[Q] SSH Tunnel Question - General Questions and Answers

I have a question regarding the feasibility of using an SSH Tunnel to achieve a specific goal.
I recently added my wife to my T-Mobile plan. We have excellent reception and coverage practically everywhere - except in her office. I think it has something to do with the thick metal roof on her building.
Anyway, connecting to her office Wifi, and enabling Wifi-calling allows all SMS/Call traffic through. The problem is that when making/receiving calls on Wifi, there is no audio transmitted through on either end. Wifi-calling works just fine from home, which leads me to believe that her enterprise IT department has blocked certain ports on the firewall that the T-Mobile Wifi-calling needs to operate correctly.
My questions is: If I create an SSH server on my WHS here at home (we have FIOS 30/15, with a low 2 digit ping, so bandwidth/latency shouldn't be an issue), can I then tunnel all of her android office-wifi-traffic through that SSH Server - and would that theoretically allow all ports to be open/available?
Before I take the time to set it all up, I just want a second opinion that it should work.
Thanks.

gat0rjay said:
I have a question regarding the feasibility of using an SSH Tunnel to achieve a specific goal.
I recently added my wife to my T-Mobile plan. We have excellent reception and coverage practically everywhere - except in her office. I think it has something to do with the thick metal roof on her building.
Anyway, connecting to her office Wifi, and enabling Wifi-calling allows all SMS/Call traffic through. The problem is that when making/receiving calls on Wifi, there is no audio transmitted through on either end. Wifi-calling works just fine from home, which leads me to believe that her enterprise IT department has blocked certain ports on the firewall that the T-Mobile Wifi-calling needs to operate correctly.
My questions is: If I create an SSH server on my WHS here at home (we have FIOS 30/15, with a low 2 digit ping, so bandwidth/latency shouldn't be an issue), can I then tunnel all of her android office-wifi-traffic through that SSH Server - and would that theoretically allow all ports to be open/available?
Before I take the time to set it all up, I just want a second opinion that it should work.
Thanks.
Click to expand...
Click to collapse
Wouldn't having it travel through the internet make it potentially public data being transferred? I know the office building I work in also has crummy connection and they are on high alert with potential "hackers", and when the IT people see that there is a direct connect from their servers to your house, they'll block it and you might get into trouble.
Sent from my SGH-T999
If I helped please press the thanks button

neim81094 said:
Ok so correct me if I'm wrong but you want her office to connect to your Wi-Fi through a ssh tunnel? I don't even think that's possible . That would be like office>server>internet>bouncing around>your router>WiFi and back? I though ssh tunnels were only for lan connections
Sent from my SGH-T999
If I helped please press the thanks button
Click to expand...
Click to collapse
The way it would work (in my head) is that my WHS would act as an SSH proxy server. She would connect to her office wifi, then on her phone, she would use the SSH Tunnel app to define the location of my WHS as her SSH proxy server. All of her internet traffic would be sent (using her office wifi) directly to the WHS at home, the WHS, would then translate all of the traffic out to the internet, and return the results back through the SSH tunnel.
It should work, I'm just not sure if anyone with a more real-world working knowledge of this stuff has any input for me?

Why don't you try it with another WiFi? Like Starbucks or something test to see if that method will work that is definitely an interesting idea.
Sent from my SGH-T999
If I helped please press the thanks button

Related

Xbox 360 Bridged?

Ok, I have bridged a connection from my laptop (xp pro) to my Xbox 360 with a crossover cable. I have my ppc 6800 mogul tethered to the laptop to provide the internet with ICS. Here is my problem... When I test everything out, I get a NAT setting of "moderate". I need to get the NAT settings "open" in order for it to work correctly. I have played like this for the past couple of days, but I have to have one of my friends invite me anytime that I want to play.
Do you think that it is my phone is the problem, or the laptop? I wish I could just get cable or dsl, but it's not available in my area.
Any help welcome!
Thanks!
Honestly I'm shocked you are trying to do this at all. All the XBOX people I know won't even use a router because of lag.
yeah i don't think using the internet connection from your cell phone could be expected to fully support the bandwidth required to run xbox live...
skanndelus said:
yeah i don't think using the internet connection from your cell phone could be expected to fully support the bandwidth required to run xbox live...
Click to expand...
Click to collapse
Microsoft requires 256 down and 64 up. I have supplied 1.5 down and 144 up. The only thing that I seem to be having a problem with is a little bit of lag (150 to 250ms). My real issue is the ability to connect to others to join in a session. That is where my NAT settings come into play. If you have a moderate or strict setting, it is almost impossible to join in.
that's pretty near... i would have never thought it could support it... awesome
dont understand what you mean only because i dont have a 360 but i have done this before.
Just replace the ps2 for 360 and the wifi connection for the cell connection. Not saying it will help but maybe something will. it may have things that you didn't do.
http://www.i-hacked.com/content/view/118/62/
This won't work.
ATT and most providers data networks uses NAT.
This means your phone gets an address like 10.0.42.123 in ATT's cellular network -- and has a public IP of e.g. 64.2.3.2.
Obviously this is NAT -- and it of course is not in a DMZ, nor does it have port forwarding for XBOX live to your cell's IP.
From wikipedia:
In computer networking, Network Address Translation (NAT, also known as Network Masquerading, Native Address Translation or IP Masquerading) is a technique of transceiving network traffic through a router that involves re-writing the source and/or destination IP addresses and usually also the TCP/UDP port numbers of IP packets as they pass through.
Click to expand...
Click to collapse
Drawbacks
Hosts behind NAT-enabled routers do not have true end-to-end connectivity and cannot participate in some Internet protocols. Services that require the initiation of TCP connections from the outside network, or stateless protocols such as those using UDP, can be disrupted. Unless the NAT router makes a specific effort to support such protocols, incoming packets cannot reach their destination. Some protocols can accommodate one instance of NAT between participating hosts ("passive mode" FTP, for example), sometimes with the assistance of an Application Layer Gateway (see below), but fail when both systems are separated from the Internet by NAT.
Click to expand...
Click to collapse
You can call your provider and ask them to open port forwarding, but they won't know what you're talking about -- and since they give DHCP leases the port forward rules would only be temporary anyways. Besides, that would cause serious issues for everyone on their network if they forwarded a port for you. (E.G. Any inbound port request would go to you, disrupting service for other customers.)
I doubt gameplay would be usable over 3G or EVDO anyways.
DUDE! i have been tryin 360+Mogul
i have been tryin and tryin... took my 360 apart tryin some mods. still... ONLY can connect my Xbox 360... to my laptop... which is connected online by my mogul Via WifiRouter-3g to-Usb. WHY cant someone figure out HOW... and Make it available to DIRECTLY CONNECT XBOX 360 ONLINE THROUGH POCKET PC INTERNET SHARING?!?!?! i know i dont have the knowledge... but somone does.... WM5torage... im sure you have heard of it...? it is a strong base.. when i connect my phone to 360 with that app runnin... my 360 thinks about it for min... then decides it wont recognise it...im outta ideas... somone....
IMAGINE THE POSSIBILITIES!!! modify an xbox 360 shell.. and a small laptop screen with xbox harddrive/with a small computer all in one... lay xbox on lap.. flip open the lid.. wireless keyboard and internet.... whoa...
HA my idea has been posted... anyone does it ill sue... jk... kinda.
OH and by the way..
this setup... mogul-wifirouter-3g-usb... usb to pc...pc...eithernet-xbox3sexy... i will dominate all. cod4-BattleField2ModernCombat and bad company lag? whats that

Running Server over Cellular

Hello everyone,
I am looking into the idea of being able to run an SSH or VNC server on the Windows Mobile platform over cellular (3G). I know for a fact Tmobile can assign a 'route-able' IP address to a phone here in the USA (this has been tested). I can ping this IP address from any computer on the internet (albeit with some substantial latency). Perhaps there is a way to use the Tmobile allowed "pinging your device" to tunnel SSH or VNC traffic.
I would like to figure out a way to reach an SSH or VNC server on my phone using this method. We would need to somehow "open" an inbound port to the phone (this would function like basic port forwarding).
All of this works perfectly over WiFi, of course, but the goal is to get this working over cellular 3G (in particular, Tmobile). I see this as a technical challenge we can overcome as a group.
Does anyone have any ideas on this?
Come on folks, someone must have some ideas on this!
Here's a few links I came across:
http://kar1107.blogspot.com/2006/03/running-servers-on-cell-phones.html
http://digg.com/software/Run_a_web_server_from_your_phone

[Q] OT: Static IP or DHCP

I've always used static IP addresses in my home network - primarily because I thought it was the only way to be able to use port forwarding as needed for different devices: xbox live, psn, bit torrent, etc. Plus I thought it just gave an extra - albeit small - layer of protection to the network.
However, last night we picked up a Nook Color for my wife and this thing has NO ability to assign static IP addresses!
Needless to say, she was a bit irate as I was enjoying the latest TNT Lite update on my gTab (thanks roebeet!) and she couldn't do anything with her shiny new Nook.
So the question is - do static IP addresses really buy me anything anymore? Or have routers evolved enough with UPnP to handle port forwarding properly?
Is it possible to have DHCP enabled on my router, but still assign static IP addresses to devices like an XBox?
I'm currently using a D-Link DIR-655N router.
Thanks!
P.S. Roebeet - my wife wants to know if you'll be picking up and tweaking a Nook Color any time soon.
Yes, you can do that. Most routers will allow you to use a specific range of IPs for DHCP so you can allocate a chunk for automatic assignment and use the rest for static.
For example, on my router, I set DHCP to use the 200-250 range in the last octet, and staticly assign desktops and other stationary devices with 0-199. So, my desktop is statically set to 10.11.3.100 so I can VNC from work, but my g-Tablet will get an IP between 10.11.3.200 - 10.11.3.250 when it connects to my home network, depending on what other addresses are already used.
I only use DHCP on mobile devices because it makes hopping between access points easier, so I don't need that many addresses reserved for it.
Hope this helps.
KnightCrusader said:
I only use DHCP on mobile devices because it makes hopping between access points easier, so I don't need that many addresses reserved for it.
Hope this helps.
Click to expand...
Click to collapse
EXACTLY!! We're getting so many IP devices over here that I'm getting tired of always trying to keep track of static IPs (and assign them).
I went ahead and RTFM and turns out it was very simple with this router - just like you said. Thanks!
Do you use any extra protection in addition to WPA - like MAC filtering etc - to keep the neighbors off your network? That was the only other thing I didn't like about DHCP - it just makes it that much easier for someone else to jump on.
Then again, I guess if they go through the trouble of hacking my WPA pw, there's not much else that's going to keep them out, right?
pogul said:
I've always used static IP addresses in my home network - primarily because I thought it was the only way to be able to use port forwarding as needed for different devices: xbox live, psn, bit torrent, etc. Plus I thought it just gave an extra - albeit small - layer of protection to the network.
However, last night we picked up a Nook Color for my wife and this thing has NO ability to assign static IP addresses!
Needless to say, she was a bit irate as I was enjoying the latest TNT Lite update on my gTab (thanks roebeet!) and she couldn't do anything with her shiny new Nook.
So the question is - do static IP addresses really buy me anything anymore? Or have routers evolved enough with UPnP to handle port forwarding properly?
Is it possible to have DHCP enabled on my router, but still assign static IP addresses to devices like an XBox?
I'm currently using a D-Link DIR-655N router.
Thanks!
P.S. Roebeet - my wife wants to know if you'll be picking up and tweaking a Nook Color any time soon.
Click to expand...
Click to collapse
pogul , I have a DIR655. I set all my stuff except laptops up static. You can login to the admin of the router and reserve IP's for certain equip. I do this for all my wired and wireless.
I mainly like to know what is a certain IP so I can easily RDP into said machines.
pogul said:
Do you use any extra protection in addition to WPA - like MAC filtering etc - to keep the neighbors off your network? That was the only other thing I didn't like about DHCP - it just makes it that much easier for someone else to jump on.
Then again, I guess if they go through the trouble of hacking my WPA pw, there's not much else that's going to keep them out, right?
Click to expand...
Click to collapse
When I lived in my last apartment, I used to set up my access point to have WPA. I know WEP can be broken in seconds and MAC addresses are easy to spoof, so I don't bother with them. They do a good job of keeping casual people from getting on your network, but if they are determined, they'll get on somehow.
Now I moved back with my parents in BFE, the nearest neighbor is a mile away, so I leave my access points wide open so my new devices and old devices alike can use them.
KnightCrusader said:
When I lived in my last apartment, I used to set up my access point to have WPA. I know WEP can be broken in seconds and MAC addresses are easy to spoof, so I don't bother with them. They do a good job of keeping casual people from getting on your network, but if they are determined, they'll get on somehow.
Now I moved back with my parents in BFE, the nearest neighbor is a mile away, so I leave my access points wide open so my new devices and old devices alike can use them.
Click to expand...
Click to collapse
I use both WPA and mac filtering. I can see about 20 wireless routers from where I live, so you never know.
Remember google got in trouble for driving through neighborhoods and getting data from open networks a while back.

[Q] Long-range Wifi repeater with auto hotspot authentication?

Hi All,
At this point, I'm just brainstorming, and would like some input. (I hope this thread is in the right place)
I'm trying to find a setup to connect to free wifi hotspots that are far away, and share that connection to a group of devices locally. For example, this solution may be useful in a boat or an RV, when you're not particularly close to a free access point.
There are commercial solutions like the Rogue Wave however, this doesn't do anything to authenticate through the Terms of Service (TOS) pages that are frequently used at free access points.
This is what brings me to using Android. There are Android apps which automate the process of accepting the terms of service. My favorite right now is WebWifiLogin (I'm familiar with the security risks involved in using public wifi; and may also have the Android device to also establish a VPN connection when doing this.) (I can't find an equivalent macro-authentication solution that will run on a PC, which would make this much easier.)
So here's my proposed solution:
1. Start with a powerful omnidirectional wifi antenna (Possibly add an in-line amp if needed. Also perhaps a directional antenna may be better for non-mobile use.)
2. Connect the antenna to any Android device that supports an external Wifi antenna. I found several Android TV devices which should work. Like This, or possibly this.
3. Set up some kind of local access point/bridge. One option may be to use fqrouter2 which supposedly uses the same Wifi radio for the local WLAN, while it also connects to the remote one. Another option may be to USB or Ethernet tether to a DD-WRT Router.
Result:
The Android device has a range to connect to a free hotspot up to a mile or two away, then automatically accepts the TOS using the WebWifiLogin app, and shares that connection locally to a handful of devices.
So am I crazy? Is this too complex to work correctly? Is there a simpler solution that I'm missing?
Can anyone confirm whether I've posted this in the correct sub-forum?
Thanks.
I use a slightly different method which yields the same results.
I have a Linksys WRT54GL router (with high gain antennas) which runs DD-WRT and a script called AutoAP. The script scans for unencrypted WIFI access points, makes sure they're live, and automatically connects to the strongest one in range.
I set up a second WPA2 encrypted WIFI SSID in the router which I connect to with my Android tablet. Once WebWifiLogin on the tablet handles the TOS login, the remote access point allows web access for any device that connects to the WRT54GL router (either by WIFI to the secondary SSID or through one of the ports)! This happens because the remote access point usually checks/remembers TOS acceptance by the MAC address of the connected device. Since it only sees the MAC address of my router, anything behind the router now gets access.
ssenemosewa said:
Once WebWifiLogin on the tablet handles the TOS login, the remote access point allows web access for any device that connects to the WRT54GL router
Click to expand...
Click to collapse
This is great information; thanks!
I would not have thought WebWifiLogin would work when connecting through another router. When WebWifiLogin is running, its status says "Listening for WiFi events" (Or something similar) so I was under the impression that WebWifiLogin would only work if the connection to the AP is made directly by the Android WiFi interface, and not through a intermediary router.
This makes things much easier.

[GUIDE][NO ROOT] How to use tethering for home network

Hello everyone! Here's a nice little guide on how to tether your phone and use that ability to power a home internet network. I have done tons of trial and error to get this working with bits and pieces from numerous forums and google research. This has been working flawlessly for me and it's a "set it and forget it solution".
The reason why I wanted to do this is because I live in a rural area with no high speed ISP. My only option was to use a data capped satellite ISP that is extremely limited in ability and expensive. Without further ado my guide to achieve an unlimited, data cap free, tethered home network.
What you need:
Android phone you're willing to dedicate for full time use
Computer with windows and LAN port you're willing to dedicate for full time use
Wireless Router
A nice USB cord for your phone
A nice CAT cable
1) First thing to do is look around for an unlimited data (4glte preferred, no tethering plan needed) cellular plan. I know there are a few out there but I decided on MetroPCS due to the coverage I get and the price ($60 a month, no contract). I opted for just a sim card as I had an android phone laying around.
2) Make sure your android is unlocked if it's not on the same network you are trying to use. My phone was tied to AT&T and I had to call them to unlock it. Most carrier will do this if the phone in good standing. Meaning paid off. Or root it.
3) We will need to find out where your equipment will sit to receive the best speeds. I recommend putting your phone in "field test mode" and walk around the house. The lower number the better. I also ran a speed test in certain locations to give me a rough idea of what speeds I would be getting. If you are really serious about this set up there is equipment out there to boost cell signal in your house. I like WeBoost.
4) Download your tethering application. I have tried multiple apps but only one worked perfectly but with different hardware you might have other results. Clockworkmod Tether ($4.99) and PDAnet+ ($7.95) worked alright but I had issues with it talking to my router and clients so disconnects where frequent and frustrating. I ultimately went for EasyTether ($9.99) and it has been working fantastic. Mind you when using Clockwork and PDAnet I would be getting a DL speed of 6Mbs when my phone was 13Mbs. I don't know what would cause that but with EasyTether I am getting speeds very similar to my phone with no speed loss.
5) All three tethering applications require you to install a sister program on your computer to work. So install that on your "slave" machine. They are all about the same process, install an .exe and drivers for your phone.
6) Test that everything is working. The tethering application will have instructions on how to USB tether your phone. We need to check that it will give your slave machine an internet connection. Simply open a web browser and see if it is working.
7) Great! Now your are connected and able to surf the web! But wouldn't it be great if you could use this on all your devices? This is where the router comes in play.
8) Now I don't know what router you are using but mine is an ASUS RT-N56U and the principle should be the same. Plug your router into power and reset it with the button on the back (10 seconds). Unplug from power. Connect the CAT cable to the WAN port of the router (the one that usually connects a modem to the router) and the other end to the LAN port of your slave machine. Plug power to the router and allow it to boot up. Now on your slave machine go to Network and Sharing Center, View status on the tether connection, properties, sharing, check Allow other network users to connect through this computer's Internet connection, select the Home networking connection as the router. With everything done correctly you should be getting an internet connection to the router.
9) Now this is all fine and dandy but there are some settings in the router you can configure to make it more reliable. Our cases could be different but this is what has worked for me. I'm no networking genius by any means so my setting could not mean anything. In my experience things would work for a few mins but streaming to chromecast or connecting a mac to wireless mysteriously cut all connection. So here are my settings.
Disable MAC Filter
Disable Wireless Scheduler
Enable IGMP Snooping
Enable DHCP Server
Disable DHCP Routes
Disable Multicast routing (IGMP Proxy)
WAN Connection Type-Automatic IP
Enable UPnP
Connect to DNS Server automatically-NO
DNS Server1 8.8.8.8
DNS Server2 8.8.4.4
Everything else is default
I don't know about the NAT for all you gamers out there but I am sure there is some router configuration you can do. If anyone has ideas on how to achieve this please chime in.
10) Congratulations! You have now set up a home network with your phone and can use it like any other ISP. If you experience any issue with this process let me know and I will get back to you with an answer. I have had to do a lot of trouble shooting to get to this point.

Categories

Resources