users who need to encrypt their connection and/or connect to another 'network' such as their work or school network. A lot of other people use OpenVPN for other reason (i.e., watch Hulu from another country outside of the US, etc.).
I use Private Internet Access ( privateinternetaccess.com ) as an OpenVPN provider and it works with your tutorial. Other great providers are listed here:
Private Internet Access ( privateinternetaccess.com )
WiTopia ( witopia.net )
Strong VPN ( strongvpn.com )
There are a few others, but I would stick to the big three for safety.

Some other great providers not listed above:
Anonyproz - anonyproz.com
blackvpn - blackvpn.com
There are many out there, find one that suits you.

I keep getting
FATAL:Linux ip link set failed: could not execute external program
I checked the permissions on the files and they are executabled, I checked the iproute-wrapper.sh script and it was looking for ip in /system/bin my EVO did not have it there but it was in /system/xbin so I changed that too.

I don't recommend changing anything in the scripts or files. Go back to guide & make sure you have completed all the steps exactly. Possibly you have installed something in a different location, etc.
If still not working, then try a different kernel - you did replace the kernel right?
This one is working as of now, with ROM 3.70.651.1
netarchy-toastmod-4.3-bfs-nohavs-noUV-sbc-universal (No Undervolting)

I am on CM 6.1.1 and using 12/25/10 - SBC for BC's Kernel SBC-bcnice-stable-v7.zip (2.62 MB) Kernel

sc10000, what purpose would vpn serve on the cell phone for general usage? I can understand if connecting to a company vpn for access to their network.
What would the application be? Why would I want/need vpn (openvpn) on my android device?

gpz1100 said:
Why would I want/need vpn (openvpn) on my android device
Click to expand...
Click to collapse
Why would you volunteer your unprotected data to anyone who seeks it?

Right, but why would I be connecting to my network using the handset? I'd have the vpn client running on my laptop or netbook.

gpz1100 said:
why would I be connecting to my network using the handset? I'd have the vpn client running on my laptop or netbook.
Click to expand...
Click to collapse
vpn is not openvpn. Why would you connect any device to the internet without security?
Big brother is watching. Really.

I was hacking away at this last night, but haven't been successful in getting my vpn connection up and running.
I have copied my openvpn config from my linux box and have gone over the instructions multiple times to verify, but keep getting the following error in the log:
D/OpenVPNDaemonEnabler( 963): Received OpenVPN daemon state changed from Unknown to Disabled
D/OpenVPNDaemonEnabler( 963): Received OpenVPN network state changed from Connected to Exiting
D/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]-mgmt( 963): attach(): using management port at 27860
E/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]-mgmt( 963): attaching to OpenVPN daemon: /127.0.0.1:27860 - Connection refused
W/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]( 963): start(): choosing random port for management interface: 32537
D/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]-daemon( 963): invoking external process: /system/bin/su
D/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]-daemon( 963): invoking command line: /system/xbin/openvpn --cd '/sdcard/download/openvpn' --config 'connect.ovpn' --writepid '/data/data/de.schaeuffelhut.android.openvpn/files/com.d/_sdcard_download_openvpn_connect.ovpn-pid' --script-security 1 --management 127.0.0.1 32537 --management-query-passwords
D/OpenVPNDaemonEnabler( 963): Received OpenVPN daemon state changed from Unknown to Startup
D/OpenVPNDaemonEnabler( 963): Received OpenVPN daemon state changed from Unknown to Disabled
D/su ( 4167): 10165 de.schaeuffelhut.android.openvpn executing 0 /system/bin/sh using shell /system/bin/sh : sh
D/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]-daemon-stdout( 963): Options error: Unrecognized option or missing parameter(s) in connect.ovpn:22: iproute (2.1.1)
D/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]-daemon-stdout( 963): Use --help for more information.
I/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]-daemon-stderr( 963): terminated
I/OpenVPN-DaemonMonitor[/sdcard/download/openvpn/connect.ovpn]-daemon-stdout( 963): terminated
Click to expand...
Click to collapse
If I comment out the "iproute /system/xbin/iproute-wrapper.sh" from my config file, then the vpn will say it is connected, but I won't be able to access anything.
Any help is appreciated!

enormous said:
If I comment out the "iproute /system/xbin/iproute-wrapper.sh" from my config file, then the vpn will say it is connected, but I won't be able to access anything.
Click to expand...
Click to collapse
Most likely a kernel issue, try replacing with one that has known tun.ko support. Do not comment out 'iproute /system/xbin/iproute-wrapper.sh' or it won't work.

So I follow these steps EXACTLY yesterday (Evio 1.7.7 rom; Netarchys latest stable kernel) and I was able to connect! The tun.ko I used was one I found i believe for the Desire.. but it seemed to work, and I was able to ping my DB server at the data center.
After a restart last night, today I try and re-connect and continue to get "cannot allocate tun tap dev dynamically"
I checked permissions on tun.ko and openvpn but still having issues. WEIRD that it worked and restart causes it to fail now
Any ideas are appreciated as this will be very convenient for work! Thanks!

UPDATE: I just flashed Ziggy471's kernel (Jan 21 2011) and rebooted..
I disabled the "Load tun.ko module" from the advanced settings in OpenVPN Settings app, and connected fine again! so it apparently is using the built-in tun.ko driver in the kernel.
Just followed the directions to setup openvpn binary, openvpn settings paths, EXCLUDING the "load tun.ko module" check box and I am GOOOOOOD!
Thanks!

[SOLVED] Change wifi MAC Address

I have succesfully changed wifi mac address of my optimus.
We have to just insert a line "macaddr=XX:XX:XX:XX:XX:XX" in the nvram.txt
Here is how I did it:
You require:
1.)Rooted phone.
2.)anroid sdk
1.)First pull the nvram.txt file from /etc/wl to sdcard:
in cmd(windows) goto android-sdk-windows\tools and type
adb shell
2.)Copy nvram.txt from /etc/wl to sdcard
cp /etc/wl/nvram.txt /sdcard/nvram.txt
3.) Using text editor in phone add following line at the end:
macaddr=XX:XX:XX:XX:XX:XX (replace XX:XX:.... with desired mac addr.)
4.)Save file and copy it to /etc/wl from adb shell
cp /sdcard/nvram.txt /etc/wl/nvram.txt
5.)Reboot and it is done.
To restore orignal mac address just delete the macaddr line.
Note:
1.) Tested only in stock LG rome with GNM OC kernel. In other roms or kernel the location of nvram.txt may differ according to the parameter using which driver module (wireless.ko or bcm4325.ko) just find that file and use the above process. It will work.
2.) The file cannot be edited in windows as windows has different new line character than linux. It has to be edited in some linux compactible file editor like Programmers Notepad.

y wud u wanna change ur mac?

B'Coz I can access free Internet by doing this.....

Nice one
And to change hostname? Any ideas?
I changed it, and in phone it appears to be changed. But my router doesn't say the same... Has original hostname...

Yup thats worked with me thanks for sharing
Sent from my LG-P500 using XDA App

Yea bcoz android does'nt use hostname to connect with router. I'm trying to figure out the configuration file for that.....

how to find mac address
how to find the mac address in lg optimus one???

Thats why my optimus one can not take the ip from some puplic networks??

make this thread sticky

not working on Acer Liquid E ! !!
how can I change my mac !!??!!

1st step i already duno how to do T_T
know the pull things from nvram.txt file from /etc/wl to sdcard which require me to root my phone 1st then only can pull out
but after that in cmd(windows) goto android-sdk-windows\tools and type
adb shell
my computer can't detect that was a file in computer,and what is the android-sdk ?

Screw android-sdk ..LOLz..Do this install root explorer on your phone ..navigate to that file on your phone using root explorer , click on mount r/w button ,then long press and select open in text editor, then go to the end of the file and add this
macaddr=xx:xx:xx:xx:xx:xx
replace xx with a combination of hex letter i.e. 1,2,3,4,5,6,7,8,9,A,B,C,D,E,F
example DB:12:3F:4F:11:AA
Save and exit
Reboot
You are all done check phone status in settings

sarfaraz1989 said:
Screw android-sdk ..LOLz..Do this install root explorer on your phone ..navigate to that file on your phone using root explorer , click on mount r/w button ,then long press and select open in text editor, then go to the end of the file and add this
macaddr=xx:xx:xx:xx:xx:xx
replace xx with a combination of hex letter i.e. 1,2,3,4,5,6,7,8,9,A,B,C,D,E,F
example DB:12:3F:4F:11:AA
Save and exit
Reboot
You are all done check phone status in settings
Click to expand...
Click to collapse
after root my phone using z4root/gingerbreak,then download the root explorer from here is it ??
https://market.android.com/details?id=com.speedsoftware.rootexplorer&feature=search_result
if correct navigate to which file ??
sry android newbie here T_T

How about IMEI in some other file.
Wohhh atom bomb.
Sent from my LG-P500 using XDA Premium App

arrgh need solve my wifi problem ASAP
already more than 2week can't connect wifi in my college wifi T_T

Awesome, I've been looking for this everywhere. I can verify this method also works on stock rooted LG Optimus V.

whant's next
i've been change macaddr 'but nothing happen .device not connet wifi.it sitll ask password

you said you can access free internet.
i was just curious that how?
i mean free internet from the service provider or from where???
i too want to use it.
does that mean that if there is any wifi network then i will be able to use it without any pass???

Its simple to change your wifi mac address xD
Root you phone
install busybox (market.android. com/details?id=stericson.busybox) remove the space in link
download Terminal Emulator (market.android. com/details?id=jackpal.androidterm)
in terminal emulator
type -
su
then
busybox ifconfig wlan0 down
busybox ifconfig wlan0 hw ether wlan0 xx:xx:xx:xx:xx:xx
busybox ifconfig wlan0 up
YOU'RE DONE
DONT FORGET THE THANKS BUTTON

vermilion871 said:
Root you phone
install busybox (market.android. com/details?id=stericson.busybox) remove the space in link
download Terminal Emulator (market.android. com/details?id=jackpal.androidterm)
in terminal emulator
type -
su
then
busybox ifconfig wlan0 down
busybox ifconfig wlan0 hw ether wlan0 xx:xx:xx:xx:xx:xx
busybox ifconfig wlan0 up
YOU'RE DONE
DONT FORGET THE THANKS BUTTON
Click to expand...
Click to collapse
is there a way to revert this?
I mean get back to the original hardware mac?

[Q] How change MAC ADDRESS on Samsung Galaxy Ace

Hi guys. I have a rooted samsung galaxy ace and i want to change my mac address so i've tried the following command (but i got an error):
Code:
su
busybox ifconfig wlan0 down
busybox ifconfig wlan0 hw ether 00:11:22:33:44:55
ifconfig: SIOCSIFHWADDR: Operation not supported
Is there someone that knows how i can solve this problem? thnx in advance

I have a Moto XT300/Spice.
Enabling the wireless and not have it connect automatically to the configured network, had to forget the network, I was able to run:
Code:
su
busybox ifconfig eth0 hw ether 00:11:22:33:44:55
and it worked, confirmed with
Code:
busybox ifconfig eth0
though I wasn't able to connect to a WPA network anymore, complained that the key was wrong.
Disabling wireless and enabling once more got reset the mac but enabled me to connect again.
And yes, my wireless interface is eth0.

I was tinkering around on my android and found the section where wifi info is specified, including mac address. Did a quick google search and found the article:
http://androidforums.com/t-mobile-g1/3506-changing-spoofing-mac-address.html
Basically you must change the file /data/misc/wifi/nvram.txt, at the end of the file is the mac addr...
Apparently it is bad to reboot with different mac... who knows. I haven't tested it.

snakerdlk said:
I was tinkering around on my android and found the section where wifi info is specified, including mac address. Did a quick google search and found the article:
hxxp://androidforums.com/t-mobile-g1/3506-changing-spoofing-mac-address.html
Basically you must change the file /data/misc/wifi/nvram.txt, at the end of the file is the mac addr...
Apparently it is bad to reboot with different mac... who knows. I haven't tested it.
Click to expand...
Click to collapse
Ok, i will try that method although it seems strange that the ipconfig command doesn't work :-/

It is probably the fault of the driver that ifconfig wlan0 hw ether does not work.

[Q] Change mac address in Android

I am using htc Desire.
I have tried this command line
Code:
ip link set eth0 address XX:XX:XX:XX:XX:XX
to change the mac which only works temporarily. After I disconnect and reconnect to the network, the mac resets to factory one
Also I tried this to copy nvram.txt from /data/misc/wifi/nvram.txt and add macaddr=XX:XX:XX:XX:XX:XX in the end , but I don't have such file there is only wpa_supplicant.conf in the wifi directory.
How can I change the mac address on HTC Desire running Android? I have rooted phone with superuser permission.

Unable to change MAC Address in rooted Moto G with Kit Kat 4.4.4

Hi guys,
trying to spoof my Moto G's MAC for Ethical Hacking purposes, I haven't been able to find a way.
I've tried with some of the different apps in the market, as MAC Spoofer, Mac Address Ghost, ChameleMAC and zANTI. With none of them could do it.
Neither using a terminal plus busybox.
Using the terminal I found out that isn't possible to modify the MAC when the Wi-Fi is off, as this is the way it's done in some Linux distributions (busybox ifconfig wlan0 down + busybox ifconfig wlan0 hw eth XX:XX:XX:XX:XX:XX)
I've also found information in Inet about problems with some devices spoofing MAC with Kit Kat.
Any advice? Thank you in advance!

K_Tico locate your WiFi file in / partition of your device than you can edit your Mac copy that file in SDcard then open that file in your PC using Hex editor enter desired Mac from column 4 to 9 do not edit others...
---------- Post added at 04:12 AM ---------- Previous post was at 04:10 AM ----------
K_Tico said:
Hi guys,
trying to spoof my Moto G's MAC for Ethical Hacking purposes, I haven't been able to find a way.
I've tried with some of the different apps in the market, as MAC Spoofer, Mac Address Ghost, ChameleMAC and zANTI. With none of them could do it.
Neither using a terminal plus busybox.
Using the terminal I found out that isn't possible to modify the MAC when the Wi-Fi is off, as this is the way it's done in some Linux distributions (busybox ifconfig wlan0 down + busybox ifconfig wlan0 hw eth XX:XX:XX:XX:XX:XX)
I've also found information in Inet about problems with some devices spoofing MAC with Kit Kat.
Any advice? Thank you in advance!
Click to expand...
Click to collapse
Check my reply.... on your post